Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb839974-0324-380e-b909-6e34df4566c5.roa
File:                     fb839974-0324-380e-b909-6e34df4566c5.roa (raw, json)
Hash identifier:          /wlWEhBYg26N6q6aXsJ0vNAxSBm913OHrD0KFDOwCa8=
Subject key identifier:   F5:D5:8D:A0:15:FA:D5:C8:6E:99:04:94:16:7C:B0:E0:72:BF:11:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F2F1745F7669049DF3040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb839974-0324-380e-b909-6e34df4566c5.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1406:3e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:2f:17:45:f7:66:90:49:df:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=31aad3bf-910e-4085-ab81-2d00379cc32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:88:55:23:8b:b7:7f:ce:f4:99:3a:18:b0:96:
                    ba:a9:ca:1a:f9:7f:6a:ff:76:f3:a7:f5:c5:8a:09:
                    f0:61:15:82:e6:07:42:a2:a2:08:a7:cf:03:36:d3:
                    74:3e:a2:c9:25:a6:92:ab:98:fb:fc:be:41:52:94:
                    1a:2f:49:75:fa:d3:ca:1a:22:1f:cc:2f:c3:3e:9b:
                    92:f2:77:12:23:d9:68:d0:02:a7:90:8f:14:32:2c:
                    35:c2:6f:fd:b9:86:23:51:0d:c3:65:03:9a:04:bf:
                    eb:65:a2:ff:3c:94:4d:7c:ba:89:9d:e1:0e:86:bf:
                    30:68:c1:fa:74:b3:7b:39:d4:54:38:09:fc:24:4f:
                    c2:f1:35:41:7a:72:9d:0f:9c:1a:de:df:da:bd:8b:
                    7c:34:a1:f7:d8:8f:06:61:68:e1:bb:a2:3e:91:86:
                    5b:68:b5:6e:4d:74:0e:10:13:c4:35:8e:e4:73:5d:
                    c6:ad:f4:2d:d3:66:12:94:48:cd:b3:eb:9a:d2:97:
                    b9:c1:f5:6b:d4:68:f3:f5:7b:63:b5:dc:3d:e5:93:
                    e4:b8:de:56:42:68:34:d5:16:18:d5:2e:94:e2:56:
                    80:6a:7c:b4:ae:74:f0:f7:a1:44:3a:f3:0f:f3:95:
                    11:6f:ba:14:e1:1f:97:4c:8f:e1:f0:f9:b5:e3:c9:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D5:8D:A0:15:FA:D5:C8:6E:99:04:94:16:7C:B0:E0:72:BF:11:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb839974-0324-380e-b909-6e34df4566c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:3e00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:71:44:4a:2a:a1:11:1d:b1:bf:8c:52:c6:7c:15:0c:a4:8f:
         89:2e:dd:fd:79:6f:98:55:af:cd:79:d4:a0:55:b1:b1:c3:55:
         2f:60:26:9f:31:a4:f4:fb:da:f8:99:4f:d6:26:0d:83:e7:4d:
         fd:49:f4:db:b8:9f:40:b4:76:1c:3d:93:03:a5:d3:ca:04:a3:
         bf:a2:5a:46:2f:fc:98:f7:04:ef:ae:2e:51:53:4b:67:38:3d:
         ec:0c:6a:a3:05:12:33:75:84:5c:69:7c:c1:a0:84:e0:e6:0d:
         14:5c:10:f5:68:19:0a:45:9e:d6:c8:43:3d:15:16:86:8f:00:
         5e:88:ff:c4:7c:c4:cc:5c:df:e6:15:b9:7a:1e:f0:23:d9:c4:
         af:13:98:7f:10:97:40:3c:99:81:e3:be:b7:7d:f5:8c:53:0a:
         94:43:af:ed:65:7b:33:66:13:2d:07:ef:3b:94:2b:c0:ef:68:
         1f:c3:52:ca:16:b7:a2:f1:1a:35:73:77:53:54:44:13:76:31:
         ec:9d:95:e9:6e:ee:15:9a:36:b3:a6:b9:c0:9d:4e:f2:93:a1:
         e1:64:40:df:e6:df:9c:19:2e:17:c4:27:3b:4c:b6:92:60:2b:
         b6:95:a7:48:eb:96:34:60:ed:4c:29:b7:db:2a:5c:8b:36:76:
         84:ba:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:43 2025 by rpki-client