Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0661c265-cf82-31b4-9ae3-45f2759e7112.roa
File:                     0661c265-cf82-31b4-9ae3-45f2759e7112.roa (raw, json)
Hash identifier:          nL+J3h+TQYRFrsCBmip/G8I2ZPZq4IEsEzZDj3wqcb4=
Subject key identifier:   AA:58:57:84:9B:2F:B1:55:14:5F:03:DE:40:8F:40:4C:D0:FF:F4:EA
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848EC96A40F226EABFEF88E0E80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0661c265-cf82-31b4-9ae3-45f2759e7112.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     0
IP address blocks:        2602:107:2500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:a4:0f:22:6e:ab:fe:f8:8e:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=6f13b079-f787-4e30-a41d-47e854213938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:16:62:64:e1:84:22:4d:98:9f:ad:dc:ff:ec:
                    37:60:60:75:77:5b:86:45:5c:c0:e0:69:39:3b:ea:
                    94:77:96:d8:fb:d1:4e:5f:cc:56:5e:e2:21:90:d8:
                    42:c5:2a:56:8b:30:b3:cc:6e:76:15:b7:78:56:d1:
                    e1:d3:94:14:c5:d9:d7:aa:ce:ad:c0:73:89:c1:4a:
                    7f:63:50:80:e5:c1:03:7e:b7:f2:68:59:7b:ce:68:
                    ef:16:c7:27:1a:51:90:2f:d3:51:f9:2d:50:2c:e5:
                    bb:d3:75:31:91:27:45:a7:b4:85:be:3d:aa:5b:10:
                    7f:b9:28:ba:a8:d2:eb:03:3e:09:7c:d1:25:02:a9:
                    42:30:64:6e:46:24:7e:54:7d:6a:bb:8b:13:5d:fd:
                    86:e7:95:0a:31:81:36:f9:13:4b:78:10:a8:a5:f4:
                    bd:77:a1:c7:cf:dc:0b:19:bc:8d:52:e5:47:e8:91:
                    49:fe:5a:7e:40:cc:b4:5d:9c:4a:ca:6f:01:1d:2f:
                    fc:d4:93:94:cd:cd:93:22:1e:1e:f7:6a:17:2c:89:
                    84:ef:02:19:cb:92:cb:ba:17:74:ee:21:f1:9a:86:
                    de:eb:7e:d5:cc:97:62:ef:ee:9c:cf:87:02:6d:b3:
                    09:4d:7a:bd:11:11:09:51:91:62:36:65:6e:93:d0:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:58:57:84:9B:2F:B1:55:14:5F:03:DE:40:8F:40:4C:D0:FF:F4:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0661c265-cf82-31b4-9ae3-45f2759e7112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:2500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:40:71:2f:40:fb:6b:ed:3d:b4:0e:5a:bd:0c:f2:08:b2:40:
         7b:b3:60:68:11:5e:83:a0:4e:80:36:4b:ed:2a:aa:4f:c0:4e:
         b5:5c:b2:1f:a9:e3:09:e2:19:21:2b:d8:61:d4:8f:df:11:02:
         96:2d:6f:2e:24:49:85:fe:5a:e5:f2:9b:a6:03:fe:f2:fc:76:
         2c:37:03:5c:4e:46:29:68:a4:a4:1b:43:dc:0a:9f:f6:b6:53:
         69:08:c2:7e:e3:a4:58:32:12:96:5f:d8:fc:2f:dd:d2:63:63:
         fe:d9:0a:9d:ce:b4:f3:bc:5c:82:44:b1:db:7d:28:68:4a:52:
         ac:6e:62:49:b9:c2:57:ac:f7:f5:1e:6d:86:32:34:1e:59:63:
         7d:82:04:31:54:e4:d5:97:84:1d:36:75:e3:93:98:d4:88:ef:
         7d:9b:05:0e:2e:cb:a0:f8:28:ec:9d:f5:39:af:91:bd:f2:e1:
         8d:fb:51:bf:69:83:1a:82:1d:6d:ff:c4:13:1e:a3:82:6f:eb:
         4d:e2:97:5e:29:51:56:b4:ae:8c:6a:0a:05:75:1c:65:93:ad:
         a7:ec:35:3b:ed:fc:42:2f:46:ba:13:b0:2f:e6:ef:62:11:bc:
         74:b7:36:46:9d:69:c7:d9:70:40:63:bb:0c:7c:e7:b8:a1:64:
         ca:2b:bf:e3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjslqQPIm6r/viODoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
NmYxM2IwNzktZjc4Ny00ZTMwLWE0MWQtNDdlODU0MjEzOTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRZiZOGEIk2Yn63c/+w3YGB1d1uGRVzA4Gk5
O+qUd5bY+9FOX8xWXuIhkNhCxSpWizCzzG52Fbd4VtHh05QUxdnXqs6twHOJwUp/
Y1CA5cEDfrfyaFl7zmjvFscnGlGQL9NR+S1QLOW703UxkSdFp7SFvj2qWxB/uSi6
qNLrAz4JfNElAqlCMGRuRiR+VH1qu4sTXf2G55UKMYE2+RNLeBCopfS9d6HHz9wL
GbyNUuVH6JFJ/lp+QMy0XZxKym8BHS/81JOUzc2TIh4e92oXLImE7wIZy5LLuhd0
7iHxmobe637VzJdi7+6cz4cCbbMJTXq9EREJUZFiNmVuk9C2rwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKpYV4SbL7FVFF8D3kCPQEzQ//TqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDY2MWMyNjUtY2Y4Mi0z
MWI0LTlhZTMtNDVmMjc1OWU3MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIBByUw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUkBxL0D7a+09tA5avQzyCLJAe7NgaBFeg6BOgDZL7SqqT8BOtVyy
H6njCeIZISvYYdSP3xECli1vLiRJhf5a5fKbpgP+8vx2LDcDXE5GKWikpBtD3Aqf
9rZTaQjCfuOkWDISll/Y/C/d0mNj/tkKnc6087xcgkSx230oaEpSrG5iSbnCV6z3
9R5thjI0HlljfYIEMVTk1ZeEHTZ145OY1IjvfZsFDi7LoPgo7J31Oa+RvfLhjftR
v2mDGoIdbf/EEx6jgm/rTeKXXilRVrSujGoKBXUcZZOtp+w1O+38Qi9GuhOwL+bv
YhG8dLc2Rp1px9lwQGO7DHznuKFkyiu/4w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:16:12 2025 by rpki-client