Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/002384be-bdf4-39c1-91f8-16a723311540.roa
File:                     002384be-bdf4-39c1-91f8-16a723311540.roa (raw, json)
Hash identifier:          bDsqjKY2X7WCjFOMmJiYcVbXps2P7AdDBKV0a2BSuKk=
Subject key identifier:   D4:37:68:12:B5:91:61:1C:38:20:BA:8F:02:6C:4C:35:F3:6E:0B:63
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F7153341DDBA024FCC1E1400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/002384be-bdf4-39c1-91f8-16a723311540.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     13335
IP address blocks:        2606:4700:4039::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:33:41:dd:ba:02:4f:cc:1e:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=85b272cf-68fd-43a1-9785-57ec96cb2b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:44:67:95:92:9f:12:38:9d:9d:63:c9:73:74:
                    82:a8:5d:97:f3:35:b1:da:92:3a:be:8f:ba:9e:9b:
                    e5:28:77:07:18:14:cc:08:9e:8d:9c:2d:68:28:b1:
                    24:66:d7:40:cc:35:59:d1:28:f9:b3:d2:b7:96:05:
                    44:59:e5:e1:99:dd:0f:8e:00:da:94:aa:67:5a:28:
                    8a:54:49:87:f4:87:77:f5:0e:ec:3f:75:13:aa:d3:
                    9e:33:6c:6a:e2:59:40:2e:7b:92:98:c3:33:ee:aa:
                    cc:45:82:45:d5:bd:9b:7b:92:8d:73:68:b3:1c:ea:
                    1a:c7:28:4d:10:82:e3:62:97:27:49:31:89:7f:a4:
                    6b:b4:a2:53:2a:80:19:7e:7d:4a:1e:a7:56:a6:fe:
                    95:58:fa:e1:d8:c4:a8:fb:69:3b:35:1e:fa:42:71:
                    75:4f:89:e3:60:d7:07:31:f9:1e:5b:62:86:9e:cb:
                    e8:e2:55:09:ed:9e:c7:e7:3c:e6:f4:8c:44:38:c0:
                    b5:8d:e1:95:f7:20:26:d7:8d:e5:80:2a:23:38:35:
                    52:de:3b:71:28:11:06:94:a1:09:eb:a8:5a:73:38:
                    ee:34:04:a3:3f:ee:a2:2e:64:c4:1e:5b:c9:04:b7:
                    ec:67:aa:ac:1a:f6:07:92:4c:02:25:d1:34:5d:8c:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:37:68:12:B5:91:61:1C:38:20:BA:8F:02:6C:4C:35:F3:6E:0B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/002384be-bdf4-39c1-91f8-16a723311540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4039::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:26:ae:dd:3f:42:0e:62:b6:ca:e7:bd:9a:13:fa:70:6e:5e:
         94:ad:87:d2:3e:42:fd:ba:95:c1:ac:f0:a3:f8:c6:68:bc:2f:
         16:11:f9:18:10:67:16:c3:95:f3:36:9f:f9:8a:c5:2c:38:21:
         7f:84:62:e7:a8:fa:df:91:22:fe:14:0d:45:6a:2d:24:2f:46:
         ef:ac:22:61:8b:d0:21:bd:b8:05:e1:c1:02:ec:88:77:8c:f6:
         67:8e:5d:6b:41:98:5e:e4:7c:0e:d9:47:4a:1c:cc:a7:0f:da:
         0f:0f:52:35:8e:ef:af:5c:bd:22:a4:12:db:9a:68:18:7b:23:
         5b:03:0c:f1:12:fc:bd:23:11:a9:3e:0a:89:30:58:0d:9b:de:
         ab:42:37:ff:83:bd:ac:45:c7:ef:24:f6:20:b5:b1:34:18:0c:
         f6:44:4a:4d:10:3e:10:d1:84:b6:a9:42:2c:9b:57:70:71:92:
         70:0f:8a:11:0f:3c:16:3a:ad:a1:59:31:63:50:2a:e0:de:b0:
         d3:88:11:62:29:4b:43:a8:e4:5a:03:8f:88:b8:c5:c6:72:4c:
         5b:a0:a6:bb:e4:69:29:85:1c:c8:e3:c7:e7:95:6b:a9:69:02:
         4f:80:7b:02:65:53:24:c1:04:ff:4e:b2:fa:bb:e5:a5:82:f5:
         b0:30:fe:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn3FTNB3boCT8weFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
ODViMjcyY2YtNjhmZC00M2ExLTk3ODUtNTdlYzk2Y2IyYjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikRnlZKfEjidnWPJc3SCqF2X8zWx2pI6vo+6
npvlKHcHGBTMCJ6NnC1oKLEkZtdAzDVZ0Sj5s9K3lgVEWeXhmd0PjgDalKpnWiiK
VEmH9Id39Q7sP3UTqtOeM2xq4llALnuSmMMz7qrMRYJF1b2be5KNc2izHOoaxyhN
EILjYpcnSTGJf6RrtKJTKoAZfn1KHqdWpv6VWPrh2MSo+2k7NR76QnF1T4njYNcH
MfkeW2KGnsvo4lUJ7Z7H5zzm9IxEOMC1jeGV9yAm143lgCojODVS3jtxKBEGlKEJ
66haczjuNASjP+6iLmTEHlvJBLfsZ6qsGvYHkkwCJdE0XYzekQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNQ3aBK1kWEcOCC6jwJsTDXzbgtjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDAyMzg0YmUtYmRmNC0z
OWMxLTkxZjgtMTZhNzIzMzExNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEA5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA4mrt0/Qg5itsrnvZoT+nBuXpSth9I+Qv26lcGs8KP4xmi8LxYR
+RgQZxbDlfM2n/mKxSw4IX+EYueo+t+RIv4UDUVqLSQvRu+sImGL0CG9uAXhwQLs
iHeM9meOXWtBmF7kfA7ZR0oczKcP2g8PUjWO769cvSKkEtuaaBh7I1sDDPES/L0j
Eak+CokwWA2b3qtCN/+DvaxFx+8k9iC1sTQYDPZESk0QPhDRhLapQiybV3BxknAP
ihEPPBY6raFZMWNQKuDesNOIEWIpS0Oo5FoDj4i4xcZyTFugprvkaSmFHMjjx+eV
a6lpAk+AewJlUyTBBP9Osvq75aWC9bAw/vs=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:12 2025 by rpki-client