Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/baae2628-02ca-3879-87d5-5af017ec5583.roa
File:                     baae2628-02ca-3879-87d5-5af017ec5583.roa (raw, json)
Hash identifier:          jjGeeC80ZAoypqNnDoZMW1IuIVPi8OuT879DqGCYUhc=
Subject key identifier:   C9:57:C8:BE:D6:80:52:35:BE:52:F1:BA:04:5F:CB:AB:E1:89:40:50
Certificate issuer:       /CN=c892586d-1638-476b-994e-499f179da6da
Certificate serial:       010D0C9F43285849E91FA1F6E5CD2D3ECECF4380
Authority key identifier: 8F:B6:8E:83:59:9A:2D:D4:55:3E:77:6A:47:0B:49:46:5A:59:24:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/baae2628-02ca-3879-87d5-5af017ec5583.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     177
IP address blocks:        2607:f018:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a1:f6:e5:cd:2d:3e:ce:cf:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c892586d-1638-476b-994e-499f179da6da
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=0ffebf57-265b-4a5a-9cbd-ea94cce72003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:50:7c:f7:52:6e:3b:53:8f:5a:47:28:70:73:
                    f6:0b:cc:27:5d:4f:5e:86:92:bf:5e:c9:aa:1e:e6:
                    d1:91:9b:06:43:9b:92:83:de:a4:58:2c:c5:c2:cc:
                    10:4a:0e:64:41:ce:64:f4:b0:bf:25:57:d7:cd:70:
                    08:5c:75:ed:e7:a6:7d:2b:a1:90:56:49:38:7d:14:
                    77:9e:ed:63:c9:11:e8:29:4f:6b:8e:23:ac:95:3c:
                    85:45:b2:d8:04:36:c3:32:69:9e:69:b4:66:bc:61:
                    7d:1a:73:c1:6c:66:f4:ab:64:22:a0:62:4e:64:d7:
                    ae:67:14:6d:d7:5a:fc:9a:cc:ce:21:b0:d6:d3:f1:
                    a0:29:38:f4:2e:ae:bf:0f:12:f5:ef:d2:0c:c2:b4:
                    ac:2b:09:10:0b:51:b9:46:d2:54:62:ef:66:05:a6:
                    a7:41:53:1b:a2:29:66:e9:4e:81:7e:1d:23:b6:b9:
                    99:1e:2b:e2:02:6c:91:f9:e3:b3:35:46:73:07:32:
                    95:f6:00:88:94:7a:5e:1a:00:0a:ef:9e:ae:f8:7e:
                    8f:af:28:c3:2b:30:2a:85:c3:f9:26:50:a7:f2:cd:
                    d2:1f:97:89:1e:4f:27:3d:42:c4:c0:f6:ab:fa:ec:
                    f4:53:22:3f:01:15:a8:6b:a1:7c:ed:7c:18:b3:f5:
                    e9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:57:C8:BE:D6:80:52:35:BE:52:F1:BA:04:5F:CB:AB:E1:89:40:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/baae2628-02ca-3879-87d5-5af017ec5583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.crl

            X509v3 Authority Key Identifier:
                keyid:8F:B6:8E:83:59:9A:2D:D4:55:3E:77:6A:47:0B:49:46:5A:59:24:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f018:fffe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:9d:1c:4a:3a:1a:74:a9:df:68:3f:ec:0d:58:1a:62:3c:8f:
         24:35:55:c5:3c:16:5e:94:77:83:44:6c:68:9a:95:10:9e:82:
         c2:b4:68:ae:d9:a8:47:30:2c:15:e0:da:27:4e:e6:a0:3d:73:
         f3:d5:81:a6:72:6d:d6:61:30:e2:c8:3f:93:4b:c3:da:d2:59:
         e2:09:ca:f8:15:44:1a:c6:b9:29:97:39:4f:a4:ed:d4:0b:ec:
         ae:e2:e7:1a:a2:c2:0c:dd:ee:2e:5b:9b:02:7a:d9:a4:60:4d:
         f2:e2:15:3c:71:84:cc:7c:15:f3:40:fb:09:24:fe:7d:a4:c5:
         cc:1d:25:bb:d0:48:a1:48:c3:f6:7a:31:82:6f:bb:af:c8:6a:
         8d:6e:bf:ef:56:2d:d1:ea:e6:2e:89:e4:84:7d:51:9d:04:75:
         3c:13:53:63:01:af:4b:2a:3f:40:fd:d0:59:af:32:08:e4:70:
         d4:1f:b8:cc:88:2b:9d:fd:62:15:ff:aa:6f:ef:c8:6b:48:7b:
         b9:cf:4c:5b:de:b7:7b:b0:11:f8:05:1a:e8:10:78:69:4a:95:
         41:ed:6d:79:2b:9d:37:d9:8e:23:7c:4d:f2:09:0c:20:f4:05:
         59:ab:3f:5d:76:93:88:80:61:e7:74:56:40:ea:05:a5:2b:13:
         a8:b9:78:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:34:04 2025 by rpki-client