Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa
File:                     c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa (raw, json)
Hash identifier:          MTreTwnqJTKzwTLAHHdPW+1c2IZO37hU8RdUuF41wAk=
Subject key identifier:   84:FF:F2:C3:35:5A:7B:29:A1:EA:EE:F3:73:21:49:A5:68:E8:B0:26
Certificate issuer:       /CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
Certificate serial:       010D0C9F43285849A4BAD766070F9FA1D6724100
Authority key identifier: C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        2606:73c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:d7:66:07:0f:9f:a1:d6:72:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=7b432767-ba30-4f2d-b145-27a6bd1b9c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:90:c1:56:2f:a0:3f:64:17:89:7d:ed:6d:
                    37:32:15:f5:94:8e:67:05:bf:9f:ad:a2:f6:15:b3:
                    85:7a:5b:03:fb:05:bd:68:30:32:2a:97:33:8e:5d:
                    d1:4a:97:08:ab:ef:eb:96:33:a6:fa:07:7f:28:53:
                    e6:5a:30:bd:ca:59:b5:2f:09:6c:06:a4:0b:6e:0b:
                    e7:b6:98:eb:35:2a:35:85:12:1a:0b:0f:6a:5b:fe:
                    11:8c:ec:28:fb:b6:c3:0c:a8:49:76:f7:88:78:3a:
                    d7:2d:8a:f2:c7:09:d9:a5:91:98:36:e9:9f:1b:b8:
                    7d:37:d9:30:d3:26:2b:56:8e:4d:6d:aa:a3:a9:58:
                    a3:17:f0:b5:1b:de:38:c8:28:3f:f4:36:33:80:78:
                    d5:5b:3b:ee:71:84:fd:b0:88:71:ed:d8:a0:de:86:
                    22:1c:f9:16:bf:f6:f4:5e:a8:ec:71:60:5a:d1:a3:
                    e6:30:9c:53:64:97:72:fa:05:20:f2:2d:1e:1c:9e:
                    5b:bb:07:d2:50:83:a1:75:23:a5:48:b3:78:3d:b3:
                    f3:d7:0a:8b:ac:a4:2a:0f:21:e4:cf:30:82:a8:62:
                    25:26:4a:2c:e0:60:28:17:00:05:00:a0:00:17:75:
                    a8:ff:c9:ad:c9:0a:86:05:03:76:ff:14:52:19:5f:
                    fe:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FF:F2:C3:35:5A:7B:29:A1:EA:EE:F3:73:21:49:A5:68:E8:B0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:73c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:39:89:96:37:f4:53:2a:d1:20:ee:dc:ef:4f:c1:4f:ba:1c:
         ea:50:4b:21:08:28:84:40:48:32:19:ad:b5:4f:62:13:8c:71:
         9d:69:d4:01:c4:a5:11:a5:08:3e:ae:08:f6:50:25:67:04:c7:
         e0:11:2b:4c:05:67:ed:e1:47:e4:7e:62:4e:85:05:2b:e9:ae:
         2c:51:f2:fa:4d:7c:d9:ad:c6:65:cc:f2:0c:7e:24:cd:6c:5c:
         bc:ba:f2:4c:30:33:e0:1b:c3:fb:b7:49:54:ce:28:cb:1f:54:
         f8:3a:b5:f3:f2:e0:59:dc:51:6d:6f:ce:28:da:e7:c6:6b:df:
         53:b6:da:f0:53:f6:24:49:20:2a:1b:7b:16:9c:31:fa:a8:6e:
         0d:61:f8:ae:df:df:fd:04:f0:39:cd:6f:88:ae:70:60:c6:34:
         5b:eb:9d:2b:63:0e:2e:0c:c1:cd:52:88:4b:a6:78:6b:f6:2c:
         a0:6b:5d:64:9a:31:ea:4a:fa:81:c0:6d:cb:e9:69:d7:84:5f:
         f0:0f:fc:7a:6d:2e:dc:0b:30:7a:c5:18:97:ea:0b:d1:1c:e1:
         b4:d3:16:97:20:14:7c:82:84:b3:a6:de:02:18:d3:a2:dc:d9:
         e8:79:4c:42:ae:c9:e2:c6:c7:bc:5f:ab:3c:b5:86:51:7d:88:
         56:bd:89:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:56:45 2025 by rpki-client