Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa
File:                     9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa (raw, json)
Hash identifier:          LDoJTyFbHlAv1G/3w9vAsuwved36deykApWrXOCMnqM=
Subject key identifier:   2E:A2:EC:75:E1:D8:FD:11:7C:E2:D1:FB:D8:26:81:80:4E:CA:27:E1
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F432858497DA4738B4A3C8CF2BB204740
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        2620:98:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:73:8b:4a:3c:8c:f2:bb:20:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=91b17e3f-f308-42e4-976c-652fa69d5d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:c1:30:56:d7:d0:61:2d:40:7d:0c:96:43:
                    80:d6:e7:96:d3:c9:8e:46:c8:f6:a9:6f:12:f4:cb:
                    2e:6b:28:84:6d:15:44:20:20:fc:86:3b:a1:fb:35:
                    99:32:16:d6:b9:36:f9:fc:dd:e1:08:bc:87:32:5b:
                    5d:d4:41:90:3e:6a:92:8e:a7:e6:b7:65:44:c5:bc:
                    1e:55:19:15:5d:0c:d7:90:e8:db:cf:d3:f8:7c:41:
                    41:b9:ea:8f:d2:3e:2f:70:a1:a4:92:d0:8d:b8:cd:
                    40:6a:41:40:d6:01:a9:55:b5:b8:87:76:14:4a:7f:
                    56:cf:28:04:08:7e:98:c5:43:0d:2c:2c:e4:2d:d3:
                    d2:ee:16:f0:72:12:89:b8:dc:26:fb:df:ed:13:66:
                    74:a2:ec:d2:a6:24:47:17:d9:84:8f:76:6c:6b:aa:
                    6c:5d:cb:78:92:2f:6f:d7:70:15:c7:fd:21:11:72:
                    8a:33:fe:11:2c:8a:1c:69:3d:1d:52:44:d3:4a:54:
                    f4:be:d7:f3:1a:30:2c:4f:b4:9b:f4:04:8b:77:cc:
                    9c:02:ef:5e:ae:d6:36:3f:c4:41:fc:e3:56:57:05:
                    71:96:5f:a2:bc:a8:ff:05:f3:66:28:06:7e:33:62:
                    2e:95:03:c8:fe:44:cd:4d:0f:a1:de:6b:08:ff:54:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A2:EC:75:E1:D8:FD:11:7C:E2:D1:FB:D8:26:81:80:4E:CA:27:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:24:63:8c:90:74:ba:2c:94:ae:38:1f:df:c9:ee:bf:83:21:
         1a:2f:58:92:9b:71:7f:8a:a9:69:cd:f8:30:e6:e1:02:fd:05:
         ba:ca:2d:6c:7d:fd:e0:f5:42:40:19:03:19:94:fc:13:4d:1b:
         56:c9:e3:2e:80:65:d9:d4:9c:d5:0f:2d:81:f5:06:18:34:1c:
         25:75:12:09:ae:7d:0e:27:cd:c9:28:74:0a:c7:41:3e:2e:e1:
         38:77:2a:91:7f:73:3f:73:57:8c:82:b8:29:ff:00:fc:60:4c:
         d1:8b:64:54:96:83:7f:3c:55:c6:25:0e:06:79:a9:ff:db:cf:
         69:97:43:b0:ea:64:b2:23:58:d8:0a:8c:e1:96:ae:79:60:fb:
         c3:ef:49:5f:55:89:e0:ce:74:1d:ae:06:f9:db:62:f6:9c:82:
         a3:21:69:70:b3:cd:3d:36:e3:09:32:d1:cc:e3:f9:45:89:3c:
         17:99:e0:12:f8:9f:d4:55:b4:90:e2:46:44:fb:c9:29:a2:9b:
         0e:d6:cc:f1:6d:4c:28:8a:21:6e:1c:9d:03:d6:f3:81:b7:ea:
         b9:c5:53:ee:20:2e:fa:2a:f8:68:f0:1f:f6:08:68:9c:e1:24:
         8f:08:e4:20:54:d6:32:0c:e3:6b:85:31:d6:3d:16:1e:77:98:
         a5:e0:34:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pHOLSjyM8rsgR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw
NGRhMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
OTFiMTdlM2YtZjMwOC00MmU0LTk3NmMtNjUyZmE2OWQ1ZDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7vBMFbX0GEtQH0MlkOA1ueW08mORsj2qW8S
9MsuayiEbRVEICD8hjuh+zWZMhbWuTb5/N3hCLyHMltd1EGQPmqSjqfmt2VExbwe
VRkVXQzXkOjbz9P4fEFBueqP0j4vcKGkktCNuM1AakFA1gGpVbW4h3YUSn9WzygE
CH6YxUMNLCzkLdPS7hbwchKJuNwm+9/tE2Z0ouzSpiRHF9mEj3Zsa6psXct4ki9v
13AVx/0hEXKKM/4RLIocaT0dUkTTSlT0vtfzGjAsT7Sb9ASLd8ycAu9ertY2P8RB
/ONWVwVxll+ivKj/BfNmKAZ+M2IulQPI/kTNTQ+h3msI/1QTLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC6i7HXh2P0RfOLR+9gmgYBOyifhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4
YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvOWMyMWY5YWYtNzdiOC0z
YjI5LTgzMjgtZWY4M2Q3ZGQ5OGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4
ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1
MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh
NWE1NTA0ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmMAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIskY4yQdLoslK44H9/J7r+DIRovWJKbcX+KqWnN+DDm4QL9BbrK
LWx9/eD1QkAZAxmU/BNNG1bJ4y6AZdnUnNUPLYH1Bhg0HCV1EgmufQ4nzckodArH
QT4u4Th3KpF/cz9zV4yCuCn/APxgTNGLZFSWg388VcYlDgZ5qf/bz2mXQ7DqZLIj
WNgKjOGWrnlg+8PvSV9VieDOdB2uBvnbYvacgqMhaXCzzT024wky0czj+UWJPBeZ
4BL4n9RVtJDiRkT7ySmimw7WzPFtTCiKIW4cnQPW84G36rnFU+4gLvoq+GjwH/YI
aJzhJI8I5CBU1jIM42uFMdY9Fh53mKXgNAQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:34:03 2025 by rpki-client