Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa
File:                     01259f44-7b0a-3214-9e77-66d79c010a77.roa (raw, json)
Hash identifier:          aFRprb0OBSyRM0bGAVFjLXoEvlTnI+UuzsHYtIu6C7E=
Subject key identifier:   45:6D:52:20:8D:A4:2D:3F:9E:41:DA:EB:53:F9:2E:CA:61:71:EA:3F
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285849ABB497E5D94E8655ACC18900
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     401287
IP address blocks:        2607:fad8:1201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:97:e5:d9:4e:86:55:ac:c1:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=eb90ec13-b693-4b1b-8520-7f8e3e7de7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:03:59:96:92:aa:8d:53:8e:72:a4:81:b1:40:
                    76:c4:b5:ae:92:4e:e0:5a:b1:b9:c4:e3:e5:62:c1:
                    db:c2:36:6c:b4:54:29:c6:b7:c6:2c:40:a4:b6:06:
                    11:ea:b5:d5:6a:bb:36:16:6c:04:5b:88:f0:00:24:
                    13:e0:d0:a8:78:d3:2f:e1:3f:59:cb:a6:83:8e:36:
                    3e:6a:71:1e:76:30:8f:3c:58:de:46:40:07:98:d9:
                    d4:46:11:a0:44:fd:90:b6:53:bd:e9:b7:c9:9f:dc:
                    75:33:09:e2:68:94:51:0a:11:32:60:42:df:3a:91:
                    e9:ac:55:fd:14:b2:49:35:8a:a8:d1:58:0a:42:61:
                    10:ed:0b:3e:21:aa:d4:38:7c:b5:2b:85:2f:24:68:
                    21:03:9c:66:98:dc:da:72:61:02:2b:09:83:a8:25:
                    47:ea:51:de:e4:c7:fe:02:6d:0d:be:f4:2f:b8:87:
                    de:b4:ce:c2:08:4e:0c:e5:56:19:fd:7b:66:80:81:
                    62:ba:ef:ff:14:a3:54:fa:de:e1:7a:34:2d:66:d1:
                    b0:37:56:29:41:e7:49:bd:ea:57:b6:a0:6a:c1:43:
                    ba:09:47:85:95:35:b1:92:04:6a:de:cf:00:dd:35:
                    a7:04:2f:58:32:c8:29:51:d5:94:76:16:45:2b:b4:
                    81:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6D:52:20:8D:A4:2D:3F:9E:41:DA:EB:53:F9:2E:CA:61:71:EA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fad8:1201::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:23:95:9a:ee:05:1c:8e:97:c2:30:21:c3:78:66:6c:d9:fd:
         a6:d7:ab:41:64:89:a4:7b:89:d2:a3:6f:3f:88:c2:ff:54:a7:
         a4:59:3f:11:44:17:8f:3b:66:5a:13:a6:61:65:0f:e8:ea:c4:
         43:91:64:db:2f:93:48:03:e3:d3:df:ec:12:d0:42:bc:e0:70:
         08:b3:b3:45:b7:fa:27:de:90:30:1c:61:52:80:80:b2:07:e8:
         d2:1e:dd:e5:b6:a0:67:e5:f3:01:a5:26:9d:c9:9a:6c:3a:cb:
         69:cb:6c:77:b8:b5:34:a1:27:8a:47:ec:fd:9e:f4:5c:0a:6b:
         b6:f4:d4:17:43:9b:c1:a6:58:41:c0:e1:9d:76:4e:b8:f8:93:
         4a:16:de:ed:68:5a:9d:b1:82:ed:fe:87:cd:da:50:8a:c0:73:
         f9:b8:65:04:ff:5d:70:73:43:d6:a8:bb:83:a8:74:91:d8:d8:
         81:9d:a9:2d:b6:d9:08:f8:48:1c:c2:74:e0:60:c8:52:e0:9f:
         3e:39:ff:d8:22:f5:36:28:e4:79:a2:7a:86:38:12:57:a5:cc:
         af:d3:f5:d3:9e:8a:9a:df:e3:85:ad:27:40:96:01:f0:98:f5:
         72:28:d1:ef:88:af:4c:69:01:f8:9b:e7:90:83:96:84:a1:9b:
         74:ad:fd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:30:25 2025 by rpki-client