Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa
File:                     bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa (raw, json)
Hash identifier:          FiHsXL9km8iPRQe+gFTbmUIpOHHYwachLUG9FZR+O4Y=
Subject key identifier:   0D:C3:98:35:A3:31:99:B4:95:50:B1:B8:E6:D3:09:5F:01:22:9F:3E
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285849CE9A39AB49322C202B607400
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     20940
IP address blocks:        2001:5a0:4402::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:39:ab:49:32:2c:20:2b:60:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=61a0f472-b368-4938-b54a-85e36dd78ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:e8:15:6c:7e:56:c8:fb:3f:ee:a3:b6:86:
                    01:9d:e1:de:41:31:ad:f8:53:e3:b9:96:ba:8b:91:
                    5e:aa:d3:50:3b:69:1a:4e:2a:b9:a5:2f:e1:c6:d9:
                    57:e6:4f:51:74:8e:a2:db:60:bd:98:38:70:b7:16:
                    c0:32:37:32:9c:e5:38:df:cf:bd:4d:f4:b7:85:81:
                    54:c1:d6:21:1f:43:23:cd:af:9b:18:dd:8d:3a:14:
                    81:f1:68:d6:a3:02:f3:2d:86:36:bc:92:b8:bc:29:
                    f2:c3:f8:ee:1b:aa:91:41:03:7d:de:e9:8c:bd:09:
                    f5:04:cc:0d:25:c0:fd:62:ba:46:71:28:3a:44:65:
                    b3:55:c4:86:37:bb:cd:26:7d:5d:5f:1a:85:7f:ee:
                    94:15:da:cb:fa:61:de:be:37:a2:67:51:9c:53:1a:
                    90:c1:9c:ce:20:54:63:ca:23:57:ef:ad:fa:a1:b1:
                    37:46:de:1a:4c:23:2f:a1:7b:3c:ba:7b:a9:2f:32:
                    96:fa:99:74:03:44:4e:d0:03:6b:39:e2:d7:cb:99:
                    55:19:e7:7e:c0:d6:20:e9:3c:37:13:52:27:7a:fe:
                    8b:63:d3:d2:91:30:72:b0:13:c0:fd:38:f3:f4:e7:
                    21:8f:93:0a:05:4b:0c:94:37:48:e3:e9:ea:84:15:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C3:98:35:A3:31:99:B4:95:50:B1:B8:E6:D3:09:5F:01:22:9F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/bca9f8c4-4f2c-39b6-bcc2-a136b7b16fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a0:4402::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:8b:fe:f5:19:85:8a:4a:6a:d8:91:4b:85:bf:3c:21:40:19:
         73:1d:a3:32:8c:fa:ff:50:d1:fc:98:b7:9f:f0:5f:db:b3:1b:
         c0:e4:24:e8:05:19:dc:07:83:80:4d:36:8d:04:e5:ac:2e:03:
         8e:87:8c:4e:57:87:bc:d5:0c:b4:3f:9c:8d:76:91:20:0e:f1:
         ab:d5:73:7e:a6:be:c2:4c:00:ff:86:a7:0b:2a:f1:ce:e1:80:
         2c:c2:da:f8:a6:d6:19:9e:31:a0:6d:31:5d:76:30:0f:55:4c:
         4a:7c:c2:41:2e:6f:f8:f3:3f:ae:7e:24:90:f4:44:68:84:95:
         46:a3:80:2c:cd:40:15:83:2a:3b:43:0d:ef:f8:f0:6d:c6:e1:
         d2:a6:b2:75:88:48:97:bf:8c:aa:af:e7:49:f7:b4:4b:a9:3f:
         e4:63:9e:96:44:c9:14:11:b2:94:8c:69:ad:0d:1e:b6:6c:fb:
         20:7e:79:6d:cf:c6:06:bc:10:f8:17:8a:f8:a9:1d:98:0f:f1:
         f7:66:85:43:ff:44:55:55:57:4d:d8:55:57:66:cb:49:14:cb:
         f8:14:ff:c8:8e:88:98:1f:d7:2d:68:47:dc:a6:fd:fc:59:ec:
         9a:52:d3:53:b5:37:f6:c6:16:22:00:94:28:88:98:d5:9a:85:
         fd:99:4f:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmjmrSTIsICtgdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
NjFhMGY0NzItYjM2OC00OTM4LWI1NGEtODVlMzZkZDc4YWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuzoFWx+Vsj7P+6jtoYBneHeQTGt+FPjuZa6
i5FeqtNQO2kaTiq5pS/hxtlX5k9RdI6i22C9mDhwtxbAMjcynOU438+9TfS3hYFU
wdYhH0Mjza+bGN2NOhSB8WjWowLzLYY2vJK4vCnyw/juG6qRQQN93umMvQn1BMwN
JcD9YrpGcSg6RGWzVcSGN7vNJn1dXxqFf+6UFdrL+mHevjeiZ1GcUxqQwZzOIFRj
yiNX7636obE3Rt4aTCMvoXs8unupLzKW+pl0A0RO0ANrOeLXy5lVGed+wNYg6Tw3
E1Inev6LY9PSkTBysBPA/Tjz9Ochj5MKBUsMlDdI4+nqhBVldQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA3DmDWjMZm0lVCxuObTCV8BIp8+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYmNhOWY4YzQtNGYyYy0z
OWI2LWJjYzItYTEzNmI3YjE2ZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFoEQC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFGL/vUZhYpKatiRS4W/PCFAGXMdozKM+v9Q0fyYt5/wX9uzG8Dk
JOgFGdwHg4BNNo0E5awuA46HjE5Xh7zVDLQ/nI12kSAO8avVc36mvsJMAP+Gpwsq
8c7hgCzC2vim1hmeMaBtMV12MA9VTEp8wkEub/jzP65+JJD0RGiElUajgCzNQBWD
KjtDDe/48G3G4dKmsnWISJe/jKqv50n3tEupP+RjnpZEyRQRspSMaa0NHrZs+yB+
eW3Pxga8EPgXivipHZgP8fdmhUP/RFVVV03YVVdmy0kUy/gU/8iOiJgf1y1oR9ym
/fxZ7JpS01O1N/bGFiIAlCiImNWahf2ZT64=
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:01:37 2025 by rpki-client