Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa
File:                     e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa (raw, json)
Hash identifier:          5N/157kzu95uDjX/h2zSWS7oSu/nXVhiukjdxxlzjO8=
Subject key identifier:   23:41:E2:CF:15:48:75:89:22:52:CA:BA:1F:51:14:C4:5E:54:73:97
Certificate issuer:       /CN=0b689f43-cae9-48ce-aef4-680ca5613c03
Certificate serial:       010D0C9F432858499DBF2EFCB093BC561A4A4F00
Authority key identifier: CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     29802
IP address blocks:        2602:ff16::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:2e:fc:b0:93:bc:56:1a:4a:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b689f43-cae9-48ce-aef4-680ca5613c03
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=b592c873-c787-464f-9270-b833671d0400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:bf:53:1c:40:26:dd:e2:48:c9:c5:8d:74:
                    5c:1f:89:eb:8a:b7:ba:02:8f:da:2a:90:ad:48:6d:
                    b7:02:6e:ce:fc:b3:2b:5e:f5:db:1f:83:0a:ab:27:
                    6d:77:b3:1b:76:77:cf:50:b8:71:bb:1e:07:8b:c4:
                    d6:21:53:8b:54:26:80:48:ad:b3:15:7d:a3:b6:83:
                    1c:8c:5a:3b:61:ae:5d:41:3e:17:27:4b:80:dc:85:
                    d3:a9:25:8d:4d:51:b2:96:77:b5:c2:5b:d0:d0:13:
                    81:66:85:89:5e:90:18:05:0d:67:c4:06:40:a8:53:
                    8f:1c:64:1a:97:25:c8:05:d5:7e:e3:5e:7d:ba:25:
                    01:19:b3:51:8c:0f:81:cb:dd:80:fe:25:77:d5:b2:
                    91:cd:d4:a7:fa:c6:37:c5:89:82:56:ef:ff:09:14:
                    45:ff:f8:be:ca:7b:d6:98:74:9e:5f:56:d0:2c:7a:
                    58:5f:de:08:18:37:89:ad:7f:a8:81:ba:5a:04:05:
                    f8:f6:f6:e9:11:5e:1a:50:9f:59:b9:15:c8:6b:e0:
                    ae:ed:00:e6:3f:40:dd:8f:d2:8c:ba:c4:09:e1:12:
                    9e:3f:d7:5d:17:ed:c4:3c:33:87:e0:33:35:3d:e6:
                    47:9a:a5:78:3b:c0:6a:b3:c9:d7:1e:e7:8b:3a:59:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:41:E2:CF:15:48:75:89:22:52:CA:BA:1F:51:14:C4:5E:54:73:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/e9570d6d-d9db-3ffb-bf6f-1ca7d4909859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03/0b689f43-cae9-48ce-aef4-680ca5613c03.crl

            X509v3 Authority Key Identifier:
                keyid:CD:14:51:E6:3E:52:8A:EA:1D:CA:B1:0F:BD:60:74:61:76:59:B1:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0b689f43-cae9-48ce-aef4-680ca5613c03.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff16::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:aa:50:eb:2b:55:3d:77:1c:33:91:bc:45:2d:b4:5d:79:0e:
         ec:91:1e:05:09:49:9e:6a:59:5d:95:49:06:3b:3d:e9:49:3f:
         93:42:eb:7c:3d:4d:25:f0:02:ae:a5:15:93:5c:b7:f0:ec:fb:
         92:61:29:42:29:ea:05:41:8f:a1:28:dc:9f:ad:52:9e:6d:2e:
         00:96:c7:3b:a0:aa:41:b1:93:50:63:b6:c8:9b:16:1c:d9:13:
         8e:4e:0f:74:03:21:1f:77:ec:2a:c7:ea:cc:45:0b:be:81:82:
         b2:da:e8:47:8e:41:23:93:69:8f:99:49:02:4e:4f:c6:2b:70:
         c5:71:a4:a2:4c:ca:3a:fe:4a:34:aa:5b:5c:f6:52:08:1d:61:
         ba:bb:17:34:f3:85:9f:f3:11:e2:5c:5b:7e:f4:03:15:e8:fe:
         a5:c5:d7:30:b8:15:1a:82:ca:9d:15:31:2e:4f:12:e3:ee:70:
         aa:6f:3a:5d:7f:c2:24:8c:7f:9f:64:ba:be:62:4c:ed:c2:2e:
         a0:8f:1b:c0:ec:f6:77:40:e3:e8:b1:36:07:c9:a1:22:7b:3f:
         e9:2b:2a:56:32:47:a9:9f:db:8c:54:77:90:d3:b4:78:2e:02:
         5b:1f:28:4b:9a:0b:1b:53:9b:d1:29:54:fe:0d:f0:11:15:6e:
         84:93:b7:c5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEmdvy78sJO8VhpKTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI2ODlmNDMtY2FlOS00OGNlLWFlZjQtNjgwY2E1NjEz
YzAzMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
YjU5MmM4NzMtYzc4Ny00NjRmLTkyNzAtYjgzMzY3MWQwNDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKW/UxxAJt3iSMnFjXRcH4nrire6Ao/aKpCt
SG23Am7O/LMrXvXbH4MKqydtd7MbdnfPULhxux4Hi8TWIVOLVCaASK2zFX2jtoMc
jFo7Ya5dQT4XJ0uA3IXTqSWNTVGylne1wlvQ0BOBZoWJXpAYBQ1nxAZAqFOPHGQa
lyXIBdV+4159uiUBGbNRjA+By92A/iV31bKRzdSn+sY3xYmCVu//CRRF//i+ynvW
mHSeX1bQLHpYX94IGDeJrX+ogbpaBAX49vbpEV4aUJ9ZuRXIa+Cu7QDmP0Ddj9KM
usQJ4RKeP9ddF+3EPDOH4DM1PeZHmqV4O8Bqs8nXHueLOll0zwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCNB4s8VSHWJIlLKuh9RFMReVHOXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYjY4
OWY0My1jYWU5LTQ4Y2UtYWVmNC02ODBjYTU2MTNjMDMvZTk1NzBkNmQtZDlkYi0z
ZmZiLWJmNmYtMWNhN2Q0OTA5ODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGI2ODlmNDMtY2FlOS00OGNlLWFl
ZjQtNjgwY2E1NjEzYzAzLzBiNjg5ZjQzLWNhZTktNDhjZS1hZWY0LTY4MGNhNTYx
M2MwMy5jcmwwHwYDVR0jBBgwFoAUzRRR5j5SiuodyrEPvWB0YXZZsaQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wYjY4OWY0My1jYWU5LTQ4Y2UtYWVmNC02ODBj
YTU2MTNjMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/FgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAS6pQ6ytVPXccM5G8RS20XXkO7JEeBQlJnmpZXZVJBjs96Uk/k0Lr
fD1NJfACrqUVk1y38Oz7kmEpQinqBUGPoSjcn61Snm0uAJbHO6CqQbGTUGO2yJsW
HNkTjk4PdAMhH3fsKsfqzEULvoGCstroR45BI5Npj5lJAk5PxitwxXGkokzKOv5K
NKpbXPZSCB1hursXNPOFn/MR4lxbfvQDFej+pcXXMLgVGoLKnRUxLk8S4+5wqm86
XX/CJIx/n2S6vmJM7cIuoI8bwOz2d0Dj6LE2B8mhIns/6SsqVjJHqZ/bjFR3kNO0
eC4CWx8oS5oLG1Ob0SlU/g3wERVuhJO3xQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:23 2025 by rpki-client