Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/48c5021f-185f-3207-96aa-4ab41cb2a9d6.roa
File:                     48c5021f-185f-3207-96aa-4ab41cb2a9d6.roa (raw, json)
Hash identifier:          JlifbkSAKrgeyRes1L/Jyfhg0BHSk+snu3E/o1AmZ9o=
Subject key identifier:   1B:4F:4D:FA:FB:CB:66:F7:79:11:41:29:89:D2:98:EF:E3:C6:BC:55
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F43285849094D666521990B89A4D400A0
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/48c5021f-185f-3207-96aa-4ab41cb2a9d6.roa
Signing time:             Fri 28 Feb 2025 20:52:03 +0000
ROA not before:           Fri 28 Feb 2025 20:52:03 +0000
ROA not after:            Thu 29 May 2025 19:52:03 +0000
asID:                     11721
IP address blocks:        2602:fa8a:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:4d:66:65:21:99:0b:89:a4:d4:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Feb 28 20:52:03 2025 GMT
            Not After : May 29 19:52:03 2025 GMT
        Subject: CN=49a8cf6d-dbd3-4774-9c9b-74c723bcf8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:9c:ec:3b:e0:b0:52:37:9a:23:ff:74:80:
                    58:81:af:16:a7:6e:37:57:2c:b3:ea:cd:76:3c:35:
                    23:fe:cf:68:88:0d:27:91:38:a5:2d:6f:9c:2f:e1:
                    0f:0a:20:b2:ef:06:8d:12:20:9c:df:23:cd:8a:37:
                    db:ba:d1:21:bb:97:67:6e:65:08:25:ed:a6:b6:c6:
                    5f:5f:74:26:1b:83:f7:c3:4b:2d:3d:64:0c:1c:0a:
                    5d:55:4d:20:25:9f:a9:ae:28:c7:ac:81:ed:95:84:
                    31:26:4a:77:00:6e:41:eb:84:2a:5a:ef:de:0a:6b:
                    f9:40:73:a4:62:9d:80:94:18:5e:52:de:47:64:93:
                    e1:b6:19:30:73:34:c2:d5:e0:bd:3a:d5:4b:d9:66:
                    5b:a4:19:86:23:4c:d7:02:ad:20:bb:ef:b8:8d:a3:
                    ae:55:aa:c0:5b:9f:fe:38:5b:14:3f:c4:4c:f4:fe:
                    96:08:50:17:85:a2:27:dc:e8:08:a0:17:14:6a:f6:
                    47:af:98:22:ee:10:16:bb:f4:05:7e:70:b2:c9:7e:
                    5a:57:50:a8:84:c9:68:43:26:c9:f1:7b:53:b4:0c:
                    fb:59:7c:b5:ab:ff:17:0d:db:48:10:3e:b5:73:df:
                    e7:be:a4:64:f3:6a:a6:ab:ee:ef:b0:2a:2c:80:38:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4F:4D:FA:FB:CB:66:F7:79:11:41:29:89:D2:98:EF:E3:C6:BC:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/48c5021f-185f-3207-96aa-4ab41cb2a9d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:16:2b:94:ea:f1:91:a4:86:c0:e9:7f:a0:48:de:2f:d7:75:
         a1:d2:26:56:e3:19:e2:52:2f:49:2d:0a:23:cc:08:9c:83:68:
         f3:87:67:73:7c:e6:37:ff:60:ae:76:1a:ec:24:10:05:5f:a7:
         3b:bd:67:a2:4f:1e:a0:a4:32:62:33:e7:84:bf:36:40:ae:37:
         df:d9:e9:62:42:71:f6:ad:e5:3c:04:e6:a5:b6:0a:c9:87:ca:
         bf:24:8e:aa:81:bc:7b:93:41:cf:ba:5e:dc:18:2b:1c:4a:c9:
         b2:67:6d:6e:11:ef:4b:bd:07:3a:47:1b:5e:d0:d6:fc:29:ec:
         04:1f:90:c5:23:d1:a0:c8:be:6b:4e:f0:28:b5:db:43:73:e8:
         26:ca:44:2b:4d:30:53:27:6a:8d:74:1c:eb:69:93:20:b6:4f:
         f4:9b:ad:17:1a:38:3a:cb:f9:07:c5:38:ca:9c:e6:88:1c:aa:
         12:14:9d:26:a5:ce:62:76:3a:d4:04:2b:22:29:7d:c2:d7:19:
         f4:3e:d9:a3:f6:8b:f6:20:9b:9d:29:1a:65:bb:77:79:14:98:
         b5:3f:7c:69:70:d1:99:79:25:f2:e4:66:b1:c7:04:d1:4f:56:
         27:83:c4:98:2c:d5:a7:20:fc:4d:11:18:e9:88:3d:c2:8d:1e:
         6d:ce:a5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:05:49 2025 by rpki-client