Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1f66752e-7728-3554-8026-523a32c1f919.roa
File:                     1f66752e-7728-3554-8026-523a32c1f919.roa (raw, json)
Hash identifier:          zgyi1CSk9p83QvrPhX7IERdFYIUskd82a0fUfr51fKk=
Subject key identifier:   97:FD:59:50:E6:B9:BA:90:B1:AF:22:65:AB:60:A2:87:FA:4E:68:4C
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849B14A0E4BF58DB8EB2143F270
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1f66752e-7728-3554-8026-523a32c1f919.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        2001:4f8:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0e:4b:f5:8d:b8:eb:21:43:f2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=c7b61f23-7413-4ffb-86b7-3b509d3b39b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:af:32:32:69:3c:9e:6d:43:da:e0:57:09:eb:
                    e3:e2:46:84:c8:70:4f:a7:1f:ed:ef:7c:21:5d:7a:
                    cf:be:85:c1:78:09:a1:53:9b:12:bf:d6:20:26:da:
                    d8:0b:ba:46:18:ba:16:76:6e:5e:99:14:ab:f8:83:
                    6a:bc:5f:5e:96:34:d5:c3:92:33:c4:41:bc:77:65:
                    94:e1:c2:55:4b:36:93:37:51:92:7f:00:08:f7:b5:
                    bf:b5:08:66:9c:ca:99:13:91:91:20:9a:92:8a:65:
                    a3:ab:3d:c2:b2:f8:a1:70:a2:3c:45:25:56:f3:16:
                    fa:ab:08:32:93:67:d0:8d:77:0c:7a:e5:48:f9:31:
                    51:98:c3:08:a0:f5:df:a7:49:4b:c7:c6:da:ad:5e:
                    54:92:37:8f:e1:b5:06:95:a2:45:a4:0e:08:c9:29:
                    34:ba:1a:83:b2:68:6e:36:f5:5b:76:48:a7:60:e6:
                    d8:dc:33:e5:04:0f:45:cd:dc:56:cb:d7:c0:93:d2:
                    23:ac:1b:ad:19:6f:15:96:76:13:d6:74:d4:f9:32:
                    6e:9a:21:8c:b8:09:df:59:ce:f4:92:71:e9:cb:98:
                    aa:b5:eb:2b:b8:8a:81:05:ee:68:11:04:2b:31:38:
                    78:9f:0d:e9:1c:fd:d4:dd:02:0b:2a:9d:06:7a:2f:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FD:59:50:E6:B9:BA:90:B1:AF:22:65:AB:60:A2:87:FA:4E:68:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1f66752e-7728-3554-8026-523a32c1f919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:73:1e:31:94:7b:e7:02:6a:1e:6f:94:33:f1:7c:ca:4b:
         a0:5e:9b:e4:df:e5:c2:a7:7f:fc:94:12:0e:d0:cd:5b:12:b6:
         ec:4a:41:f2:fe:c7:e5:77:d6:29:92:5d:2b:1f:c2:51:7b:cf:
         cd:d3:bc:64:72:29:b8:6d:3c:fc:1d:81:49:a5:06:ec:c3:69:
         9f:c9:7d:20:59:18:e6:57:7e:47:6a:e8:d7:be:98:c8:f2:35:
         1b:44:84:f7:7d:37:ca:71:0d:7c:d7:69:3a:ad:1b:2b:f3:a6:
         e9:fb:3a:b6:18:20:d6:e3:6b:75:fe:9b:3e:18:a4:d5:3d:7c:
         b1:16:43:f7:5d:be:b0:a3:d4:86:fe:34:98:12:6c:f9:73:00:
         07:d8:6d:fb:1b:f3:ff:15:57:83:07:da:88:be:58:a0:bf:76:
         be:1f:15:69:f0:16:0d:fb:2b:fe:47:ef:16:26:9f:d0:f2:55:
         10:05:a7:61:a4:2b:c5:18:07:06:f6:64:f0:6b:b3:ba:05:0a:
         9a:73:02:5c:a6:59:3f:0a:b6:da:55:6f:40:57:7c:f0:d5:5d:
         df:79:aa:20:82:fb:78:20:30:23:3d:25:53:c8:b3:14:ae:b0:
         79:dc:33:49:c3:9a:4e:d9:66:c4:d6:15:30:ff:cf:14:58:04:
         d1:d6:2e:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSg5L9Y246yFD8nAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
YzdiNjFmMjMtNzQxMy00ZmZiLTg2YjctM2I1MDlkM2IzOWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq8yMmk8nm1D2uBXCevj4kaEyHBPpx/t73wh
XXrPvoXBeAmhU5sSv9YgJtrYC7pGGLoWdm5emRSr+INqvF9eljTVw5IzxEG8d2WU
4cJVSzaTN1GSfwAI97W/tQhmnMqZE5GRIJqSimWjqz3CsvihcKI8RSVW8xb6qwgy
k2fQjXcMeuVI+TFRmMMIoPXfp0lLx8barV5UkjeP4bUGlaJFpA4IySk0uhqDsmhu
NvVbdkinYObY3DPlBA9FzdxWy9fAk9IjrButGW8VlnYT1nTU+TJumiGMuAnfWc70
knHpy5iqtesruIqBBe5oEQQrMTh4nw3pHP3U3QILKp0Gei/vJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJf9WVDmubqQsa8iZatgoof6TmhMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMWY2Njc1MmUtNzcyOC0z
NTU0LTgwMjYtNTIzYTMyYzFmOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEE+AAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHt8cx4xlHvnAmoeb5Qz8XzKS6Bem+Tf5cKnf/yUEg7QzVsStuxK
QfL+x+V31imSXSsfwlF7z83TvGRyKbhtPPwdgUmlBuzDaZ/JfSBZGOZXfkdq6Ne+
mMjyNRtEhPd9N8pxDXzXaTqtGyvzpun7OrYYINbja3X+mz4YpNU9fLEWQ/ddvrCj
1Ib+NJgSbPlzAAfYbfsb8/8VV4MH2oi+WKC/dr4fFWnwFg37K/5H7xYmn9DyVRAF
p2GkK8UYBwb2ZPBrs7oFCppzAlymWT8KttpVb0BXfPDVXd95qiCC+3ggMCM9JVPI
sxSusHncM0nDmk7ZZsTWFTD/zxRYBNHWLgM=
-----END CERTIFICATE-----
Generated at Mon May 12 04:39:58 2025 by rpki-client