Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa
File:                     fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa (raw, json)
Hash identifier:          FZriHg9+RHeXy718SMv026T2XNG7mu8XlxVDhGcJzHY=
Subject key identifier:   8A:16:B4:16:0A:14:F5:68:74:3E:3A:8E:2F:4E:48:18:C4:DF:8B:4D
Certificate issuer:       /CN=caf392a1-07e9-49f4-9a03-df5005333708
Certificate serial:       010D0C9F4328584988CF33CEB3A12E9AB48DC380
Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     46962
IP address blocks:        2606:2ac0::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:33:ce:b3:a1:2e:9a:b4:8d:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=900eb4d6-2980-43c4-93be-3b5e12179cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:47:b2:55:42:0b:a7:1c:a4:65:9d:35:90:30:
                    2a:35:29:2d:9a:24:40:da:ef:44:4e:15:15:96:1a:
                    72:ab:6d:f5:aa:7e:f5:a3:b3:25:2e:9f:85:76:b1:
                    62:99:72:9f:0b:9a:da:84:73:53:77:22:eb:dd:b4:
                    87:14:f2:d0:b5:7d:78:89:12:52:2d:be:ed:85:a2:
                    8c:3e:b7:51:2a:ba:b5:f2:4a:92:4a:62:0e:49:bf:
                    b3:db:8b:ad:a4:e0:a7:df:4b:08:b5:d7:53:24:9c:
                    92:b0:47:b2:35:a5:00:b0:f6:9c:4f:30:4a:f3:9f:
                    e9:d8:39:3f:11:dd:fa:38:f6:30:f0:28:58:c1:72:
                    de:2f:a6:26:0d:b7:2b:91:41:77:7f:d8:c2:9f:10:
                    d5:6a:80:8e:44:7b:91:fd:4d:50:30:fc:b7:88:65:
                    26:1c:5d:85:03:95:10:ca:8e:f8:b0:7b:c6:fd:97:
                    ac:36:70:88:99:50:d7:7b:6c:86:3a:9a:24:09:01:
                    5e:78:32:b1:85:d9:e7:65:3e:80:a2:85:41:be:b7:
                    c9:02:f7:c2:3e:a9:86:5b:10:64:12:71:20:fa:c9:
                    b5:8d:2e:5c:ef:51:8c:66:c5:ae:45:68:0c:76:21:
                    e0:3d:96:34:86:fb:79:b2:bc:11:33:ec:17:d0:57:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:16:B4:16:0A:14:F5:68:74:3E:3A:8E:2F:4E:48:18:C4:DF:8B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl

            X509v3 Authority Key Identifier:
                keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2ac0::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:47:94:bc:29:92:3a:a6:20:66:3c:dc:e2:7a:e9:b0:4f:ea:
         c9:2c:fa:1a:5d:d8:71:03:0e:12:63:7b:cc:55:77:33:90:5c:
         f5:19:8c:1f:6f:dc:de:ef:92:03:c2:af:10:74:50:c6:80:23:
         63:0e:18:4d:66:d1:67:32:c8:34:9e:52:e0:a8:8f:85:07:26:
         0c:55:59:6b:77:86:19:ff:dd:89:97:51:75:dd:f1:0f:5d:34:
         de:df:35:19:96:9d:c4:74:f4:10:36:87:71:b4:3f:1d:e9:55:
         77:8c:05:6e:a0:47:1c:ff:0f:86:71:90:ea:5c:3c:78:59:1a:
         18:67:f1:3b:da:c0:4e:0f:b5:a8:fb:7a:03:d5:74:4a:ed:f9:
         1a:d5:f9:73:9a:a6:a8:10:af:ea:15:43:d1:62:13:8a:87:e9:
         13:b7:fd:69:bf:01:08:d3:03:1a:12:4b:c6:7b:9f:2c:1f:7d:
         6c:86:1b:6b:d6:9c:f1:b2:bb:b3:02:ce:63:f9:5d:f0:10:7e:
         63:21:cc:e3:55:8b:f5:1b:81:b6:ca:64:e8:70:98:39:f3:42:
         fa:6c:14:9a:8e:bf:76:fb:eb:46:32:3b:f1:68:fb:ab:04:67:
         2b:c0:32:3b:3b:a2:7b:e2:49:7d:25:e7:5f:35:0c:6b:5a:3a:
         ba:c9:39:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:35 2025 by rpki-client