Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa
File:                     af5c3765-147f-3db1-b56e-1f20fa7259fc.roa (raw, json)
Hash identifier:          AonHIwPkSmMt9ZC1X8IoM/98SO3fJolmEf5sFv6CFFg=
Subject key identifier:   A1:7B:CD:AD:03:87:E7:13:84:63:E9:87:BA:E8:8C:76:B9:7D:03:EE
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584961B998EFDE034AD0908792C0
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     399275
IP address blocks:        2602:fcc0:3333::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:98:ef:de:03:4a:d0:90:87:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=ef4310e3-d77b-4166-bf93-1bcd63c1f7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:eb:a4:a3:fb:92:80:c9:24:60:a7:4e:59:46:
                    d8:ba:f2:27:97:79:cb:8c:61:f7:22:42:3d:31:81:
                    57:b6:67:d6:58:15:9b:09:7d:77:0a:97:48:ec:5a:
                    d8:9e:5f:9f:04:13:d6:90:19:7a:62:32:c4:32:dc:
                    f2:1b:76:e0:68:4b:69:54:8f:01:71:41:a6:95:dd:
                    f6:9d:42:ed:5a:e7:df:c0:da:d8:be:19:a1:8e:c6:
                    25:70:71:58:7c:98:73:cf:14:a0:16:94:a1:cb:41:
                    52:d4:6d:73:ac:dd:d1:a7:d7:85:de:e5:fa:b4:5a:
                    39:e2:ad:de:3d:f0:ca:1c:8c:56:c5:e2:04:71:4c:
                    14:ee:1d:22:11:9c:07:9e:bd:4e:ca:89:74:dc:8c:
                    d2:f2:c4:59:89:8d:dc:e7:06:7a:e5:5f:b1:71:39:
                    09:78:e5:36:ad:16:85:8f:b7:1d:75:36:71:4e:ca:
                    8a:07:d8:5e:0f:e6:ce:92:40:2b:9e:ca:3c:21:87:
                    2e:12:70:35:dc:39:54:e2:47:e5:69:3e:82:84:33:
                    f1:57:3f:c1:3c:65:fc:99:de:25:3a:ef:ba:6d:39:
                    5e:c0:14:2f:67:dd:cd:04:30:a3:70:6d:3b:50:eb:
                    3a:b7:0f:6e:8e:05:91:5f:61:d7:96:7e:59:3f:a6:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7B:CD:AD:03:87:E7:13:84:63:E9:87:BA:E8:8C:76:B9:7D:03:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/af5c3765-147f-3db1-b56e-1f20fa7259fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:3333::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ba:2b:d4:a3:f8:96:04:b7:80:b5:81:cd:cb:c0:13:96:ae:
         5c:7b:a5:d0:0f:92:09:f8:ba:76:de:b8:f5:ef:62:9f:7d:01:
         4e:27:80:30:f8:d1:a6:fe:85:09:74:36:ea:e7:c4:9a:c0:86:
         29:b9:80:1f:67:2b:d6:df:7c:60:8b:83:0c:f8:c6:3e:87:0b:
         2c:20:b8:20:33:fb:33:86:32:f6:b2:94:e6:b7:16:8a:a0:9e:
         49:70:23:1e:1e:af:d5:22:a5:42:73:b9:82:2d:d6:f6:2e:87:
         e0:52:53:ec:90:f7:e4:0c:1f:0e:50:6d:9a:3b:61:e6:81:9b:
         18:30:32:9c:9f:46:65:53:ff:b3:a3:cd:e5:79:82:6f:c6:c4:
         d2:01:2d:43:0c:da:f1:db:3b:e8:04:bd:c6:bf:b7:1f:5b:35:
         f1:36:fd:68:50:90:a1:25:0d:67:9a:92:81:3a:cb:35:da:aa:
         ad:74:c3:e0:cb:fb:dc:08:df:df:f7:d9:28:71:07:1f:e3:79:
         78:d8:f3:c1:af:4a:17:03:eb:87:8a:9a:e7:2d:a1:81:d2:9a:
         72:54:ad:42:78:e4:c4:12:f3:bd:5e:e3:f4:29:3d:c1:69:be:
         70:b0:bc:7b:f3:0c:40:97:0e:5f:78:10:27:78:66:a2:77:d1:
         51:ab:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:32:11 2025 by rpki-client