Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9a45d6c9-6c7c-35a5-a975-b8139ee87cc3.roa
File:                     9a45d6c9-6c7c-35a5-a975-b8139ee87cc3.roa (raw, json)
Hash identifier:          skfD+GqbrmWhZiYttLcLHcVqFvE21Elu49z4IOR158M=
Subject key identifier:   E4:79:08:9D:5C:4E:90:6D:4C:55:AD:51:63:F3:B7:46:9A:EF:6B:2A
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584986046A76EAAAECFBBB3E4FC0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9a45d6c9-6c7c-35a5-a975-b8139ee87cc3.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     13778
IP address blocks:        2602:284::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:6a:76:ea:aa:ec:fb:bb:3e:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=45c651a2-cd91-450c-ab3a-17ee63a24883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:42:f4:bd:3f:22:48:38:b7:e6:b4:30:72:
                    aa:fb:b5:c0:b7:5f:93:41:15:42:0d:ab:d6:ab:2a:
                    55:45:6c:e7:df:d4:2e:81:20:76:a3:77:a0:14:51:
                    43:96:98:80:00:aa:d6:17:aa:52:16:49:01:30:48:
                    71:e5:dd:d3:e4:04:27:40:ba:e8:45:bc:f6:ec:94:
                    30:c9:a5:89:f6:2f:99:4e:f8:e0:94:26:96:97:0f:
                    c6:6b:ec:52:f3:81:1b:ca:6a:29:bc:6e:ba:b7:d8:
                    8c:72:b1:dc:dd:05:ee:c9:94:01:37:7a:b9:87:ec:
                    b1:3a:b0:ff:47:1e:24:91:15:e0:c6:72:7b:1b:ff:
                    51:f5:78:c1:cf:91:3e:21:42:f2:f2:94:02:12:2d:
                    ce:8b:c1:11:d3:f9:da:72:72:d0:aa:cc:0b:4a:4e:
                    50:50:25:50:e0:78:b4:f7:46:cf:c5:fa:fb:6e:21:
                    c9:d2:16:c1:ea:d7:46:2d:f5:b9:87:46:0e:57:c0:
                    50:cf:2c:d5:b1:df:f7:d2:5a:7c:6b:a8:f9:9a:ea:
                    22:a8:f9:63:eb:a5:b5:29:a8:81:e7:ea:43:c2:0f:
                    88:6c:6f:86:03:0c:2f:7e:f2:ce:8b:e3:01:a9:17:
                    78:09:0e:8a:48:a5:cf:ad:f8:a4:f5:af:a2:f8:82:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:79:08:9D:5C:4E:90:6D:4C:55:AD:51:63:F3:B7:46:9A:EF:6B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9a45d6c9-6c7c-35a5-a975-b8139ee87cc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:284::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:0f:85:de:e3:d4:ad:1d:aa:ba:06:f8:9d:f2:ea:e9:ea:51:
         54:e5:46:f5:65:b4:a8:20:b6:6f:03:0c:ac:3f:a5:e3:c8:58:
         da:7a:9c:df:5c:1f:93:14:57:f4:d4:de:76:3d:81:61:69:a8:
         c5:a8:67:35:3b:6f:ea:5f:34:03:8f:17:ec:e1:6b:a2:b5:68:
         c9:3f:03:b6:15:cc:5b:55:f8:94:16:16:f5:2f:c1:f0:9f:5e:
         eb:06:c0:e9:c0:f0:6d:6a:b6:20:86:76:50:38:8a:cf:da:cc:
         39:da:22:f4:5c:4f:3e:77:34:55:16:70:14:46:54:1b:2a:f4:
         9b:ed:ba:68:f0:45:ee:5b:7b:d1:9e:5e:dc:07:59:0f:16:7a:
         fd:15:6f:83:e2:d6:be:87:8f:2c:b1:a7:b1:2f:9a:30:c1:00:
         91:12:bd:ed:e1:8a:fc:cc:ee:87:54:70:4d:8d:34:a6:22:bc:
         8c:b4:f3:bb:ab:c1:8b:01:5a:60:82:6f:fb:51:c7:61:7a:15:
         fe:e6:60:75:74:46:cd:59:c0:bc:e5:c8:56:09:3f:87:2e:87:
         f4:0f:9a:6c:f6:ac:d0:52:47:be:a1:58:29:43:30:ce:d2:38:
         f8:eb:44:35:82:2f:d4:5c:d3:69:b1:4f:e7:41:63:8d:5f:1b:
         f8:b6:68:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:48:03 2025 by rpki-client