Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa
File:                     aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa (raw, json)
Hash identifier:          w4RkRtjHekBxe3Pj7VNqWirEI9VAFjbWvZ9Xkqi+Mik=
Subject key identifier:   93:7B:B2:8B:8B:AB:C8:95:36:E3:92:EB:76:91:09:97:0F:44:52:03
Certificate issuer:       /CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
Certificate serial:       010D0C9F4328584A1B5FF372BCF8621305494400
Authority key identifier: 08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     401450
IP address blocks:        2602:fa1c:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:f3:72:bc:f8:62:13:05:49:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=d2b5afc8-17de-4cfb-bff1-1f422bfb80a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e8:d2:61:77:91:bb:0a:eb:e4:f2:da:46:1e:
                    72:7d:5c:fa:d3:f2:13:22:76:77:52:50:92:38:f1:
                    68:92:eb:1b:b6:94:7b:34:44:dc:42:84:6a:85:21:
                    57:cd:d5:9f:44:72:88:03:b4:59:80:32:9f:51:22:
                    a2:a6:c8:66:b4:d5:36:d0:92:fc:e3:87:ae:ea:b8:
                    fc:86:b2:7b:5c:c9:18:16:f5:5f:61:bd:55:b5:bb:
                    81:dd:8e:45:a0:36:2b:17:31:97:cb:6c:5c:9b:98:
                    6a:6c:e5:1b:e9:56:3f:ce:c5:84:c0:23:4e:23:d4:
                    b9:63:9b:af:42:b4:44:8b:fa:ee:f8:38:80:1e:02:
                    fa:cc:1d:fb:4e:82:a6:22:62:cc:a6:79:3b:db:96:
                    39:23:f8:57:bd:2f:76:1b:52:d4:be:92:cb:80:9b:
                    a2:60:8a:37:aa:9a:b8:6f:9a:ab:2f:8f:c9:35:dd:
                    42:75:e1:b3:23:42:fd:f3:36:2b:80:3b:ef:13:83:
                    2f:34:45:40:1b:a4:4f:79:b4:cb:fd:08:ae:77:97:
                    f6:32:8a:f7:1e:3b:ce:89:41:ec:86:86:81:c0:52:
                    0f:38:86:2e:f4:cc:84:8d:cb:b2:20:59:f6:25:80:
                    5f:1a:7c:ed:f7:6a:94:01:2b:c0:a9:c2:e0:53:a8:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7B:B2:8B:8B:AB:C8:95:36:E3:92:EB:76:91:09:97:0F:44:52:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/aa3eb4ef-8503-3f22-b9e9-67118de122fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl

            X509v3 Authority Key Identifier:
                keyid:08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e2:01:71:da:57:bd:bd:41:d4:d0:28:bd:56:a9:91:78:ea:
         cc:59:d3:1b:54:e1:db:0c:23:64:52:b3:28:a3:31:3b:0f:02:
         1b:71:ee:b5:21:df:c2:2c:e0:83:61:6d:bc:bf:59:4a:91:08:
         5d:18:be:1c:1c:6e:84:42:89:fe:e0:9d:86:58:61:86:95:60:
         1e:e0:32:57:8d:99:ba:1e:86:f4:10:3a:d6:eb:f0:93:d4:79:
         32:21:8a:32:fd:b6:a5:af:f4:b9:ca:e4:59:4e:af:40:ee:d2:
         a3:a1:9a:00:8f:48:bb:02:97:a4:09:66:75:a1:c1:e2:28:a5:
         70:95:c4:e5:ef:bb:bf:be:08:28:f0:8c:f4:83:96:e4:2c:f1:
         c8:6a:03:cd:95:81:50:07:57:f6:7a:5f:00:3b:de:fe:ce:aa:
         0f:22:1e:d9:62:14:e7:32:f9:e6:03:a5:d3:99:3a:df:12:58:
         74:03:02:87:9b:c8:19:89:6f:95:bf:04:2c:aa:b3:77:e2:77:
         50:07:9d:4b:bd:a0:bd:16:a8:f7:40:cf:f4:21:4f:c6:a8:c9:
         7e:55:90:10:70:ba:41:ab:e6:86:79:e6:0c:4d:d0:5c:6a:d5:
         c7:38:e9:e3:1d:cc:4e:4b:eb:65:b2:12:6f:3a:70:9c:e2:93:
         5a:71:2c:8a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEobX/NyvPhiEwVJRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFiZDFhYTAtMmI0ZS00MzQ4LThmNTgtOGE5NGU0YmYx
OGJmMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk
ZDJiNWFmYzgtMTdkZS00Y2ZiLWJmZjEtMWY0MjJiZmI4MGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ejSYXeRuwrr5PLaRh5yfVz60/ITInZ3UlCS
OPFokusbtpR7NETcQoRqhSFXzdWfRHKIA7RZgDKfUSKipshmtNU20JL844eu6rj8
hrJ7XMkYFvVfYb1VtbuB3Y5FoDYrFzGXy2xcm5hqbOUb6VY/zsWEwCNOI9S5Y5uv
QrREi/ru+DiAHgL6zB37ToKmImLMpnk725Y5I/hXvS92G1LUvpLLgJuiYIo3qpq4
b5qrL4/JNd1CdeGzI0L98zYrgDvvE4MvNEVAG6RPebTL/Qiud5f2Mor3HjvOiUHs
hoaBwFIPOIYu9MyEjcuyIFn2JYBfGnzt92qUASvAqcLgU6haGQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJN7souLq8iVNuOS63aRCZcPRFIDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMWJk
MWFhMC0yYjRlLTQzNDgtOGY1OC04YTk0ZTRiZjE4YmYvYWEzZWI0ZWYtODUwMy0z
ZjIyLWI5ZTktNjcxMThkZTEyMmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTFiZDFhYTAtMmI0ZS00MzQ4LThm
NTgtOGE5NGU0YmYxOGJmLzExYmQxYWEwLTJiNGUtNDM0OC04ZjU4LThhOTRlNGJm
MThiZi5jcmwwHwYDVR0jBBgwFoAUCOxAAPxxyUvyfMvqGuWuxFpLbQswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMWJkMWFhMC0yYjRlLTQzNDgtOGY1OC04YTk0
ZTRiZjE4YmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6HAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKfiAXHaV729QdTQKL1WqZF46sxZ0xtU4dsMI2RSsyijMTsPAhtx
7rUh38Is4INhbby/WUqRCF0YvhwcboRCif7gnYZYYYaVYB7gMleNmboehvQQOtbr
8JPUeTIhijL9tqWv9LnK5FlOr0Du0qOhmgCPSLsCl6QJZnWhweIopXCVxOXvu7++
CCjwjPSDluQs8chqA82VgVAHV/Z6XwA73v7Oqg8iHtliFOcy+eYDpdOZOt8SWHQD
AoebyBmJb5W/BCyqs3fid1AHnUu9oL0WqPdAz/QhT8aoyX5VkBBwukGr5oZ55gxN
0Fxq1cc46eMdzE5L62WyEm86cJzik1pxLIo=
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:08:48 2025 by rpki-client