Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa
File:                     4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa (raw, json)
Hash identifier:          HsD9Y+a0i87ZxqV4haMZo1bGy9I4OOdt+0DhlPDGvAg=
Subject key identifier:   DB:3A:6B:E3:75:4B:96:0C:CA:BA:33:FF:B7:3A:2D:86:5B:54:4A:5D
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584838854700E266AB69950DDA00
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        2604:b040:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:47:00:e2:66:ab:69:95:0d:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=953dc131-d356-4443-8170-22c528921dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:70:85:2c:27:bc:00:1d:46:12:57:6f:04:
                    e6:32:6d:5d:65:cc:1d:89:26:aa:54:c0:50:eb:03:
                    85:b5:16:de:5f:43:ef:37:fb:89:1e:c3:67:a6:b9:
                    94:13:1a:54:3c:0e:b9:21:f3:53:39:40:fc:ad:0e:
                    b9:4d:20:5a:6b:40:14:ac:d9:0d:47:e3:8d:6f:4d:
                    4e:ef:2a:1a:00:a5:9b:f5:f8:19:5c:17:4a:f5:84:
                    10:5a:02:3d:10:ef:59:db:31:ee:92:3a:4a:b0:fd:
                    95:24:e9:db:50:17:87:6f:6a:7e:04:66:2b:30:34:
                    a7:5a:91:7e:f3:e9:56:a1:d6:6d:2f:37:3e:1f:6d:
                    07:91:b6:18:a8:51:06:c9:34:24:81:36:6b:91:ce:
                    73:ea:a4:df:49:63:59:4e:45:ca:53:47:98:05:f9:
                    0e:d9:df:18:36:42:05:eb:0e:00:27:04:c7:f7:8f:
                    69:61:27:e3:b8:74:c1:db:1d:59:47:08:d1:b3:9b:
                    cd:f4:80:39:fb:ef:8c:e6:b7:c3:e0:70:ce:3d:68:
                    e9:53:54:42:46:bd:1c:c8:bc:a1:36:c1:6e:66:d8:
                    46:66:28:16:94:2f:4b:80:32:1a:dc:d0:ba:6f:a1:
                    6d:fc:66:5a:7f:62:9a:ac:07:d2:22:65:c6:c4:e9:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3A:6B:E3:75:4B:96:0C:CA:BA:33:FF:B7:3A:2D:86:5B:54:4A:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b040:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8a:8a:49:f6:81:18:d2:46:d5:3c:6a:80:3e:9b:ac:6c:78:
         d0:49:d8:65:e9:da:ce:6a:08:9d:d2:0b:0e:a9:27:7b:cc:d8:
         3d:9a:e3:fd:6e:e0:61:86:4f:02:a2:03:ec:46:a7:04:1a:23:
         40:e9:58:3b:d1:88:a8:67:be:17:01:35:9f:74:f5:47:15:b6:
         a4:b0:9f:03:d4:ee:d8:5f:a1:ae:02:47:67:d9:2a:b7:8f:21:
         14:e9:69:55:c6:38:a4:01:db:e8:43:76:03:39:6e:db:66:3d:
         c5:8e:09:75:62:61:34:a7:f7:ad:c1:27:63:3b:7c:33:30:5d:
         68:c3:69:f7:e8:b6:52:0e:27:e4:0d:90:71:6a:ca:7e:28:94:
         62:05:26:1b:b7:39:11:47:4d:a4:f6:f3:01:54:0a:fd:11:e3:
         ea:e6:c9:69:64:d6:c6:77:b6:d8:f1:9f:b0:0a:10:76:bc:43:
         2f:c3:bb:97:05:57:7b:55:3f:c7:f2:0c:e5:13:81:7d:61:a4:
         de:c5:06:e9:81:50:ae:71:eb:ef:a0:ca:05:a0:6f:87:24:83:
         4c:f3:28:60:df:c3:be:2b:96:47:24:0a:6b:2a:77:c8:81:d8:
         0b:a2:27:f5:43:0a:30:e0:46:93:f8:dc:32:94:78:2a:7e:c8:
         3e:62:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:39 2025 by rpki-client