Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/99b9b4c9-5e10-308b-87ae-62a9b3ef195b.roa
File:                     99b9b4c9-5e10-308b-87ae-62a9b3ef195b.roa (raw, json)
Hash identifier:          AAwbhUT5241wECoESOFsWtrtOyvuyJeamYNejG8HKks=
Subject key identifier:   6D:18:A5:4F:93:FB:A4:2C:61:3C:CE:90:E1:82:D1:E8:B0:0B:A8:8A
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584961B99EF25358241FF69CEF1E
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/99b9b4c9-5e10-308b-87ae-62a9b3ef195b.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     153371
IP address blocks:        2602:2db:ffe::/48 maxlen: 48
                          2602:2db:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9e:f2:53:58:24:1f:f6:9c:ef:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=12d7a637-2b75-4112-8d3b-0758400ed1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:af:45:75:f7:6f:81:61:14:33:d9:fa:44:
                    20:e7:d9:89:22:50:89:64:59:41:7e:d2:ca:34:1c:
                    51:c4:13:3a:25:1a:0a:31:27:a7:6b:1b:f1:5f:2e:
                    12:c4:3e:0c:f8:e8:9e:f4:47:67:2b:f9:4f:4d:fe:
                    1d:9e:5d:0c:7c:65:d2:f2:58:7c:e9:59:88:39:4c:
                    e5:4d:3f:c2:09:37:1c:c9:92:7e:76:04:dd:9a:fe:
                    ea:7b:b6:6f:87:8e:22:f9:bd:55:5d:2c:15:b7:0a:
                    aa:37:26:6c:4d:87:d8:76:36:97:44:c7:57:5b:0a:
                    24:7e:8f:20:ea:c9:b6:18:b9:69:8a:df:f0:41:e4:
                    80:4d:b9:c5:b8:b3:90:c2:72:6e:1a:16:93:3c:c1:
                    f1:ba:bd:67:3a:1f:29:f8:5a:65:b4:8b:31:da:94:
                    da:d8:af:29:a8:7d:9c:53:f1:2f:51:c4:1e:96:60:
                    c2:fd:2e:8d:2e:32:19:aa:45:c9:bf:62:15:ea:bf:
                    7c:e5:4a:54:d4:f3:7d:cd:93:60:d5:db:b3:bc:d2:
                    59:b6:13:7c:58:98:7b:b7:82:4e:9b:d2:49:e7:15:
                    ce:6b:f2:f6:6d:25:a1:e1:cf:0f:c6:12:76:5e:46:
                    d3:24:b8:a4:31:2b:b1:53:b6:06:51:10:ec:2d:f0:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:18:A5:4F:93:FB:A4:2C:61:3C:CE:90:E1:82:D1:E8:B0:0B:A8:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/99b9b4c9-5e10-308b-87ae-62a9b3ef195b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db:ffe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:36:69:54:61:88:be:4f:09:8e:f4:d1:89:5e:b6:de:3f:55:
         67:f2:36:48:78:12:5b:cb:b2:47:d0:51:ec:66:6e:00:68:ce:
         60:ed:09:ad:8d:69:1a:71:c2:85:21:f6:c5:d3:95:5b:73:e1:
         2b:8f:28:f4:80:3d:f0:f3:4c:fc:02:9a:a2:82:e5:85:35:7f:
         23:f5:f3:6a:d7:18:41:ac:eb:a9:24:d3:19:5a:94:6c:c5:f8:
         9c:af:f0:15:b3:d4:27:f3:65:96:ce:8d:cf:99:30:b4:c5:d3:
         01:68:a5:92:cd:9e:ad:4a:af:24:48:2b:08:ae:30:ff:b0:d1:
         81:11:38:ca:29:04:7a:5a:f0:35:af:18:28:2a:cf:d7:a7:ef:
         e8:50:7d:b2:b7:36:07:df:80:b7:61:25:55:97:64:b7:87:1c:
         6f:4c:32:55:41:63:0b:cd:71:c5:89:73:f7:1f:b6:5b:f0:2a:
         3f:c9:e9:e9:80:f8:a1:c5:df:bf:44:5f:d6:dc:d1:d9:17:69:
         d4:b5:8b:68:68:e8:82:00:fb:01:97:77:2a:03:e6:0d:54:7a:
         1a:36:c4:0e:1f:ce:1f:bc:4e:e5:ac:37:a7:c4:95:10:62:58:
         a5:a1:58:fd:89:14:80:de:a0:f6:0d:bf:55:66:52:58:a5:5d:
         ea:c2:45:f4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElhuZ7yU1gkH/ac7x4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MwZWIyZGUtZTVlOC00MTA4LTg3MGUtOGNiYmZmMzk4
ODVkMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
MTJkN2E2MzctMmI3NS00MTEyLThkM2ItMDc1ODQwMGVkMWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnivRXX3b4FhFDPZ+kQg59mJIlCJZFlBftLK
NBxRxBM6JRoKMSenaxvxXy4SxD4M+Oie9EdnK/lPTf4dnl0MfGXS8lh86VmIOUzl
TT/CCTccyZJ+dgTdmv7qe7Zvh44i+b1VXSwVtwqqNyZsTYfYdjaXRMdXWwokfo8g
6sm2GLlpit/wQeSATbnFuLOQwnJuGhaTPMHxur1nOh8p+FpltIsx2pTa2K8pqH2c
U/EvUcQelmDC/S6NLjIZqkXJv2IV6r985UpU1PN9zZNg1duzvNJZthN8WJh7t4JO
m9JJ5xXOa/L2bSWh4c8PxhJ2XkbTJLikMSuxU7YGURDsLfAnKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG0YpU+T+6QsYTzOkOGC0eiwC6iKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jYzBl
YjJkZS1lNWU4LTQxMDgtODcwZS04Y2JiZmYzOTg4NWQvOTliOWI0YzktNWUxMC0z
MDhiLTg3YWUtNjJhOWIzZWYxOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2MwZWIyZGUtZTVlOC00MTA4LTg3
MGUtOGNiYmZmMzk4ODVkL2NjMGViMmRlLWU1ZTgtNDEwOC04NzBlLThjYmJmZjM5
ODg1ZC5jcmwwHwYDVR0jBBgwFoAUbCgRS8LjSpyBl9ozSHser0539MkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jYzBlYjJkZS1lNWU4LTQxMDgtODcwZS04Y2Ji
ZmYzOTg4NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgIC2w/+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFA2aVRhiL5PCY700Ylett4/VWfyNkh4ElvLskfQUexmbgBozmDt
Ca2NaRpxwoUh9sXTlVtz4SuPKPSAPfDzTPwCmqKC5YU1fyP182rXGEGs66kk0xla
lGzF+Jyv8BWz1CfzZZbOjc+ZMLTF0wFopZLNnq1KryRIKwiuMP+w0YEROMopBHpa
8DWvGCgqz9en7+hQfbK3NgffgLdhJVWXZLeHHG9MMlVBYwvNccWJc/cftlvwKj/J
6emA+KHF379EX9bc0dkXadS1i2ho6IIA+wGXdyoD5g1Ueho2xA4fzh+8TuWsN6fE
lRBiWKWhWP2JFIDeoPYNv1VmUlilXerCRfQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:13:55 2025 by rpki-client