Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa
File:                     eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa (raw, json)
Hash identifier:          7ruXD56yTtEFmac0bg6C0co/4PpBIheP5nYAeMHjQX0=
Subject key identifier:   CB:CA:3F:B9:9C:E3:9C:78:CF:F4:06:D7:44:EB:D8:4D:D6:5C:29:FB
Certificate issuer:       /CN=603ec9c3-6a7f-4455-baee-5999e253e735
Certificate serial:       010D0C9F43285848E16BE5AD210DF0CD7DC9F540
Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     3676
IP address blocks:        2620:0:e50::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e5:ad:21:0d:f0:cd:7d:c9:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=97698495-e5a2-489a-9f3d-0aefc62fe295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:c4:5b:36:04:bf:17:97:5e:d9:89:e4:5f:
                    2f:16:d5:18:83:d7:3d:14:17:8f:a0:eb:90:e8:67:
                    b9:45:35:72:7f:b2:fa:9b:22:17:c0:6a:32:ff:32:
                    f5:f4:28:c9:82:c2:78:f0:2a:ae:e6:de:d5:67:36:
                    f1:a4:70:13:be:da:3d:d6:d8:7a:cb:09:f0:de:fa:
                    ce:0b:fb:af:14:ce:0f:cc:ae:b5:0e:24:fd:96:67:
                    67:5e:9c:4e:2d:1f:7e:c2:6e:87:a8:3e:68:79:39:
                    97:75:bf:8e:d3:a4:66:d4:95:e8:bf:dd:50:39:9c:
                    e0:19:74:11:0b:75:24:e7:72:39:71:2a:7c:b5:8b:
                    8a:77:f3:7b:0e:03:cc:ee:14:e2:ae:90:eb:71:63:
                    7c:39:53:11:e1:18:70:f7:bc:5b:a5:09:a4:df:08:
                    a6:48:09:3d:71:e2:35:fb:21:1a:b2:13:7a:de:9e:
                    37:ab:8e:ce:f8:62:3c:36:c3:61:95:7e:25:63:cf:
                    a7:15:7f:15:8b:ef:3c:03:6c:a8:62:50:84:90:46:
                    00:7b:56:f0:a0:1c:b5:a5:39:21:a1:88:48:9a:96:
                    23:3f:88:30:02:84:3d:3a:81:09:ed:54:2d:78:cb:
                    21:22:76:84:c4:80:b3:f3:40:89:bd:c0:09:f0:74:
                    44:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CA:3F:B9:9C:E3:9C:78:CF:F4:06:D7:44:EB:D8:4D:D6:5C:29:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/eb013a9a-d801-3e69-8a6f-33ac66afb2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl

            X509v3 Authority Key Identifier:
                keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:e50::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:45:ec:85:90:71:3b:51:8a:43:a1:f5:a9:50:13:47:22:51:
         7a:dc:ae:17:6f:78:57:f2:72:05:9c:0b:1c:37:b1:1d:b5:6e:
         9c:22:7b:1a:62:2a:5d:d2:8a:d1:8c:64:45:4c:a6:e1:14:d6:
         cd:b4:c3:60:51:f1:b9:6e:47:20:63:9e:e9:e9:87:52:b0:48:
         32:e5:89:15:32:7b:03:4f:2b:9d:12:cf:96:91:a1:be:8c:bf:
         9e:0e:db:be:1e:5d:87:62:cb:b3:a6:48:10:59:f9:30:1e:30:
         f8:34:f9:05:4e:8e:d3:6b:0e:3e:e1:3f:22:22:cd:f9:b7:14:
         ad:1b:fe:09:3c:d0:a1:a3:af:88:dc:d3:3c:8c:91:7c:60:5c:
         d2:a1:e8:5a:f3:71:d7:2a:8a:01:11:30:df:61:2a:bf:22:06:
         55:30:26:38:c8:63:23:d9:0f:dd:d7:85:a1:ec:9b:a6:1d:1d:
         3a:99:17:42:8f:2d:8d:ce:cd:d8:03:71:c5:ff:0f:14:66:25:
         0d:76:13:ed:f7:a7:51:d1:9c:a5:ff:95:f6:95:14:38:5c:ac:
         43:b1:30:1c:71:49:35:56:d2:bd:c5:ad:3d:d8:db:29:0e:31:
         8b:60:ee:e1:80:66:ee:76:12:6d:5c:8b:50:7b:0f:60:bc:36:
         57:db:eb:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjha+WtIQ3wzX3J9UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl
NzM1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
OTc2OTg0OTUtZTVhMi00ODlhLTlmM2QtMGFlZmM2MmZlMjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZPEWzYEvxeXXtmJ5F8vFtUYg9c9FBePoOuQ
6Ge5RTVyf7L6myIXwGoy/zL19CjJgsJ48Cqu5t7VZzbxpHATvto91th6ywnw3vrO
C/uvFM4PzK61DiT9lmdnXpxOLR9+wm6HqD5oeTmXdb+O06Rm1JXov91QOZzgGXQR
C3Uk53I5cSp8tYuKd/N7DgPM7hTirpDrcWN8OVMR4Rhw97xbpQmk3wimSAk9ceI1
+yEashN63p43q47O+GI8NsNhlX4lY8+nFX8Vi+88A2yoYlCEkEYAe1bwoBy1pTkh
oYhImpYjP4gwAoQ9OoEJ7VQteMshInaExICz80CJvcAJ8HRE1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMvKP7mc45x4z/QG10Tr2E3WXCn7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl
YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvZWIwMTNhOWEtZDgwMS0z
ZTY5LThhNmYtMzNhYzY2YWZiMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh
ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz
ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5
ZTI1M2U3MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiAAAA5Q
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEZF7IWQcTtRikOh9alQE0ciUXrcrhdveFfycgWcCxw3sR21bpwi
expiKl3SitGMZEVMpuEU1s20w2BR8bluRyBjnunph1KwSDLliRUyewNPK50Sz5aR
ob6Mv54O274eXYdiy7OmSBBZ+TAeMPg0+QVOjtNrDj7hPyIizfm3FK0b/gk80KGj
r4jc0zyMkXxgXNKh6FrzcdcqigERMN9hKr8iBlUwJjjIYyPZD93XhaHsm6YdHTqZ
F0KPLY3OzdgDccX/DxRmJQ12E+33p1HRnKX/lfaVFDhcrEOxMBxxSTVW0r3FrT3Y
2ykOMYtg7uGAZu52Em1ci1B7D2C8Nlfb6y4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:35 2025 by rpki-client