Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa
File:                     1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa (raw, json)
Hash identifier:          yr3228hH2MRb80IkaL0PqQdAlF8vxjAawjqBNh6Bvc8=
Subject key identifier:   10:62:DC:8B:D4:EA:35:B9:B3:BC:B6:A9:E1:B3:0C:03:13:94:86:1B
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F432858493ED3D3499C57C59BAC258300
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     32217
IP address blocks:        2604:8440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d3:49:9c:57:c5:9b:ac:25:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=44243001-f5ce-4159-b166-75aae4da04a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:b6:10:53:fc:5a:e8:50:26:80:e0:d7:45:
                    fc:48:01:4e:f8:8c:8e:e0:33:72:4a:4f:e1:52:d4:
                    e3:81:f1:a9:58:c9:fe:91:f4:1d:12:22:ba:44:88:
                    b1:b8:9e:8b:f8:58:7b:ba:b4:a7:eb:a7:5f:ab:76:
                    e4:ec:6c:de:08:dc:e3:ad:d4:74:ae:e2:af:c4:cc:
                    11:b7:3b:c1:ee:ed:26:56:06:d1:0d:ed:bb:13:13:
                    dc:15:68:4f:77:35:e5:a3:1c:28:36:30:de:78:5b:
                    ec:75:da:86:af:d8:03:b2:86:1d:e6:26:28:1f:0c:
                    96:0b:2f:04:ea:8a:6e:c7:26:a6:00:46:2e:eb:6d:
                    a3:93:d4:db:17:f1:ee:08:d1:45:86:b1:93:23:ab:
                    31:65:75:3c:ce:e9:e8:ab:82:70:62:33:b8:28:76:
                    17:d8:49:35:d5:a4:0b:d1:21:cc:f6:65:94:b4:39:
                    3f:b1:0d:6e:9f:ff:15:98:b4:46:f8:46:37:aa:50:
                    e5:f9:a2:8d:df:d1:87:3d:31:ab:83:06:12:91:9b:
                    55:29:e3:14:2d:cf:59:1c:55:2c:1d:8c:7a:75:b1:
                    e4:1b:2c:aa:af:3c:0c:96:20:99:13:a6:bb:78:04:
                    17:f2:6b:98:1e:d5:72:11:f6:71:5d:c7:97:85:ff:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:62:DC:8B:D4:EA:35:B9:B3:BC:B6:A9:E1:B3:0C:03:13:94:86:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:cd:41:64:19:93:2b:07:97:30:27:ee:7d:54:1d:71:07:
         15:49:b5:6c:5b:7d:0e:af:81:a7:d6:9b:cc:82:41:7b:5b:87:
         3d:b9:ad:e2:b5:4f:c6:bc:43:c7:23:4b:88:b1:7a:eb:f2:0f:
         41:e0:44:3d:a5:ca:05:5c:e3:4c:75:a4:53:75:40:ba:a2:07:
         0e:43:e6:9c:6e:76:bb:1b:79:33:1a:70:dc:79:bc:39:89:0a:
         a6:99:ce:ec:ba:9f:3a:2f:ef:3a:f7:03:b3:3f:62:bf:db:6d:
         14:b6:f2:40:b4:f4:c1:0e:79:4c:81:9b:21:ad:2d:75:bc:65:
         bf:a5:9e:61:0c:fe:99:13:44:eb:f1:28:94:f7:ee:08:1b:f5:
         ce:24:cc:a8:55:4e:79:9f:ea:bf:a4:fb:5c:41:d8:15:7b:5f:
         02:f9:e0:76:95:b6:9f:9d:52:88:3b:db:4f:c9:1d:78:d8:56:
         1f:bf:83:33:64:09:93:ce:d9:9d:c4:65:6e:a8:72:87:a7:2a:
         21:ad:03:21:db:e5:6b:2c:46:ed:5f:47:ae:3d:d9:ff:3e:16:
         6a:b5:f9:90:7a:50:80:c4:51:54:8d:6e:fc:c1:01:75:8e:74:
         ac:a7:6b:cd:3e:57:da:24:f7:75:ba:a6:0f:a7:8f:05:e1:53:
         2a:ae:9e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:59:14 2025 by rpki-client