Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/5ab46e0f-28bf-31dc-bd68-9893a35cc15b.roa
File:                     5ab46e0f-28bf-31dc-bd68-9893a35cc15b.roa (raw, json)
Hash identifier:          MwQOei1vcuXtK0ndzP0TuISq9mntofoaDO6BokzB7V0=
Subject key identifier:   2B:AF:18:C1:C0:DB:52:7E:3E:C4:FF:57:11:F6:B7:AE:C6:DD:9C:A5
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F43285849A61F47DA306643B0A904E2C0
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/5ab46e0f-28bf-31dc-bd68-9893a35cc15b.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     17012
IP address blocks:        2607:71c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:47:da:30:66:43:b0:a9:04:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=18dc3ff2-8918-426e-a6af-b9b2979eda55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:25:6b:b1:14:db:bf:48:2a:48:7c:32:5a:
                    cb:9b:1f:f3:28:df:09:4b:15:ea:64:42:d8:0f:6d:
                    18:00:be:2a:8d:1a:08:da:6f:e4:d1:38:26:63:71:
                    f6:90:34:d3:58:01:0d:82:7f:f3:d4:7a:db:a5:b1:
                    d4:b9:00:a2:ad:a4:20:0d:83:42:c0:9e:76:44:38:
                    27:da:e0:d2:4f:6e:19:66:ca:5f:6c:4b:5e:8e:09:
                    ca:35:7d:1a:ff:97:bc:1a:f9:07:e1:b7:cc:66:58:
                    83:64:b4:98:e4:55:ba:53:4f:be:3d:3c:b0:27:70:
                    50:e9:da:a1:95:64:60:96:6f:1b:a5:cc:82:90:f8:
                    bb:fc:c9:98:58:df:75:1c:ed:d2:b0:fe:0b:57:1b:
                    dc:59:cd:2b:96:61:e5:5c:ba:2f:bf:fb:7b:e9:8d:
                    6f:64:ea:b7:a5:05:69:cb:a2:4a:ae:19:06:3e:2f:
                    2e:68:ef:00:78:e3:61:59:15:fe:86:25:2d:b5:2f:
                    48:d5:cb:fd:e7:04:e0:5e:cb:3c:07:64:08:0e:53:
                    35:52:a2:af:25:9b:26:be:10:d6:30:52:c0:09:e4:
                    65:6b:d9:4d:46:a8:ad:a8:b9:23:59:f8:e4:de:cc:
                    fd:e1:70:96:43:74:82:df:85:f2:d7:06:9a:3e:bf:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AF:18:C1:C0:DB:52:7E:3E:C4:FF:57:11:F6:B7:AE:C6:DD:9C:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/5ab46e0f-28bf-31dc-bd68-9893a35cc15b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:71c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:92:be:53:c0:04:a3:cb:bd:d4:ad:56:10:33:d2:ad:ca:77:
         37:fb:2b:62:22:47:50:19:b4:23:7a:82:67:6b:4e:43:70:b1:
         ba:9a:3c:b9:3a:9f:02:ce:71:de:40:a9:91:51:53:ab:77:de:
         cf:08:fb:8e:f9:9a:d2:cc:ae:da:1b:f2:b9:ed:19:66:81:a3:
         07:af:2e:d8:f3:3b:90:d3:89:a7:13:fe:85:46:4e:71:bd:42:
         0f:50:7c:b6:e8:1c:e1:11:ee:53:c8:07:30:dd:42:ae:be:b4:
         53:f8:ae:15:3d:7b:5e:65:4b:df:5e:ec:df:f4:64:e9:33:55:
         91:a1:bd:15:87:78:4a:92:9f:d6:f6:1f:56:31:22:d9:ae:6f:
         ce:0e:3b:1f:70:6b:b1:e9:37:39:c8:73:87:19:01:c6:26:85:
         06:31:1a:18:90:12:6e:45:a3:6c:e6:74:44:0b:37:2f:6f:a9:
         2f:76:4f:59:9d:45:29:85:86:eb:7b:a7:75:11:03:ec:70:a3:
         1f:0a:13:77:a3:cc:fd:4c:b6:ae:73:4c:21:89:5f:d4:1c:dc:
         d0:1d:85:d0:09:2c:d7:f1:eb:67:a9:37:d5:6c:db:57:82:f3:
         8f:e1:55:28:8d:c1:2f:c8:f2:71:f6:5e:fd:69:46:c0:ab:ef:
         5e:35:9f:75
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmmH0faMGZDsKkE4sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk
MThkYzNmZjItODkxOC00MjZlLWE2YWYtYjliMjk3OWVkYTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Ila7EU279IKkh8MlrLmx/zKN8JSxXqZELY
D20YAL4qjRoI2m/k0TgmY3H2kDTTWAENgn/z1HrbpbHUuQCiraQgDYNCwJ52RDgn
2uDST24ZZspfbEtejgnKNX0a/5e8GvkH4bfMZliDZLSY5FW6U0++PTywJ3BQ6dqh
lWRglm8bpcyCkPi7/MmYWN91HO3SsP4LVxvcWc0rlmHlXLovv/t76Y1vZOq3pQVp
y6JKrhkGPi8uaO8AeONhWRX+hiUttS9I1cv95wTgXss8B2QIDlM1UqKvJZsmvhDW
MFLACeRla9lNRqitqLkjWfjk3sz94XCWQ3SC34Xy1waaPr+hWwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCuvGMHA21J+PsT/VxH2t67G3ZylMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvNWFiNDZlMGYtMjhiZi0z
MWRjLWJkNjgtOTg5M2EzNWNjMTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdxwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCAkr5TwASjy73UrVYQM9Ktync3+ytiIkdQGbQjeoJna05DcLG6mjy5
Op8CznHeQKmRUVOrd97PCPuO+ZrSzK7aG/K57RlmgaMHry7Y8zuQ04mnE/6FRk5x
vUIPUHy26BzhEe5TyAcw3UKuvrRT+K4VPXteZUvfXuzf9GTpM1WRob0Vh3hKkp/W
9h9WMSLZrm/ODjsfcGux6Tc5yHOHGQHGJoUGMRoYkBJuRaNs5nRECzcvb6kvdk9Z
nUUphYbre6d1EQPscKMfChN3o8z9TLauc0whiV/UHNzQHYXQCSzX8etnqTfVbNtX
gvOP4VUojcEvyPJx9l79aUbAq+9eNZ91
-----END CERTIFICATE-----
Generated at Thu May 1 03:32:57 2025 by rpki-client