Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa
File:                     90d904a0-dea4-319a-a1cf-1e858687b196.roa (raw, json)
Hash identifier:          hA5Hm566CzpShy7OHx5ig+PsSbwoKEv0QqAh7v8iETg=
Subject key identifier:   E0:CA:E3:51:10:AB:CA:46:D8:67:A7:5B:57:41:5A:C2:CC:51:1C:C2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C582360F182EB0D01CE15D26
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        2607:f8b0:4006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:36:0f:18:2e:b0:d0:1c:e1:5d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=96b26139-4ea0-4c0f-8727-ef427f6f4dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:f9:32:58:7c:26:ba:91:38:70:cc:79:3f:
                    c6:0d:0c:0f:36:51:a7:a2:80:fe:91:c3:64:dc:a6:
                    ac:20:65:1b:c7:a9:52:ef:60:ec:70:06:66:af:67:
                    ba:1b:ad:10:a7:b8:05:4c:ee:10:13:18:4c:dc:50:
                    ac:19:9d:71:c6:d6:81:d9:f4:75:35:c3:cd:9b:26:
                    6c:78:2b:59:ad:c9:f9:9e:21:0b:fe:4d:dd:b2:96:
                    54:f4:1e:f4:da:dc:ba:68:a5:2c:b6:b4:27:c8:83:
                    69:99:30:ff:2e:b1:a2:e3:d4:6c:6b:2b:71:fa:b2:
                    9e:52:b8:f6:87:09:86:64:21:ff:10:4c:c9:92:04:
                    da:26:17:82:78:16:7c:b4:a7:1e:f8:fe:4f:b3:1b:
                    13:78:ff:2a:ab:2b:97:e8:a8:4f:80:5d:28:fa:4b:
                    e9:76:5b:dc:90:b0:e7:0a:6d:71:37:23:4e:5f:21:
                    47:1b:de:59:b8:b8:29:26:6a:fb:f2:55:c9:c8:ff:
                    00:2f:c1:70:0a:b0:f1:f7:33:ca:fd:99:ae:1e:84:
                    2d:a7:b6:c5:f7:46:9f:d0:85:34:fa:1c:42:36:0f:
                    71:be:5f:7d:a1:a0:b8:31:62:86:86:ac:1e:36:0a:
                    b8:0b:0b:64:21:a9:3c:07:a6:01:ee:d3:48:32:61:
                    95:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CA:E3:51:10:AB:CA:46:D8:67:A7:5B:57:41:5A:C2:CC:51:1C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:4006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:cc:ff:40:8e:36:c5:2a:42:d6:6e:5a:d9:26:f5:e2:0a:33:
         4a:4c:b7:b3:06:84:12:71:59:ce:0c:90:f0:56:dd:9b:6b:11:
         b4:09:2b:54:74:7b:e8:aa:5b:f9:83:01:8a:71:53:e7:8c:17:
         13:1b:bc:f3:32:e2:08:c8:34:58:69:7f:7c:7c:e9:5d:8f:00:
         aa:25:0b:4e:f6:c2:6f:aa:f4:3e:80:46:0c:f7:eb:35:3d:54:
         86:eb:9f:b5:ba:60:ac:07:97:17:dd:66:92:dc:04:16:fc:79:
         9a:73:9c:50:77:3e:c7:78:63:ef:0a:f9:3d:9a:6f:59:38:ce:
         4a:78:94:c8:30:85:9b:32:78:02:73:3d:eb:8a:e7:0f:4a:2e:
         68:e3:3f:99:1e:45:d2:9b:f0:39:22:09:2f:14:66:34:34:68:
         08:ce:df:94:8f:25:66:39:46:13:12:6b:85:a6:4b:93:59:0f:
         e9:dc:92:f2:a6:31:0d:42:17:8c:19:af:3f:2a:aa:b0:fb:33:
         4f:cf:d8:bb:2a:cb:5c:83:0e:a9:65:f1:28:b3:8f:b7:86:57:
         5e:b3:cb:5c:67:12:f3:a0:d5:82:14:cd:4f:2a:f6:83:97:61:
         40:75:4d:a5:c1:11:e9:c5:b6:7c:03:0a:e9:c6:6e:1a:cd:90:
         ef:79:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:08 2025 by rpki-client