Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c67bdf-7adb-310b-9f26-6ffadbc0f492.roa
File:                     34c67bdf-7adb-310b-9f26-6ffadbc0f492.roa (raw, json)
Hash identifier:          y+GxzUrkQxL1Yuy2cCVF0SDohcEo1uGHSLYzz95a1rE=
Subject key identifier:   37:19:6F:B0:F0:50:6E:3E:65:31:19:C6:A8:DA:10:9E:84:55:31:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848ADC62274E0835C20F50154A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c67bdf-7adb-310b-9f26-6ffadbc0f492.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     12222
IP address blocks:        2600:140f:e800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:22:74:e0:83:5c:20:f5:01:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=ed944cca-e26f-4f2c-a0ae-6d0f75df0bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:48:c5:de:ed:a5:df:41:e7:cd:6f:8f:72:a7:
                    62:c8:58:d7:63:fb:26:1b:00:da:9b:27:4b:05:74:
                    f0:34:63:92:87:45:22:aa:07:28:01:3e:be:f2:b3:
                    1a:58:12:53:91:f0:e0:8b:dc:05:ed:bc:b4:1c:89:
                    0c:bb:d7:6b:0b:19:b5:37:d7:66:34:90:3b:8c:b4:
                    b9:63:a0:ff:81:cb:46:10:4a:28:e2:c5:bc:37:50:
                    91:98:08:ab:de:54:95:7e:b4:4d:6e:45:df:00:94:
                    22:be:7a:60:84:72:3b:12:ef:2e:72:fb:cf:79:9a:
                    d5:a3:84:ce:da:3c:c3:75:33:93:f1:bf:27:d5:40:
                    c5:d2:99:f5:08:75:bb:af:bc:85:4b:84:28:2d:d9:
                    3d:e3:3a:47:cd:c0:39:93:08:9a:2a:4e:c8:a2:54:
                    b0:0a:a0:cb:74:0d:b2:c2:d6:26:a8:08:42:3b:ed:
                    f0:81:b8:fb:9c:98:8b:75:ba:57:3f:0d:9d:d1:c9:
                    ac:00:d2:74:4b:ea:ea:ab:0b:c0:7d:17:d0:a3:9d:
                    3c:06:0b:ac:b5:26:46:fb:42:44:be:43:91:40:22:
                    03:9e:a4:26:33:ee:0a:3e:ca:0f:bd:98:fa:6d:a8:
                    b7:b8:cb:4b:e1:77:68:3f:05:37:5b:47:da:f5:53:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:6F:B0:F0:50:6E:3E:65:31:19:C6:A8:DA:10:9E:84:55:31:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34c67bdf-7adb-310b-9f26-6ffadbc0f492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:e800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:39:37:f1:2c:81:26:62:e0:e8:fd:0c:e8:c3:f4:65:21:b5:
         28:76:ab:47:2f:ce:28:92:38:56:bb:7f:7a:0c:0c:a2:ae:ad:
         57:b8:76:c6:f6:42:f7:3a:92:8d:39:73:18:59:40:75:64:18:
         11:91:93:e3:15:94:f8:eb:c7:a7:e7:e9:57:19:d0:38:af:c5:
         38:fd:93:ed:91:62:a6:75:6e:ef:ba:ff:69:ce:ff:c4:89:6c:
         01:fd:dd:e1:13:79:89:44:e0:d3:5f:05:4f:d4:42:3d:57:f3:
         12:81:16:2e:df:8a:4d:16:43:45:cd:36:99:79:cb:d3:06:6d:
         06:03:e1:9e:e4:58:f7:be:6b:f2:b1:db:40:04:eb:f2:ec:8c:
         58:d2:7c:c7:e9:fa:22:0d:d5:96:5a:64:89:f4:93:5c:d9:b9:
         08:09:ee:81:c4:ca:e7:cb:57:dd:8b:05:73:30:ed:d9:cf:04:
         f0:53:ad:64:3d:de:56:7e:b9:20:df:e2:dc:b1:46:d1:d3:08:
         4f:53:df:15:5f:6f:28:c3:0d:68:87:7c:87:c3:2c:eb:5b:16:
         cd:36:6b:1b:e3:d7:ab:42:3c:9a:83:dc:46:d0:61:f0:f5:da:
         76:0d:70:ac:dd:57:25:8e:fc:18:33:1e:5a:f1:48:b7:2d:ec:
         e7:54:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:49 2025 by rpki-client