Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/f3704f69-4ad0-3528-96df-98754e1ccfd4.roa
File:                     f3704f69-4ad0-3528-96df-98754e1ccfd4.roa (raw, json)
Hash identifier:          3+9Wkn5vhd2iFQlie2GzDYcWTMLnA/DUuDKY42qLJH8=
Subject key identifier:   7E:9B:0C:68:04:85:9F:BE:C2:21:61:47:76:14:97:EF:4E:D0:90:C4
Certificate issuer:       /CN=be429d79-b6e2-4677-a6d1-e38c9045ebb1
Certificate serial:       010D0C9F43285849419E8AC77590A972333E8400
Authority key identifier: 41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/f3704f69-4ad0-3528-96df-98754e1ccfd4.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     33360
IP address blocks:        2602:fe78::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:8a:c7:75:90:a9:72:33:3e:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be429d79-b6e2-4677-a6d1-e38c9045ebb1
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=0eac6a87-d46f-4387-b864-6be6bcfa61b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:42:8a:8b:a1:85:dd:24:e3:a4:b9:f4:57:14:
                    e3:d7:97:37:c4:72:72:2e:3f:76:82:2f:df:57:91:
                    69:a4:08:d7:d4:56:ab:3e:51:06:09:1f:71:63:3a:
                    25:40:06:8f:f9:c4:de:8c:a8:ce:13:20:fc:af:41:
                    9a:0c:2a:ae:a8:7b:bd:18:51:00:6b:60:e9:86:b2:
                    d7:e3:07:94:a5:79:08:1f:ee:7f:b0:13:0c:b1:a8:
                    eb:5f:db:3c:4b:27:d5:d1:b0:fb:6e:7e:21:d5:a5:
                    84:b8:95:50:68:02:ff:09:7b:32:f3:12:c0:68:d5:
                    3a:78:7b:b3:77:05:9a:cc:0e:0d:85:3f:88:7e:e3:
                    a9:28:36:72:0b:b1:a9:58:1c:46:ea:f3:26:e6:04:
                    ad:21:46:09:f5:26:0c:46:db:6d:16:87:33:b6:a6:
                    4f:af:03:58:fb:61:00:11:4d:86:22:94:5e:43:cf:
                    b0:66:3e:ca:8d:f9:84:28:6e:47:68:9d:bc:e7:7c:
                    df:f9:93:75:3e:05:27:f6:25:35:67:56:95:d5:39:
                    bb:1c:e0:b5:2c:6e:3f:47:23:f9:e9:b8:a6:44:41:
                    9b:7c:5b:4e:fc:e6:f9:e9:be:48:b9:d5:ab:e0:b4:
                    11:6a:b5:34:ab:cd:7f:d8:a4:ef:cb:fc:d6:af:e6:
                    19:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9B:0C:68:04:85:9F:BE:C2:21:61:47:76:14:97:EF:4E:D0:90:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/f3704f69-4ad0-3528-96df-98754e1ccfd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.crl

            X509v3 Authority Key Identifier:
                keyid:41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe78::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:0b:e3:1f:5a:5f:bc:29:af:22:6b:8e:cb:69:ac:28:d8:
         a3:37:ee:85:f4:25:1d:ef:93:6d:c5:3f:5c:67:d9:9c:81:45:
         8f:1b:2c:7d:86:dd:5b:5d:6a:a9:ad:95:27:f7:df:d0:96:aa:
         e0:d5:30:ef:16:a3:2b:e0:b7:1e:70:50:ab:45:f1:cc:5a:4d:
         1a:69:78:5d:1d:12:51:cc:e4:cb:3e:7f:54:0f:ee:5c:01:52:
         5d:36:63:fd:36:66:5a:7b:07:9f:2e:06:f7:3c:65:65:eb:f7:
         9b:6b:f5:74:81:b9:de:41:db:53:a8:44:45:24:c9:2e:6b:58:
         8e:74:34:fc:3a:9d:a9:ca:a5:db:93:81:f7:ff:99:1c:eb:80:
         1c:ad:e9:86:e9:75:bf:43:d9:39:5e:32:e0:1b:bd:59:92:2c:
         59:f4:26:b7:8d:e1:e7:6c:1e:9f:db:4e:a6:d7:2f:c5:bf:eb:
         3a:77:55:ca:32:2d:e1:0b:f8:39:dd:c5:ea:48:d8:95:72:7a:
         4f:09:99:98:bd:db:ad:14:fa:d5:fe:f8:8a:4e:f9:25:45:5f:
         8a:fa:fe:4e:f9:59:5e:b4:9c:79:46:20:36:5c:09:dc:a8:1e:
         5b:bb:ea:29:c8:20:2d:0f:f1:09:38:c7:9b:71:b4:31:c5:a3:
         55:df:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:06 2025 by rpki-client