Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa
File:                     cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa (raw, json)
Hash identifier:          TYSl9uvCK9UXuAI87dSQEDrMZF0E7He/Ik0eJuan1xY=
Subject key identifier:   9A:DF:22:D7:0A:02:2B:49:A9:7B:C9:48:CD:F7:5B:C6:7C:31:F3:2A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F99A7733F821381348A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2603:9000::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:99:a7:73:3f:82:13:81:34:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=b29f36ff-e181-4426-baf9-28fa23873da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cc:d1:f6:7f:61:2c:e5:96:ed:c9:9b:fa:50:
                    3a:60:88:6e:ce:14:91:73:0d:89:40:d5:80:b2:79:
                    3c:33:01:21:e9:3d:ca:ab:83:a3:52:22:24:9e:35:
                    a6:db:22:9c:c4:02:5e:69:5d:a2:82:22:fc:e3:dd:
                    8f:1c:4b:1a:14:ec:5f:e5:9a:98:16:1e:99:ac:55:
                    7d:47:97:1a:5c:5e:e2:d7:b0:f2:df:f6:26:94:22:
                    5c:f8:15:f7:7b:03:1c:b9:64:eb:8d:ae:52:ee:b5:
                    a4:54:38:d6:ad:68:b8:fd:49:90:e8:f8:3f:50:18:
                    ae:5f:a2:7b:e1:96:16:73:be:3d:f4:4f:9c:09:d1:
                    3b:0b:2f:ec:95:62:24:d1:58:ee:9f:69:32:ef:cd:
                    f7:3f:3f:a8:b7:97:57:8f:ff:fc:ab:ca:0a:05:5a:
                    10:57:cf:93:b8:bf:d3:61:2d:7e:1a:c1:7c:dc:24:
                    64:25:42:c1:e5:e6:a3:01:93:aa:6b:23:22:93:84:
                    8e:f9:26:e4:08:a5:e8:8f:55:bb:4a:df:90:cd:24:
                    e5:85:5c:0c:b9:86:e3:8e:d9:36:bc:e8:5f:e7:c0:
                    dd:59:d6:2d:09:55:aa:08:68:ac:78:a4:2d:5b:1d:
                    46:31:32:6a:fc:e1:d5:1f:3d:d6:8e:b9:b8:e5:12:
                    70:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DF:22:D7:0A:02:2B:49:A9:7B:C9:48:CD:F7:5B:C6:7C:31:F3:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cfc2c3c1-b99d-3890-94c3-bed0da275e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:6c:34:a3:e5:7b:a0:e6:71:d7:0e:01:75:e5:0c:80:ec:a4:
         5f:b2:db:c2:84:d9:6d:b0:fc:29:e4:bb:b0:a5:9c:67:63:b4:
         ca:1a:b1:38:e6:89:59:e9:0a:08:c2:e6:9d:7f:0a:84:d5:08:
         36:51:69:9d:3c:79:35:8b:d3:80:d1:48:b7:ad:09:fd:8b:cf:
         62:8f:a3:17:b6:62:62:22:5a:2d:bc:60:68:cf:05:f9:1f:62:
         74:93:7e:54:00:88:43:eb:21:2e:3d:76:3c:bc:64:68:21:ad:
         6e:97:32:4a:7b:23:5b:cd:86:a7:1b:cf:47:37:d6:f6:aa:0a:
         b3:3a:e4:b6:3a:75:27:45:81:d2:62:36:46:ce:fc:37:7b:61:
         e9:9a:03:56:ae:52:3b:6d:34:81:b3:82:70:94:3c:46:10:f0:
         f8:90:ac:79:39:77:5a:93:ad:5d:6b:eb:40:67:58:8c:8d:00:
         82:56:e4:86:80:1a:2c:91:10:3a:d4:d6:20:72:21:7d:33:04:
         cf:60:4b:4c:72:4b:3f:8f:f7:6c:4e:90:74:c5:1a:d9:7a:fd:
         22:ba:b1:ec:4c:f9:23:db:d8:3e:16:5d:87:8e:c5:3f:83:8f:
         15:d6:ca:57:fe:8d:8c:cc:84:45:37:16:c8:f9:69:ee:81:68:
         a9:e9:b5:fc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P5mncz+CE4E0igAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
YjI5ZjM2ZmYtZTE4MS00NDI2LWJhZjktMjhmYTIzODczZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkczR9n9hLOWW7cmb+lA6YIhuzhSRcw2JQNWA
snk8MwEh6T3Kq4OjUiIknjWm2yKcxAJeaV2igiL8492PHEsaFOxf5ZqYFh6ZrFV9
R5caXF7i17Dy3/YmlCJc+BX3ewMcuWTrja5S7rWkVDjWrWi4/UmQ6Pg/UBiuX6J7
4ZYWc7499E+cCdE7Cy/slWIk0Vjun2ky7833Pz+ot5dXj//8q8oKBVoQV8+TuL/T
YS1+GsF83CRkJULB5eajAZOqayMik4SO+SbkCKXoj1W7St+QzSTlhVwMuYbjjtk2
vOhf58DdWdYtCVWqCGiseKQtWx1GMTJq/OHVHz3Wjrm45RJwrQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJrfItcKAitJqXvJSM33W8Z8MfMqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2ZjMmMzYzEtYjk5ZC0z
ODkwLTk0YzMtYmVkMGRhMjc1ZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgOQADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCabDSj5Xug5nHXDgF15QyA7KRfstvChNltsPwp5LuwpZxnY7TKGrE4
5olZ6QoIwuadfwqE1Qg2UWmdPHk1i9OA0Ui3rQn9i89ij6MXtmJiIlotvGBozwX5
H2J0k35UAIhD6yEuPXY8vGRoIa1ulzJKeyNbzYanG89HN9b2qgqzOuS2OnUnRYHS
YjZGzvw3e2HpmgNWrlI7bTSBs4JwlDxGEPD4kKx5OXdak61da+tAZ1iMjQCCVuSG
gBoskRA61NYgciF9MwTPYEtMcks/j/dsTpB0xRrZev0iurHsTPkj29g+Fl2HjsU/
g48V1spX/o2MzIRFNxbI+WnugWip6bX8
-----END CERTIFICATE-----
Generated at Sat May 10 16:01:51 2025 by rpki-client