Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/92829906-fe04-3825-9e11-083fcf90e358.roa
File:                     92829906-fe04-3825-9e11-083fcf90e358.roa (raw, json)
Hash identifier:          piAQ/Ka7AgMOZ39+AO25MhSIlLha0+y7nkafIt2j0Kg=
Subject key identifier:   5C:8E:D4:91:ED:C9:72:35:81:13:B5:6E:09:A4:3E:58:1F:9A:CB:1A
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584937D93473E155E3B45646E5C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/92829906-fe04-3825-9e11-083fcf90e358.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     1239
IP address blocks:        2001:49f0:d129::/48 maxlen: 48
                          2001:49f0:d12a::/48 maxlen: 48
                          2001:49f0:d12b::/48 maxlen: 48
                          2001:49f0:d12c::/48 maxlen: 48
                          2001:49f0:d12d::/48 maxlen: 48
                          2001:49f0:d12e::/48 maxlen: 48
                          2001:49f0:d12f::/48 maxlen: 48
                          2001:49f0:d130::/48 maxlen: 48
                          2001:49f0:d131::/48 maxlen: 48
                          2001:49f0:d132::/48 maxlen: 48
                          2001:49f0:d134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:34:73:e1:55:e3:b4:56:46:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=d9480ff1-6cc0-4c85-b62f-26f0ce10cb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:be:eb:af:f0:cc:a2:6b:77:4c:47:87:bb:
                    bc:80:d1:6e:ef:fa:e7:03:6b:85:51:4f:a9:08:50:
                    08:91:25:71:d3:e0:5e:5e:db:3e:ad:c8:47:a3:16:
                    0e:d2:a4:e8:ce:df:bb:b8:08:9d:90:82:83:37:80:
                    a5:1d:55:c7:cb:56:ba:68:6b:fa:4d:0f:33:f0:43:
                    b2:8f:0c:b1:a0:15:e3:49:36:cd:0d:83:7d:52:26:
                    c4:29:34:9a:9b:ed:df:1a:69:9c:19:73:e1:e0:42:
                    45:8b:25:48:3f:26:9e:49:44:a8:4b:8b:27:9a:06:
                    60:c2:1c:7c:02:86:90:ed:74:74:e8:2e:60:7a:b1:
                    dd:78:84:69:d4:83:17:d9:a4:a5:24:1e:04:8e:2e:
                    88:47:c7:cd:c7:8a:2a:7c:94:ee:99:9b:26:5d:6b:
                    27:a5:db:aa:6a:9f:c7:57:89:24:ae:8b:bd:5f:d7:
                    bf:b7:62:3c:32:d5:35:69:c3:68:ee:fe:21:46:28:
                    25:a4:fc:37:66:15:12:89:f3:a7:4b:7a:b1:f6:31:
                    f0:ca:a1:41:0f:1b:43:00:ff:ce:27:df:51:2f:7c:
                    04:44:ad:68:3f:a5:12:9b:78:d6:b9:93:5f:83:aa:
                    16:de:61:c6:84:d1:61:33:a8:4e:b8:d9:e9:f1:89:
                    85:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8E:D4:91:ED:C9:72:35:81:13:B5:6E:09:A4:3E:58:1F:9A:CB:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/92829906-fe04-3825-9e11-083fcf90e358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d129::-2001:49f0:d132:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:40:a7:6d:6e:ad:df:8b:47:92:6e:16:38:15:8a:9b:de:1b:
         f7:8f:6d:5b:55:8b:20:8a:d5:4c:32:dc:df:24:8e:8e:54:24:
         51:f8:da:84:f0:85:70:90:44:bb:ea:64:7d:75:fc:3c:f9:5e:
         23:49:fc:a6:b9:d7:4d:aa:f7:b6:e2:a1:ac:6d:82:e6:d4:1d:
         6b:a2:5e:11:16:b7:5a:67:03:e6:93:a5:ad:76:be:d6:74:cb:
         cd:38:3e:53:91:9b:9a:db:17:42:41:3b:c1:81:91:e9:36:64:
         04:7e:eb:45:a6:c0:1c:72:5a:b2:a4:c4:f6:3f:e2:6e:41:f9:
         31:0c:85:8e:7f:1a:c1:90:64:0a:47:77:83:a0:d9:08:83:1f:
         2a:4a:ac:b1:3d:c7:3d:e6:ce:0e:52:65:0e:36:86:79:ef:35:
         a4:fc:40:61:b0:53:ac:ca:c6:ac:ab:ab:8b:77:6d:f2:18:a4:
         99:44:79:c0:c1:cd:89:70:6c:3e:ea:52:da:5b:b5:85:2d:87:
         63:51:cf:e7:b0:89:df:04:09:21:7d:c9:65:6c:d1:6b:c0:1a:
         a3:a3:3e:91:22:0e:d6:08:29:3b:48:71:bf:72:03:61:a6:75:
         26:21:a7:e3:2b:1f:38:cc:dd:ce:1a:2d:8c:5d:cd:cd:3e:25:
         85:ee:cc:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:42 2025 by rpki-client