Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/64dccaec-8e4a-3027-bb7b-d32936365cc5.roa
File:                     64dccaec-8e4a-3027-bb7b-d32936365cc5.roa (raw, json)
Hash identifier:          chIFx+66DKPQGuQYZ1z7SOdWjPogIeQTots7wQr+7qI=
Subject key identifier:   F4:B6:F4:50:29:57:B6:20:B7:B4:E0:4F:A2:18:DD:C4:51:B2:08:C2
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849C20A1566823AD347C2245700
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/64dccaec-8e4a-3027-bb7b-d32936365cc5.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11537
IP address blocks:        2001:468:2600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:15:66:82:3a:d3:47:c2:24:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=5d78f07b-e70d-4983-b401-c1a1e303e52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ab:d4:7e:9f:c1:6c:69:c2:ad:dc:b8:11:94:
                    b6:0c:34:f2:93:a7:f2:4d:e2:f4:52:95:77:db:3e:
                    75:ed:2c:08:dc:22:42:1f:f7:be:85:d8:06:15:b6:
                    64:bd:bd:b1:b2:53:10:fc:a4:67:9e:99:a8:d6:63:
                    f6:51:f3:ad:a0:92:a7:43:b4:d9:7b:c0:47:d0:bf:
                    d9:4a:4c:26:6d:cd:7c:45:35:70:e6:96:a3:bf:13:
                    9d:46:7d:74:02:a6:28:52:69:ed:b9:5c:07:96:a4:
                    a0:5c:aa:1e:be:5d:07:9e:45:71:43:5d:ce:89:fb:
                    0f:a7:a0:c0:d1:97:5d:2c:40:e9:84:73:71:b5:23:
                    f9:26:17:8c:54:27:bd:15:21:1a:fc:ed:44:62:1c:
                    2c:9b:e4:c8:1a:83:b0:97:a7:7b:44:d1:39:26:43:
                    00:75:b6:ba:9e:b3:cb:4c:62:04:a6:d7:10:f2:0e:
                    0a:9f:6b:14:e8:fd:ff:a5:3e:8e:cd:39:74:cf:1f:
                    cc:65:d6:7d:fb:15:d0:b6:60:66:98:1e:d3:9c:d8:
                    50:06:6b:5b:43:58:0e:ee:e3:8c:97:a7:60:71:15:
                    66:30:6f:79:ed:cf:8e:c0:87:15:49:9a:97:0f:15:
                    50:a5:98:4e:59:9a:98:62:09:93:1f:43:32:01:8c:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B6:F4:50:29:57:B6:20:B7:B4:E0:4F:A2:18:DD:C4:51:B2:08:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/64dccaec-8e4a-3027-bb7b-d32936365cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:2600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:81:b0:52:fd:30:30:22:83:3f:8f:68:3f:c3:14:31:14:1d:
         94:f5:c1:78:15:5d:99:9e:bc:59:0f:c7:bf:b8:97:70:09:a5:
         11:66:21:ad:7e:94:92:cc:0c:a3:d8:7d:02:3a:2b:46:31:53:
         da:10:15:36:67:e8:a0:80:e0:bf:4f:20:7a:61:9f:91:8b:ea:
         6b:0c:f3:3d:9e:d1:fd:7a:15:8e:f0:43:be:63:cf:32:9c:dc:
         0c:31:d4:a1:1e:f3:9f:60:11:63:17:7b:1e:71:6c:4b:27:a5:
         eb:08:d9:d7:df:e5:a3:e7:b2:b0:aa:eb:22:4f:08:cc:bb:05:
         7f:2c:93:af:fc:bd:5d:9f:a2:5e:98:18:0a:ca:18:b1:e6:17:
         4b:5d:80:f4:24:5c:15:3f:aa:eb:20:a2:99:65:7f:f9:00:64:
         e6:8d:a9:61:6c:ba:be:d9:60:49:90:83:68:15:de:3f:3a:0e:
         73:ac:b5:ef:17:bb:dd:b3:3d:44:3e:46:a8:a8:9c:7b:db:22:
         39:ac:6b:ba:85:f2:6b:5f:89:6d:c2:e5:ed:63:a1:ac:64:88:
         d2:3a:61:78:86:50:6d:3c:d2:05:79:b2:32:78:1a:be:ee:71:
         e6:68:b9:a0:6c:e3:cb:e0:f9:13:8a:ee:e5:53:0a:6d:5a:1c:
         f4:d3:3b:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCChVmgjrTR8IkVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
NWQ3OGYwN2ItZTcwZC00OTgzLWI0MDEtYzFhMWUzMDNlNTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqvUfp/BbGnCrdy4EZS2DDTyk6fyTeL0UpV3
2z517SwI3CJCH/e+hdgGFbZkvb2xslMQ/KRnnpmo1mP2UfOtoJKnQ7TZe8BH0L/Z
Skwmbc18RTVw5pajvxOdRn10AqYoUmntuVwHlqSgXKoevl0HnkVxQ13OifsPp6DA
0ZddLEDphHNxtSP5JheMVCe9FSEa/O1EYhwsm+TIGoOwl6d7RNE5JkMAdba6nrPL
TGIEptcQ8g4Kn2sU6P3/pT6OzTl0zx/MZdZ9+xXQtmBmmB7TnNhQBmtbQ1gO7uOM
l6dgcRVmMG957c+OwIcVSZqXDxVQpZhOWZqYYgmTH0MyAYzc4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPS29FApV7Ygt7TgT6IY3cRRsgjCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvNjRkY2NhZWMtOGU0YS0z
MDI3LWJiN2ItZDMyOTM2MzY1Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaCYA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGSBsFL9MDAigz+PaD/DFDEUHZT1wXgVXZmevFkPx7+4l3AJpRFm
Ia1+lJLMDKPYfQI6K0YxU9oQFTZn6KCA4L9PIHphn5GL6msM8z2e0f16FY7wQ75j
zzKc3Awx1KEe859gEWMXex5xbEsnpesI2dff5aPnsrCq6yJPCMy7BX8sk6/8vV2f
ol6YGArKGLHmF0tdgPQkXBU/qusgopllf/kAZOaNqWFsur7ZYEmQg2gV3j86DnOs
te8Xu92zPUQ+RqionHvbIjmsa7qF8mtfiW3C5e1joaxkiNI6YXiGUG080gV5sjJ4
Gr7uceZouaBs48vg+ROK7uVTCm1aHPTTOwU=
-----END CERTIFICATE-----
Generated at Sun May 11 22:03:10 2025 by rpki-client