Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/51a40389-ff7d-357c-b403-77838e949b1d.roa
File:                     51a40389-ff7d-357c-b403-77838e949b1d.roa (raw, json)
Hash identifier:          AfE9m24PQ7IyegVy7JbslDnSpUrloqsc371YEp9BuCU=
Subject key identifier:   06:4D:B5:B7:90:42:DB:80:F5:43:9A:91:97:C8:D9:64:BC:23:3A:AD
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F432858499F249264B25999D7E3CB2380
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/51a40389-ff7d-357c-b403-77838e949b1d.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     46824
IP address blocks:        2605:6400:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:92:64:b2:59:99:d7:e3:cb:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=9cd3e425-d2da-420e-a3cd-1352fd0355b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:87:7b:36:b9:54:d3:f6:25:b7:e2:c3:fb:
                    91:d9:69:ef:bc:f5:2c:06:0b:f8:8c:fe:ec:9e:89:
                    b3:9f:a1:d3:8f:71:b0:0b:ad:a3:87:00:21:df:2d:
                    45:d1:c8:90:e0:20:24:0c:46:f3:3e:6d:76:7d:d7:
                    8d:2d:70:06:0d:67:d7:b6:ff:71:3f:6b:71:7e:5e:
                    a9:0f:0a:76:58:60:81:ff:c4:3a:62:20:2c:25:9a:
                    2f:3f:4e:35:79:e1:d3:8d:1d:13:98:34:b8:8e:04:
                    2f:aa:c6:41:ed:69:d5:eb:f6:04:03:08:d9:30:f8:
                    7b:c6:05:1f:3e:20:fc:ea:e0:4d:01:7d:e2:2e:5c:
                    89:35:8b:e5:14:8e:fe:c1:12:d8:5f:06:93:f4:48:
                    b2:ac:6c:05:8c:2a:d4:f9:64:15:35:9b:a5:07:69:
                    9c:12:34:b4:36:43:4f:62:47:7e:8b:5d:fa:9f:5f:
                    7b:51:af:b3:2d:3c:5e:93:be:f4:7f:59:95:75:c4:
                    05:20:71:61:67:17:c9:ee:83:13:d7:27:54:30:d7:
                    9b:65:d8:9c:36:36:ca:80:54:2e:d4:16:50:ee:b0:
                    32:9b:90:4a:4a:74:5a:c5:c5:f0:08:99:33:fb:08:
                    2d:e0:f0:29:43:ee:e4:94:2c:71:f7:24:bc:cb:d7:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4D:B5:B7:90:42:DB:80:F5:43:9A:91:97:C8:D9:64:BC:23:3A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/51a40389-ff7d-357c-b403-77838e949b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6400:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:bd:2f:0b:96:31:ae:09:45:1f:a2:f0:35:a7:cb:38:d1:
         8e:af:bb:00:5b:85:82:ae:3e:7a:73:a9:24:92:12:1f:0d:86:
         56:e4:e0:bc:be:ed:7a:e0:fc:80:a2:65:0a:45:6e:1d:d8:6a:
         9c:a1:04:f9:02:29:bc:e6:40:53:ab:65:65:59:90:87:c0:34:
         7e:07:46:17:d7:9c:ea:07:f4:98:3b:a6:f4:9b:72:28:e0:14:
         f8:70:2c:ab:46:c2:ff:fa:54:d4:73:d5:f6:bb:95:ea:dc:6e:
         5c:25:73:c7:67:09:4f:b8:22:86:d0:3f:80:0c:05:e6:a2:18:
         e2:7a:a1:3c:72:e0:70:2a:81:5b:18:a5:12:cd:ae:4d:73:f7:
         ef:e6:f8:8e:d6:3b:24:ce:09:20:13:c2:44:8f:b6:16:93:b9:
         1f:bc:ec:82:0c:b0:ac:73:8d:ee:3a:8a:18:55:b2:aa:78:05:
         34:f2:45:43:65:06:65:e1:73:41:6b:7d:ea:92:54:32:c8:a9:
         e1:cb:13:9f:9c:ff:e6:48:e7:1f:9b:7a:e4:4f:58:f6:cf:b7:
         4f:1e:2f:0b:cf:86:4b:ca:ae:9b:78:84:4b:41:38:c6:93:e9:
         5d:88:9a:af:0d:49:ad:90:87:94:ab:b8:11:b2:8c:bf:17:17:
         53:82:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:33 2025 by rpki-client