Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa
File:                     30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa (raw, json)
Hash identifier:          LRC514typkTmuj8iej4AVL7nHP8vuSCQ42gtNbZu/zc=
Subject key identifier:   96:DE:33:FD:58:C3:6C:7A:F4:9F:B4:4E:48:F5:A6:9E:8A:12:A1:09
Certificate issuer:       /CN=643914aa-5306-4352-8a01-3ac381827191
Certificate serial:       010D0C9F432858499DBF2A6C7CC6E047C23B3800
Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     400442
IP address blocks:        2602:fbc7:1::/48 maxlen: 48
                          2602:fbc7:2::/48 maxlen: 48
                          2602:fbc7:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:2a:6c:7c:c6:e0:47:c2:3b:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643914aa-5306-4352-8a01-3ac381827191
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=acc58e76-18e1-47dd-a4d9-d31041b1b372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:30:45:6d:fc:a8:06:e5:42:7d:9f:d8:fa:
                    67:90:28:1f:01:4c:e9:21:0a:a6:ce:8b:ab:49:4b:
                    3a:11:f8:26:dc:ea:ca:79:1a:b7:dd:52:e1:2a:1d:
                    af:d8:58:d9:04:d4:47:14:0b:8d:f8:ec:cb:99:57:
                    81:d6:3b:7b:7d:2c:cf:d3:fd:be:b0:90:e9:c4:5d:
                    03:25:86:62:bc:f1:63:71:fa:67:04:1f:cc:56:8b:
                    b1:a2:82:4d:da:30:89:46:9d:c5:f1:78:46:8e:21:
                    a5:2b:06:f4:8f:d5:03:20:fe:5a:c8:59:f1:d7:50:
                    ad:d3:f7:3c:cf:3a:c9:0c:df:eb:08:a4:60:d1:66:
                    df:b5:8e:76:ad:03:bd:9d:98:ce:f8:ab:4c:bb:0d:
                    e3:fe:34:8b:5e:b5:40:9b:7d:0c:12:d3:31:ac:bf:
                    40:8c:df:14:c3:89:cc:f4:73:9c:32:20:ce:19:06:
                    c9:5e:61:27:9d:86:72:af:c1:c1:99:37:07:7d:10:
                    05:b8:5b:df:8d:1d:f1:b3:c6:e0:b5:9b:77:5c:f6:
                    ce:57:05:51:24:c0:05:01:82:3b:44:16:83:69:3a:
                    66:c6:92:3c:69:ac:2a:d4:f9:ef:6c:4c:bd:88:8a:
                    aa:a7:50:7f:3a:07:81:aa:79:30:d6:4e:ff:28:8f:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DE:33:FD:58:C3:6C:7A:F4:9F:B4:4E:48:F5:A6:9E:8A:12:A1:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl

            X509v3 Authority Key Identifier:
                keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbc7:1::-2602:fbc7:3:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1a:94:e9:ba:c0:c7:9d:de:4b:bf:76:fe:d2:15:17:0c:b4:
         3d:59:04:eb:0e:b3:12:4d:f6:a9:53:bf:31:a7:1d:fc:34:3b:
         27:93:05:a6:76:30:d2:02:a0:5d:16:0d:47:cf:59:c0:3d:04:
         8f:28:f6:9a:d2:b2:53:9c:37:04:a9:48:e4:1a:d7:31:3c:7a:
         d2:fd:06:23:eb:f7:f6:c4:d1:51:c2:6e:6d:26:fb:da:98:1b:
         5e:1d:96:84:30:14:a1:d6:2e:c2:fd:37:6d:31:ab:98:05:74:
         82:46:d7:17:41:85:00:4b:51:3c:75:e3:f9:4a:13:be:f9:2b:
         8f:5f:3a:f6:c0:89:6d:10:2b:ae:19:da:af:3c:b5:c8:31:76:
         46:87:2a:70:bb:7e:3c:82:3e:29:f2:44:55:1e:4c:64:88:7e:
         00:96:35:1e:e5:54:29:0b:bc:ee:ae:24:51:78:f6:2e:32:80:
         28:1a:0d:03:28:7f:c1:f3:1c:f4:86:3d:7c:92:fb:1f:1d:d4:
         e6:0a:23:cd:32:3b:e4:2b:af:39:4a:43:b9:e8:8f:47:50:57:
         fa:51:56:70:16:83:f1:c4:ea:4d:9c:3d:39:45:74:83:c5:fd:
         a6:2b:93:74:32:29:d7:dc:6d:25:29:e4:64:8d:77:a6:99:a3:
         de:df:e7:ec
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEmdvypsfMbgR8I7OAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3
MTkxMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
YWNjNThlNzYtMThlMS00N2RkLWE0ZDktZDMxMDQxYjFiMzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0owRW38qAblQn2f2PpnkCgfAUzpIQqmzour
SUs6Efgm3OrKeRq33VLhKh2v2FjZBNRHFAuN+OzLmVeB1jt7fSzP0/2+sJDpxF0D
JYZivPFjcfpnBB/MVouxooJN2jCJRp3F8XhGjiGlKwb0j9UDIP5ayFnx11Ct0/c8
zzrJDN/rCKRg0WbftY52rQO9nZjO+KtMuw3j/jSLXrVAm30MEtMxrL9AjN8Uw4nM
9HOcMiDOGQbJXmEnnYZyr8HBmTcHfRAFuFvfjR3xs8bgtZt3XPbOVwVRJMAFAYI7
RBaDaTpmxpI8aawq1PnvbEy9iIqqp1B/OgeBqnkw1k7/KI90KQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFJbeM/1Yw2x69J+0Tkj1pp6KEqEJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5
MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvMzBiN2M4MDYtNmE5Ni0z
M2EwLWJhZmEtYWI2NDQ5YjM0YThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh
MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy
NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz
ODE4MjcxOTEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAvvH
AAEDBwImAvvHAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAPRqU6brAx53eS792/tIVFwy0PVkE6w6zEk32
qVO/Macd/DQ7J5MFpnYw0gKgXRYNR89ZwD0Ejyj2mtKyU5w3BKlI5BrXMTx60v0G
I+v39sTRUcJubSb72pgbXh2WhDAUodYuwv03bTGrmAV0gkbXF0GFAEtRPHXj+UoT
vvkrj1869sCJbRArrhnarzy1yDF2RocqcLt+PII+KfJEVR5MZIh+AJY1HuVUKQu8
7q4kUXj2LjKAKBoNAyh/wfMc9IY9fJL7Hx3U5gojzTI75CuvOUpDueiPR1BX+lFW
cBaD8cTqTZw9OUV0g8X9piuTdDIp19xtJSnkZI13ppmj3t/n7A==
-----END CERTIFICATE-----
Generated at Fri May 2 23:28:51 2025 by rpki-client