Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/609125ed-e585-3015-abe8-fd5aca64650c.roa
File:                     609125ed-e585-3015-abe8-fd5aca64650c.roa (raw, json)
Hash identifier:          LyILqezj+MlbY9wjwT6/4naeQGXhyv1D4Y/H8fkDCsI=
Subject key identifier:   1E:41:D3:69:50:28:C0:F6:36:64:B1:D7:5C:72:EF:63:4E:F1:F7:C2
Certificate issuer:       /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial:       010D0C9F43285849E22536B40C143947F51F4A00
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/609125ed-e585-3015-abe8-fd5aca64650c.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        2620:113:80a0::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:36:b4:0c:14:39:47:f5:1f:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=c40195a8-a30f-4bb8-80c1-5b4d96ea5acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:36:92:b2:43:bb:ec:12:76:f7:a8:62:0c:
                    6b:e9:ee:16:f6:e4:ba:5f:84:bf:07:3d:42:d5:46:
                    a8:47:b6:8a:1f:7b:7e:a5:e7:d5:d9:39:5f:66:de:
                    27:09:06:9f:2c:d7:29:a1:de:48:b4:a3:08:5a:0d:
                    34:cc:36:1a:4b:d0:8c:8e:38:cf:a7:08:1d:c1:ca:
                    bd:a3:72:ce:34:ae:c4:75:1a:5b:fc:5a:79:e3:98:
                    37:ec:32:64:f5:0f:34:bc:b3:5c:4f:01:b4:ca:4c:
                    58:13:41:f8:aa:df:3e:60:f4:16:15:00:f7:86:66:
                    c6:ad:c1:39:ec:ba:70:3a:6e:a9:f4:34:da:23:56:
                    a8:62:59:24:ef:10:7e:cd:08:6c:9d:b5:db:17:da:
                    9c:56:48:44:ff:18:ca:ff:35:57:c5:c9:c9:d4:23:
                    d4:85:28:9a:e9:ca:fe:00:31:fa:f8:82:a4:e5:07:
                    e2:78:e5:32:f5:b7:4c:23:a5:c2:70:a3:47:03:05:
                    ba:1c:81:5d:52:66:eb:71:f1:36:7e:4e:76:7d:b0:
                    8c:25:0e:e4:7b:0a:72:9d:c5:ef:b0:34:26:9c:00:
                    19:4f:94:ad:70:9a:0c:70:15:23:34:16:8a:33:c2:
                    f4:ac:18:69:d8:e3:ab:38:15:57:46:01:58:89:37:
                    ad:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:41:D3:69:50:28:C0:F6:36:64:B1:D7:5C:72:EF:63:4E:F1:F7:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/609125ed-e585-3015-abe8-fd5aca64650c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl

            X509v3 Authority Key Identifier:
                keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:80a0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:01:21:97:17:0a:0b:13:84:da:49:a8:60:7f:6f:c4:a0:37:
         87:36:29:64:99:51:44:77:f9:11:85:9e:9e:27:1a:f7:b5:6a:
         5f:6f:4c:aa:1e:fa:d5:e2:dd:3a:6d:10:98:b4:cb:a8:9d:3e:
         fd:8e:b4:25:08:52:66:62:4d:d9:51:9a:6f:88:36:fe:55:19:
         50:a9:18:1a:d4:65:f7:59:16:5f:c9:59:f6:ca:b1:c0:df:30:
         4c:97:46:8e:cd:c4:d5:69:e4:8d:eb:8c:69:49:c1:d1:d2:ab:
         a8:64:d6:72:e5:a6:bb:43:60:c8:26:dd:c8:a0:75:fe:4d:3f:
         e6:db:bf:3a:9a:46:df:bb:bf:bf:6d:ba:3a:69:de:ef:2b:3a:
         e3:c5:e3:8b:16:8d:45:f0:20:36:ba:84:83:40:5c:7e:95:b1:
         c2:fc:c1:a7:b1:9c:b3:a1:79:19:e7:9a:38:7c:0c:32:7e:0b:
         d3:cb:80:04:b3:66:d5:b6:f2:cb:59:4e:ea:e8:88:f3:3b:57:
         8e:d0:2a:42:71:f1:c3:cd:c7:c1:2a:23:c1:b8:90:ec:a3:08:
         9c:b9:01:9c:ad:f5:9f:8a:ce:e4:c8:bf:13:54:ea:08:b3:ae:
         27:06:bb:07:ce:ff:72:0a:75:aa:d5:d3:f4:5b:dc:e3:23:b0:
         d7:07:93:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEniJTa0DBQ5R/UfSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA0NmE4MDAtYzM3OS00YzNiLWI3MDItZmIxNzEyYjRj
NWM5MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
YzQwMTk1YTgtYTMwZi00YmI4LTgwYzEtNWI0ZDk2ZWE1YWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7o2krJDu+wSdveoYgxr6e4W9uS6X4S/Bz1C
1UaoR7aKH3t+pefV2TlfZt4nCQafLNcpod5ItKMIWg00zDYaS9CMjjjPpwgdwcq9
o3LONK7EdRpb/Fp545g37DJk9Q80vLNcTwG0ykxYE0H4qt8+YPQWFQD3hmbGrcE5
7LpwOm6p9DTaI1aoYlkk7xB+zQhsnbXbF9qcVkhE/xjK/zVXxcnJ1CPUhSia6cr+
ADH6+IKk5QfieOUy9bdMI6XCcKNHAwW6HIFdUmbrcfE2fk52fbCMJQ7kewpyncXv
sDQmnAAZT5StcJoMcBUjNBaKM8L0rBhp2OOrOBVXRgFYiTetwwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB5B02lQKMD2NmSx11xy72NO8ffCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDQ2
YTgwMC1jMzc5LTRjM2ItYjcwMi1mYjE3MTJiNGM1YzkvNjA5MTI1ZWQtZTU4NS0z
MDE1LWFiZTgtZmQ1YWNhNjQ2NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA0NmE4MDAtYzM3OS00YzNiLWI3
MDItZmIxNzEyYjRjNWM5LzIwNDZhODAwLWMzNzktNGMzYi1iNzAyLWZiMTcxMmI0
YzVjOS5jcmwwHwYDVR0jBBgwFoAUG3z6SuVkoJMCTR6fRMJkodj6b6UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yMDQ2YTgwMC1jMzc5LTRjM2ItYjcwMi1mYjE3
MTJiNGM1YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABE4Cg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEwBIZcXCgsThNpJqGB/b8SgN4c2KWSZUUR3+RGFnp4nGve1al9v
TKoe+tXi3TptEJi0y6idPv2OtCUIUmZiTdlRmm+INv5VGVCpGBrUZfdZFl/JWfbK
scDfMEyXRo7NxNVp5I3rjGlJwdHSq6hk1nLlprtDYMgm3cigdf5NP+bbvzqaRt+7
v79tujpp3u8rOuPF44sWjUXwIDa6hINAXH6VscL8waexnLOheRnnmjh8DDJ+C9PL
gASzZtW28stZTuroiPM7V47QKkJx8cPNx8EqI8G4kOyjCJy5AZyt9Z+KzuTIvxNU
6gizricGuwfO/3IKdarV0/Rb3OMjsNcHk0c=
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:52:19 2025 by rpki-client