Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/850937fe-3390-3e8f-99f7-fa7156764c5e.roa
File:                     850937fe-3390-3e8f-99f7-fa7156764c5e.roa (raw, json)
Hash identifier:          ddfNB0I7uz1pdWiicpn22l98lbw0dUYbgcPXYJ0xXH8=
Subject key identifier:   AD:EA:49:8C:19:AA:41:D6:4C:2F:09:92:4F:A2:6E:A3:E3:CA:DD:13
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F37F1480B358D1B817100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/850937fe-3390-3e8f-99f7-fa7156764c5e.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1403:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:37:f1:48:0b:35:8d:1b:81:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=5a92d8ff-6056-4335-9352-dd2df6b91511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bd:05:41:44:6b:cc:b4:02:b9:dd:6f:9e:02:
                    c1:c0:fe:72:24:87:3f:40:7e:65:82:d9:05:8a:dc:
                    a4:7e:eb:f1:89:ae:62:d0:9f:ff:80:97:bb:50:dc:
                    01:fa:5f:b7:f1:9c:69:e7:3c:16:b8:78:f2:e3:75:
                    14:d5:ce:bc:8f:91:12:7e:23:21:ff:04:26:78:26:
                    72:df:08:81:4e:31:80:4c:26:7c:5d:d6:31:27:f9:
                    7b:47:7b:ed:02:ab:fe:42:78:a3:2f:eb:49:34:1b:
                    d2:a2:b7:21:79:9b:05:56:55:c9:89:af:1d:c0:f7:
                    ce:19:59:f7:b8:52:96:63:11:e6:c5:79:01:dd:67:
                    8d:0b:35:0a:3d:e9:7a:8d:e5:e2:df:cf:ca:ba:2f:
                    a5:eb:5f:12:a6:3e:6e:b9:f5:2a:e3:e6:c7:60:25:
                    01:ef:fd:ec:cd:6c:27:0c:e4:d5:fa:da:28:80:ac:
                    0c:fd:70:b8:21:28:6b:8d:90:7b:7f:62:3c:9c:55:
                    b6:96:80:97:75:78:9f:85:bb:7b:e4:97:d7:b6:f3:
                    ee:a5:e3:f2:46:6b:a3:4d:cf:60:f7:64:e7:ca:1d:
                    bc:0c:87:f7:67:b4:ee:7a:7d:5d:8c:d5:9b:81:68:
                    2c:a9:b2:05:8d:e8:87:79:10:d3:2e:64:c3:f6:e8:
                    a7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EA:49:8C:19:AA:41:D6:4C:2F:09:92:4F:A2:6E:A3:E3:CA:DD:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/850937fe-3390-3e8f-99f7-fa7156764c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1403:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:56:b8:fd:d8:b1:09:cd:39:e2:0b:28:0f:bc:86:0f:77:47:
         9a:e5:7f:09:1a:99:4b:65:0e:ef:ed:94:75:4e:5b:7a:4d:bb:
         d6:89:97:b0:02:33:2c:84:c1:5c:7e:4b:be:da:6e:df:a1:3a:
         97:03:d7:70:ce:5e:d1:45:7c:37:28:9a:c4:46:8d:11:e4:19:
         48:f3:fb:04:41:82:20:e7:17:04:76:d8:4b:c8:8b:8f:11:26:
         9e:41:0a:eb:0c:24:51:ca:20:34:e0:66:4f:9e:46:b0:bd:aa:
         bb:52:cf:ce:ae:b9:ac:ae:b3:d6:7f:de:dc:33:93:92:5b:9b:
         1d:9f:23:41:b6:c4:c8:35:d0:a4:38:9f:b3:4e:3d:1f:32:b5:
         13:1a:9a:1e:d9:96:b3:a9:df:fc:58:02:12:9b:be:30:ee:12:
         23:3e:8c:c3:5f:ee:09:87:01:af:50:df:e2:2c:8c:61:c6:0a:
         c8:19:74:77:7c:9c:c5:24:7e:39:f5:5c:2a:b1:b5:0a:72:0e:
         40:45:a2:61:6b:09:35:83:ed:7c:b9:6c:94:91:e9:e4:b2:e9:
         1a:90:ff:fa:36:47:1e:1c:22:0d:de:2b:a0:49:4d:e1:f7:44:
         e0:55:6c:1a:01:13:85:27:2a:80:96:ca:ee:bc:15:27:f5:d1:
         3d:82:0f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:42:13 2025 by rpki-client