Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbe49c14-841d-32be-9bdd-d3346ba84dec.roa
File:                     dbe49c14-841d-32be-9bdd-d3346ba84dec.roa (raw, json)
Hash identifier:          4K4vDCpaOd+RQNdyeIdayBLy2vKakSAkXI1Slx8Q9ms=
Subject key identifier:   D0:60:65:FC:29:C4:3B:EC:0C:88:06:6F:63:E2:8D:DE:7F:41:A8:BE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498CFF27739DC0DC82A1846100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbe49c14-841d-32be-9bdd-d3346ba84dec.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     9829
IP address blocks:        2600:140f:2200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:27:73:9d:c0:dc:82:a1:84:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=90732dbc-9720-436d-9819-109408208ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:3e:8e:8f:fd:a4:8d:47:aa:ae:af:22:ac:
                    15:cd:4a:73:62:f5:87:c6:b1:3c:9a:26:6b:d4:46:
                    2c:27:0e:01:f9:6b:4f:02:2d:85:e1:d3:bf:9f:58:
                    db:ce:d1:85:dc:6d:62:f8:8a:da:d9:f3:90:eb:b8:
                    24:2a:0b:fd:7f:64:de:53:44:fa:90:7d:7c:2f:a8:
                    4e:56:91:2a:c8:7b:0f:5d:2f:df:65:8b:fe:38:9b:
                    d9:3a:49:d9:56:2f:be:9e:98:33:a6:19:7a:18:3a:
                    67:60:f0:bf:a9:80:70:02:f5:58:39:a7:96:36:82:
                    1d:bf:ef:5c:29:ff:51:fb:84:b7:42:16:7a:55:f3:
                    64:d5:3e:de:e6:13:dd:3f:32:5b:8f:c1:06:8a:19:
                    84:52:04:ad:3e:49:bf:a1:43:0b:05:d9:15:b6:af:
                    78:d2:c6:a2:25:b7:b8:4f:93:75:ea:aa:51:b5:54:
                    65:ab:e0:0d:53:03:9c:40:b0:a6:02:11:a1:72:bf:
                    c5:41:0a:6f:91:2a:75:60:97:e5:36:31:ea:d8:c1:
                    16:4c:84:a9:0e:1d:d0:fd:68:5f:eb:59:79:ad:65:
                    bf:7f:29:9f:89:e7:8e:24:26:74:56:e4:c4:5e:82:
                    61:5b:da:0b:bb:52:5d:19:0a:2f:9e:56:74:64:49:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:60:65:FC:29:C4:3B:EC:0C:88:06:6F:63:E2:8D:DE:7F:41:A8:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbe49c14-841d-32be-9bdd-d3346ba84dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:2200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:f4:0c:83:2c:01:73:46:df:db:55:c2:ba:63:74:b3:41:f7:
         12:de:9a:9d:0b:fb:72:fb:d3:b6:f1:ec:e1:58:54:9c:3f:07:
         8c:09:9e:55:72:6e:2a:5e:40:72:cf:84:26:f8:c9:a1:e1:76:
         8e:91:81:9b:38:39:9a:3d:79:4c:32:22:b6:d2:29:18:38:25:
         cf:50:70:9d:7e:dc:f4:ee:66:62:2d:8a:d5:96:9c:29:c0:4b:
         ba:48:cf:97:d0:9c:06:2a:a2:65:61:b3:28:d9:67:a7:e6:49:
         5f:f2:bd:0e:d4:31:7d:a5:b9:64:5b:b8:69:b2:d6:d0:7e:d5:
         57:35:87:75:9d:e7:56:c6:6e:ff:13:0b:f1:09:8d:22:05:4f:
         fe:e2:bd:11:60:a1:74:d9:fd:d2:89:58:cf:ed:a5:60:25:07:
         d0:b0:af:92:c6:1d:ff:21:c8:fb:a8:62:4d:09:c5:9c:77:06:
         a0:1e:3e:1b:53:2b:44:db:7a:d7:77:bd:0a:6e:f5:c8:cd:63:
         5b:f0:88:fd:9b:e7:a8:7b:1a:1b:ef:a9:00:21:5e:94:23:a0:
         55:d3:80:63:d3:f8:72:bd:46:64:a5:3b:23:8f:9a:59:fa:12:
         24:d7:e4:89:45:36:a9:05:09:46:53:52:d5:8e:ae:c7:3b:e0:
         5f:2e:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:44:11 2025 by rpki-client