Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/4892a1e2-9695-369f-ab71-7848f2816415.roa
File:                     4892a1e2-9695-369f-ab71-7848f2816415.roa (raw, json)
Hash identifier:          qgFc8LA6VV3uRqFOhySDcUsdAyl7W8o0HFruopEdny8=
Subject key identifier:   51:9D:81:EE:98:85:F9:C9:DD:92:87:B3:09:2C:02:38:58:2D:A1:28
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F43285849B149ECE1A7763AE26459DB00
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/4892a1e2-9695-369f-ab71-7848f2816415.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     399820
IP address blocks:        2602:fc2f:f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:ec:e1:a7:76:3a:e2:64:59:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=dc089d93-6579-4780-a7ce-b8cd3e0d8985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:0f:57:cf:d9:d0:a0:5d:a2:91:ea:c4:26:
                    1c:c3:75:96:f0:39:f6:85:d9:ce:ce:5f:e2:69:93:
                    7a:76:5e:83:cb:b8:ac:07:38:71:d9:05:75:fc:11:
                    ce:32:de:ea:43:c0:33:c1:e3:26:c0:fd:45:fb:7c:
                    e0:b4:80:fc:56:37:59:85:c5:f3:86:d9:f1:c4:bc:
                    09:62:2c:a5:6a:16:52:ae:c9:b0:f2:f1:73:93:64:
                    19:5a:ee:63:f9:4d:26:c5:3c:9a:27:40:6d:2a:82:
                    cd:0f:b2:f2:54:ce:43:21:cd:a1:7e:bd:7a:58:d3:
                    b8:16:25:35:8b:9f:2c:3d:01:60:06:e4:ea:f6:40:
                    90:6d:a7:60:4d:5c:78:e2:ba:71:58:f1:77:81:da:
                    7d:f3:df:8d:bf:c6:20:39:88:e8:de:5f:91:63:ad:
                    67:f3:75:a8:72:b2:61:2a:53:7d:87:1e:73:d8:05:
                    b1:a5:dc:33:9a:81:96:b6:e2:9e:5b:97:62:8b:6f:
                    6e:9f:a3:c3:2d:9d:8e:da:61:2f:4d:a5:42:de:8f:
                    1d:26:54:37:06:de:dc:28:ff:59:5e:03:38:38:04:
                    73:17:af:f6:b4:3c:05:a6:91:64:7b:e9:50:7e:a1:
                    1b:15:09:db:5f:c8:1e:a7:07:95:55:47:07:5b:1d:
                    0c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9D:81:EE:98:85:F9:C9:DD:92:87:B3:09:2C:02:38:58:2D:A1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/4892a1e2-9695-369f-ab71-7848f2816415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc2f:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:f7:08:d6:20:38:1e:f7:46:14:2b:e8:31:5b:67:2f:32:
         a8:d9:48:c6:f7:82:95:72:4e:c7:23:de:ff:b5:6a:0c:38:88:
         8b:8a:90:c8:ef:5a:bf:40:3b:a7:37:6a:43:ef:1f:2b:87:44:
         a0:58:cc:cc:40:14:af:5f:91:c3:2c:53:c8:ba:ec:b8:35:ac:
         4b:dc:ad:a1:86:9d:c5:ad:ee:1e:7f:c6:51:06:9a:8c:9e:66:
         18:27:5d:d1:8d:f6:5c:dc:e0:05:53:32:bc:54:83:be:b0:c4:
         e4:27:e5:36:63:ce:1c:5a:26:92:c0:c0:d4:91:6c:4e:9e:98:
         c2:a6:6e:4f:4e:4c:2a:df:a4:b1:ad:bb:c0:ff:3a:26:93:d7:
         cc:6d:fa:0b:89:45:bb:27:39:d3:8a:27:8f:62:24:3d:03:ca:
         ce:a2:86:bb:cb:c2:5f:eb:99:aa:d0:a5:60:24:de:1a:d3:73:
         b8:c0:6a:38:4e:c2:0e:12:a0:85:8e:52:4b:5d:13:5a:16:88:
         3a:3c:13:c2:94:a2:5a:74:96:13:db:c3:5f:73:c2:21:2d:f5:
         46:b5:a0:ab:98:b6:52:90:b5:50:e1:88:57:e7:ea:b6:12:a8:
         db:17:dd:f0:07:b0:a6:54:37:ca:d8:41:df:32:1f:71:04:98:
         8d:f7:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:19:51 2025 by rpki-client