Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4482cef6-6319-3ee5-9102-fef37ea3308a.roa
File:                     4482cef6-6319-3ee5-9102-fef37ea3308a.roa (raw, json)
Hash identifier:          5hOxF5/ctD/OnXKvqtpkyevp7YCGsEt58Yr4WgrHTT4=
Subject key identifier:   C9:A1:4D:EE:14:17:48:F8:B9:33:CF:C5:92:5E:D6:F0:60:B7:8F:83
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AF042D19ED5CF35930C80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4482cef6-6319-3ee5-9102-fef37ea3308a.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11351
IP address blocks:        2600:6c33:254::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:f0:42:d1:9e:d5:cf:35:93:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=2b2a6d98-31ca-4c8a-82d7-94d10a49d55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:bf:5d:9e:83:c6:45:29:de:aa:4b:da:f8:
                    22:b3:de:aa:52:a1:31:bd:73:f8:97:22:e5:d5:b1:
                    26:1e:51:4e:84:69:1b:ed:1a:71:3b:c0:34:59:df:
                    0c:f9:c5:d9:0f:4a:f8:dd:45:bb:44:11:2a:a1:4e:
                    2b:4f:f3:5e:c9:ab:8b:be:f5:3a:1d:46:9e:a6:5b:
                    93:4d:76:e1:f4:ed:a0:1f:02:16:81:17:40:7a:70:
                    43:5a:84:24:bb:25:38:c2:3a:74:06:43:2e:d7:75:
                    fe:a1:50:cd:b6:9e:42:d2:58:cb:f8:c5:d2:ff:58:
                    4a:53:34:17:94:ce:4a:45:28:fc:cc:6f:bb:c1:c1:
                    56:df:11:0e:04:9b:8f:03:74:98:56:e3:bb:68:af:
                    5a:44:3b:c8:eb:92:7e:eb:a3:9e:c4:fb:32:c6:75:
                    95:64:fa:4d:2e:d7:8b:6d:9a:5a:de:ce:b5:11:1f:
                    fa:9a:f0:81:f4:79:34:f8:dd:43:d0:c1:0e:25:c7:
                    64:de:7c:75:d6:e7:96:9c:7b:ea:bc:ac:fd:72:84:
                    33:c9:21:f1:94:67:74:17:2a:d7:2a:0f:d5:ba:92:
                    f8:6e:3a:ea:1d:3a:83:01:5a:7c:87:95:18:f5:d0:
                    76:0e:99:33:7b:fd:c3:14:6c:c8:1b:e6:6c:47:0f:
                    23:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A1:4D:EE:14:17:48:F8:B9:33:CF:C5:92:5E:D6:F0:60:B7:8F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4482cef6-6319-3ee5-9102-fef37ea3308a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c33:254::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:6c:3a:2d:5f:19:0d:75:5e:b9:d9:17:9b:c6:8b:49:4a:23:
         be:ee:79:5e:0e:52:45:a3:d8:fb:68:14:7e:c9:3b:24:98:ac:
         21:b9:0e:8a:34:22:92:8b:c4:86:ab:07:b6:e9:5d:f9:93:dc:
         1c:0d:20:6a:ab:14:18:b0:09:9b:60:36:d5:38:43:86:e3:c2:
         37:21:bb:a2:ae:12:b1:fd:7a:c1:6e:3d:f9:62:d0:fa:9c:bd:
         1c:55:8f:35:bd:32:0b:89:f8:7a:22:f4:be:b3:8c:bc:47:39:
         5d:ea:df:39:b1:e5:b6:91:59:48:ee:76:4c:0d:7a:3d:c0:8b:
         1e:a3:10:3d:dc:b8:ca:05:95:27:40:1b:46:bd:e9:b3:dc:94:
         46:ce:7d:78:c4:ee:ae:ab:2e:ea:a4:96:88:26:b8:6d:e2:25:
         c9:98:d2:15:d4:2b:0a:55:e3:82:5c:49:c1:3a:a3:1b:de:6e:
         e3:f6:08:52:95:bd:15:9c:57:b6:b5:d5:3d:68:d8:a8:b0:24:
         5b:98:2a:72:ad:f6:aa:aa:4a:11:00:2e:34:1e:f9:24:09:50:
         80:b9:c0:00:b2:cb:23:96:82:d8:1a:29:33:ce:06:54:6c:e2:
         a6:4a:1b:ee:84:78:47:f6:e1:f0:e9:03:3b:62:0d:04:00:47:
         66:6c:0f:ec
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCCvBC0Z7VzzWTDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MmIyYTZkOTgtMzFjYS00YzhhLTgyZDctOTRkMTBhNDlkNTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWu/XZ6DxkUp3qpL2vgis96qUqExvXP4lyLl
1bEmHlFOhGkb7RpxO8A0Wd8M+cXZD0r43UW7RBEqoU4rT/NeyauLvvU6HUaepluT
TXbh9O2gHwIWgRdAenBDWoQkuyU4wjp0BkMu13X+oVDNtp5C0ljL+MXS/1hKUzQX
lM5KRSj8zG+7wcFW3xEOBJuPA3SYVuO7aK9aRDvI65J+66OexPsyxnWVZPpNLteL
bZpa3s61ER/6mvCB9Hk0+N1D0MEOJcdk3nx11ueWnHvqvKz9coQzySHxlGd0FyrX
Kg/VupL4bjrqHTqDAVp8h5UY9dB2Dpkze/3DFGzIG+ZsRw8jFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMmhTe4UF0j4uTPPxZJe1vBgt4+DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDQ4MmNlZjYtNjMxOS0z
ZWU1LTkxMDItZmVmMzdlYTMzMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBsMwJU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALBsOi1fGQ11XrnZF5vGi0lKI77ueV4OUkWj2PtoFH7JOySYrCG5
Doo0IpKLxIarB7bpXfmT3BwNIGqrFBiwCZtgNtU4Q4bjwjchu6KuErH9esFuPfli
0PqcvRxVjzW9MguJ+Hoi9L6zjLxHOV3q3zmx5baRWUjudkwNej3Aix6jED3cuMoF
lSdAG0a96bPclEbOfXjE7q6rLuqklogmuG3iJcmY0hXUKwpV44JcScE6oxvebuP2
CFKVvRWcV7a11T1o2KiwJFuYKnKt9qqqShEALjQe+SQJUIC5wACyyyOWgtgaKTPO
BlRs4qZKG+6EeEf24fDpAztiDQQAR2ZsD+w=
-----END CERTIFICATE-----
Generated at Sat May 10 05:12:50 2025 by rpki-client