Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/4bf97504-9d2e-3da0-86f2-29f5261e5a88.roa
File:                     4bf97504-9d2e-3da0-86f2-29f5261e5a88.roa (raw, json)
Hash identifier:          +YPA53OMDrn7rwdm0e8tuiOBqdvT0hTgbE4samREDVM=
Subject key identifier:   AA:71:ED:7C:C1:94:9B:FF:66:43:F0:B1:CC:5D:A9:4B:B0:1E:08:89
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F432858495ABECD584D2EF787ECF5F300
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/4bf97504-9d2e-3da0-86f2-29f5261e5a88.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     399122
IP address blocks:        2602:fcd5:36::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:cd:58:4d:2e:f7:87:ec:f5:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=14f27f32-9274-48e5-84ab-934c2d125546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:76:6d:22:a8:1b:d9:f7:cb:e3:1f:8b:62:28:
                    a2:a4:bd:a0:7b:55:e4:9a:15:43:cc:5a:1a:cb:e8:
                    21:96:2a:f2:a4:8e:d7:c4:9d:f1:e1:de:8e:ba:a5:
                    14:10:e7:63:6b:76:6c:e0:48:80:e0:1d:73:14:69:
                    d2:f1:95:39:ed:05:a1:df:9c:cf:86:56:fc:aa:cf:
                    db:63:ee:43:2e:cf:d1:b8:d0:73:ec:7f:be:60:5a:
                    20:7f:9e:10:e1:8c:0e:6f:cd:73:2b:eb:2c:27:3f:
                    3e:5e:1d:f3:71:17:55:f6:6a:86:9d:bf:e5:74:19:
                    e7:db:ba:0b:07:77:60:01:a9:27:d8:2e:4a:81:c4:
                    b6:60:b4:3e:8c:89:97:87:0e:1c:46:ca:37:8f:7a:
                    de:4a:19:5c:7f:0a:1c:e6:e4:e9:20:bd:07:b1:aa:
                    fb:c8:72:86:bd:c4:cc:35:ce:f0:9a:00:14:9b:34:
                    01:5f:ed:90:aa:92:7a:bd:24:8b:46:cf:cb:04:5b:
                    83:3b:fa:91:2c:37:1e:d4:8b:0e:8d:cb:85:1f:fd:
                    13:7b:25:29:66:c0:95:6d:4d:b8:39:8e:a5:da:a3:
                    cf:fb:51:4f:c3:95:f0:2e:4b:5c:49:eb:e0:1d:16:
                    85:b4:9a:1b:78:ac:53:4e:ee:5c:89:8c:ef:6f:db:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:71:ED:7C:C1:94:9B:FF:66:43:F0:B1:CC:5D:A9:4B:B0:1E:08:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/4bf97504-9d2e-3da0-86f2-29f5261e5a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:36::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:76:06:f6:11:45:50:c9:60:1a:7d:03:43:08:14:e0:81:f8:
         7b:14:4c:71:4c:73:00:41:cc:c5:51:55:08:1e:28:2e:9a:fe:
         94:10:a2:06:3b:4a:4f:0a:f6:7a:93:63:8f:34:42:67:c5:e1:
         c6:ce:63:94:d2:80:f1:51:76:15:07:5a:92:95:b7:17:21:02:
         20:a5:28:80:e4:07:b6:9c:15:13:44:c9:31:87:48:e0:0a:cf:
         3a:60:88:15:28:91:2c:8b:43:43:4c:13:42:ed:f2:1e:e2:90:
         d9:4b:ed:f3:63:44:21:68:06:0a:8f:71:12:fa:c2:4f:c8:f4:
         a9:ca:59:ae:76:c1:48:fc:1e:1a:16:3b:b2:d2:26:d6:b9:90:
         4e:36:32:df:b0:fc:30:29:ed:48:1c:c4:21:d1:70:5b:0a:4d:
         5c:7a:d8:75:53:30:66:c8:02:46:03:e1:2f:85:75:e6:31:bc:
         c5:ba:fe:93:88:9d:ab:f5:23:2e:2b:06:a7:31:f2:33:8b:48:
         57:1f:d6:a7:83:11:ba:a7:fe:da:fe:ed:a6:50:20:43:dc:6a:
         06:b4:b8:34:39:55:c4:b0:47:69:43:17:69:25:3f:98:2a:28:
         46:45:67:ae:15:3b:5e:87:6c:2c:56:44:0e:62:89:98:74:3d:
         11:25:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:38:23 2025 by rpki-client