Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/0c939b79-4781-3540-90ff-69ea7b2d3d30.roa
File:                     0c939b79-4781-3540-90ff-69ea7b2d3d30.roa (raw, json)
Hash identifier:          SuS5v3FFoMVcNZFxc3RTvjKJaXugf3jRK73WgdVn9es=
Subject key identifier:   21:3D:8C:29:7E:D7:FD:9A:B2:17:DC:48:B6:91:19:80:09:6C:E8:86
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F43285849393E717BE834B2048DF4B800
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/0c939b79-4781-3540-90ff-69ea7b2d3d30.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     398351
IP address blocks:        2602:80f:900a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:71:7b:e8:34:b2:04:8d:f4:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=cc340bf6-fddc-459e-bcbe-ce29f8274ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:08:1e:2d:f3:6a:04:b7:ac:4f:5b:2c:ea:8d:
                    04:3f:3c:08:7d:38:b7:56:d2:2b:a6:ce:8f:5a:0e:
                    3d:6c:e9:f9:38:35:f2:ac:c9:5d:b0:c6:a4:15:60:
                    4c:20:ae:80:f6:04:da:08:cd:9d:4e:fd:2d:87:52:
                    83:45:94:9f:49:ca:17:c7:16:d0:59:81:9e:fe:39:
                    6f:76:a9:5c:c2:2e:c8:ba:18:e5:67:bf:3e:25:ac:
                    9f:0d:70:5d:c7:5d:c2:4d:3e:f4:23:ae:af:bb:24:
                    64:15:05:d5:87:65:1d:02:a9:6b:34:f1:1f:e5:31:
                    d5:26:f1:96:8b:56:bf:7c:9a:d5:37:38:c0:98:6f:
                    4b:86:57:29:6b:2e:9b:e9:cf:6d:ae:bb:d6:f7:c3:
                    8b:45:36:92:79:02:a3:8e:61:a7:46:e7:28:41:b5:
                    5c:d6:cb:18:64:be:65:d9:d7:7f:d1:db:f4:37:ba:
                    f2:af:09:54:cd:14:e9:7e:65:09:a4:bc:35:89:27:
                    a3:61:c3:34:2b:f2:f6:5c:7f:19:48:4e:f8:f8:0f:
                    a3:ad:e4:ee:55:d6:89:8a:a2:17:5c:06:14:94:a1:
                    d0:d9:12:d8:78:14:34:3f:da:7d:de:83:e1:c1:9c:
                    44:5d:ee:40:ae:cd:e4:3a:1f:8f:74:59:40:8d:6e:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3D:8C:29:7E:D7:FD:9A:B2:17:DC:48:B6:91:19:80:09:6C:E8:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/0c939b79-4781-3540-90ff-69ea7b2d3d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:900a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:67:24:e7:58:6c:06:96:21:73:1d:6a:b2:9a:5d:8d:7f:07:
         41:3b:ef:6a:05:74:d6:c1:cd:a3:57:87:b4:8a:3f:83:74:5e:
         17:24:af:68:cf:78:70:af:1a:6e:af:a9:13:6e:3c:7b:d6:55:
         4b:6e:10:e6:f8:86:d3:6d:0f:b3:11:4f:07:2c:b5:24:8c:ae:
         8d:11:ee:d0:8d:ce:bc:f0:e8:e6:e0:ac:b1:a6:77:3a:7b:65:
         f1:92:f4:27:ca:2f:80:66:af:9a:60:87:09:3e:0d:97:3a:66:
         27:dc:cf:31:4f:d4:fe:9c:50:5d:b3:ec:ce:da:8c:f0:81:6a:
         87:bb:9c:79:ff:a7:26:d5:a4:5b:ee:3e:45:de:ec:9d:2f:e9:
         6f:9c:1c:14:ef:c1:1c:89:0f:c4:1e:f2:df:2d:e9:9e:4a:6a:
         30:bc:74:d9:2d:bf:f2:16:95:eb:6c:36:cc:b9:aa:05:83:16:
         95:db:49:0d:3a:0d:7f:87:7c:13:41:46:1a:64:8b:22:bb:53:
         30:6e:91:87:0b:5e:0a:eb:03:05:24:82:e3:e0:9a:d0:9d:97:
         89:03:9b:68:c9:3b:1d:31:be:75:8c:42:03:27:87:fc:8c:48:
         8c:81:24:af:58:ed:3c:c3:7a:74:ed:9a:0e:a9:ea:61:6c:70:
         5a:5e:67:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk5PnF76DSyBI30uAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl
MWVlMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
Y2MzNDBiZjYtZmRkYy00NTllLWJjYmUtY2UyOWY4Mjc0YmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAgeLfNqBLesT1ss6o0EPzwIfTi3VtIrps6P
Wg49bOn5ODXyrMldsMakFWBMIK6A9gTaCM2dTv0th1KDRZSfScoXxxbQWYGe/jlv
dqlcwi7IuhjlZ78+JayfDXBdx13CTT70I66vuyRkFQXVh2UdAqlrNPEf5THVJvGW
i1a/fJrVNzjAmG9Lhlcpay6b6c9trrvW98OLRTaSeQKjjmGnRucoQbVc1ssYZL5l
2dd/0dv0N7ryrwlUzRTpfmUJpLw1iSejYcM0K/L2XH8ZSE74+A+jreTuVdaJiqIX
XAYUlKHQ2RLYeBQ0P9p93oPhwZxEXe5Ars3kOh+PdFlAjW5RLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCE9jCl+1/2ashfcSLaRGYAJbOiGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3
Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvMGM5MzliNzktNDc4MS0z
NTQwLTkwZmYtNjllYTdiMmQzZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz
MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4
ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl
NjhkOGUxZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIID5AK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAClnJOdYbAaWIXMdarKaXY1/B0E772oFdNbBzaNXh7SKP4N0Xhck
r2jPeHCvGm6vqRNuPHvWVUtuEOb4htNtD7MRTwcstSSMro0R7tCNzrzw6ObgrLGm
dzp7ZfGS9CfKL4Bmr5pghwk+DZc6ZifczzFP1P6cUF2z7M7ajPCBaoe7nHn/pybV
pFvuPkXe7J0v6W+cHBTvwRyJD8Qe8t8t6Z5KajC8dNktv/IWletsNsy5qgWDFpXb
SQ06DX+HfBNBRhpkiyK7UzBukYcLXgrrAwUkguPgmtCdl4kDm2jJOx0xvnWMQgMn
h/yMSIyBJK9Y7TzDenTtmg6p6mFscFpeZwU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:59:41 2025 by rpki-client