Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa
File:                     18e44ea4-b598-3f56-b2a8-7861ef29958e.roa (raw, json)
Hash identifier:          CeZhE3/of+OK9KHOHBDEZiLtsyDIlsDPFeTZ6bReXDo=
Subject key identifier:   B3:39:B5:8B:A4:F1:63:10:75:FF:37:FF:3F:42:4B:EA:3F:D1:18:28
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285848DEA1183A3BE024408657D500
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     30103
IP address blocks:        2620:123:20c8::/48 maxlen: 48
                          2620:123:20c9::/48 maxlen: 48
                          2620:123:20ca::/48 maxlen: 48
                          2620:123:20cb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:18:3a:3b:e0:24:40:86:57:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=600d1b79-8c84-4bfd-b6b3-e1683d862db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:33:5a:37:4f:b1:5d:9b:c4:08:05:e5:2e:
                    00:53:7f:7d:56:2c:35:ac:a2:52:13:fe:00:21:22:
                    6f:a8:52:0e:61:6c:d6:fe:02:b0:fb:01:45:d9:c2:
                    eb:a5:60:4d:76:04:c5:7a:93:07:c3:b0:00:77:65:
                    19:b7:1c:69:67:8a:b6:b5:06:23:a5:63:53:78:9d:
                    f5:19:33:a9:77:ed:b5:08:fd:ee:b8:04:68:af:5d:
                    2f:85:85:ed:c2:36:d2:c2:10:1a:1d:60:c9:e7:27:
                    a7:87:bd:71:8e:92:fd:8f:11:f6:54:a0:82:b4:97:
                    75:48:f1:50:21:6b:c7:88:d7:78:ec:7c:c9:e6:6e:
                    64:17:fa:4a:40:f5:fa:5b:3a:01:a7:df:fb:a0:0c:
                    f0:17:c3:e4:ce:49:54:bd:21:53:02:2e:50:88:6b:
                    cb:c0:e4:57:64:60:91:35:c2:ae:4a:b3:8d:03:83:
                    29:4d:9d:4a:41:a9:91:20:2c:3f:e1:53:4b:e3:24:
                    bd:86:bf:99:b8:0b:43:69:df:a4:fc:c5:8b:50:ba:
                    7e:41:05:2e:30:58:8c:66:3f:a2:f1:39:0f:1b:71:
                    82:37:44:0e:8b:54:e1:e5:8e:eb:3e:37:5a:84:05:
                    c6:d2:ff:57:a9:07:29:af:db:d5:1d:04:74:5b:e3:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:39:B5:8B:A4:F1:63:10:75:FF:37:FF:3F:42:4B:EA:3F:D1:18:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20c8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:11:22:79:fd:01:e1:26:3b:76:26:f2:1d:77:b2:c9:25:69:
         4f:10:a4:91:50:51:e4:4d:82:16:59:73:74:fa:a7:c8:38:20:
         c9:0c:e9:f1:47:bc:70:0b:92:2c:22:12:c1:12:82:27:9d:fa:
         2a:d8:3c:7e:8c:75:eb:fb:30:dd:33:a9:c5:17:ae:5c:4c:8d:
         00:4f:50:b0:d9:a2:ff:c1:22:7c:70:98:91:d9:5f:64:b2:d1:
         bb:30:31:73:2f:69:8b:2f:bb:52:e6:f3:23:b8:b7:42:31:17:
         ed:fc:0e:56:bd:c2:84:15:c0:44:a2:43:a1:4f:ae:5e:27:2b:
         67:8e:f0:f8:00:7e:3e:3d:91:72:d6:55:96:ba:4a:84:26:e2:
         5a:ab:78:dc:9c:2d:1e:ad:e7:70:54:d6:d1:71:18:01:ca:d5:
         14:a0:f8:46:ec:ff:4d:3a:8a:fc:c2:72:d2:1d:72:a5:68:1d:
         20:bc:4e:33:09:e1:66:e5:49:9f:22:db:7f:ac:72:de:60:b6:
         eb:d4:bc:6e:4a:ae:da:bc:14:b0:7c:7d:9e:ea:8c:b4:a1:80:
         88:4e:a2:18:6c:fe:1b:e2:bd:94:61:78:e6:c3:b6:ab:ee:36:
         8e:a9:7f:14:52:49:7c:e8:49:ee:53:aa:b4:7d:f4:13:5a:ab:
         29:be:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:58 2025 by rpki-client