Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0ed1d72-a60f-34ff-948c-2630beb3fead.roa
File:                     f0ed1d72-a60f-34ff-948c-2630beb3fead.roa (raw, json)
Hash identifier:          Vm9CthnLvu4effdiQrIcLLKbev7kqRzUxo/BJskzqmc=
Subject key identifier:   7E:47:F5:1D:CD:3C:8D:85:62:E0:0B:E7:24:92:A0:CE:6B:DF:AC:36
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584988CF35B46BAF1DF4E28DE900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0ed1d72-a60f-34ff-948c-2630beb3fead.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        2600:1488:6200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:35:b4:6b:af:1d:f4:e2:8d:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=9e27056b-eddb-42fc-8967-f3e2134f00e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:db:b9:43:87:4c:23:e6:cd:96:cf:bb:a8:
                    a4:b4:6d:63:13:27:a7:36:33:f5:ac:e9:07:6d:55:
                    8e:d9:c4:30:46:9f:d9:50:c1:14:eb:90:90:ca:6b:
                    d1:8d:32:e2:43:f5:8a:ee:6c:8e:f3:44:8c:ef:54:
                    b9:55:0c:08:44:7e:11:74:b6:ec:66:f3:50:16:4b:
                    9b:6b:4b:f0:2c:30:36:bb:ad:a7:bd:3c:17:7b:a6:
                    25:9b:e1:7b:70:a1:31:d8:82:f2:ca:9c:86:02:ef:
                    d5:e8:86:d8:2d:b4:26:f2:10:c7:5e:73:46:0e:9f:
                    fd:44:ab:3f:da:6e:f1:89:0e:ab:87:fd:31:03:7a:
                    78:ee:69:ad:0b:af:80:8d:35:8e:db:63:f2:8a:ea:
                    c9:46:66:6d:67:22:ca:54:de:29:72:e0:ab:43:17:
                    c0:02:14:9b:83:49:09:ec:33:49:5d:93:7a:81:c2:
                    26:c9:ca:28:43:8b:10:0f:c6:28:52:01:08:cb:c8:
                    83:97:82:24:1b:23:e6:4f:46:4e:fb:09:e8:61:75:
                    3a:54:f7:f2:ff:0d:a7:72:1a:13:45:61:26:18:96:
                    6d:d0:27:6d:d5:56:e8:3e:58:a6:eb:d7:77:ea:77:
                    bb:25:55:58:fb:72:1d:9c:0e:17:04:3e:34:32:5c:
                    4b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:47:F5:1D:CD:3C:8D:85:62:E0:0B:E7:24:92:A0:CE:6B:DF:AC:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0ed1d72-a60f-34ff-948c-2630beb3fead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:dc:37:d8:b8:10:b3:76:79:aa:66:76:8c:22:a3:77:55:9e:
         96:1d:fa:14:12:db:24:a1:c3:b5:56:d9:8f:b7:fe:19:d6:56:
         44:20:4a:89:1c:c6:ef:16:83:2d:b0:e2:b6:47:aa:36:a0:42:
         47:a4:94:58:74:cb:2c:3c:9a:db:07:1e:b7:3b:df:1a:fa:fb:
         a4:05:aa:a2:ad:51:1b:93:5e:33:3b:6e:4c:80:6d:d0:84:7d:
         b5:03:0c:14:36:e6:06:7e:86:f3:24:89:3e:92:91:ea:01:97:
         36:b2:10:5e:ac:e6:05:70:2c:8d:79:65:84:ec:01:69:68:d1:
         4e:31:ba:cd:a5:ff:95:2a:40:fd:ac:6a:6d:4f:ef:be:b9:af:
         9c:92:78:7b:a7:03:23:8c:13:0e:60:d8:f8:81:6e:ef:b6:cb:
         a9:83:67:50:e2:f1:15:2d:c3:10:5e:3c:d3:08:45:02:91:b8:
         04:60:2c:76:b5:70:d6:c0:32:ad:ac:94:ba:6a:30:5c:66:fe:
         96:8a:35:43:5d:36:d3:3d:80:7c:f9:fb:66:94:90:85:c4:a7:
         71:e5:f5:db:78:e0:b6:54:32:e8:e2:b1:63:55:d3:92:75:59:
         0a:9d:4d:06:33:da:df:62:3a:49:3f:9e:38:d6:4b:63:a4:5f:
         e7:91:d5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:30 2025 by rpki-client