Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa
File:                     b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa (raw, json)
Hash identifier:          fCsyfh90nI626yvS0CduFX40fCEIgO5Bqez9br7VlrE=
Subject key identifier:   D3:39:9F:95:3B:0A:E1:5C:72:47:CE:B8:DA:7C:5A:CE:7B:43:FC:25
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F43285848DEA120A8E4280A9BEA75FB80
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     13807
IP address blocks:        2607:fdf0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:20:a8:e4:28:0a:9b:ea:75:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=9971d3e9-3654-4f99-9dc1-36026990a636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:36:17:6c:b0:1b:ea:18:30:f6:b6:4f:3b:9a:
                    d8:d7:8e:dc:dd:da:1e:a4:8a:20:e5:2c:17:c5:eb:
                    9d:5e:8c:ca:58:bf:73:44:1d:c8:a8:c1:9f:f8:e2:
                    cb:fe:0e:57:48:48:25:64:5d:36:07:5c:06:d3:41:
                    98:28:ad:a9:00:09:92:28:95:a8:ee:37:68:32:91:
                    7b:22:b2:14:0a:98:10:76:09:7e:e6:3e:1b:90:26:
                    5c:7e:34:9b:98:b1:9f:5a:ed:bc:14:09:ff:f6:94:
                    77:80:b6:82:dc:42:e1:63:7d:5b:d2:7a:48:68:d4:
                    ca:a8:c6:f5:09:ba:1e:84:25:f2:ce:bd:c1:b9:cb:
                    c1:07:d6:73:9c:85:ad:24:3f:2e:6c:c8:85:d9:fb:
                    cf:2c:61:00:1f:d8:fd:3b:1e:c5:87:13:7e:61:35:
                    9a:2f:5c:3d:63:30:df:d4:a4:12:f2:dd:a1:0c:32:
                    3b:53:c4:1a:82:51:88:9b:f8:03:62:53:f3:b0:e0:
                    6b:6d:10:69:cb:d6:9f:80:f3:a5:5c:92:ac:0a:33:
                    bd:31:f9:53:b2:b6:42:d7:60:d1:d0:21:44:f7:de:
                    50:ad:ee:2a:22:d8:46:ee:3b:20:d1:54:37:81:db:
                    36:7d:9f:b2:d5:51:50:df:f2:35:65:42:8a:51:04:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:9F:95:3B:0A:E1:5C:72:47:CE:B8:DA:7C:5A:CE:7B:43:FC:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fdf0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:cf:de:ee:21:76:e0:c1:b6:a0:8e:d4:87:fd:4d:d4:81:7a:
         6d:0e:cb:c9:53:dd:cd:94:67:90:e6:6a:fc:9d:a2:78:d9:cd:
         63:f3:ee:39:c5:c5:e8:93:25:43:13:b8:d3:21:74:3c:d2:d7:
         83:99:94:f5:7d:3e:36:23:73:21:9c:aa:60:21:60:d2:f2:14:
         a6:3f:73:78:85:61:b3:55:b3:7c:61:dd:c4:30:10:51:60:95:
         c6:7a:fb:31:ff:ed:5e:3d:37:65:8d:ef:4e:6b:8c:81:52:04:
         50:1c:39:18:b8:02:6d:cd:1a:11:f5:93:a6:88:87:10:49:2d:
         49:26:9c:b7:c1:1b:35:63:6a:84:42:8b:db:a1:13:8a:33:2f:
         64:3e:91:c7:25:9b:17:c5:6b:cc:e9:10:bb:a8:7d:d6:31:75:
         11:d3:b0:6b:5a:df:80:42:87:0a:d5:85:1a:0a:c1:a4:df:dc:
         d5:40:34:79:d9:43:01:e0:0e:99:b6:79:cc:9e:9c:01:0a:64:
         42:f1:15:1a:50:74:c7:95:76:cd:6c:5d:b4:90:fd:5f:df:06:
         f4:a9:ba:fc:7c:03:b7:9e:4b:15:04:51:d2:8a:4d:33:27:95:
         55:87:6c:bb:e3:26:45:7f:72:f1:ce:e4:1b:a9:f2:9c:52:cf:
         2d:fd:08:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:45:08 2025 by rpki-client