Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1cdff99-9c19-353c-afbc-d652d487ef5f.roa
File:                     c1cdff99-9c19-353c-afbc-d652d487ef5f.roa (raw, json)
Hash identifier:          Lr5dV+XrLZlaT2vnqekh4Ibfox7fhFT+OZIEH+e5ddI=
Subject key identifier:   8D:08:89:58:57:95:2C:BA:43:01:DD:F3:5B:BE:B2:C5:B6:AF:2D:64
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584988C21DF50FFE1EA0EBA13400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1cdff99-9c19-353c-afbc-d652d487ef5f.roa
Signing time:             Tue 15 Apr 2025 12:34:53 +0000
ROA not before:           Tue 15 Apr 2025 12:34:53 +0000
ROA not after:            Mon 14 Jul 2025 12:34:53 +0000
asID:                     396827
IP address blocks:        2620:74:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:c2:1d:f5:0f:fe:1e:a0:eb:a1:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 15 12:34:53 2025 GMT
            Not After : Jul 14 12:34:53 2025 GMT
        Subject: CN=876d45d6-b902-459e-96e4-8c2065c6bf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:de:29:4d:1f:c3:a7:12:dc:24:92:a0:17:
                    50:d9:36:a9:c3:7c:5d:a5:f2:4e:32:5b:97:58:d7:
                    e9:68:cb:28:bc:92:6d:e5:81:a5:5f:46:45:d2:26:
                    b1:2b:7e:27:ea:e7:a1:39:df:2d:59:18:90:a6:51:
                    46:61:7c:b2:61:e4:e2:64:1c:20:3c:6c:45:5a:1f:
                    4d:75:38:e1:4c:4d:6e:1e:4d:73:67:66:63:f3:cc:
                    68:6b:85:6f:f0:9b:97:36:d5:5e:4d:b7:a2:9a:a5:
                    ae:f1:51:0d:78:ab:21:ae:c9:83:ad:bc:2a:25:a6:
                    db:15:e3:5d:a5:24:bc:e2:15:be:a0:86:c1:55:06:
                    b4:bc:ac:8c:72:0b:ad:58:f5:66:3a:0f:22:91:c8:
                    c4:27:e3:05:2a:e4:25:1f:c9:ae:9a:f5:9c:c6:86:
                    30:17:82:45:c1:5e:70:4d:e4:88:98:b1:87:bb:d2:
                    8d:55:cf:b6:12:9f:57:e0:b9:cb:ec:a9:2e:41:84:
                    7f:5e:61:db:4e:29:46:58:db:16:7f:c5:8a:6d:e5:
                    98:1c:b4:e3:04:ca:26:2d:3e:f2:30:5f:80:a9:1b:
                    a2:13:5a:6c:6f:ca:73:6f:bb:4f:26:d6:7e:bd:90:
                    9a:fe:d4:42:f8:1b:8e:69:c1:c3:63:ce:65:7d:7d:
                    e3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:08:89:58:57:95:2C:BA:43:01:DD:F3:5B:BE:B2:C5:B6:AF:2D:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1cdff99-9c19-353c-afbc-d652d487ef5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ff:5b:cd:63:ac:1d:c3:f3:86:c5:0f:36:bc:60:ca:e8:e6:
         7e:c0:43:95:1c:fe:53:fc:96:7e:15:a2:91:a1:eb:e1:bc:51:
         bf:d6:56:5c:9b:79:48:d2:25:75:3c:8e:e1:be:b3:3d:2d:e2:
         ed:c8:46:01:a1:23:62:32:62:1a:87:15:fd:23:43:81:8b:9d:
         70:6f:86:41:b3:8a:37:e4:dc:a1:ce:92:15:01:52:39:e8:ac:
         11:e0:66:ff:c4:5d:33:37:10:65:2f:e5:df:57:03:9b:19:ee:
         41:66:ca:5a:a7:36:31:39:f0:46:97:62:a6:17:bc:9b:b0:15:
         fa:1a:ad:e2:8e:b0:cc:89:ed:33:7b:41:f6:ca:09:d3:86:2b:
         27:95:7d:04:55:af:5b:c3:6c:7b:b4:48:45:97:a0:08:f8:30:
         d2:25:58:7b:bf:67:a4:a4:ee:1f:39:91:31:bb:3d:eb:a7:0b:
         97:e7:64:5c:b6:26:8f:b2:f8:05:20:7e:bc:99:04:cc:7f:b3:
         49:96:28:5d:93:18:ab:84:a6:1b:fc:18:c3:52:2c:82:4a:7b:
         f3:a9:ae:6d:03:c6:38:9b:db:91:c8:1b:2a:80:df:c2:ec:5f:
         3e:73:6f:0f:e0:28:a2:c8:af:7a:5d:7e:d4:99:94:67:61:3d:
         68:e1:84:64
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh31D/4eoOuhNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk
ODc2ZDQ1ZDYtYjkwMi00NTllLTk2ZTQtOGMyMDY1YzZiZjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY7eKU0fw6cS3CSSoBdQ2Tapw3xdpfJOMluX
WNfpaMsovJJt5YGlX0ZF0iaxK34n6uehOd8tWRiQplFGYXyyYeTiZBwgPGxFWh9N
dTjhTE1uHk1zZ2Zj88xoa4Vv8JuXNtVeTbeimqWu8VENeKshrsmDrbwqJabbFeNd
pSS84hW+oIbBVQa0vKyMcgutWPVmOg8ikcjEJ+MFKuQlH8mumvWcxoYwF4JFwV5w
TeSImLGHu9KNVc+2Ep9X4LnL7KkuQYR/XmHbTilGWNsWf8WKbeWYHLTjBMomLT7y
MF+AqRuiE1psb8pzb7tPJtZ+vZCa/tRC+BuOacHDY85lfX3jUwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI0IiVhXlSy6QwHd81u+ssW2ry1kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFjZGZmOTktOWMxOS0z
NTNjLWFmYmMtZDY1MmQ0ODdlZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEL/W81jrB3D84bFDza8YMro5n7AQ5Uc/lP8ln4VopGh6+G8Ub/W
VlybeUjSJXU8juG+sz0t4u3IRgGhI2IyYhqHFf0jQ4GLnXBvhkGzijfk3KHOkhUB
UjnorBHgZv/EXTM3EGUv5d9XA5sZ7kFmylqnNjE58EaXYqYXvJuwFfoareKOsMyJ
7TN7QfbKCdOGKyeVfQRVr1vDbHu0SEWXoAj4MNIlWHu/Z6Sk7h85kTG7PeunC5fn
ZFy2Jo+y+AUgfryZBMx/s0mWKF2TGKuEphv8GMNSLIJKe/Oprm0Dxjib25HIGyqA
38LsXz5zbw/gKKLIr3pdftSZlGdhPWjhhGQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:34:56 2025 by rpki-client