Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa
File:                     8aefadba-6c2b-364a-882a-231170fd640d.roa (raw, json)
Hash identifier:          onBJPy8bkfEIOfaDBNWYZtRYI1S7XJTmXrO7V+ZYA0c=
Subject key identifier:   4A:E5:7E:67:9D:1C:65:35:AD:E6:1A:08:8A:D4:70:CD:7C:DC:1D:C4
Certificate issuer:       /CN=969446db-6a2e-47bc-a33b-2dd883bfb899
Certificate serial:       010D0C9F43285849780F0E9896E07242F7B93D40
Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     26679
IP address blocks:        2620:112:e000::/44 maxlen: 44
                          2620:112:e000::/48 maxlen: 48
                          2620:112:e001::/48 maxlen: 48
                          2620:112:e002::/48 maxlen: 48
                          2620:112:e003::/48 maxlen: 48
                          2620:112:e004::/48 maxlen: 48
                          2620:112:e005::/48 maxlen: 48
                          2620:112:e006::/48 maxlen: 48
                          2620:112:e007::/48 maxlen: 48
                          2620:112:e008::/48 maxlen: 48
                          2620:112:e009::/48 maxlen: 48
                          2620:112:e00a::/48 maxlen: 48
                          2620:112:e00b::/48 maxlen: 48
                          2620:112:e00c::/48 maxlen: 48
                          2620:112:e00d::/48 maxlen: 48
                          2620:112:e00e::/48 maxlen: 48
                          2620:112:e00f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0e:98:96:e0:72:42:f7:b9:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=65e1e011-bece-473c-a9e2-9ef6d047bbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:d7:dc:9b:71:d4:51:b1:70:7d:84:e0:4b:
                    83:3d:e3:48:76:8a:d1:1f:c5:23:06:cf:09:14:e0:
                    07:23:4b:6d:a9:2b:49:d6:1f:46:c5:fd:14:c3:c0:
                    ab:9b:8c:be:2a:b2:14:5d:3e:03:65:91:a9:71:0d:
                    10:21:83:26:41:30:79:0c:2d:2b:78:f8:f5:12:cf:
                    17:05:47:fc:4a:8c:b1:ef:ac:4c:38:ce:4b:56:3f:
                    d9:40:c6:ee:82:d5:58:e2:13:fe:c5:40:56:e2:f0:
                    43:41:7f:9b:c1:ed:92:fd:ad:16:48:de:f8:95:d4:
                    0b:be:c8:1e:50:a0:73:d6:c7:03:f8:66:d8:07:20:
                    f2:85:b8:ea:6b:b3:82:e2:5e:a5:76:2f:0f:3b:3d:
                    d7:2f:a4:ae:b2:e5:08:74:0d:b8:d3:f7:83:36:f3:
                    3e:66:cc:36:fe:c8:a4:72:5a:0d:16:4d:ac:68:dd:
                    1e:ed:2f:ee:8d:07:2c:0c:b3:c8:3b:50:d4:71:01:
                    15:d2:95:f7:86:55:68:bc:f1:92:6c:f9:2f:40:bc:
                    69:f4:6e:c2:ca:d3:46:37:3c:1c:42:7b:51:ba:ca:
                    89:cc:ea:d6:8e:93:1a:8d:c7:81:2c:67:3d:c8:ca:
                    56:ad:bb:00:61:05:7a:4b:81:5f:8b:74:81:26:9d:
                    e4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E5:7E:67:9D:1C:65:35:AD:E6:1A:08:8A:D4:70:CD:7C:DC:1D:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl

            X509v3 Authority Key Identifier:
                keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:112:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:8d:28:b8:2f:f5:37:c6:b5:e9:89:7d:8c:0b:d0:f6:59:a3:
         f9:90:ef:f1:41:6c:37:d9:d5:4c:eb:d8:be:c3:5a:08:70:5c:
         d0:a3:1d:44:92:e3:56:55:f4:4f:21:cd:6d:37:a1:6c:3f:4b:
         af:67:ee:e3:92:a2:0b:ac:b2:d4:61:03:a9:5e:4f:8e:a6:43:
         90:c4:90:58:c9:6c:8d:04:4c:ab:47:52:92:57:5c:35:2a:a4:
         75:f0:bd:03:0b:14:fa:9f:22:6b:10:47:6a:f8:50:e7:91:0c:
         03:c7:84:8c:6d:02:b8:f6:3c:b1:40:bd:d2:b9:b6:a4:a6:b2:
         68:d0:fc:91:16:3e:26:63:bf:b9:e2:f6:4f:b1:7e:2a:e9:a8:
         09:13:b6:8e:1e:a1:20:53:fb:f1:99:12:9f:c8:2e:e8:62:32:
         94:a2:f8:13:c6:68:d2:83:1c:5f:b4:f6:d8:4d:ae:4b:d3:61:
         5f:20:97:1d:f2:77:97:6b:8d:74:79:f1:e6:fc:cb:df:7d:62:
         31:0c:b7:a8:1c:57:a5:a4:4f:63:63:7e:de:0e:ba:63:1a:72:
         fa:42:0e:da:e7:c0:06:e5:3d:ff:d6:38:e8:11:59:a9:f7:20:
         cb:16:9a:16:74:b0:3a:67:e7:01:c5:99:78:6a:73:a9:39:25:
         a8:39:96:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:03:50 2025 by rpki-client