Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/b9614c9d-b49c-3d7d-9e45-94627434d597.roa
File:                     b9614c9d-b49c-3d7d-9e45-94627434d597.roa (raw, json)
Hash identifier:          w7AzjD9mJ+Po+Hy+FLV67GPchCh0qvEwu4xoF6QX2Jk=
Subject key identifier:   20:52:4A:5A:F7:FC:C1:38:85:2E:17:EE:4A:C9:02:D2:56:DF:5A:D4
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F432858498339C52ACB5352EE83C29380
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/b9614c9d-b49c-3d7d-9e45-94627434d597.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     19165
IP address blocks:        2604:5500:5000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:c5:2a:cb:53:52:ee:83:c2:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=84d860a3-cac3-4291-91ab-09fcddaf8607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:36:9d:da:24:0c:1d:18:74:da:3e:8a:a7:
                    ca:74:72:ec:1e:6e:42:86:10:46:9b:cd:dc:f0:1e:
                    e5:c1:0c:7d:53:d6:40:c6:10:66:ff:b6:50:20:3b:
                    37:eb:f6:b2:79:3c:c9:3e:3b:35:4d:f3:66:ca:f4:
                    2b:d8:fa:ee:3e:0e:c1:3b:79:c7:94:78:2c:9c:ce:
                    e8:73:b2:3e:61:b5:ee:fb:63:b0:6a:3c:68:f3:9e:
                    71:fd:f5:c6:a6:66:75:db:9b:d7:3a:c7:47:33:f6:
                    70:b7:2f:f2:d9:7d:dd:e7:ec:9f:02:aa:7f:88:9a:
                    50:d3:f6:44:15:da:87:97:21:ab:62:b9:59:fb:ff:
                    01:bf:df:8d:13:a3:d7:c3:66:cb:a0:2d:46:e6:be:
                    c5:59:2d:a4:b8:56:87:f3:d2:9c:7b:18:59:42:73:
                    9c:d8:f3:44:2c:44:ea:a2:ba:65:50:43:1c:e5:b3:
                    e5:34:2d:76:b5:ab:77:1d:90:38:48:e9:40:2b:01:
                    81:87:b5:8b:89:02:78:5e:23:0f:90:72:a0:b6:3f:
                    91:2a:29:11:b1:9e:51:ce:78:53:a4:8c:d2:7c:f5:
                    87:27:8e:8a:49:e5:9d:35:e3:bd:1c:5b:c6:17:22:
                    99:f0:85:49:eb:c5:bd:cf:8b:3a:43:a3:17:bf:21:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:52:4A:5A:F7:FC:C1:38:85:2E:17:EE:4A:C9:02:D2:56:DF:5A:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/b9614c9d-b49c-3d7d-9e45-94627434d597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:5000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:0b:a8:6a:a0:bc:84:3e:58:40:e1:45:9d:f7:a4:af:a1:
         91:e2:df:b8:e2:3f:af:9a:e6:91:b1:63:58:30:49:26:73:52:
         9c:54:2f:f4:d1:4d:b1:3c:4e:37:cc:0d:9e:e6:65:93:02:75:
         e3:01:b9:b3:e7:6c:3f:e6:29:45:e9:fc:9e:95:a9:50:c7:94:
         4c:3b:cf:77:37:16:0c:39:42:36:8b:1f:a8:5c:dd:fc:78:0f:
         09:ce:63:0c:c9:8a:1d:11:de:19:f4:e3:48:d6:68:16:df:e9:
         37:e8:fd:d0:9b:5a:ce:df:1f:f4:64:6e:d6:16:74:c6:4c:53:
         90:31:39:a9:28:79:de:bf:96:e7:d2:f8:3d:79:a3:8c:88:26:
         4a:97:b1:e9:bb:62:da:f1:35:48:53:c5:7c:d5:03:d6:c2:68:
         26:e8:5c:89:b5:b9:b1:2a:b3:b3:29:62:d8:05:b8:e3:7d:33:
         0e:80:7b:72:b1:fb:09:2e:7b:76:1a:c2:bc:57:4e:bd:20:5c:
         e3:70:e3:94:4d:82:e4:fc:55:15:35:3c:d6:0c:80:0f:12:5a:
         34:f2:d1:5f:e7:79:04:50:ff:c2:d7:d1:f9:d1:25:47:04:c3:
         79:93:a3:ed:b6:65:1f:c0:9f:8f:d6:02:cd:9a:cd:21:9b:11:
         17:b3:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:34:59 2025 by rpki-client