Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13351fad-98ac-3944-b4d5-134e787f1755.roa
File:                     13351fad-98ac-3944-b4d5-134e787f1755.roa (raw, json)
Hash identifier:          /HQBIFBZOOZKinh8w11au7qp6b93BVhXrrHSUHDpaC4=
Subject key identifier:   17:AB:B4:A2:BC:92:B9:11:70:8F:09:A0:A0:54:3B:69:5C:5F:B8:02
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DF5A63B9AEE06B826BE2B7A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13351fad-98ac-3944-b4d5-134e787f1755.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     12222
IP address blocks:        2001:4878:a215::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:63:b9:ae:e0:6b:82:6b:e2:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=1f138761-bed2-4bf1-bee8-d07dd061d2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:29:7e:32:1b:95:17:e2:97:e6:55:0f:93:
                    27:fd:74:6d:a0:4f:60:22:73:4f:89:f2:bb:a7:c4:
                    ef:33:fc:ec:00:26:b2:ad:59:85:69:a8:46:7a:ee:
                    57:67:2e:65:49:4d:4d:16:8a:00:55:0c:cf:ff:f6:
                    e0:43:f5:17:9f:ca:d3:0a:c3:58:23:86:56:0d:99:
                    7d:7e:f9:85:c0:d0:c1:85:bb:08:fe:17:ed:df:f8:
                    35:b4:f6:68:dc:bf:d0:77:96:5f:ce:9a:d3:1e:dd:
                    1c:20:66:33:a6:75:4d:73:a4:51:e2:c5:99:84:f5:
                    6c:ab:72:6c:47:a7:5b:3f:ed:e4:2d:9f:e4:1a:79:
                    fe:e5:2a:f7:e6:01:d0:eb:cb:98:94:de:46:7b:92:
                    2d:df:64:29:63:66:e5:4c:ca:d3:e1:ff:13:fe:bc:
                    c4:64:fe:3d:6e:b9:ce:a1:18:be:75:0d:02:cc:16:
                    5b:37:3e:6a:a1:9d:2c:77:e4:11:6e:46:ae:9f:fa:
                    45:59:89:d2:ac:f0:00:2d:f2:2e:7b:1d:75:2f:bb:
                    57:a1:cf:92:d4:67:99:5a:c6:b3:ca:79:e1:54:38:
                    4d:f9:9f:05:14:f7:6a:a8:dc:84:49:c6:7f:b1:34:
                    8a:fb:8e:26:a0:9a:fd:40:84:c8:2d:48:3a:d8:ad:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AB:B4:A2:BC:92:B9:11:70:8F:09:A0:A0:54:3B:69:5C:5F:B8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/13351fad-98ac-3944-b4d5-134e787f1755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a215::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c7:1e:50:1e:81:80:a8:ef:d5:fd:ee:4b:06:c5:e6:1a:fc:
         1f:a5:dc:10:26:c6:18:14:08:d1:a3:8f:13:6d:df:b3:43:b0:
         b2:44:72:0d:57:f6:7f:e9:a0:db:fe:74:f1:72:03:7c:a2:11:
         33:1f:e5:cd:57:bb:b9:90:54:ab:06:bf:22:29:40:62:42:06:
         02:a6:be:e6:b1:29:bf:66:20:e0:f1:b7:95:af:28:46:0a:73:
         75:6a:34:4e:2d:0a:c8:e3:2d:3f:05:64:e4:0e:fb:0b:aa:d3:
         99:73:07:7c:29:68:7e:0c:a9:b7:99:2e:81:d5:5c:54:c8:b9:
         3f:4e:79:13:77:4b:4b:9c:eb:46:53:92:db:bd:21:87:94:8a:
         af:14:68:06:87:7f:39:4b:db:c7:2e:8f:f1:20:5c:e8:6d:bc:
         af:56:88:fd:68:d0:91:61:3a:54:b5:44:bf:35:2e:2c:4d:98:
         5c:5e:7b:9e:24:f2:1f:8a:df:6c:1f:aa:d0:44:4e:fb:d3:49:
         e4:bd:1e:7b:b2:b3:4c:5e:58:8b:6f:ee:4b:cc:78:21:3f:c1:
         89:09:f2:21:3d:6a:01:78:11:23:17:69:49:86:19:77:22:db:
         e8:9e:94:87:e6:ed:aa:fe:63:4e:7f:60:7f:b1:05:25:cb:79:
         f4:4b:0e:a8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnfWmO5ruBrgmvit6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk
MWYxMzg3NjEtYmVkMi00YmYxLWJlZTgtZDA3ZGQwNjFkMmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjMpfjIblRfil+ZVD5Mn/XRtoE9gInNPifK7
p8TvM/zsACayrVmFaahGeu5XZy5lSU1NFooAVQzP//bgQ/UXn8rTCsNYI4ZWDZl9
fvmFwNDBhbsI/hft3/g1tPZo3L/Qd5ZfzprTHt0cIGYzpnVNc6RR4sWZhPVsq3Js
R6dbP+3kLZ/kGnn+5Sr35gHQ68uYlN5Ge5It32QpY2blTMrT4f8T/rzEZP49brnO
oRi+dQ0CzBZbNz5qoZ0sd+QRbkaun/pFWYnSrPAALfIuex11L7tXoc+S1GeZWsaz
ynnhVDhN+Z8FFPdqqNyEScZ/sTSK+44moJr9QITILUg62K3NLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBertKK8krkRcI8JoKBUO2lcX7gCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTMzNTFmYWQtOThhYy0z
OTQ0LWI0ZDUtMTM0ZTc4N2YxNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKIV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH3HHlAegYCo79X97ksGxeYa/B+l3BAmxhgUCNGjjxNt37NDsLJE
cg1X9n/poNv+dPFyA3yiETMf5c1Xu7mQVKsGvyIpQGJCBgKmvuaxKb9mIODxt5Wv
KEYKc3VqNE4tCsjjLT8FZOQO+wuq05lzB3wpaH4MqbeZLoHVXFTIuT9OeRN3S0uc
60ZTktu9IYeUiq8UaAaHfzlL28cuj/EgXOhtvK9WiP1o0JFhOlS1RL81LixNmFxe
e54k8h+K32wfqtBETvvTSeS9Hnuys0xeWItv7kvMeCE/wYkJ8iE9agF4ESMXaUmG
GXci2+ielIfm7ar+Y05/YH+xBSXLefRLDqg=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:45:54 2025 by rpki-client