Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a8d82b3-7c55-3ec1-b0d5-fb355270d47f.roa
File:                     8a8d82b3-7c55-3ec1-b0d5-fb355270d47f.roa (raw, json)
Hash identifier:          BtVE0zmWkYRX8jJm6AVEbBoUxHO3et9ao/aXe/nO8D0=
Subject key identifier:   76:B8:37:C1:5F:56:BA:0A:5A:79:53:31:1F:A0:E4:A7:4F:23:F1:1D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F37338D4A869278B8A180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a8d82b3-7c55-3ec1-b0d5-fb355270d47f.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1400:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:37:33:8d:4a:86:92:78:b8:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=421a991b-f310-408c-843e-f135e3da44fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:63:22:ae:df:02:5a:68:c6:b7:41:99:3c:ea:
                    8e:61:fe:d6:48:68:04:40:44:ef:4d:3d:d3:52:91:
                    24:e4:ee:de:df:25:b9:8f:b6:20:9c:a3:63:83:f2:
                    73:cd:57:30:86:62:31:d1:4d:6c:55:9e:f3:03:54:
                    b1:d7:d0:ec:b4:f5:f3:ab:b2:c3:d2:ac:bc:ee:19:
                    b4:d0:2a:31:67:93:5a:a3:67:b1:e6:6d:8c:22:df:
                    f0:34:9b:f2:57:5a:4b:73:75:90:1b:71:9e:2e:43:
                    15:bb:ab:ea:8b:04:3f:24:df:56:e7:98:e3:39:03:
                    2c:0d:b8:7c:1f:27:be:fa:81:8d:da:c2:91:c0:15:
                    08:dd:40:4d:12:d5:41:c5:2a:28:7e:a7:71:66:8f:
                    47:29:fa:c7:dd:35:7a:f9:af:0d:99:c0:47:b8:2e:
                    5c:97:c2:dc:ea:74:f8:7d:2e:0d:f6:6d:2d:71:0f:
                    31:29:c0:77:e4:da:82:c8:a8:a0:3a:43:b1:7d:3d:
                    e3:c3:66:fe:9a:06:06:e1:49:19:36:52:3b:83:20:
                    90:28:20:1e:00:76:d8:c9:e3:29:31:68:8a:39:3a:
                    c7:6a:72:47:93:24:8b:32:8f:ef:bc:9b:07:cc:22:
                    3a:8a:f5:f0:77:a0:c2:39:de:ed:eb:01:7e:d4:d4:
                    20:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B8:37:C1:5F:56:BA:0A:5A:79:53:31:1F:A0:E4:A7:4F:23:F1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a8d82b3-7c55-3ec1-b0d5-fb355270d47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1400:1800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:31:43:72:b9:31:61:c1:e8:d8:25:de:4d:7d:d1:0c:9b:
         a2:6c:1a:9e:f5:7e:ef:c1:39:ee:4b:75:02:9e:d5:cc:78:e2:
         a9:f1:df:64:22:32:cd:e1:f6:86:89:ef:49:49:8b:4b:cb:5e:
         ee:8b:43:e2:e3:35:07:ba:2e:72:6d:13:3f:6d:45:ad:d5:17:
         07:cc:69:b5:d9:02:9c:81:47:82:e9:58:e1:7e:81:48:e3:15:
         ce:13:be:3b:b5:af:48:da:99:4c:0c:09:98:f0:d1:56:40:00:
         07:06:a9:b8:41:f9:29:3f:ad:6f:70:94:bd:6c:60:f8:7e:19:
         df:06:9e:1d:8c:b2:25:37:99:39:30:ce:56:3c:e5:e3:53:f5:
         df:54:a5:ce:27:d8:59:27:32:62:0f:17:e5:c2:3e:ed:6a:6e:
         73:4a:8a:7e:ba:98:8e:2d:c0:31:fd:ce:a2:a8:14:58:c0:cf:
         0a:76:92:a2:16:e1:6a:f3:26:2c:9b:1a:d1:9c:df:ba:7c:0c:
         c3:fe:08:c1:c5:77:66:eb:27:e4:3a:60:33:4a:0e:7d:86:53:
         e2:eb:48:61:1a:44:d4:cd:ba:e3:fb:51:0f:34:5c:93:b3:4e:
         97:21:1d:66:a0:f6:b0:95:96:60:db:d3:5b:af:f7:e0:b9:21:
         81:cb:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:54:23 2025 by rpki-client