Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa
File:                     a18857b3-bcc7-3703-9486-773d81f811bd.roa (raw, json)
Hash identifier:          FOGTONU131FK2cP72Zp55g+V7197utp0PKzARv0gSqk=
Subject key identifier:   EF:89:48:52:3E:5F:35:5A:60:86:59:06:F3:6B:39:D9:4F:DF:94:B6
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F432858498E64851180FB9FB7034A2900
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        2602:fa36::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:85:11:80:fb:9f:b7:03:4a:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=b4bbaf67-553d-47d4-bd6d-fcb243e483eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:67:78:36:1c:42:92:21:66:d7:47:93:97:
                    8b:b8:aa:9e:62:7b:8c:94:16:6e:9c:b2:dd:d7:87:
                    50:e1:2f:02:c8:a8:c7:e1:e7:63:90:40:5b:3a:eb:
                    8a:13:7f:27:0d:47:5c:41:94:26:85:4f:8d:f1:c9:
                    9c:b5:6b:f6:15:f0:f0:35:5c:6b:7a:ca:4c:38:4e:
                    79:ec:c5:89:14:46:dd:88:33:e6:b9:78:2b:43:8e:
                    01:b6:67:72:40:3d:c7:d2:78:70:49:f1:0a:f3:5a:
                    cf:d4:11:6a:ff:c4:4d:8d:9f:f4:eb:93:87:fc:ba:
                    ee:c1:ac:9d:8a:a8:8e:14:1f:8f:f6:b6:f3:fb:f5:
                    31:d4:ed:83:e0:b7:2c:a3:48:16:01:59:c3:4a:67:
                    d3:fc:29:aa:80:b5:9f:2b:0a:6e:ae:cd:0c:83:fd:
                    e3:44:44:c6:60:3f:d8:b2:8d:a1:7a:44:cd:46:0b:
                    f3:34:1d:57:ca:25:45:77:b3:9b:17:28:04:56:64:
                    3d:08:bd:db:1c:27:9f:f5:58:87:18:69:0c:07:a7:
                    7d:27:75:7c:35:14:00:5c:f9:89:ea:12:30:51:07:
                    6f:e7:d4:b9:e7:30:d0:50:e2:c8:0b:5f:e7:a5:1d:
                    9d:fe:55:a8:02:47:6a:7e:88:53:e2:12:8e:0b:33:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:89:48:52:3E:5F:35:5A:60:86:59:06:F3:6B:39:D9:4F:DF:94:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/a18857b3-bcc7-3703-9486-773d81f811bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa36::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:f5:8c:2f:0f:ce:e5:ab:da:a1:26:f3:8d:3a:0e:94:9c:
         ad:97:7a:53:6d:ca:24:8d:15:dd:73:fa:64:56:32:4c:ad:e2:
         22:e0:51:71:cd:49:fd:60:a1:61:70:12:14:70:b9:7c:86:85:
         c3:51:fc:2c:2f:cb:31:c6:eb:2d:25:4d:b8:9d:fc:ba:9f:30:
         50:c8:ea:f5:7c:da:3d:fd:5b:d9:90:0c:59:c3:c7:be:16:eb:
         57:84:29:2d:4d:2a:58:56:65:4f:eb:9c:5b:b5:09:83:6a:b6:
         76:46:50:bd:03:02:9e:51:08:78:88:5a:7d:1d:2d:95:5c:b0:
         86:81:58:e5:82:32:a6:d2:4f:1e:9f:e2:4b:34:10:3e:45:17:
         93:cf:40:26:0b:48:e1:22:50:d7:a8:80:40:82:6f:ab:3e:00:
         91:4f:2a:95:fd:7e:b5:c7:fb:ac:38:fa:41:bf:fc:be:33:13:
         80:f4:47:63:f9:be:a6:66:a6:3f:dd:0b:00:65:02:0e:a5:f8:
         12:02:b2:31:93:1d:c0:01:78:ac:97:25:15:c8:11:50:4e:b9:
         81:3d:bf:d2:78:3f:43:c9:99:5c:e8:ae:34:b2:ea:9d:01:ec:
         9e:d6:38:6f:ab:34:e2:82:e3:4e:70:3c:00:65:c5:f0:34:42:
         c2:d7:3c:cd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmOZIURgPuftwNKKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGZmNTVmYmUtMzljMi00NWI0LTlhYTItNjAxNjJkNGUy
OTMyMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk
YjRiYmFmNjctNTUzZC00N2Q0LWJkNmQtZmNiMjQzZTQ4M2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6tneDYcQpIhZtdHk5eLuKqeYnuMlBZunLLd
14dQ4S8CyKjH4edjkEBbOuuKE38nDUdcQZQmhU+N8cmctWv2FfDwNVxrespMOE55
7MWJFEbdiDPmuXgrQ44BtmdyQD3H0nhwSfEK81rP1BFq/8RNjZ/065OH/Lruwayd
iqiOFB+P9rbz+/Ux1O2D4Lcso0gWAVnDSmfT/CmqgLWfKwpurs0Mg/3jRETGYD/Y
so2hekTNRgvzNB1XyiVFd7ObFygEVmQ9CL3bHCef9ViHGGkMB6d9J3V8NRQAXPmJ
6hIwUQdv59S55zDQUOLIC1/npR2d/lWoAkdqfohT4hKOCzPa/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO+JSFI+XzVaYIZZBvNrOdlP35S2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1
NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2MmQ0ZTI5MzIvYTE4ODU3YjMtYmNjNy0z
NzAzLTk0ODYtNzczZDgxZjgxMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGZmNTVmYmUtMzljMi00NWI0LTlh
YTItNjAxNjJkNGUyOTMyLzRmZjU1ZmJlLTM5YzItNDViNC05YWEyLTYwMTYyZDRl
MjkzMi5jcmwwHwYDVR0jBBgwFoAUHP9AdpG2YPFJ/JUDj4ksEk1MAVswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZmY1NWZiZS0zOWMyLTQ1YjQtOWFhMi02MDE2
MmQ0ZTI5MzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6NgAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAUs9YwvD87lq9qhJvONOg6UnK2XelNtyiSNFd1z+mRWMkyt4iLg
UXHNSf1goWFwEhRwuXyGhcNR/CwvyzHG6y0lTbid/LqfMFDI6vV82j39W9mQDFnD
x74W61eEKS1NKlhWZU/rnFu1CYNqtnZGUL0DAp5RCHiIWn0dLZVcsIaBWOWCMqbS
Tx6f4ks0ED5FF5PPQCYLSOEiUNeogECCb6s+AJFPKpX9frXH+6w4+kG//L4zE4D0
R2P5vqZmpj/dCwBlAg6l+BICsjGTHcABeKyXJRXIEVBOuYE9v9J4P0PJmVzorjSy
6p0B7J7WOG+rNOKC405wPABlxfA0QsLXPM0=
-----END CERTIFICATE-----
Generated at Mon May 5 05:35:11 2025 by rpki-client