Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa
File:                     a0f2799f-a502-347f-bf84-3f5a6d253844.roa (raw, json)
Hash identifier:          JgNadjsvPE/vtwsRR8addc/XxPd0qKApAeSs7KyT4vs=
Subject key identifier:   07:F5:E1:F3:07:66:54:20:9D:09:7A:2E:7F:73:1D:A4:08:96:A0:C6
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F43285849E0BF8C4ADE65AF29CC6B6B80
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa
Signing time:             Sat 17 May 2025 01:00:47 +0000
ROA not before:           Sat 17 May 2025 01:00:47 +0000
ROA not after:            Fri 15 Aug 2025 01:00:47 +0000
asID:                     401395
IP address blocks:        2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e0:bf:8c:4a:de:65:af:29:cc:6b:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: May 17 01:00:47 2025 GMT
            Not After : Aug 15 01:00:47 2025 GMT
        Subject: CN=15ebffb9-3deb-4fd6-afd8-082480480066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:b5:a5:87:34:e2:40:72:f7:e2:5b:c5:58:
                    db:83:72:a9:b1:5c:13:0b:e1:56:cf:8a:bb:b6:6b:
                    23:fa:3d:5e:dd:b3:7f:5c:24:28:50:1a:27:31:31:
                    90:46:a3:5a:55:5e:bc:40:fc:e6:6e:a5:ec:20:d6:
                    65:79:a2:3f:a4:a0:8c:8b:73:bb:24:2b:96:11:1a:
                    0a:83:ea:61:1e:eb:5b:a0:0e:96:d1:b2:f4:9e:13:
                    cd:98:6d:b2:19:35:4c:38:b7:08:08:9f:80:0b:72:
                    b3:0a:25:4c:68:74:51:55:42:a5:ba:37:3b:47:19:
                    12:ec:60:e7:d7:c8:75:7c:04:58:70:1e:e2:d1:dc:
                    72:af:8f:4f:45:00:73:f6:7d:a1:31:0b:0c:da:dc:
                    b6:6e:93:79:c0:03:d8:3b:6a:d5:4f:38:bf:48:2a:
                    ad:42:96:49:a0:73:bf:6f:0f:11:7d:f2:56:f9:c0:
                    a8:ce:d4:34:17:29:ce:f2:be:00:05:8f:ee:12:83:
                    73:e8:73:22:8a:be:fe:a5:42:41:d0:91:57:8b:7b:
                    d0:9d:24:9c:c5:55:55:15:aa:5d:2e:a3:27:d3:66:
                    1f:a5:84:63:91:30:62:00:80:99:a6:8a:6a:1d:1b:
                    34:2b:39:1a:31:8d:4f:a9:aa:05:d4:fc:e7:1a:05:
                    27:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F5:E1:F3:07:66:54:20:9D:09:7A:2E:7F:73:1D:A4:08:96:A0:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:40:98:86:11:45:a3:1b:26:8d:88:1d:79:63:c1:01:6e:f1:
         65:ed:6f:0e:56:8e:e5:37:6a:7d:62:36:5e:00:0f:7d:cd:ab:
         71:30:19:9c:e7:b2:d0:9a:ac:51:f0:db:df:0f:7b:07:37:3a:
         86:48:99:ca:da:8b:db:14:c1:40:ff:6c:b3:a3:06:5f:13:ab:
         3d:b5:28:88:63:89:0e:81:b3:85:44:d5:e6:3b:4c:09:01:a2:
         e7:48:f8:88:95:30:99:6f:63:43:c1:00:5b:6a:b3:4a:18:f2:
         49:50:e4:0c:26:c4:d1:34:6e:2c:fb:5d:f9:61:a6:a9:4f:7b:
         f9:9d:22:70:39:e4:64:70:63:a7:89:99:ba:00:8d:36:e0:72:
         bb:63:2e:f9:2f:5e:42:f9:cc:9d:c2:d2:13:1d:7d:db:5f:f7:
         4a:fb:04:f1:1d:d2:37:34:16:5c:ef:b0:e2:5e:d6:81:a5:35:
         c7:0f:dc:13:6a:ae:8b:07:e4:b5:04:d0:67:b4:82:d0:05:94:
         6f:74:73:02:c1:92:98:23:ed:0c:10:d1:5a:0f:8f:29:a0:5e:
         36:fd:61:30:8c:b3:16:d7:94:b7:59:33:2f:74:85:d3:b9:54:
         ec:ad:8d:07:99:11:f3:3d:45:fb:95:cb:72:a4:38:4e:76:91:
         95:08:21:45
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEngv4xK3mWvKcxra4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGExZDE1ZmUtOTRlOS00YWViLTkzYzctZDQ4MWIzYzJm
MWE0MB4XDTI1MDUxNzAxMDA0N1oXDTI1MDgxNTAxMDA0N1owLzEtMCsGA1UEAxMk
MTVlYmZmYjktM2RlYi00ZmQ2LWFmZDgtMDgyNDgwNDgwMDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbu1pYc04kBy9+JbxVjbg3KpsVwTC+FWz4q7
tmsj+j1e3bN/XCQoUBonMTGQRqNaVV68QPzmbqXsINZleaI/pKCMi3O7JCuWERoK
g+phHutboA6W0bL0nhPNmG2yGTVMOLcICJ+AC3KzCiVMaHRRVUKlujc7RxkS7GDn
18h1fARYcB7i0dxyr49PRQBz9n2hMQsM2ty2bpN5wAPYO2rVTzi/SCqtQpZJoHO/
bw8RffJW+cCoztQ0FynO8r4ABY/uEoNz6HMiir7+pUJB0JFXi3vQnSScxVVVFapd
LqMn02YfpYRjkTBiAICZpopqHRs0KzkaMY1PqaoF1PznGgUnQwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAf14fMHZlQgnQl6Ln9zHaQIlqDGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFk
MTVmZS05NGU5LTRhZWItOTNjNy1kNDgxYjNjMmYxYTQvYTBmMjc5OWYtYTUwMi0z
NDdmLWJmODQtM2Y1YTZkMjUzODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGExZDE1ZmUtOTRlOS00YWViLTkz
YzctZDQ4MWIzYzJmMWE0L2RhMWQxNWZlLTk0ZTktNGFlYi05M2M3LWQ0ODFiM2My
ZjFhNC5jcmwwHwYDVR0jBBgwFoAUsatP9jRpe1vt4l1FMAAUN2UlFIowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFkMTVmZS05NGU5LTRhZWItOTNjNy1kNDgx
YjNjMmYxYTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL32wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA2ECYhhFFoxsmjYgdeWPBAW7xZe1vDlaO5TdqfWI2XgAPfc2rcTAZ
nOey0JqsUfDb3w97Bzc6hkiZytqL2xTBQP9ss6MGXxOrPbUoiGOJDoGzhUTV5jtM
CQGi50j4iJUwmW9jQ8EAW2qzShjySVDkDCbE0TRuLPtd+WGmqU97+Z0icDnkZHBj
p4mZugCNNuByu2Mu+S9eQvnMncLSEx1921/3SvsE8R3SNzQWXO+w4l7WgaU1xw/c
E2quiwfktQTQZ7SC0AWUb3RzAsGSmCPtDBDRWg+PKaBeNv1hMIyzFteUt1kzL3SF
07lU7K2NB5kR8z1F+5XLcqQ4TnaRlQghRQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:19:08 2025 by rpki-client