Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/b1e58d90-0684-3e69-b08d-71a70c553ded.roa
File:                     b1e58d90-0684-3e69-b08d-71a70c553ded.roa (raw, json)
Hash identifier:          JzagtHzbDBKOywxCLTC4zK1peMOeY1GmAg/bmTZ1m14=
Subject key identifier:   DA:38:D9:0C:58:C5:49:64:AB:52:6C:C0:DA:C8:AD:9E:55:C9:C4:3A
Certificate issuer:       /CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41
Certificate serial:       010D0C9F432858485E35AEB4C6CD6EE7FD4B0A00
Authority key identifier: 71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/b1e58d90-0684-3e69-b08d-71a70c553ded.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     8987
IP address blocks:        2620:a5:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:ae:b4:c6:cd:6e:e7:fd:4b:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd2b162-db77-4422-9f87-c0ae0abe9d41
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=c0b49978-f35f-4116-9501-8059d91c6d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ff:fc:55:bb:5c:3f:2a:ef:dd:0c:6e:35:f9:
                    a4:78:ec:dd:ea:a5:cf:64:7f:5a:5a:be:39:46:f9:
                    a2:2e:0e:63:ff:19:2b:1a:3e:7b:81:27:51:b7:1e:
                    8f:16:02:0e:77:15:c2:b5:f6:9b:d7:59:30:89:65:
                    e2:99:23:be:ee:92:34:49:e0:b3:3b:1e:f5:41:90:
                    88:1e:3b:52:da:a8:a0:52:0e:78:ca:79:3c:47:b0:
                    c4:cb:c1:44:09:56:24:a3:43:da:6d:3d:cf:a2:fa:
                    42:b8:27:8b:14:78:ff:8c:1d:61:48:93:0a:07:5c:
                    0f:a4:bf:fd:d1:3b:a1:bd:a8:b2:fc:39:59:4e:bc:
                    d7:e2:c3:c8:26:62:fe:f6:00:ff:eb:47:a2:69:51:
                    ef:33:ad:44:6d:be:77:9c:7d:6e:f9:cc:f0:8c:fd:
                    55:f2:47:1f:9b:ff:d5:69:99:c7:02:d0:eb:d2:14:
                    d1:fc:a6:1b:f9:74:f8:f9:7e:40:5a:ed:27:18:20:
                    d1:e8:df:06:a8:61:4d:51:55:5d:13:86:25:59:7c:
                    31:ec:aa:80:16:d8:21:81:9f:fe:cf:85:78:a8:fb:
                    f0:de:d1:fc:ce:96:28:ca:d4:a9:74:fa:41:39:24:
                    b2:85:9d:b6:c0:b0:54:7f:d8:87:55:1a:4d:2e:a2:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:38:D9:0C:58:C5:49:64:AB:52:6C:C0:DA:C8:AD:9E:55:C9:C4:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/b1e58d90-0684-3e69-b08d-71a70c553ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41/5dd2b162-db77-4422-9f87-c0ae0abe9d41.crl

            X509v3 Authority Key Identifier:
                keyid:71:28:4C:F0:DD:80:D0:A8:B9:D0:F0:07:3D:5B:58:FE:CA:08:5C:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dd2b162-db77-4422-9f87-c0ae0abe9d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a5:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1a:13:ee:7d:6b:b2:cd:fe:0a:ac:0d:5c:5d:c7:91:be:1f:
         0d:0f:e7:e8:b3:7d:80:8e:69:1c:a0:89:e9:67:02:36:84:1c:
         05:bf:5f:a7:14:ca:b4:ab:a9:48:b4:b3:f8:c4:81:45:54:a0:
         36:a4:7c:a1:23:e9:5e:e6:79:85:e6:fb:c9:ff:87:57:6e:97:
         ad:de:98:b5:84:63:5f:f1:24:54:71:bb:cb:12:e2:29:f8:25:
         cd:5d:74:99:d2:e5:c6:c3:d6:2b:5e:29:dc:bd:ec:fa:49:88:
         1d:af:36:44:d8:8e:79:fc:8b:7e:16:55:6a:d8:bf:bc:93:32:
         ab:94:65:dd:ae:8e:2f:95:0e:07:3b:09:4a:f3:75:7d:5f:66:
         4c:b7:df:95:bc:23:d4:25:3f:24:94:c0:d4:c7:a0:9a:c0:09:
         a2:97:76:de:fd:53:19:9b:01:f6:0f:09:28:ba:90:eb:b2:d5:
         97:61:43:f5:53:bc:9d:cd:d3:11:1a:6e:93:46:d5:9b:1c:3f:
         50:9b:71:17:ad:b9:55:df:5b:7b:bb:45:96:d2:61:08:3e:df:
         9c:50:62:e5:9b:ca:3a:cd:ff:72:d1:fa:5e:23:98:53:6b:5a:
         91:9e:c3:c0:4c:57:78:06:c3:b6:53:22:41:5f:99:f7:88:ce:
         ab:89:2c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:20 2025 by rpki-client