Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa
File:                     0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa (raw, json)
Hash identifier:          ZpIJFnAHrfSMsb013rB3fIn+JJ6qpGIpSWzZ3eAFXyM=
Subject key identifier:   16:AD:0D:DD:2A:62:03:F3:83:5A:6E:91:57:DF:79:1B:CD:8C:39:C4
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F4328584A2ABACC29D0BDC5F7B4570438
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     396982
IP address blocks:        2620:121:5050::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:cc:29:d0:bd:c5:f7:b4:57:04:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=f87c1c27-6037-4211-aa49-27dd2cd7a446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:18:c8:97:8a:9f:16:22:c8:bd:ae:a4:4d:
                    28:71:6e:f8:7a:b7:d8:2a:40:3e:75:a5:5f:fb:af:
                    f7:b6:fd:c3:d9:0b:69:b5:9f:7e:33:4b:c4:2f:4b:
                    5a:cf:63:f4:2a:1e:bd:6d:f8:1a:35:2f:5f:21:c5:
                    95:b5:ba:dc:80:f2:9a:e0:03:4b:87:b6:28:6a:6a:
                    e7:82:dd:fd:e1:0b:f0:ff:3c:5b:1d:a3:f2:46:81:
                    39:aa:f8:28:db:12:04:01:81:53:f1:44:d2:fb:9d:
                    5f:13:a4:0f:07:b1:76:0d:a7:ac:70:d7:5c:1e:a2:
                    c4:6b:a4:ff:4e:a2:87:cc:95:01:ea:b5:70:3f:f7:
                    d5:fa:63:d7:d6:b5:49:cf:f9:ea:d9:33:b4:3b:32:
                    5d:4c:54:37:9c:5d:21:ef:41:da:2c:3f:0e:0b:5f:
                    99:a1:99:47:5c:54:1b:6f:35:71:e5:6e:15:02:bc:
                    d4:7f:57:7b:2d:9a:b3:76:3f:75:81:42:8d:44:c5:
                    8b:e1:ee:19:23:86:24:b7:cf:11:30:37:ee:10:ab:
                    f0:c0:5c:90:b3:db:86:01:44:ea:d9:2e:bf:a7:a1:
                    ef:47:89:24:87:21:d8:37:82:f9:e7:c4:fc:9a:4a:
                    59:e0:39:f8:cb:e7:3b:25:bb:21:34:b3:03:a2:c5:
                    14:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AD:0D:DD:2A:62:03:F3:83:5A:6E:91:57:DF:79:1B:CD:8C:39:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5050::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:58:69:7d:76:49:22:42:f2:fb:2a:13:67:da:3d:4f:b0:f9:
         f5:d6:58:62:18:12:6f:e4:2f:ea:01:a4:6e:3b:24:5b:01:0d:
         8e:89:15:8a:3f:0f:78:7f:37:d0:80:1f:9e:d6:d6:16:30:c6:
         6f:84:e7:c1:4b:78:49:8e:17:82:d6:39:b6:cc:98:1a:9a:39:
         3b:99:93:d7:33:6c:4e:5c:62:08:a5:d8:7b:16:ee:02:66:ad:
         60:07:57:65:b1:67:00:de:8b:d6:ee:0a:e8:0b:cc:a5:76:6f:
         51:2d:86:31:d4:6c:7e:b9:ad:ce:42:4a:f0:a9:2e:8e:33:38:
         7e:df:9e:87:14:64:51:c5:d9:66:20:73:90:1b:60:d2:35:a1:
         ee:d2:ee:e5:6a:f4:b2:58:24:01:80:04:15:9e:11:fb:a9:f5:
         f1:98:a7:80:28:ec:41:70:79:b0:3a:79:19:26:66:84:eb:38:
         99:be:c6:4c:fb:2f:fb:2d:aa:35:51:91:76:13:d1:4a:df:1a:
         c1:56:2a:8a:7a:fd:bf:8d:f7:be:cb:1a:54:69:7f:6e:cb:47:
         e5:d0:e7:d8:ec:93:6a:6e:76:3f:0a:72:f8:82:25:d0:c2:c3:
         bc:9a:e8:d4:d0:e3:52:42:d5:cb:f1:36:82:22:fd:15:b3:41:
         95:cc:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:31:41 2025 by rpki-client