Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/41432424-20ff-36ec-a392-670f69c206cf.roa
File:                     41432424-20ff-36ec-a392-670f69c206cf.roa (raw, json)
Hash identifier:          ybwSLKA78OvwseJ3w+SOXyPN5/H0xeqzAP4l4SBtF6w=
Subject key identifier:   3F:20:34:B0:A4:70:72:4C:02:8E:F9:79:D2:D4:04:FD:5C:B0:C7:FB
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584854702A2D1C3D2DFEDBB2BB80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/41432424-20ff-36ec-a392-670f69c206cf.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     399976
IP address blocks:        2602:80c:2034::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:2a:2d:1c:3d:2d:fe:db:b2:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=2e12c0b3-7a7c-47fa-bdaf-6d56bb29dc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:cc:dd:07:83:a4:1b:0b:fb:2e:1c:7a:69:
                    63:a9:4a:35:b3:e8:8d:20:ca:97:38:98:15:44:ab:
                    35:6d:35:78:98:a9:ce:22:54:e8:ac:83:b1:58:75:
                    c0:a9:f9:a0:ea:37:88:4c:46:3c:21:69:5b:50:b6:
                    f3:d0:97:94:d7:56:76:24:4d:0a:7b:36:11:f3:e9:
                    90:df:14:3b:65:1d:56:d8:8d:28:a9:c1:23:df:72:
                    a8:a6:9c:e1:e2:b0:8f:f5:93:b9:fd:88:0b:e4:e2:
                    e8:9c:55:2d:6c:70:45:49:b5:da:b3:63:22:1e:a5:
                    d5:3d:9c:c9:0b:fd:8b:82:40:97:d2:b3:36:f2:da:
                    d5:56:7f:fd:29:0d:af:b1:f8:ba:77:d9:94:30:2e:
                    f4:f9:91:bf:c8:21:62:c1:6b:1b:1f:da:d5:29:25:
                    9c:5b:86:f4:59:22:20:6b:38:7c:e7:b4:55:46:d4:
                    4a:40:64:05:99:2d:f7:ee:51:c5:e8:11:b2:1e:fe:
                    c9:d5:d5:ad:6b:5e:c7:97:09:3f:73:f9:b0:5d:e0:
                    f4:01:77:a8:71:1b:d7:4f:4b:2f:27:cc:a0:07:e1:
                    14:2e:7d:93:d0:73:ea:f0:f8:43:61:f6:41:bc:72:
                    53:45:15:60:7b:a4:8e:d0:02:1f:75:88:5b:b0:ee:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:20:34:B0:A4:70:72:4C:02:8E:F9:79:D2:D4:04:FD:5C:B0:C7:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/41432424-20ff-36ec-a392-670f69c206cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2034::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9b:58:7c:64:49:6a:81:3f:c4:fe:2e:bf:00:d5:eb:06:4e:
         7f:9a:4d:71:33:22:4f:97:07:e4:d8:64:be:32:9e:33:2a:79:
         18:09:92:da:33:94:d2:7d:7d:39:89:d1:64:88:90:3e:49:1a:
         3d:92:ba:16:10:32:1e:6e:1f:7c:0d:bd:d0:f6:3a:5f:58:b9:
         06:3f:73:a1:91:9b:e5:40:2d:36:87:b2:bc:08:ec:c4:29:ba:
         7f:10:b4:4d:8f:af:56:3c:96:1c:32:ee:a1:a8:63:59:06:04:
         33:b9:b4:95:f4:df:8a:19:29:69:94:5a:32:46:1c:fb:8e:fd:
         42:e7:75:68:8a:fc:ce:f3:dd:2a:01:35:83:95:f1:fe:2e:e9:
         ca:5a:60:e3:ce:af:27:94:23:10:ea:60:7b:a0:4d:40:3e:c4:
         67:c6:9c:7e:00:78:71:6b:cf:3f:0e:af:61:aa:ea:30:a0:07:
         d9:1b:49:07:c1:fc:10:53:9e:99:6a:83:c9:22:f6:cf:57:8b:
         4a:8b:47:ea:ba:b5:ce:5e:91:8c:22:0d:1c:89:8f:91:d0:da:
         8e:a7:d6:33:4b:2f:7d:3e:f3:bd:31:c2:4c:59:b7:90:33:ec:
         44:2c:64:c9:83:40:8e:a3:bc:4d:b0:f8:bf:28:39:ba:ec:35:
         1d:e4:3d:43
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhUcCotHD0t/tuyu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
MmUxMmMwYjMtN2E3Yy00N2ZhLWJkYWYtNmQ1NmJiMjlkYzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB7M3QeDpBsL+y4cemljqUo1s+iNIMqXOJgV
RKs1bTV4mKnOIlTorIOxWHXAqfmg6jeITEY8IWlbULbz0JeU11Z2JE0KezYR8+mQ
3xQ7ZR1W2I0oqcEj33Koppzh4rCP9ZO5/YgL5OLonFUtbHBFSbXas2MiHqXVPZzJ
C/2LgkCX0rM28trVVn/9KQ2vsfi6d9mUMC70+ZG/yCFiwWsbH9rVKSWcW4b0WSIg
azh857RVRtRKQGQFmS337lHF6BGyHv7J1dWta17Hlwk/c/mwXeD0AXeocRvXT0sv
J8ygB+EULn2T0HPq8PhDYfZBvHJTRRVge6SO0AIfdYhbsO6TaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD8gNLCkcHJMAo75edLUBP1csMf7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvNDE0MzI0MjQtMjBmZi0z
NmVjLWEzOTItNjcwZjY5YzIwNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCA0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAImbWHxkSWqBP8T+Lr8A1esGTn+aTXEzIk+XB+TYZL4ynjMqeRgJ
ktozlNJ9fTmJ0WSIkD5JGj2SuhYQMh5uH3wNvdD2Ol9YuQY/c6GRm+VALTaHsrwI
7MQpun8QtE2Pr1Y8lhwy7qGoY1kGBDO5tJX034oZKWmUWjJGHPuO/ULndWiK/M7z
3SoBNYOV8f4u6cpaYOPOryeUIxDqYHugTUA+xGfGnH4AeHFrzz8Or2Gq6jCgB9kb
SQfB/BBTnplqg8ki9s9Xi0qLR+q6tc5ekYwiDRyJj5HQ2o6n1jNLL30+870xwkxZ
t5Az7EQsZMmDQI6jvE2w+L8oObrsNR3kPUM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:32 2025 by rpki-client