Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/babc6df1-c51d-3e82-84c7-c1423a14e9c0.roa
File:                     babc6df1-c51d-3e82-84c7-c1423a14e9c0.roa (raw, json)
Hash identifier:          pHiG12BcdZ5T4tz7oRVBf08D3jjUyFgmHRYYN5BXoik=
Subject key identifier:   AD:A0:9D:5B:73:B6:9C:C4:2B:D9:7D:DA:D9:4F:4D:24:63:1F:4C:D0
Certificate issuer:       /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial:       010D0C9F432858496054155769CAD007D0687400
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/babc6df1-c51d-3e82-84c7-c1423a14e9c0.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     6939
IP address blocks:        2602:fb1b:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:15:57:69:ca:d0:07:d0:68:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=5671e652-f21f-4b20-96f9-35789527647d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:60:3f:11:56:24:44:f0:c9:93:e8:31:c6:
                    a0:47:7a:cf:7c:60:45:c4:01:ec:17:9e:67:60:01:
                    56:a1:27:ac:04:cb:4d:32:f9:7d:1c:4c:3d:9d:b9:
                    15:a4:82:73:47:10:c7:ae:ca:f5:f4:c0:c2:04:19:
                    b6:e4:d0:12:88:99:c3:fa:23:5d:d4:ed:8f:40:f7:
                    46:27:59:1e:45:ff:fa:d4:c6:35:97:e7:ac:7d:d5:
                    b5:55:42:b5:54:cc:ec:a7:7c:15:f1:d2:f8:c7:04:
                    a0:94:d3:5f:15:7e:51:ad:c3:5f:68:5b:13:19:4d:
                    28:44:fe:4c:e7:cb:d5:4a:46:95:2f:80:fc:a9:99:
                    6c:45:54:06:fe:e4:eb:df:35:73:29:0d:1d:a8:3b:
                    61:55:f8:32:df:8c:00:21:79:4b:34:3c:b5:f9:65:
                    54:91:88:71:ec:51:ee:82:23:1a:77:78:64:f0:9d:
                    34:55:13:61:90:50:2e:0b:1a:14:53:fb:4b:92:ba:
                    88:66:17:62:21:17:ce:d0:cf:bd:40:06:73:bd:ea:
                    7d:4a:f0:db:27:2e:89:85:5d:21:f9:db:fe:d2:52:
                    bb:6b:2d:b9:31:b8:e4:2e:8e:73:7e:91:0f:7e:29:
                    b6:bd:02:6c:e7:3e:f1:73:54:51:85:6a:57:f1:2e:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A0:9D:5B:73:B6:9C:C4:2B:D9:7D:DA:D9:4F:4D:24:63:1F:4C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/babc6df1-c51d-3e82-84c7-c1423a14e9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb1b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:aa:fa:bd:2f:e1:73:36:5b:c0:16:dd:16:2f:64:16:be:74:
         ca:91:fa:b3:70:c8:67:c5:76:c9:8b:3a:8f:f3:79:a9:24:f7:
         3e:30:1c:2f:d5:64:32:5d:2e:87:19:25:98:31:83:5a:27:d4:
         66:36:06:09:5d:ce:c6:7c:1a:2d:76:62:3e:42:66:7c:13:e2:
         0b:b1:ad:20:b3:fc:bb:5a:32:39:45:a6:6b:bf:e0:09:a9:4c:
         8a:bf:1b:6d:ae:14:53:a5:48:fd:3a:56:91:eb:b5:4e:1d:4c:
         31:eb:f2:8e:19:9b:65:33:f4:f2:52:06:2a:e9:4b:87:b2:cb:
         36:f7:19:14:ba:9e:11:b0:17:35:5d:34:80:0f:44:14:40:8c:
         8c:35:75:7b:ca:6e:c7:29:a4:8d:7a:07:09:0e:56:a2:40:d2:
         6c:f3:44:9f:b0:be:71:e2:44:1d:2e:78:05:f8:81:1e:e0:21:
         63:85:c4:dc:95:fd:66:87:3a:da:0d:fa:dc:d8:fd:e0:fe:90:
         ea:49:88:ad:e6:15:a0:ae:57:42:24:25:08:90:80:b3:78:3f:
         1a:74:9b:b5:b7:77:92:e7:83:d7:6a:91:81:2b:03:ce:da:80:
         bb:0b:b7:78:bf:e2:f8:b2:08:19:3b:66:55:bd:ad:d1:72:be:
         da:da:11:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElgVBVXacrQB9BodAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODExYmQyYWMtYzUzZC00MGE2LWJmYTQtMjc1YzIyNDFh
ZjYzMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk
NTY3MWU2NTItZjIxZi00YjIwLTk2ZjktMzU3ODk1Mjc2NDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXxgPxFWJETwyZPoMcagR3rPfGBFxAHsF55n
YAFWoSesBMtNMvl9HEw9nbkVpIJzRxDHrsr19MDCBBm25NASiJnD+iNd1O2PQPdG
J1keRf/61MY1l+esfdW1VUK1VMzsp3wV8dL4xwSglNNfFX5RrcNfaFsTGU0oRP5M
58vVSkaVL4D8qZlsRVQG/uTr3zVzKQ0dqDthVfgy34wAIXlLNDy1+WVUkYhx7FHu
giMad3hk8J00VRNhkFAuCxoUU/tLkrqIZhdiIRfO0M+9QAZzvep9SvDbJy6JhV0h
+dv+0lK7ay25MbjkLo5zfpEPfim2vQJs5z7xc1RRhWpX8S4kWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK2gnVtztpzEK9l92tlPTSRjH0zQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFi
ZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVjMjI0MWFmNjMvYmFiYzZkZjEtYzUxZC0z
ZTgyLTg0YzctYzE0MjNhMTRlOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODExYmQyYWMtYzUzZC00MGE2LWJm
YTQtMjc1YzIyNDFhZjYzLzgxMWJkMmFjLWM1M2QtNDBhNi1iZmE0LTI3NWMyMjQx
YWY2My5jcmwwHwYDVR0jBBgwFoAUL6VyaMN3iHmP21Xe0bvHxqiGXYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84MTFiZDJhYy1jNTNkLTQwYTYtYmZhNC0yNzVj
MjI0MWFmNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7GwAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEOq+r0v4XM2W8AW3RYvZBa+dMqR+rNwyGfFdsmLOo/zeakk9z4w
HC/VZDJdLocZJZgxg1on1GY2BgldzsZ8Gi12Yj5CZnwT4guxrSCz/LtaMjlFpmu/
4AmpTIq/G22uFFOlSP06VpHrtU4dTDHr8o4Zm2Uz9PJSBirpS4eyyzb3GRS6nhGw
FzVdNIAPRBRAjIw1dXvKbscppI16BwkOVqJA0mzzRJ+wvnHiRB0ueAX4gR7gIWOF
xNyV/WaHOtoN+tzY/eD+kOpJiK3mFaCuV0IkJQiQgLN4Pxp0m7W3d5Lng9dqkYEr
A87agLsLt3i/4viyCBk7ZlW9rdFyvtraEW4=
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:51:51 2025 by rpki-client