Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa
File:                     ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa (raw, json)
Hash identifier:          VL8BvBufUjeoqHVFB1uUUpd9UOOLU8Osrd9SEv7/EpE=
Subject key identifier:   25:68:8B:F7:CA:73:1F:66:D5:05:41:C7:23:52:75:21:F9:43:CD:9B
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584950F9648B6F00C51C0C4C7F40
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        2620:116:800d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:64:8b:6f:00:c5:1c:0c:4c:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=5e499a0f-d909-48f5-858c-2a2c86eb638d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:ff:9e:19:b9:eb:b9:a7:92:57:b7:ab:ce:
                    e9:e8:06:89:49:43:ed:4a:68:0d:90:44:ff:d7:eb:
                    e8:fa:e8:64:0e:71:a7:db:d5:55:f2:1d:0a:fa:82:
                    fa:59:a8:20:e8:bf:61:79:ed:a9:f0:23:0f:5a:88:
                    93:89:be:34:6e:43:27:bb:7d:74:3f:5a:66:5f:a1:
                    75:bd:6f:d9:61:47:58:20:7b:31:42:04:53:86:5f:
                    55:c0:2d:3d:e4:3e:b8:b9:a6:a6:0d:f9:ab:81:11:
                    30:77:62:0e:ec:c7:b2:f0:e9:fb:4f:94:43:9d:2d:
                    02:68:55:bf:95:5f:74:07:10:47:3a:09:90:50:fc:
                    7e:eb:df:0b:4b:47:29:91:45:f0:31:86:85:12:93:
                    3c:84:0a:3d:c4:44:88:f7:cb:1b:67:86:30:77:54:
                    38:ba:62:87:0d:38:e6:3e:5f:c7:98:5a:40:a4:a6:
                    bb:e0:cf:b6:86:97:18:9f:fb:63:43:30:00:b3:df:
                    1f:55:50:f2:2e:3d:f9:13:b4:c1:ef:50:5d:10:06:
                    03:f2:2a:e4:1b:6e:c7:cd:4a:f5:98:64:41:27:46:
                    09:42:0d:0a:ec:05:90:60:23:b0:b2:e1:db:47:29:
                    3d:41:93:b8:3c:9a:ac:27:b6:1b:90:70:c6:26:30:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:68:8B:F7:CA:73:1F:66:D5:05:41:C7:23:52:75:21:F9:43:CD:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/ce9337a4-4e0a-3f9b-a703-32378c8b086f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d9:36:f0:9f:fb:4b:2e:a9:71:5e:62:68:88:fb:af:c2:03:
         fc:64:fc:cb:bb:e2:5a:f8:a8:2d:ed:b4:13:33:22:ec:eb:97:
         d6:bd:58:0a:84:4a:30:9b:f9:16:ff:72:26:6a:ab:5f:86:ca:
         f0:e0:a5:5e:d8:ff:34:cf:cc:e6:06:68:b1:d1:c3:e2:75:69:
         3d:77:83:dc:50:70:d4:9d:a5:61:05:ad:00:7a:18:39:e3:aa:
         6e:8b:0b:df:d1:d1:63:36:7a:24:01:58:bc:00:44:7d:42:9c:
         89:0c:4a:b6:9b:7e:3c:b9:30:5a:cc:7c:55:83:0b:d5:14:cb:
         0d:4b:21:ca:26:0c:a5:7c:90:78:16:10:04:20:1d:98:39:df:
         c8:9e:a1:05:42:01:87:09:9d:34:b9:37:d7:fa:49:f3:e7:2e:
         7f:7c:04:63:a6:7c:2c:b6:82:7f:2b:02:b6:d2:70:1b:9e:29:
         bd:5e:7e:42:22:a5:ff:71:f8:7a:0e:02:67:03:54:c0:cb:ed:
         b0:eb:75:f0:47:63:fe:10:a9:b5:c5:ab:c2:70:b8:22:72:14:
         20:a1:bc:38:fa:0d:e2:0f:20:6d:d4:59:3b:f7:7d:a4:b7:72:
         a2:88:d7:d8:16:53:2a:86:ef:d8:fb:81:c2:22:7d:8f:9d:cd:
         74:4c:cc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:13:19 2025 by rpki-client