Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fad129ed-ed90-357a-a489-a3c2a006b9eb.roa
File:                     fad129ed-ed90-357a-a489-a3c2a006b9eb.roa (raw, json)
Hash identifier:          oA+6hSu8Qs45QpTRNp2u6VgT+5scI60cDNqlE8E+LEo=
Subject key identifier:   B3:1E:3A:56:3A:D7:A4:DE:82:25:2A:4D:AE:F2:70:2C:D5:4E:A1:34
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848F926B101BD0469B0EBC5E844
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fad129ed-ed90-357a-a489-a3c2a006b9eb.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     34164
IP address blocks:        2600:3c1f:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:b1:01:bd:04:69:b0:eb:c5:e8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=4bf0e745-e138-4a42-a2c4-6ef09d38bb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:3a:c1:6a:e3:e3:06:54:e4:8f:7d:4c:78:
                    b1:7f:5b:36:6b:11:c1:bf:e5:5b:4e:5c:82:12:71:
                    72:52:3e:22:3a:4a:2e:04:d1:4b:eb:25:ad:f7:0c:
                    25:98:57:0d:b8:0b:e5:e6:00:e4:44:cd:38:0d:27:
                    e7:85:e4:db:fc:ab:3c:10:ff:ed:8a:10:ad:78:6e:
                    37:00:81:ba:62:3d:bd:20:91:e4:2b:82:f3:52:5e:
                    aa:e4:8a:3f:e3:02:1a:41:1c:a6:38:17:93:ea:d5:
                    88:e4:9b:5c:78:4f:07:f6:36:33:da:d4:17:f3:b8:
                    42:10:ea:59:fb:0e:1e:ee:ff:13:9a:1e:f7:c6:65:
                    5e:48:f2:d9:5d:b9:06:4b:50:50:17:c5:c0:e6:ce:
                    86:55:f8:8d:38:fc:d3:c6:a9:22:db:e6:64:d5:4b:
                    33:c9:10:ea:ed:f0:93:ba:32:8b:d3:c8:fb:92:bf:
                    c7:09:63:f5:b2:7a:14:db:fd:27:97:d0:80:05:1b:
                    a9:86:95:56:87:8d:ba:3b:cd:80:a5:78:dc:0f:e0:
                    83:2e:cd:6c:1b:3e:63:3c:21:66:92:75:2b:d6:78:
                    2e:7f:03:16:94:99:9a:f7:d7:70:75:52:87:a4:f2:
                    f4:00:54:0a:cc:ec:a3:9e:39:ce:c5:6a:73:ed:ba:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1E:3A:56:3A:D7:A4:DE:82:25:2A:4D:AE:F2:70:2C:D5:4E:A1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fad129ed-ed90-357a-a489-a3c2a006b9eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c1f:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:9a:1c:32:d3:fa:03:fc:13:7f:75:f0:77:87:72:4d:bc:21:
         3e:a7:40:0b:dc:1a:45:ca:45:a7:ee:3a:67:71:e8:74:39:0f:
         10:23:e1:58:a9:7a:9c:a5:fb:f0:a0:c3:79:48:38:d5:4c:ad:
         7a:1e:bc:33:f2:d4:d0:82:fd:79:19:c9:a8:ac:c9:da:2a:ac:
         50:cf:18:32:f2:1d:d4:af:57:44:e3:c6:58:b9:7a:ff:bb:ab:
         df:88:f6:34:47:ad:ff:77:d7:6b:b9:a0:2f:49:4d:aa:68:fc:
         07:30:02:7f:04:e1:2c:c9:e7:1a:64:c2:57:c4:78:64:cc:8d:
         1f:b6:ba:47:d6:e0:b6:45:8e:1d:13:04:03:cc:1b:a9:ee:ad:
         d0:22:38:7c:ea:a7:0a:f5:70:77:3d:07:22:8e:83:21:f2:a1:
         3f:90:a0:ca:b4:0b:b3:c7:10:5c:0b:f8:a2:2c:fa:b6:6b:e1:
         d8:b9:7f:98:6c:6a:23:10:29:21:a8:91:d0:0b:78:76:ac:aa:
         89:96:4c:0c:fb:8c:4d:94:d4:0f:a8:35:03:d0:61:09:4d:7f:
         e5:37:7c:44:0a:31:b1:c7:c5:79:aa:e4:66:64:2e:d3:44:25:
         f8:7b:2b:b2:bc:4e:fb:56:83:cb:ab:be:81:ed:2a:27:c7:ae:
         4f:b6:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:46 2025 by rpki-client