Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa
File:                     401bafbe-03cc-3cac-9a44-36c27387a392.roa (raw, json)
Hash identifier:          aFJ6BT/244X98cut5C8HPnj9/tfoAj9ph3ZzJYCxxsU=
Subject key identifier:   46:38:6F:2C:7C:7A:44:57:78:F0:59:57:5D:50:EF:F7:B6:CA:51:35
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584902EC038137E38DBD61F8BE40
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     3384
IP address blocks:        2001:4830:c0c0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:03:81:37:e3:8d:bd:61:f8:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=099d86e9-690d-455a-a55a-7e427e4861ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:af:5b:fe:5b:85:f9:06:ff:f0:a5:fd:22:
                    7c:e1:85:cb:84:4f:31:5e:e6:a7:18:5e:40:05:1f:
                    53:81:8d:ca:6b:08:bd:8a:5a:40:93:88:f8:f0:18:
                    55:b0:8c:9c:44:ec:8d:d6:a6:2c:a0:fc:11:76:d8:
                    03:89:81:86:92:10:c6:5d:31:48:7c:e4:6f:05:b6:
                    f8:0f:e4:0c:d2:81:f2:ed:f1:14:1d:e2:86:7b:22:
                    d2:d3:2d:27:81:07:71:98:16:70:ce:4d:88:b6:90:
                    03:64:40:73:7b:7b:3a:6a:e8:cb:cf:26:62:08:5d:
                    fe:87:87:dd:83:67:dd:78:75:5d:e7:0f:0a:2f:2c:
                    9c:9a:12:98:be:62:bc:47:74:78:54:c8:dc:34:25:
                    26:09:2c:b8:23:36:13:06:38:b9:b2:57:cb:5e:92:
                    21:df:02:ef:ea:50:30:2b:b6:70:ad:e9:b9:7b:bf:
                    9b:7f:cd:50:21:fd:e3:aa:e1:75:f9:f7:29:07:ff:
                    b2:96:94:f0:d8:ad:66:51:ef:9c:42:2e:a8:ba:15:
                    e4:89:d8:fa:08:da:cb:98:aa:bc:43:53:16:6d:1d:
                    f7:f8:62:03:e3:8b:6a:e3:30:a3:b5:01:19:32:37:
                    d7:73:15:dc:05:9b:f4:38:cb:50:a0:3a:3e:67:0e:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:38:6F:2C:7C:7A:44:57:78:F0:59:57:5D:50:EF:F7:B6:CA:51:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c0c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:05:26:be:eb:ac:eb:84:ea:85:bb:87:7e:5e:ba:77:da:
         5c:9a:7a:57:f9:0f:cb:0f:6c:06:73:5d:57:54:3a:ca:db:68:
         e3:0c:d6:02:01:1d:3f:61:d3:f7:dd:ed:09:92:d3:af:0c:f4:
         00:37:61:4c:3d:0a:73:29:ee:0d:06:4e:91:ff:cf:3a:47:e2:
         69:aa:04:9a:4f:61:f9:6e:f5:6d:d7:3a:55:72:f4:67:3a:27:
         36:36:06:eb:91:26:95:be:bb:8a:2a:d4:1f:bb:85:02:ac:ec:
         b7:67:76:75:fd:b4:4b:06:7b:d6:b8:7b:d9:e8:39:af:28:b2:
         61:7f:6b:10:51:6f:83:05:08:04:72:41:1f:99:a4:a9:ac:16:
         6f:b8:89:23:0c:8a:94:11:52:95:fd:55:41:65:f3:24:cf:3e:
         89:c3:86:87:b7:04:c8:aa:1e:20:7c:68:7d:e6:14:35:c5:7f:
         da:28:21:57:dd:cd:eb:d5:4e:6e:57:9e:da:b4:78:4a:70:5a:
         17:0f:c0:71:62:7e:f7:a1:9a:d3:a3:86:74:87:6b:99:9b:fe:
         bb:1f:b7:78:6a:94:e7:b9:1f:dc:84:bd:c7:8f:b9:4f:9b:d7:
         91:10:3f:20:13:1f:3f:9b:92:a2:85:1e:d0:1b:1b:35:89:fb:
         f1:c0:48:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:22:31 2025 by rpki-client