Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa
File:                     70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa (raw, json)
Hash identifier:          1TfpwBGRFjUcZOEU/K10CsyQILk++2VVhobXNN/oRCM=
Subject key identifier:   19:0F:82:70:31:3E:6F:C4:BD:30:1A:40:82:CA:4D:51:C7:A6:3F:F7
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584993F9DDFBF1852D88EECD9030
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     18672
IP address blocks:        2605:bb00:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:dd:fb:f1:85:2d:88:ee:cd:90:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=08ef239c-d539-4d15-b3dd-a3a6c18b2a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:65:0c:17:d6:37:48:88:76:38:32:89:b8:47:
                    1b:10:3b:96:b3:bc:ed:39:4c:72:35:98:29:fb:7b:
                    8e:8a:4b:a1:fb:63:87:c6:cf:78:5c:7a:ce:b6:4e:
                    47:dd:e9:8d:45:93:f8:82:e9:4c:fd:1a:27:1a:87:
                    ab:5c:55:7e:d0:73:99:d0:75:6f:56:42:d5:74:02:
                    68:6c:f1:e6:a7:1c:5c:bc:ad:7d:fb:c9:c2:f7:40:
                    14:d9:03:a6:c1:2b:e0:57:1b:8b:47:78:12:72:47:
                    55:79:89:44:15:13:6b:74:95:f8:2c:05:55:5a:40:
                    74:a5:01:4f:c1:b3:e1:b1:da:44:fe:d7:36:82:e5:
                    b6:81:2a:1b:55:7a:17:d8:b2:6a:de:ef:ea:59:98:
                    df:1c:ef:bb:aa:94:ce:1d:1a:42:ec:5d:1d:cf:43:
                    7f:ef:31:85:61:d6:c4:5a:9b:d4:3b:96:dc:ad:8b:
                    87:93:24:03:ba:f0:9b:87:ad:1b:56:f7:fd:8b:6a:
                    03:f2:8b:b2:d7:af:34:f3:71:6e:32:eb:0e:96:55:
                    5b:18:c4:dd:06:d5:39:9b:d6:c8:7b:84:48:a5:c5:
                    82:cd:c7:36:c9:44:34:a4:40:79:1b:ed:17:9e:69:
                    94:50:bf:f6:0c:cb:1e:5d:32:4d:63:77:66:7e:c9:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0F:82:70:31:3E:6F:C4:BD:30:1A:40:82:CA:4D:51:C7:A6:3F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/70b93b97-7d5a-3cb8-bb34-abcf117d8c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bb00:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:29:f5:93:1b:7d:f7:20:89:35:20:0f:04:34:80:ca:d1:
         e6:8c:83:7b:96:d0:3f:c9:34:0f:56:d0:5f:15:f9:f6:27:e0:
         7f:60:ab:77:d7:3b:c8:c8:5d:58:86:a6:ce:d3:fb:ec:3e:9f:
         e2:0b:8f:00:b5:73:03:54:51:5c:ac:a5:e7:23:a0:2e:7c:4a:
         29:ee:41:06:6a:58:9a:4c:fc:31:a0:8a:d0:5d:bb:a6:a8:75:
         3d:8e:96:15:b9:eb:8e:6f:0b:b0:9e:38:cd:d2:0f:d0:64:c1:
         59:92:1b:52:c8:22:c8:0c:ab:3f:8e:de:e6:9c:29:d3:59:3e:
         24:6d:f9:08:54:4d:7a:7d:f0:ea:9b:47:35:4a:b9:30:de:ef:
         1e:e7:2a:02:2e:8b:0c:f9:75:d8:fa:c3:fe:c1:f9:53:61:67:
         6e:63:2e:04:cb:4f:72:d8:37:8a:86:32:68:07:0b:89:d4:83:
         66:0d:1c:50:ac:b6:98:b7:84:d2:47:b5:b8:86:fe:f5:50:87:
         85:7e:95:5d:6c:a7:a9:2e:9e:57:ad:aa:f6:4e:fb:1d:6f:0c:
         2d:9d:c5:e6:7e:f9:8b:a0:f2:f9:f0:30:56:03:7e:42:03:d4:
         e4:3e:f4:92:d1:eb:a4:b3:90:10:2d:52:bb:08:61:b4:16:36:
         cc:ae:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:06:44 2025 by rpki-client