Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eec55d61-aca6-382f-9cf1-38a0ce1f1eb6.roa
File:                     eec55d61-aca6-382f-9cf1-38a0ce1f1eb6.roa (raw, json)
Hash identifier:          f6/Ch9XXqwsE9JWPW7+RYc2ckHcNNBoGeJ0Oaj+iScg=
Subject key identifier:   35:03:51:D6:56:6F:69:0D:ED:9D:D9:37:44:9E:1D:0F:8E:A6:E3:C9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849754462B3D7E451A0E5459D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eec55d61-aca6-382f-9cf1-38a0ce1f1eb6.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        2600:140f:6400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:62:b3:d7:e4:51:a0:e5:45:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=ac111137-a04b-456e-bbb9-90b00dc9217e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:22:a7:e3:f9:1d:26:17:71:61:51:6a:28:
                    33:d1:35:a9:b6:f3:cf:d3:4c:ab:23:72:08:b9:25:
                    b3:93:31:f4:04:e6:fa:7b:d8:70:28:5f:6c:1e:80:
                    14:c1:94:ce:26:69:d5:d0:a4:8c:72:bc:7b:7c:cc:
                    ca:bb:13:25:b0:3c:90:88:30:25:4f:92:9f:be:4a:
                    00:a5:f6:34:79:b4:ed:f4:87:3b:d8:20:a3:f0:53:
                    35:e7:92:95:b7:a4:ef:8a:1c:51:c8:b9:0a:14:ea:
                    b0:ff:18:83:20:4f:22:a7:97:7b:be:c2:e0:6b:c6:
                    8b:af:cd:96:a9:30:77:3f:c6:33:2c:e6:f8:8f:01:
                    8e:05:9e:71:b1:19:22:89:6f:cc:dc:ec:b0:67:71:
                    22:01:e3:ba:c2:bf:3d:d7:e9:e4:bb:3e:52:64:70:
                    09:00:ad:6f:29:6b:ef:d4:ec:67:af:78:00:5b:71:
                    0f:3a:a8:50:d3:6a:f5:9d:16:90:a5:33:b6:d3:90:
                    4f:37:73:1a:9d:5c:7d:61:1c:71:68:e6:91:7d:28:
                    61:00:dc:99:43:03:7c:e1:e0:81:3d:7e:95:22:23:
                    5d:4b:9d:d4:89:0d:86:22:cd:d8:c6:47:5f:14:ed:
                    4b:17:ee:f8:c9:a0:a6:e5:ab:09:eb:8c:4a:4a:70:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:03:51:D6:56:6F:69:0D:ED:9D:D9:37:44:9E:1D:0F:8E:A6:E3:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eec55d61-aca6-382f-9cf1-38a0ce1f1eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:6400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:37:69:a4:67:74:1d:09:eb:15:3b:1b:06:0c:a0:a1:a9:
         50:c4:f7:77:e0:68:c4:44:bc:84:b2:2c:17:65:84:56:b8:4e:
         65:c8:ef:da:ce:49:9d:a3:ec:f2:bb:1c:7a:aa:40:b1:8e:cc:
         39:96:06:eb:32:e9:17:ee:3f:3f:26:b2:e6:e6:ff:7b:40:e2:
         05:70:af:c8:c2:fe:0e:2c:df:4f:e0:02:2b:51:44:cf:4c:3d:
         58:31:e7:f6:9a:a1:99:f5:2a:01:3c:ce:87:e2:f5:24:42:f4:
         1d:bd:6d:c2:40:a8:4e:b6:fe:01:c7:9b:ab:f1:77:f5:53:92:
         6c:b7:2a:4f:e5:95:06:c5:e8:09:55:0c:d2:43:c0:3a:9d:26:
         38:88:1e:ca:72:ba:74:38:34:4e:b6:e3:5f:41:cf:69:21:9a:
         41:83:e3:56:a8:0d:12:fa:6b:99:f7:7b:23:b8:46:05:f2:e7:
         a5:9f:05:b7:32:fb:cb:a2:f6:0d:02:b4:c1:b8:ff:e4:11:8f:
         f8:21:9c:2d:c7:8e:73:cc:64:45:83:70:2f:da:87:48:e4:c1:
         81:7a:d3:c8:cf:88:e9:82:9e:72:f0:77:aa:d1:36:7a:85:f0:
         fb:a0:f6:ae:5b:af:40:96:1f:52:24:66:f6:b4:62:15:54:2f:
         57:2d:a7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:45:10 2025 by rpki-client