Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa
File:                     bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa (raw, json)
Hash identifier:          ALr+ze157CPn2pSJrU7bCTHPfCHYSXNaqj98T4XxQkU=
Subject key identifier:   F2:C1:A5:E4:D6:17:E8:C4:35:55:96:20:36:E5:10:D8:A7:DC:B4:48
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A4EB105871527681C6FC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     12271
IP address blocks:        2604:2000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:4e:b1:05:87:15:27:68:1c:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=d2c21620-d37a-4e2a-8f45-5329449face3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:3a:07:cd:cc:46:21:2c:34:ef:2c:e1:12:
                    4f:c0:f5:9a:b9:0f:e5:31:a9:c5:bc:74:fd:c7:e3:
                    e2:72:e1:70:60:09:4f:6f:af:9a:92:90:00:f0:bd:
                    8a:04:2e:fa:7f:fe:62:5f:89:32:3f:09:6d:6f:73:
                    21:42:86:fe:a1:7e:1e:a3:ae:2b:1b:0e:46:86:16:
                    3a:c2:f2:bb:cb:2f:69:8e:81:57:2d:da:b7:24:10:
                    01:f1:54:5a:e7:01:23:d5:a5:62:0a:a2:18:f5:d0:
                    a8:ec:3d:6a:36:8c:39:d6:9a:4c:3c:33:d2:18:99:
                    a6:0d:fd:7f:9b:46:e5:d2:18:de:0c:72:c3:68:44:
                    56:11:22:4c:65:1e:a9:d0:87:ff:54:b8:5c:2f:03:
                    7b:20:51:fa:93:50:ca:3b:c5:34:d5:92:63:a6:91:
                    25:36:2f:fe:f6:2d:20:34:61:bc:49:f9:6e:75:3b:
                    7d:0b:7f:b0:9e:d4:9a:9f:64:a0:7e:3e:31:94:14:
                    fe:43:5f:f7:a3:76:bd:f7:f2:d3:1f:dd:e2:61:9f:
                    12:c1:d0:bf:9f:0f:ad:db:59:67:0d:7d:78:ab:19:
                    d8:8b:bd:6b:df:cc:3f:b8:03:c5:27:5f:19:8c:5b:
                    5f:73:dd:44:23:b9:a7:71:77:cb:6c:62:f7:bf:8e:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C1:A5:E4:D6:17:E8:C4:35:55:96:20:36:E5:10:D8:A7:DC:B4:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf7b5d04-a693-399c-bd4b-0f7752c6e42f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:48:2e:16:7e:d0:a6:65:39:cb:05:63:75:dc:c8:35:c2:e7:
         41:86:20:62:4c:39:8f:f6:52:2e:39:95:20:59:ec:79:82:ec:
         93:6f:e9:f2:f6:a0:95:50:75:e6:ec:0d:d4:05:de:82:bf:ba:
         9d:70:1f:98:b6:2a:32:04:7b:52:ad:fe:20:b8:e1:9c:6c:06:
         2a:aa:a4:3f:dd:02:25:95:7f:0b:20:a5:30:9a:9f:25:e4:d1:
         76:f8:4c:84:ea:12:b1:ba:cd:a5:1b:5f:95:9d:18:8c:63:71:
         96:e8:76:f2:e7:3e:8b:e5:ae:2c:3a:8b:1c:2f:10:16:e8:be:
         46:eb:3b:db:25:f6:fd:49:ae:09:a2:92:a9:80:08:b5:6c:ee:
         41:ac:7c:9f:4e:b3:98:66:53:b4:d2:4d:cb:12:5e:cb:5b:bd:
         4e:a0:de:a6:49:a0:ee:e6:77:1f:a5:b0:4d:4e:f8:7f:2f:bd:
         10:7a:e1:c1:9c:e7:24:25:84:e8:55:77:bd:ef:cd:c0:a4:18:
         41:9d:94:fc:d5:1e:10:45:95:ad:3c:bc:9b:74:2f:08:72:03:
         88:40:c8:81:c5:dd:66:47:97:e1:1e:c0:42:15:25:62:d1:fa:
         43:77:43:5f:c5:00:8e:ca:d6:65:f1:cc:9c:08:52:98:15:b1:
         80:ee:c7:51
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnCCk6xBYcVJ2gcb8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZDJjMjE2MjAtZDM3YS00ZTJhLThmNDUtNTMyOTQ0OWZhY2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g46B83MRiEsNO8s4RJPwPWauQ/lManFvHT9
x+PicuFwYAlPb6+akpAA8L2KBC76f/5iX4kyPwltb3MhQob+oX4eo64rGw5GhhY6
wvK7yy9pjoFXLdq3JBAB8VRa5wEj1aViCqIY9dCo7D1qNow51ppMPDPSGJmmDf1/
m0bl0hjeDHLDaERWESJMZR6p0If/VLhcLwN7IFH6k1DKO8U01ZJjppElNi/+9i0g
NGG8SfludTt9C3+wntSan2Sgfj4xlBT+Q1/3o3a99/LTH93iYZ8SwdC/nw+t21ln
DX14qxnYi71r38w/uAPFJ18ZjFtfc91EI7mncXfLbGL3v47KfwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPLBpeTWF+jENVWWIDblENin3LRIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYmY3YjVkMDQtYTY5My0z
OTljLWJkNGItMGY3NzUyYzZlNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQgADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAXSC4WftCmZTnLBWN13Mg1wudBhiBiTDmP9lIuOZUgWex5guyTb+ny
9qCVUHXm7A3UBd6Cv7qdcB+YtioyBHtSrf4guOGcbAYqqqQ/3QIllX8LIKUwmp8l
5NF2+EyE6hKxus2lG1+VnRiMY3GW6Hby5z6L5a4sOoscLxAW6L5G6zvbJfb9Sa4J
opKpgAi1bO5BrHyfTrOYZlO00k3LEl7LW71OoN6mSaDu5ncfpbBNTvh/L70QeuHB
nOckJYToVXe9783ApBhBnZT81R4QRZWtPLybdC8IcgOIQMiBxd1mR5fhHsBCFSVi
0fpDd0NfxQCOytZl8cycCFKYFbGA7sdR
-----END CERTIFICATE-----
Generated at Sat May 10 10:25:35 2025 by rpki-client