Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/1f03c1ef-4fe3-3d85-93dd-431204439dc0.roa
File:                     1f03c1ef-4fe3-3d85-93dd-431204439dc0.roa (raw, json)
Hash identifier:          jusPfAPHLtEtsng1HTf4ZWZuUyp8h29MA+rvwa18STw=
Subject key identifier:   BB:51:B4:F9:3F:B4:C9:1E:2B:AB:56:31:45:D7:F1:A8:FC:ED:21:1B
Certificate issuer:       /CN=89a397c2-4860-4547-8d71-faf2481535cf
Certificate serial:       010D0C9F43285849A4BA4D93593E050E0E1C0BA0
Authority key identifier: F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/1f03c1ef-4fe3-3d85-93dd-431204439dc0.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     401164
IP address blocks:        2602:f8a4::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4d:93:59:3e:05:0e:0e:1c:0b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a397c2-4860-4547-8d71-faf2481535cf
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=df201da1-b939-4c39-af73-1eef7381523c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:0a:4a:00:ce:a4:bf:37:39:c8:24:10:1f:
                    98:e9:ba:44:13:ce:03:07:66:1c:0d:2c:0a:80:38:
                    6f:db:6f:71:d7:c5:3c:3d:d1:61:4a:c3:9d:05:8d:
                    de:3a:38:bf:f0:06:12:2a:3d:f6:e2:89:0b:64:86:
                    05:e5:2e:43:12:4c:bc:e1:ce:ab:9c:0e:bc:08:c1:
                    72:36:f2:55:00:18:43:d8:37:ee:d2:2f:6b:6c:98:
                    44:98:03:03:bd:f5:15:44:9c:72:d4:80:bb:4e:94:
                    d6:2a:3e:2b:5f:6e:a9:0f:f0:c5:c8:f7:08:8d:29:
                    e6:6f:d1:ab:4c:30:ff:9c:c9:b2:71:61:24:cb:b4:
                    c7:88:0b:76:2b:fe:f8:58:3c:11:af:50:7e:98:e3:
                    b7:b5:39:0c:38:4e:3f:3c:aa:aa:9e:af:ed:92:71:
                    36:13:79:f7:76:15:ec:c4:3a:cf:60:ac:12:1d:ce:
                    ab:9b:a6:e3:de:78:9e:f3:e3:6c:62:37:b2:f3:6e:
                    52:0b:b9:e2:34:bb:cd:36:9b:cc:dd:3a:3c:d1:a8:
                    59:92:2a:2f:2b:1a:49:55:70:32:4a:fc:e4:a8:0e:
                    69:a4:48:b8:23:c8:14:91:95:a0:21:ee:9b:2e:ab:
                    3f:5f:a9:3a:43:df:0e:53:47:84:35:c4:35:b0:8a:
                    6e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:51:B4:F9:3F:B4:C9:1E:2B:AB:56:31:45:D7:F1:A8:FC:ED:21:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/1f03c1ef-4fe3-3d85-93dd-431204439dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl

            X509v3 Authority Key Identifier:
                keyid:F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:81:20:36:4a:01:07:ab:d4:f2:33:91:a5:3f:79:f8:24:01:
         b0:a7:f5:07:5b:96:35:23:5c:0f:a0:1a:95:6a:31:83:89:2f:
         ff:c0:78:0a:78:01:73:50:16:26:2e:24:b8:c2:b4:18:3e:b4:
         89:4a:d8:c2:36:e9:ce:27:e0:ee:5b:92:94:e9:b8:9c:62:1a:
         1b:dd:33:49:f2:f8:ae:01:95:b4:33:a1:f5:ae:aa:ae:fc:44:
         79:63:38:fa:c7:fe:80:5f:ad:69:6b:53:16:f2:85:55:74:6c:
         2c:f1:25:0f:2a:5b:3d:28:af:da:a8:4c:5b:92:a2:08:a4:29:
         24:19:77:95:a4:ed:66:80:ab:fc:b8:d6:1c:37:d3:f8:b8:c1:
         1f:cd:5d:4f:2c:83:e6:2c:f7:bf:99:84:22:06:8e:d3:7a:60:
         77:4d:8c:f2:51:33:fb:ce:7f:8b:2b:40:5a:50:16:e7:70:74:
         0e:fb:ac:83:4f:ad:79:12:1e:e5:6e:df:3c:d2:5f:18:9a:f7:
         29:95:3c:88:3e:4c:da:a2:4c:dd:55:22:35:1a:6a:33:ac:07:
         47:12:3b:eb:d9:3a:05:86:a2:fb:87:7d:b7:14:30:de:e9:65:
         7d:aa:23:d9:80:7a:2f:43:5b:3f:a0:e0:39:69:63:22:09:a3:
         76:f1:c3:11
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmkuk2TWT4FDg4cC6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODlhMzk3YzItNDg2MC00NTQ3LThkNzEtZmFmMjQ4MTUz
NWNmMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZGYyMDFkYTEtYjkzOS00YzM5LWFmNzMtMWVlZjczODE1MjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwEKSgDOpL83OcgkEB+Y6bpEE84DB2YcDSwK
gDhv229x18U8PdFhSsOdBY3eOji/8AYSKj324okLZIYF5S5DEky84c6rnA68CMFy
NvJVABhD2Dfu0i9rbJhEmAMDvfUVRJxy1IC7TpTWKj4rX26pD/DFyPcIjSnmb9Gr
TDD/nMmycWEky7THiAt2K/74WDwRr1B+mOO3tTkMOE4/PKqqnq/tknE2E3n3dhXs
xDrPYKwSHc6rm6bj3nie8+NsYjey825SC7niNLvNNpvM3To80ahZkiovKxpJVXAy
SvzkqA5ppEi4I8gUkZWgIe6bLqs/X6k6Q98OU0eENcQ1sIpuQwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLtRtPk/tMkeK6tWMUXX8aj87SEbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OWEz
OTdjMi00ODYwLTQ1NDctOGQ3MS1mYWYyNDgxNTM1Y2YvMWYwM2MxZWYtNGZlMy0z
ZDg1LTkzZGQtNDMxMjA0NDM5ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODlhMzk3YzItNDg2MC00NTQ3LThk
NzEtZmFmMjQ4MTUzNWNmLzg5YTM5N2MyLTQ4NjAtNDU0Ny04ZDcxLWZhZjI0ODE1
MzVjZi5jcmwwHwYDVR0jBBgwFoAU8HXuQsnRPwQOkovH/F2W9wvrvq8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84OWEzOTdjMi00ODYwLTQ1NDctOGQ3MS1mYWYy
NDgxNTM1Y2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4pAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACYEgNkoBB6vU8jORpT95+CQBsKf1B1uWNSNcD6AalWoxg4kv/8B4
CngBc1AWJi4kuMK0GD60iUrYwjbpzifg7luSlOm4nGIaG90zSfL4rgGVtDOh9a6q
rvxEeWM4+sf+gF+taWtTFvKFVXRsLPElDypbPSiv2qhMW5KiCKQpJBl3laTtZoCr
/LjWHDfT+LjBH81dTyyD5iz3v5mEIgaO03pgd02M8lEz+85/iytAWlAW53B0Dvus
g0+teRIe5W7fPNJfGJr3KZU8iD5M2qJM3VUiNRpqM6wHRxI769k6BYai+4d9txQw
3ullfaoj2YB6L0NbP6DgOWljIgmjdvHDEQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:48:11 2025 by rpki-client