Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e91f3d-c2eb-3458-a2ab-1bb0c440eae8.roa
File:                     b9e91f3d-c2eb-3458-a2ab-1bb0c440eae8.roa (raw, json)
Hash identifier:          lkrjJOLtbAuROeLUMReAuKAbq2alja95fr2J9iBz+2Q=
Subject key identifier:   B0:D4:26:90:6C:C9:99:AE:EA:CC:75:FC:89:9F:F7:00:9D:F3:27:62
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498B99D80F9066A3F0E87EF700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e91f3d-c2eb-3458-a2ab-1bb0c440eae8.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     35994
IP address blocks:        2600:141b:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d8:0f:90:66:a3:f0:e8:7e:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=41337813-b926-4413-8836-0f5a9973ee77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:d0:bc:4e:58:c9:6f:1c:c1:65:7d:dd:e2:
                    4b:20:fb:a3:03:2a:9a:e1:b9:07:52:87:1e:a7:37:
                    35:e6:bd:b4:77:2d:ec:5c:42:fc:45:73:3e:3a:f0:
                    17:d1:48:ac:66:67:62:82:cf:c7:0f:49:aa:6d:6b:
                    93:93:ef:84:e6:8d:53:9d:1e:a1:29:ac:d5:46:57:
                    b0:0b:46:ba:49:eb:b4:ac:f0:a1:c1:99:c4:d0:09:
                    65:08:ae:af:bc:e8:ab:65:cb:60:cb:0a:e4:ec:cb:
                    2a:71:aa:84:a8:b5:51:dc:c0:5f:c3:d7:b3:80:77:
                    e3:63:e9:32:76:5b:bb:b7:68:ed:dd:f6:8b:5d:84:
                    d9:87:fc:f9:64:81:8e:a9:e4:fe:41:9a:e8:00:dd:
                    44:ee:6c:c2:20:90:75:2a:22:f6:2f:01:64:95:15:
                    d7:f7:e9:d3:a1:fd:78:4b:fa:83:3d:b3:16:ae:66:
                    15:e4:26:03:fe:44:2d:95:8c:7f:00:4f:d7:0d:24:
                    7a:79:da:6d:7d:85:48:bc:a6:dc:04:d1:2d:e5:d4:
                    5b:28:3c:b4:08:08:67:b4:29:a7:22:15:99:aa:ec:
                    1d:c7:e0:06:cb:41:ca:2e:42:3f:ad:c3:e5:75:dc:
                    5c:24:bd:9c:67:3c:aa:43:36:8a:9a:85:51:01:f4:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D4:26:90:6C:C9:99:AE:EA:CC:75:FC:89:9F:F7:00:9D:F3:27:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9e91f3d-c2eb-3458-a2ab-1bb0c440eae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:15:b0:9c:46:42:df:69:5e:6d:b4:4a:01:95:91:71:b3:23:
         4a:5c:a4:27:77:a7:ff:a9:48:59:67:72:34:9b:ce:a4:2d:06:
         ee:34:fc:3e:ec:da:d7:34:8a:de:9f:f2:f6:bb:33:dd:35:c0:
         0c:f6:88:33:de:60:3a:a5:c4:12:a1:aa:4f:ac:9b:a5:75:0a:
         c8:4c:b7:78:03:3f:62:1e:da:89:ef:d7:91:a6:30:b1:cf:c8:
         05:be:ff:8a:f7:4b:67:fa:24:46:6f:dc:6b:47:7a:71:88:7d:
         23:c0:23:48:9f:52:3c:ad:2f:20:00:09:2c:ad:16:02:63:53:
         8e:06:eb:5e:9b:d4:d2:78:93:54:df:dc:18:a0:0a:8d:47:d5:
         23:4a:51:29:ba:a8:ef:ce:14:11:d5:c5:56:b9:bd:b4:dc:7a:
         51:4c:dd:c1:16:23:0d:44:ea:91:04:5d:dd:27:73:c7:9c:10:
         27:f4:ba:a2:7c:90:74:e8:17:18:64:23:37:43:fc:9e:99:d5:
         38:e5:ee:68:4d:53:62:2b:72:54:7a:d1:ee:c4:0b:e4:e0:35:
         18:2c:d6:de:f4:ae:e5:de:73:9c:31:be:53:35:53:83:a3:39:
         d6:4b:7b:d3:a2:cc:96:af:ce:57:7d:47:88:82:cf:4c:8a:64:
         9c:19:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:22:25 2025 by rpki-client