Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/70324e2c-97e2-38b4-8a29-b74a347765c6.roa
File:                     70324e2c-97e2-38b4-8a29-b74a347765c6.roa (raw, json)
Hash identifier:          BwvH04Y+fWPnYGodjgUTfzaSa4KgWESEd5iIu2LMtjA=
Subject key identifier:   53:B3:9C:46:BD:5D:FD:58:BC:33:EA:0A:09:59:BB:53:A6:55:9D:ED
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A436A629825664587D55CB60
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/70324e2c-97e2-38b4-8a29-b74a347765c6.roa
Signing time:             Fri 25 Apr 2025 08:36:30 +0000
ROA not before:           Fri 25 Apr 2025 08:36:30 +0000
ROA not after:            Thu 24 Jul 2025 08:36:30 +0000
asID:                     12041
IP address blocks:        2001:500:47::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:36:a6:29:82:56:64:58:7d:55:cb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 25 08:36:30 2025 GMT
            Not After : Jul 24 08:36:30 2025 GMT
        Subject: CN=280d1c32-47ea-475d-b367-180fb7ff28d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:40:a4:c1:2f:e8:89:bb:86:b1:db:55:1e:
                    de:1c:21:c9:63:4f:9c:83:53:7e:ab:64:75:fc:87:
                    41:03:37:7c:21:99:bc:95:af:c6:87:26:2d:12:6b:
                    29:1f:af:91:9f:03:54:40:ec:7c:20:0c:25:d2:b9:
                    12:8a:11:5d:f5:f6:8c:a0:f4:59:bd:08:50:c7:d5:
                    38:f7:0b:cd:2d:52:c8:c8:82:fc:b9:b0:e3:ca:7b:
                    1e:31:67:d9:fa:b9:da:75:e5:b4:6d:f1:8c:94:12:
                    94:21:4e:aa:b7:4c:11:d3:ca:76:4e:23:9c:cb:be:
                    fe:44:26:ff:e3:f2:d6:e5:52:14:ab:7c:4c:0b:06:
                    56:89:2c:67:f6:51:82:3e:a3:92:4b:f9:e9:5f:95:
                    86:15:eb:c7:73:f3:6a:e5:a3:ed:c5:76:b7:fd:8f:
                    b4:83:ea:ad:a9:63:1a:77:af:c1:14:73:c5:71:c1:
                    bb:6a:28:75:9e:a3:11:9c:a5:7a:ea:5c:ee:2c:cc:
                    2e:03:c0:67:6f:25:86:c3:b8:52:27:4c:92:8e:b0:
                    44:d6:3c:f4:8d:5c:42:61:f0:47:a4:e7:af:93:9f:
                    d9:62:01:de:a8:b9:9f:48:3c:4b:82:07:45:f4:a2:
                    75:af:ef:3e:61:48:1d:be:46:d7:91:32:38:d7:b7:
                    3d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B3:9C:46:BD:5D:FD:58:BC:33:EA:0A:09:59:BB:53:A6:55:9D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/70324e2c-97e2-38b4-8a29-b74a347765c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:47::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:94:f7:09:34:52:9a:81:be:dd:49:1a:0e:11:88:2a:47:
         a9:ae:27:5a:8b:55:59:ad:e8:8e:a6:be:3d:18:f9:ce:3f:e0:
         9c:10:19:f8:67:75:98:3c:6d:67:10:30:ae:10:64:c3:ee:ae:
         03:5b:91:0e:2c:37:ab:f3:72:04:35:0b:bf:97:a7:8c:05:c8:
         19:18:e3:12:db:0b:e5:9b:6a:3a:a5:fb:2c:42:96:ba:c5:af:
         58:63:a5:d7:97:1d:5a:a5:e4:c2:c2:ec:f4:6c:cf:38:9b:75:
         1a:bd:cf:9b:84:97:08:f9:ca:05:9a:9e:71:2d:23:82:d2:0e:
         0b:fc:e0:1b:aa:00:7d:ef:c4:27:2f:a9:f3:6d:90:14:d0:b8:
         27:c9:c4:bc:0d:4f:7e:dd:26:59:af:80:57:42:69:18:3b:17:
         58:c5:7d:a8:6a:d3:4a:e5:08:51:4f:83:bf:32:60:47:9c:33:
         37:af:a1:67:8f:16:01:e9:a7:17:07:5f:51:14:be:07:2d:b7:
         55:fb:4d:bc:7f:1f:cc:ca:72:5d:7b:c2:67:48:dc:b8:87:c8:
         40:17:18:8d:61:06:3d:ab:f6:ac:f3:66:ca:eb:df:bd:d5:85:
         b0:d7:84:c5:5d:cf:79:65:06:fb:54:f9:39:f6:f4:15:8f:b8:
         cd:14:8c:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkNqYpglZkWH1Vy2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDQyNTA4MzYzMFoXDTI1MDcyNDA4MzYzMFowLzEtMCsGA1UEAxMk
MjgwZDFjMzItNDdlYS00NzVkLWIzNjctMTgwZmI3ZmYyOGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+BApMEv6Im7hrHbVR7eHCHJY0+cg1N+q2R1
/IdBAzd8IZm8la/GhyYtEmspH6+RnwNUQOx8IAwl0rkSihFd9faMoPRZvQhQx9U4
9wvNLVLIyIL8ubDjynseMWfZ+rnadeW0bfGMlBKUIU6qt0wR08p2TiOcy77+RCb/
4/LW5VIUq3xMCwZWiSxn9lGCPqOSS/npX5WGFevHc/Nq5aPtxXa3/Y+0g+qtqWMa
d6/BFHPFccG7aih1nqMRnKV66lzuLMwuA8BnbyWGw7hSJ0ySjrBE1jz0jVxCYfBH
pOevk5/ZYgHeqLmfSDxLggdF9KJ1r+8+YUgdvkbXkTI417c9mwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFOznEa9Xf1YvDPqCglZu1OmVZ3tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNzAzMjRlMmMtOTdlMi0z
OGI0LThhMjktYjc0YTM0Nzc2NWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF/GlPcJNFKagb7dSRoOEYgqR6muJ1qLVVmt6I6mvj0Y+c4/4JwQ
GfhndZg8bWcQMK4QZMPurgNbkQ4sN6vzcgQ1C7+Xp4wFyBkY4xLbC+Wbajql+yxC
lrrFr1hjpdeXHVql5MLC7PRszzibdRq9z5uElwj5ygWannEtI4LSDgv84BuqAH3v
xCcvqfNtkBTQuCfJxLwNT37dJlmvgFdCaRg7F1jFfahq00rlCFFPg78yYEecMzev
oWePFgHppxcHX1EUvgctt1X7Tbx/H8zKcl17wmdI3LiHyEAXGI1hBj2r9qzzZsrr
373VhbDXhMVdz3llBvtU+Tn29BWPuM0UjGI=
-----END CERTIFICATE-----
Generated at Sat May 10 13:33:23 2025 by rpki-client