Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61234719-1237-3ce8-ae01-f51935ee326a.roa
File:                     61234719-1237-3ce8-ae01-f51935ee326a.roa (raw, json)
Hash identifier:          FWtp43ohbtfGF313/mTnQA2FhxZ+gGwFjvDlOdlP2ic=
Subject key identifier:   3A:2B:B3:98:E5:2B:F9:31:C2:3C:C3:C7:AD:DA:B9:BF:FF:8B:9E:69
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584988CF6D1F2D083902362F7E70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61234719-1237-3ce8-ae01-f51935ee326a.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     35994
IP address blocks:        2600:1404:e800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:6d:1f:2d:08:39:02:36:2f:7e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=7d96d133-58a1-49a5-a5ca-a0e5023cb5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:93:83:00:21:84:b6:da:94:db:88:6b:e4:
                    7c:99:7a:c4:d7:e2:58:9e:8d:de:2f:80:97:ba:01:
                    b3:de:65:78:f1:20:ea:64:5f:7f:31:b0:b0:35:a8:
                    16:3a:33:ab:bc:4e:b2:f8:4a:95:04:65:11:79:8e:
                    d3:fc:89:5f:94:b2:17:5b:13:37:11:0c:dc:c2:81:
                    db:aa:47:a0:53:31:7c:87:f0:84:10:41:1f:71:ce:
                    3c:37:fa:14:a2:17:b3:ab:f9:df:e3:e0:38:9a:ca:
                    56:ea:69:6c:63:bd:41:fa:a5:40:97:fa:4c:50:8b:
                    a2:ab:19:fa:ee:e3:47:f6:cd:3a:eb:87:c5:bc:95:
                    f6:31:ff:9f:72:f4:ed:68:48:b6:6a:6d:b5:69:13:
                    79:3a:18:0a:87:f2:9f:9a:bd:19:3d:16:3f:35:52:
                    8c:82:13:13:d8:3c:2d:03:78:51:37:cb:aa:c9:dc:
                    3e:11:f5:2a:d1:83:97:97:7a:56:14:97:ea:7d:73:
                    a5:bb:c6:6c:3c:46:0f:c9:6d:07:a6:42:53:bd:cc:
                    d1:a6:42:66:8a:bf:3e:4f:05:24:14:1c:6e:57:61:
                    0e:a0:d8:22:06:80:e7:2c:95:a5:89:2d:75:79:4f:
                    d6:d8:8b:57:26:5a:a4:65:27:cd:d3:be:5e:ce:e7:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2B:B3:98:E5:2B:F9:31:C2:3C:C3:C7:AD:DA:B9:BF:FF:8B:9E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61234719-1237-3ce8-ae01-f51935ee326a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:e800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:be:13:45:47:a7:9c:8b:56:78:c9:bf:b1:72:f2:e5:ff:2c:
         27:2f:a8:62:52:e0:0a:39:b1:b7:c4:f2:2e:0f:c1:d9:86:5a:
         49:00:64:04:ab:09:7b:32:e7:0b:4a:28:c2:73:b4:8d:4a:a4:
         43:20:aa:e9:2c:46:ce:7f:53:90:47:92:61:e7:b9:d3:62:4d:
         c8:b0:8b:32:3a:f9:5b:4d:e2:77:5f:99:4e:85:5f:fd:eb:db:
         94:f9:3f:a8:fc:35:c6:26:d9:14:42:22:7b:38:b9:64:f9:7a:
         7b:81:25:dd:4d:e1:47:2d:56:59:ff:81:4b:7c:cb:31:70:d9:
         cf:18:c8:8a:aa:5e:02:3d:5a:2d:b9:87:f6:f7:e5:df:8e:65:
         b6:9c:60:0e:d2:b6:6d:aa:d4:8e:5c:b1:4a:57:cd:ba:cf:bd:
         6e:58:24:d1:5b:8c:9d:3b:92:04:f9:52:4c:d7:b4:f9:03:57:
         26:fc:bb:3b:9d:6b:9b:2a:7f:54:7a:2c:5f:de:8b:62:60:ac:
         0b:73:92:ae:a1:d4:10:a3:a6:80:a9:f1:cc:9b:a8:c1:fc:00:
         70:4c:9c:18:75:7b:b0:92:eb:5e:cf:14:12:15:0c:e0:70:45:
         72:4c:dd:e8:12:c8:43:7d:40:fb:8c:5e:aa:dc:c6:6b:5b:c2:
         33:a3:21:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIz20fLQg5AjYvfnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
N2Q5NmQxMzMtNThhMS00OWE1LWE1Y2EtYTBlNTAyM2NiNWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdaTgwAhhLbalNuIa+R8mXrE1+JYno3eL4CX
ugGz3mV48SDqZF9/MbCwNagWOjOrvE6y+EqVBGUReY7T/IlflLIXWxM3EQzcwoHb
qkegUzF8h/CEEEEfcc48N/oUohezq/nf4+A4mspW6mlsY71B+qVAl/pMUIuiqxn6
7uNH9s0664fFvJX2Mf+fcvTtaEi2am21aRN5OhgKh/Kfmr0ZPRY/NVKMghMT2Dwt
A3hRN8uqydw+EfUq0YOXl3pWFJfqfXOlu8ZsPEYPyW0HpkJTvczRpkJmir8+TwUk
FBxuV2EOoNgiBoDnLJWliS11eU/W2ItXJlqkZSfN075ezue0qQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDors5jlK/kxwjzDx63aub//i55pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjEyMzQ3MTktMTIzNy0z
Y2U4LWFlMDEtZjUxOTM1ZWUzMjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBOgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHe+E0VHp5yLVnjJv7Fy8uX/LCcvqGJS4Ao5sbfE8i4PwdmGWkkA
ZASrCXsy5wtKKMJztI1KpEMgquksRs5/U5BHkmHnudNiTciwizI6+VtN4ndfmU6F
X/3r25T5P6j8NcYm2RRCIns4uWT5enuBJd1N4UctVln/gUt8yzFw2c8YyIqqXgI9
Wi25h/b35d+OZbacYA7Stm2q1I5csUpXzbrPvW5YJNFbjJ07kgT5UkzXtPkDVyb8
uzuda5sqf1R6LF/ei2JgrAtzkq6h1BCjpoCp8cybqMH8AHBMnBh1e7CS617PFBIV
DOBwRXJM3egSyEN9QPuMXqrcxmtbwjOjIdo=
-----END CERTIFICATE-----
Generated at Mon May 5 07:21:11 2025 by rpki-client