Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/274e2e0b-e815-3313-94a1-9e006b6a18ef.roa
File:                     274e2e0b-e815-3313-94a1-9e006b6a18ef.roa (raw, json)
Hash identifier:          hPYQOOx48bJXg9IQr7BnTIXBYGO7KbifXh3KW33w6YQ=
Subject key identifier:   B0:29:1E:8B:88:EE:0A:99:65:DD:AD:90:CF:63:DA:0C:47:B7:47:D4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB68CF0ED1F01F859BAC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/274e2e0b-e815-3313-94a1-9e006b6a18ef.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     855
IP address blocks:        2001:4c0:6002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b6:8c:f0:ed:1f:01:f8:59:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=56ec3670-eb1f-4845-a90c-ff95741b6d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b1:5b:5b:7b:d4:19:53:48:a7:21:14:e1:fa:
                    3b:59:fe:69:ed:84:f8:3a:54:24:71:35:2c:c3:0b:
                    be:ee:89:f4:ca:f1:00:95:7e:f2:a8:ed:b7:05:5f:
                    7c:99:5c:bf:a8:cb:cb:41:42:f8:34:d0:85:61:8e:
                    40:b3:91:fc:c8:f0:46:ef:8d:ec:5d:01:64:d4:94:
                    ed:ca:2b:af:09:9a:68:3e:7f:13:4d:16:de:fe:6a:
                    15:42:04:42:57:ca:f8:e6:1a:81:ac:7c:63:e5:d7:
                    36:30:e4:43:d8:35:cd:8b:c8:9d:04:f9:fc:f4:47:
                    ae:cc:f4:eb:52:63:aa:7a:6b:f5:8e:ae:a2:40:65:
                    24:12:cb:8b:f2:fc:1b:a9:73:79:20:18:7b:1f:2f:
                    79:0f:13:fd:be:0a:c4:79:54:56:7e:ac:9f:9f:f3:
                    18:3d:d9:92:01:52:6a:2a:8c:a2:1e:15:de:31:ee:
                    6b:4b:6b:96:b6:b8:33:d7:3c:17:f8:f2:85:2b:ee:
                    8a:64:ee:4d:9c:62:75:30:29:8f:ca:8b:0c:84:a1:
                    5b:e3:a2:2b:78:d4:75:de:18:00:f0:4b:2d:0a:ed:
                    dc:72:ec:ad:04:58:1d:4c:f9:3e:77:b2:ef:cc:44:
                    7e:d5:37:53:f6:42:34:9a:3b:9b:34:9e:48:d3:b3:
                    71:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:29:1E:8B:88:EE:0A:99:65:DD:AD:90:CF:63:DA:0C:47:B7:47:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/274e2e0b-e815-3313-94a1-9e006b6a18ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:6002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:75:ab:63:04:bd:8d:66:15:8c:16:9a:82:11:ad:51:c1:
         78:cc:2b:e1:a8:2a:d8:22:bc:b0:46:9f:78:4e:6b:95:9c:aa:
         94:b7:ca:55:70:fd:10:06:0d:ea:bf:f9:71:08:7d:ab:24:98:
         7b:d3:3c:ee:88:af:cd:53:24:bf:ae:0d:4a:91:d9:15:9b:c4:
         c9:f0:b2:04:fb:0f:e4:cc:3c:15:66:3f:b1:65:34:ac:f9:9d:
         fa:3f:b9:a3:f5:0b:c4:c9:c1:c1:02:7c:93:12:9a:e1:6e:69:
         70:9e:b0:2a:85:2a:46:fa:d0:0d:0a:eb:a2:65:4e:e4:99:21:
         6e:7c:42:99:fa:0d:7c:ea:68:40:c4:cb:8e:73:50:85:03:92:
         1a:a8:82:ae:06:65:d9:01:97:6a:dc:c7:6d:d4:64:dc:87:61:
         e2:67:24:33:2c:d7:53:0c:4d:84:fb:e4:cc:3a:cd:d2:bd:5e:
         81:42:fa:b0:c5:1b:3d:54:4e:29:09:8c:35:65:2e:f1:1c:14:
         c6:aa:0d:6f:17:4f:d8:ee:a8:d6:8b:4c:ac:c9:cb:4c:2c:6c:
         7b:fb:07:3b:fb:32:1b:61:d4:27:9d:95:26:58:e8:85:15:04:
         88:16:30:5c:04:ac:fd:56:8e:0e:05:2d:a8:74:07:5a:29:02:
         32:91:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:03:51 2025 by rpki-client