Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa
File:                     b908c36a-0e1e-3898-b007-634966e865f9.roa (raw, json)
Hash identifier:          lj54b1c0aNWWyxNzMY6m5Qr2sjjsZVOTXVR9JTGjyIo=
Subject key identifier:   DF:26:B8:8A:D8:B7:DE:79:CC:53:62:56:21:54:A0:8C:91:E4:D6:6C
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584975445B3185DDBA5839C1B100
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     61112
IP address blocks:        2602:fa4f:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:5b:31:85:dd:ba:58:39:c1:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=b382eecc-ec9a-4fec-8005-dc739b559f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e2:00:95:9b:22:62:2f:b3:5a:a6:a6:0d:38:
                    a1:54:4f:2b:60:9c:2b:25:59:6d:17:eb:eb:ce:3d:
                    d7:4c:d8:5e:49:57:69:c3:ca:7c:92:30:24:d2:77:
                    e1:5c:bf:0f:a5:fe:54:fe:41:c8:c2:14:0b:d0:dc:
                    31:31:13:25:5d:4f:9a:dc:92:64:d2:f2:22:0c:59:
                    24:1a:01:9a:46:67:19:c8:a6:a7:ea:79:0a:11:d8:
                    f3:e9:7c:44:c8:d3:58:d6:9b:8a:e3:a7:65:d2:56:
                    ab:57:e3:f5:eb:97:2a:db:4c:c2:ba:3f:ae:ce:ea:
                    06:1a:71:ef:c5:58:fd:cc:3a:81:3a:b7:67:05:b2:
                    6a:77:27:8f:82:55:b5:c3:2c:e1:e2:d0:80:09:14:
                    b4:4b:40:96:0f:2b:90:11:19:77:25:23:a6:11:08:
                    a4:a6:d3:71:01:34:c4:19:6b:82:07:54:7c:13:7e:
                    6a:c2:90:41:66:59:2d:38:5b:59:de:3a:20:05:8d:
                    83:31:83:8b:3b:7b:59:e2:79:e7:7e:8a:4e:e5:88:
                    e2:dd:49:72:e0:b5:d9:a7:60:f9:ef:9b:bd:99:3a:
                    bf:97:e1:e3:8e:c6:fa:ab:52:e2:c6:93:4f:91:85:
                    14:73:cd:54:5e:a5:5d:55:3a:72:ae:5a:3c:4b:72:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:26:B8:8A:D8:B7:DE:79:CC:53:62:56:21:54:A0:8C:91:E4:D6:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/b908c36a-0e1e-3898-b007-634966e865f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:1c:67:bf:21:66:a1:55:36:48:7c:10:ad:56:69:16:6b:0a:
         7d:5a:71:b5:c4:b1:5b:6c:97:2f:bb:24:e0:d1:64:91:9d:0a:
         46:60:22:df:0a:5a:ec:4a:ac:e3:ad:d9:8c:6c:d5:f6:9d:90:
         fb:5f:95:c5:37:05:7a:f3:21:96:09:49:1a:93:66:5c:19:4c:
         4b:25:12:e8:46:48:65:19:da:f9:77:cb:64:45:03:e0:61:0e:
         88:29:a2:c8:d2:f1:3e:e9:ff:fe:e5:1f:85:b9:68:35:2c:d5:
         b3:f1:62:45:9c:d3:11:3a:ff:7e:a8:99:68:c0:df:2d:39:a0:
         33:76:d5:8e:9a:19:1e:87:0e:2b:36:19:af:a4:29:8f:f6:05:
         f7:67:65:df:8f:08:7c:47:06:38:d8:aa:2e:72:1b:72:5f:e1:
         4b:08:2a:6b:78:01:6c:49:48:02:b1:86:e6:0c:b6:00:6a:e8:
         e2:4f:c4:34:1b:2d:0b:3a:0e:12:1d:ec:8c:85:b5:ab:7b:fc:
         42:69:e5:17:14:89:94:27:34:a9:8a:42:e2:71:5d:5b:fa:18:
         29:3d:43:88:53:5b:09:bc:cb:89:01:ad:ca:cf:3e:19:82:8e:
         3d:54:83:3a:e7:8b:00:c6:3c:42:78:63:33:7c:b4:2b:1c:0c:
         52:28:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:26 2025 by rpki-client