Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/443655ef-5569-341f-af55-dfa490d592be.roa
File:                     443655ef-5569-341f-af55-dfa490d592be.roa (raw, json)
Hash identifier:          HiqjbKtH/8+ih8tZIGowAuzh9bDNoniYWTD9nSCCj9s=
Subject key identifier:   88:2C:42:8D:1C:1C:DC:DC:0B:E6:81:1D:CE:3A:43:81:64:97:70:FB
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F43285849955F25C890CC4F3A7BC910C0
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/443655ef-5569-341f-af55-dfa490d592be.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     29802
IP address blocks:        2602:f972:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:25:c8:90:cc:4f:3a:7b:c9:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=04ddc35b-114b-45b8-ad9f-6e3b59d827ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:67:6e:29:f1:50:55:e6:c5:54:fc:14:30:
                    71:e1:13:13:0e:09:99:3a:04:92:99:26:4e:ac:b8:
                    8f:53:1c:d4:12:f2:41:24:44:4d:4d:76:04:2c:89:
                    cd:e9:ab:1a:9c:26:b8:3d:b9:6a:f7:9f:3f:9b:d0:
                    50:dd:e8:7a:b8:02:b3:94:a8:3d:5f:5e:f8:eb:3a:
                    81:05:be:bb:e9:b6:69:00:ee:0f:16:9e:79:c2:9c:
                    b1:d7:c7:40:2d:7c:2f:5a:36:92:7f:4b:90:7f:16:
                    87:80:53:75:8a:59:51:b8:fe:22:58:47:b9:c8:a9:
                    df:ef:8f:c3:88:5e:16:4b:60:0f:2f:0a:d5:a4:0c:
                    fe:5e:29:32:9e:e0:e5:3e:ac:3f:48:1f:82:72:cd:
                    88:09:22:13:20:71:e9:d0:a5:3b:16:f4:17:81:a4:
                    ab:91:5e:ae:e5:d1:0e:19:c4:b8:2d:c2:db:57:a4:
                    ef:ac:95:55:a4:32:ee:9a:cc:e8:ac:ae:a4:c7:0e:
                    03:cc:40:a4:52:f4:90:c3:bc:a6:cc:ff:f8:61:1e:
                    ab:7e:46:fb:b5:ae:03:96:91:19:51:cc:44:02:5b:
                    e3:aa:d5:32:b0:2c:dd:99:0d:0f:a2:61:72:cc:6a:
                    eb:82:3c:c5:74:3d:cb:d2:f4:3d:c9:20:a6:46:08:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2C:42:8D:1C:1C:DC:DC:0B:E6:81:1D:CE:3A:43:81:64:97:70:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/443655ef-5569-341f-af55-dfa490d592be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8d:bd:36:31:bc:47:c8:7d:df:88:05:a8:e8:3f:5b:52:34:
         72:a3:e3:c5:43:31:3a:00:f1:04:bb:9f:f9:5f:c4:5a:28:58:
         53:c2:ce:14:c8:de:d1:62:97:a9:07:70:0c:f0:6f:cd:4f:b8:
         e4:9a:e3:20:40:80:c4:7e:ff:90:b3:23:3c:7d:dc:6a:ec:0c:
         b3:61:a4:06:b2:22:76:f5:30:8e:96:81:e4:c0:97:22:d5:03:
         a2:8d:95:50:62:e3:14:e8:12:77:ce:b6:29:a7:c9:b1:d5:77:
         cc:e5:e4:47:56:d7:02:b3:fc:d7:be:53:60:84:55:8a:6b:61:
         ff:3b:76:b5:9c:ac:25:8b:4c:67:51:f2:d8:25:d0:8c:c0:80:
         e9:c7:98:be:4d:2d:56:42:35:62:c0:77:2a:ac:2f:27:dd:bd:
         38:63:0f:e2:cc:a3:38:2b:46:cd:26:af:f2:20:db:df:81:3b:
         7b:80:05:fb:c0:1b:2d:02:21:c1:66:91:db:1f:5e:2c:33:48:
         c0:db:a6:a7:68:89:98:69:8b:e9:de:c7:ce:3a:d7:ed:75:d8:
         ee:34:16:60:4e:0d:44:2c:05:b4:c1:c0:33:94:f5:94:91:45:
         fb:6c:63:02:f2:1f:4a:06:fc:dc:b0:7a:1c:20:55:ad:0c:2a:
         22:65:40:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:30:29 2025 by rpki-client