Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa
File:                     ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa (raw, json)
Hash identifier:          F4YZ5LzOU2sUbKJGiW66iCdmYjKoPsOP+ZizJTPB60k=
Subject key identifier:   82:66:15:BC:A1:0B:0D:96:AB:68:DB:C5:3F:DC:BC:0B:BA:5D:43:09
Certificate issuer:       /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial:       010D0C9F4328584950F96AA53EBEFA1476ED2080
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     10911
IP address blocks:        2600:c00:2:3::/64 maxlen: 64
                          2600:c00:1002::/64 maxlen: 64
                          2600:c00:1002:3::/64 maxlen: 64
                          2600:c00:1002:4::/64 maxlen: 64
                          2600:c02:b002:12::/64 maxlen: 64
                          2600:c02:b002:13::/64 maxlen: 64
                          2600:c04:e002:2::/64 maxlen: 64
                          2600:c05:3002:5::/64 maxlen: 64
                          2600:c05:3002:6::/64 maxlen: 64
                          2600:c0e:1002::/64 maxlen: 64
                          2600:c0e:7002:b::/64 maxlen: 64
                          2600:c12:6002:e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:6a:a5:3e:be:fa:14:76:ed:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=c8230922-8377-41fb-bf7f-eb1923349884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:12:62:d2:7d:d7:d8:22:84:3a:a9:c6:b8:
                    8d:46:e6:2e:0d:c5:98:7c:43:f0:e3:52:0c:a7:7c:
                    c0:a6:1a:f1:f9:46:21:e1:2a:56:42:c5:df:73:90:
                    c4:d9:9f:1a:fe:e6:b8:06:00:22:46:93:00:0c:12:
                    2d:0d:bf:38:72:09:11:5f:e5:ad:4e:f7:ac:af:ce:
                    7a:db:50:75:dc:6c:2d:41:8c:f4:4b:57:98:01:f6:
                    8f:7d:fd:da:22:be:05:b1:a7:20:4e:d7:09:29:00:
                    25:2a:cc:5d:c7:86:b6:58:1a:dd:d7:8a:8e:b9:24:
                    55:db:be:c4:34:5d:ec:26:1b:e0:9a:94:a8:75:ad:
                    a0:2a:7f:c5:32:d1:97:d4:b4:da:02:9b:b9:a0:a3:
                    2a:fd:37:c0:e4:dc:b5:05:dd:e6:84:11:b0:d3:52:
                    fc:d9:31:94:04:3b:6c:19:00:ea:4d:ab:95:82:5d:
                    1d:33:c8:ec:c3:c8:c9:ec:81:56:35:2e:5d:5f:cf:
                    ad:97:15:71:3f:15:a8:5d:ab:5e:5b:3b:68:b6:06:
                    2b:80:38:cc:8b:c3:ef:40:48:7b:62:94:62:3d:bc:
                    fc:49:99:f1:16:46:bd:7d:a8:21:75:05:25:39:77:
                    24:2b:3d:fc:ea:a5:98:1a:20:d9:85:48:c1:34:b0:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:66:15:BC:A1:0B:0D:96:AB:68:DB:C5:3F:DC:BC:0B:BA:5D:43:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/ddf8e00d-05ad-34ea-8108-ca71e74d4fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:c00:2:3::/64
                  2600:c00:1002::/64
                  2600:c00:1002:3::-2600:c00:1002:4:ffff:ffff:ffff:ffff
                  2600:c02:b002:12::/63
                  2600:c04:e002:2::/64
                  2600:c05:3002:5::-2600:c05:3002:6:ffff:ffff:ffff:ffff
                  2600:c0e:1002::/64
                  2600:c0e:7002:b::/64
                  2600:c12:6002:e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ac:23:f9:78:92:a0:65:77:ab:ba:62:da:36:98:4c:d0:9f:
         28:af:09:49:12:1f:55:c8:d2:d9:f1:31:31:38:56:fe:58:7e:
         70:2e:f3:22:14:fe:de:64:93:a7:fa:e5:08:ab:43:d4:35:28:
         39:f7:80:d5:46:d6:1c:ee:30:bf:0a:66:a8:00:7d:28:4a:11:
         69:fb:ee:b9:66:db:f2:ba:4c:6e:8c:6b:1b:fb:96:81:41:35:
         92:59:38:39:e6:78:33:45:66:97:07:8b:22:07:bc:78:cf:3e:
         f2:d9:55:57:a5:cf:93:af:e7:5f:6c:79:26:c2:35:b5:04:95:
         03:99:88:1b:4b:3f:ae:3e:4f:50:94:79:81:f6:88:40:80:6b:
         ee:25:09:d5:7f:33:ad:12:a6:15:82:5b:46:5c:fd:c7:5d:83:
         13:f7:68:5b:a9:50:03:73:7f:1c:1c:b7:9b:dc:8f:fd:57:de:
         e5:47:4a:8a:03:38:bf:28:02:7c:08:47:a3:fd:12:ae:aa:cf:
         0f:27:a2:e5:56:b9:05:54:b6:28:2c:ac:77:2a:06:f5:aa:91:
         48:aa:51:4e:cf:4d:08:67:85:9b:6c:d1:11:11:d9:3d:cf:42:
         4f:c6:55:9f:b5:d9:bd:34:f6:4e:67:5a:cd:9b:43:f8:bd:78:
         66:6b:c5:1a
-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgIUAQ0Mn0MoWElQ+WqlPr76FHbtIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFlNDY1YzAtMmExMC00OTVhLWI3ZDItMmFhMDQ4YjI4
NmEwMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
YzgyMzA5MjItODM3Ny00MWZiLWJmN2YtZWIxOTIzMzQ5ODg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGoSYtJ919gihDqpxriNRuYuDcWYfEPw41IM
p3zAphrx+UYh4SpWQsXfc5DE2Z8a/ua4BgAiRpMADBItDb84cgkRX+WtTvesr856
21B13GwtQYz0S1eYAfaPff3aIr4FsacgTtcJKQAlKsxdx4a2WBrd14qOuSRV277E
NF3sJhvgmpSoda2gKn/FMtGX1LTaApu5oKMq/TfA5Ny1Bd3mhBGw01L82TGUBDts
GQDqTauVgl0dM8jsw8jJ7IFWNS5dX8+tlxVxPxWoXateWztotgYrgDjMi8PvQEh7
YpRiPbz8SZnxFka9faghdQUlOXckKz386qWYGiDZhUjBNLAf6QIDAQABo4ID0DCC
A8wwHQYDVR0OBBYEFIJmFbyhCw2Wq2jbxT/cvAu6XUMJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0
NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEwNDhiMjg2YTAvZGRmOGUwMGQtMDVhZC0z
NGVhLTgxMDgtY2E3MWU3NGQ0ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFlNDY1YzAtMmExMC00OTVhLWI3
ZDItMmFhMDQ4YjI4NmEwL2FhZTQ2NWMwLTJhMTAtNDk1YS1iN2QyLTJhYTA0OGIy
ODZhMC5jcmwwHwYDVR0jBBgwFoAUqvGlGuuoqNwlLVt4tOGaGNmKjyQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEw
NDhiMjg2YTAuY2VyMIGZBggrBgEFBQcBBwEB/wSBiTCBhjCBgwQCAAIwfQMJACYA
DAAAAgADAwkAJgAMABACAAAwFgMJACYADAAQAgADAwkAJgAMABACAAQDCQEmAAwC
sAIAEgMJACYADATgAgACMBYDCQAmAAwFMAIABQMJACYADAUwAgAGAwkAJgAMDhAC
AAADCQAmAAwOcAIACwMJACYADBJgAgAOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADmsI/l4kqBld6u6Yto2
mEzQnyivCUkSH1XI0tnxMTE4Vv5YfnAu8yIU/t5kk6f65QirQ9Q1KDn3gNVG1hzu
ML8KZqgAfShKEWn77rlm2/K6TG6Maxv7loFBNZJZODnmeDNFZpcHiyIHvHjPPvLZ
VVelz5Ov519seSbCNbUElQOZiBtLP64+T1CUeYH2iECAa+4lCdV/M60SphWCW0Zc
/cddgxP3aFupUANzfxwct5vcj/1X3uVHSooDOL8oAnwIR6P9Eq6qzw8nouVWuQVU
tigsrHcqBvWqkUiqUU7PTQhnhZts0RER2T3PQk/GVZ+12b009k5nWs2bQ/i9eGZr
xRo=
-----END CERTIFICATE-----
Generated at Wed Apr 9 23:13:56 2025 by rpki-client