Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa
File:                     f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa (raw, json)
Hash identifier:          wS5ovtAQfNpAnh7jkDthtftOsvcDnQvxPuVLmBZ/Nog=
Subject key identifier:   0B:2E:99:49:5B:92:EC:7F:0C:39:4B:CA:84:BD:1A:86:F3:2B:50:84
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F43285849B30D9259B668929F4436F800
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa
Signing time:             Wed 30 Apr 2025 16:10:52 +0000
ROA not before:           Wed 30 Apr 2025 16:10:52 +0000
ROA not after:            Tue 29 Jul 2025 16:10:52 +0000
asID:                     65012
IP address blocks:        2607:9bc0:1020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:0d:92:59:b6:68:92:9f:44:36:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Apr 30 16:10:52 2025 GMT
            Not After : Jul 29 16:10:52 2025 GMT
        Subject: CN=f9b58cf7-523a-4614-90a2-bdb857344211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:c2:6c:f3:c9:9c:85:d4:f1:99:b1:38:ac:
                    54:57:78:4f:e1:97:e9:5c:44:80:4e:9f:02:43:aa:
                    89:42:04:8f:70:a4:7e:52:1b:68:7e:99:07:57:f9:
                    e8:65:4a:81:42:78:6a:6c:ed:f2:a8:7a:b0:42:5e:
                    bc:7c:47:17:4b:b8:4a:3f:f8:88:44:b1:51:12:07:
                    c3:f4:b2:d5:40:6f:cc:e7:06:98:de:19:09:69:18:
                    38:9a:4b:51:30:f4:80:7f:1f:ee:c6:39:33:64:36:
                    ad:41:7b:cf:00:16:ed:f9:ea:16:b5:92:67:5e:01:
                    c6:55:ce:cd:ce:1e:d8:80:66:1f:e1:67:2c:44:2d:
                    c1:29:7c:f5:eb:84:c3:b0:ef:ed:72:c7:83:4f:fb:
                    09:e8:55:34:0b:48:43:cf:8e:74:fb:6a:8c:00:d8:
                    e1:d0:90:f2:54:20:22:96:dd:75:e1:b7:41:2a:e0:
                    f7:1d:c7:4a:26:39:56:70:3f:3a:f9:ab:71:51:d8:
                    2a:6b:a7:88:4c:33:a4:ee:4d:e2:8b:b5:90:ed:b2:
                    a5:e9:c2:dd:5d:3a:ba:5d:c3:43:39:dc:b4:70:fd:
                    9e:bd:f4:9c:77:e7:94:7d:55:16:e8:c5:78:d0:08:
                    1f:52:89:02:7d:63:aa:81:67:86:d6:4b:19:ff:67:
                    8e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2E:99:49:5B:92:EC:7F:0C:39:4B:CA:84:BD:1A:86:F3:2B:50:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/f7136cc7-d2bd-3bf4-9341-6a3bce87fa3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a9:1f:27:42:08:0f:7e:0a:37:76:1e:85:23:10:91:e4:2d:
         5b:e4:0c:8c:45:42:d7:f9:bd:f7:b6:18:47:85:32:88:b3:38:
         3d:c2:89:34:f9:1d:ef:bc:a6:70:b2:d1:0f:a4:f7:b4:e9:ab:
         39:bf:aa:2b:b8:cc:d6:df:d9:f5:52:29:98:6f:86:c2:ae:8b:
         fa:88:86:a9:48:2f:95:bf:dc:71:69:87:d5:60:8e:46:b6:8f:
         18:e8:8d:69:eb:51:b3:c6:3c:12:b3:6f:02:0e:fd:cb:b8:86:
         fa:ad:4f:d9:a3:91:1e:26:2c:77:49:91:89:b1:76:4d:a5:bd:
         1d:31:3a:a5:6a:29:a3:32:aa:c0:97:be:ae:e8:a0:67:b7:0b:
         0e:56:af:5c:6d:03:06:f7:c6:22:2b:87:5f:4f:fe:62:0e:6d:
         69:91:1d:09:cd:a5:96:ee:22:66:11:3a:a4:8f:74:28:35:40:
         8d:33:03:90:7e:1f:84:ec:11:ca:a8:e6:49:e9:f6:61:b9:0d:
         d2:95:82:81:9b:75:ce:3c:a2:66:56:0a:23:0a:b7:7d:bb:9a:
         01:89:ec:b1:09:b3:41:7e:fd:99:6c:1c:ea:f4:67:1a:e7:61:
         a9:7d:0c:30:95:4d:7f:71:8d:6b:e1:23:ac:b5:5c:3f:5a:db:
         f4:79:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:26:32 2025 by rpki-client