Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a09cec1d-c633-37f6-8993-a4d9b19ab7e4.roa
File:                     a09cec1d-c633-37f6-8993-a4d9b19ab7e4.roa (raw, json)
Hash identifier:          wKLPy3lktEW1cFGGe9ifiCGBNU+0nsVxwZxMVzKb8tc=
Subject key identifier:   98:96:57:A3:DF:1F:BE:E4:A0:26:C7:02:C4:62:B8:6A:08:4A:68:73
Certificate issuer:       /CN=a58fe14b-04a0-43bf-b9b8-f6564f858306
Certificate serial:       010D0C9F43285848DEA11BEB190356B77B71E6C0
Authority key identifier: 68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a09cec1d-c633-37f6-8993-a4d9b19ab7e4.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     32639
IP address blocks:        2602:fdf2::/36 maxlen: 36
                          2602:fdf2:fab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:1b:eb:19:03:56:b7:7b:71:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58fe14b-04a0-43bf-b9b8-f6564f858306
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=5772c83e-ae5f-40a1-9a54-dc77471dac62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ac:0e:85:40:9a:75:e7:04:2f:f8:28:f9:8a:
                    32:eb:4c:32:ad:af:42:ba:b7:17:9d:ae:cb:09:d5:
                    a9:e0:72:e2:4d:20:50:59:0a:27:10:30:80:85:69:
                    3f:1d:5f:31:a4:ea:bc:7f:bb:e2:20:48:d8:95:b8:
                    c9:43:b2:82:09:b8:d0:f0:66:9e:3d:2e:22:a1:28:
                    51:98:be:ed:95:0d:fa:0f:0e:48:27:ef:27:92:2d:
                    0b:42:b2:fd:a8:d7:fa:21:c4:3b:a8:29:ef:00:af:
                    82:4c:a2:be:15:fc:58:a6:00:d1:51:2b:08:b4:5d:
                    9f:64:56:a8:c8:4d:e6:e5:84:a4:50:9f:ec:24:48:
                    ee:c0:a9:13:0b:31:16:51:22:78:f5:14:03:4b:e6:
                    8e:39:38:64:54:ba:84:f9:59:f3:78:b7:77:73:fa:
                    90:bf:e1:0f:e5:37:40:17:4e:72:cb:ad:93:5e:ed:
                    e4:49:3d:fc:d9:8e:2f:7f:3d:e8:ac:a8:90:c5:7d:
                    39:7f:92:fc:37:f0:98:3d:8b:1f:d5:31:22:59:a6:
                    10:4d:4d:de:e3:c7:40:5d:61:f6:47:e6:fa:65:30:
                    7c:ac:e1:88:5a:2b:10:a4:46:47:9f:74:c2:9b:28:
                    7c:58:a9:13:40:3e:96:43:7c:64:0e:8e:7c:6f:3d:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:96:57:A3:DF:1F:BE:E4:A0:26:C7:02:C4:62:B8:6A:08:4A:68:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a09cec1d-c633-37f6-8993-a4d9b19ab7e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl

            X509v3 Authority Key Identifier:
                keyid:68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdf2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:79:4e:8c:7c:e4:55:59:cd:2f:6c:79:db:82:1d:f5:4f:d8:
         a9:58:7f:c3:11:fb:45:9e:e1:11:23:57:3b:08:91:39:37:77:
         1b:4f:18:06:d0:19:78:63:4a:0b:8c:48:17:69:a4:cf:98:53:
         7c:4c:18:5d:60:0e:c3:33:5f:5c:36:56:d8:5f:03:c7:d4:09:
         8a:31:e4:8c:88:d1:63:4c:6e:12:f5:cb:ff:1f:8a:eb:0a:5e:
         f9:bb:a8:dc:90:15:ec:98:66:84:53:11:8d:99:31:dc:de:a9:
         19:a7:17:1d:b0:f6:5b:95:6f:bf:6a:de:0a:bb:8e:a4:48:36:
         71:ef:d4:77:cb:2e:93:67:2e:cb:92:68:03:60:3a:24:2e:da:
         fa:2c:29:2d:41:ab:4b:b0:0d:4f:98:53:03:09:94:ba:1f:45:
         76:31:b0:6a:33:5f:75:87:86:02:72:12:45:81:8f:d7:92:63:
         80:83:0b:3c:fa:ac:0a:36:e7:ab:22:23:6b:5d:25:d2:ec:87:
         bc:8d:6f:10:0e:33:f2:88:63:e0:5f:ed:da:1c:a1:8e:d1:9b:
         0f:2b:b6:4e:58:85:13:88:12:14:a9:4d:ce:36:74:a4:8e:df:
         5f:e6:76:29:b6:30:1c:9b:1b:dd:a2:55:a1:a2:38:99:55:2c:
         a1:47:c7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:49:56 2025 by rpki-client