Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/101dc82f-fc97-31a5-91b4-27b864fd35bd.roa
File:                     101dc82f-fc97-31a5-91b4-27b864fd35bd.roa (raw, json)
Hash identifier:          HCOnwHb6EDq7932a07MksRDk7GrKGqlOJjDM9L/j64o=
Subject key identifier:   DA:8D:E4:91:85:72:FD:AD:BE:6A:AB:2A:0E:B2:3B:04:48:AC:A9:38
Certificate issuer:       /CN=de5f810d-f2f5-43b1-88e2-7f7aa486b8d4
Certificate serial:       010D0C9F432858499AF4894AA342C5163B5FB320
Authority key identifier: 1B:AD:F1:C4:3B:E7:17:F0:DE:DE:97:CC:CC:0E:9F:1D:FA:B7:3A:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/101dc82f-fc97-31a5-91b4-27b864fd35bd.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     197767
IP address blocks:        2602:fa56::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:89:4a:a3:42:c5:16:3b:5f:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5f810d-f2f5-43b1-88e2-7f7aa486b8d4
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=9093025a-4014-40ca-a2bd-6bbfbf729d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:b6:c7:89:32:6b:84:ff:b4:49:e9:5b:1f:
                    bd:ad:cf:08:e6:9b:31:ce:5c:6b:f9:46:55:ca:89:
                    0b:db:58:4f:65:cb:0c:f2:e8:bb:ab:64:4e:36:2f:
                    48:0a:f1:c9:b6:a0:d9:b9:7c:30:4b:9a:a5:01:15:
                    c3:d0:da:60:26:8a:3d:6f:12:a5:3a:98:b4:de:1b:
                    5e:47:ef:55:a9:e2:f1:96:fe:97:10:6d:7c:55:19:
                    bc:6e:cb:fe:3f:01:70:54:91:44:2b:d6:aa:fb:ea:
                    a6:b2:d0:af:51:1b:c3:b6:63:92:aa:86:8b:cb:39:
                    b8:16:37:0e:c0:40:e5:b3:8b:94:58:98:9e:2b:0b:
                    f3:d0:9f:9d:6e:74:a8:3f:e8:f6:53:34:ff:6f:b0:
                    f2:c0:c9:d9:c1:07:75:39:30:16:07:80:68:f2:6d:
                    4d:1b:d6:14:be:9d:e3:ab:03:03:c2:2c:10:db:75:
                    fd:30:68:ab:06:52:53:76:ee:35:dc:02:12:15:77:
                    c1:29:4e:a3:de:f4:25:3e:bf:72:20:36:5a:51:d7:
                    e9:5e:01:b1:b7:5b:db:c4:f4:9a:92:46:d9:f1:20:
                    4f:2b:d3:0e:4e:76:76:63:d9:1b:61:83:77:5b:88:
                    09:d1:9b:f6:a9:29:b1:8a:31:30:90:5b:71:b8:56:
                    97:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8D:E4:91:85:72:FD:AD:BE:6A:AB:2A:0E:B2:3B:04:48:AC:A9:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/101dc82f-fc97-31a5-91b4-27b864fd35bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AD:F1:C4:3B:E7:17:F0:DE:DE:97:CC:CC:0E:9F:1D:FA:B7:3A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa56::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:cd:e7:7e:57:c4:d3:f0:18:8a:ef:65:30:d8:6f:52:0d:02:
         19:f3:72:0c:37:ff:74:3f:0d:65:be:5b:99:d5:99:f1:67:51:
         08:5f:9c:6c:86:73:7b:69:d3:30:c1:fc:b0:ed:54:57:07:38:
         cf:25:f3:e9:c1:0e:43:36:21:ab:75:fc:75:85:63:9f:9b:20:
         48:1e:c1:b4:14:5a:e1:0f:20:b3:d6:95:2d:af:24:d9:6b:a2:
         78:f9:73:94:d0:8c:e1:b6:93:5d:06:4a:0e:3b:2c:a0:6d:5c:
         0d:e5:f7:26:a8:a3:e3:e1:c0:59:3d:d0:c0:ce:64:bf:cf:2f:
         5d:a3:49:83:39:7b:e0:ce:bf:08:e9:92:bc:3b:6d:f4:96:2b:
         6e:16:0e:48:77:e8:e3:e5:d4:43:79:0d:3f:94:c3:c1:4c:c6:
         b0:fa:a9:80:b0:c1:21:1f:fe:68:ce:f6:d9:24:a4:65:77:ad:
         95:6b:4c:50:79:b5:35:e2:6f:c7:c7:c0:e2:35:db:ae:3d:25:
         a9:49:49:44:3e:62:8c:56:4a:b0:cf:be:66:ec:3b:b9:41:db:
         82:b3:f8:3a:06:de:81:6e:95:98:07:79:07:78:87:5b:e2:87:
         ea:d2:19:6d:fa:5f:e2:f8:4e:2c:1a:35:10:ee:f3:ad:49:b9:
         0b:20:6e:5b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEma9IlKo0LFFjtfsyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU1ZjgxMGQtZjJmNS00M2IxLTg4ZTItN2Y3YWE0ODZi
OGQ0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk
OTA5MzAyNWEtNDAxNC00MGNhLWEyYmQtNmJiZmJmNzI5ZDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntu2x4kya4T/tEnpWx+9rc8I5psxzlxr+UZV
yokL21hPZcsM8ui7q2RONi9ICvHJtqDZuXwwS5qlARXD0NpgJoo9bxKlOpi03hte
R+9VqeLxlv6XEG18VRm8bsv+PwFwVJFEK9aq++qmstCvURvDtmOSqoaLyzm4FjcO
wEDls4uUWJieKwvz0J+dbnSoP+j2UzT/b7DywMnZwQd1OTAWB4Bo8m1NG9YUvp3j
qwMDwiwQ23X9MGirBlJTdu413AISFXfBKU6j3vQlPr9yIDZaUdfpXgGxt1vbxPSa
kkbZ8SBPK9MOTnZ2Y9kbYYN3W4gJ0Zv2qSmxijEwkFtxuFaXWwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNqN5JGFcv2tvmqrKg6yOwRIrKk4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZTVm
ODEwZC1mMmY1LTQzYjEtODhlMi03ZjdhYTQ4NmI4ZDQvMTAxZGM4MmYtZmM5Ny0z
MWE1LTkxYjQtMjdiODY0ZmQzNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGU1ZjgxMGQtZjJmNS00M2IxLTg4
ZTItN2Y3YWE0ODZiOGQ0L2RlNWY4MTBkLWYyZjUtNDNiMS04OGUyLTdmN2FhNDg2
YjhkNC5jcmwwHwYDVR0jBBgwFoAUG63xxDvnF/De3pfMzA6fHfq3OlkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZTVmODEwZC1mMmY1LTQzYjEtODhlMi03Zjdh
YTQ4NmI4ZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6VgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANM3nflfE0/AYiu9lMNhvUg0CGfNyDDf/dD8NZb5bmdWZ8WdRCF+c
bIZze2nTMMH8sO1UVwc4zyXz6cEOQzYhq3X8dYVjn5sgSB7BtBRa4Q8gs9aVLa8k
2WuiePlzlNCM4baTXQZKDjssoG1cDeX3Jqij4+HAWT3QwM5kv88vXaNJgzl74M6/
COmSvDtt9JYrbhYOSHfo4+XUQ3kNP5TDwUzGsPqpgLDBIR/+aM722SSkZXetlWtM
UHm1NeJvx8fA4jXbrj0lqUlJRD5ijFZKsM++Zuw7uUHbgrP4OgbegW6VmAd5B3iH
W+KH6tIZbfpf4vhOLBo1EO7zrUm5CyBuWw==
-----END CERTIFICATE-----
Generated at Fri May 9 20:22:51 2025 by rpki-client