Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c736370-3653-3f0e-b1db-5dae81d69d87.roa
File:                     8c736370-3653-3f0e-b1db-5dae81d69d87.roa (raw, json)
Hash identifier:          VhSUWMjO+N70a0jEblS0v3RcOxLpksAcFELKx+iwRpI=
Subject key identifier:   E3:F4:75:F6:70:98:BA:CD:54:C2:5C:A4:8D:ED:C6:9D:86:EF:F0:B7
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350EA0AF485EA01C072D3A00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c736370-3653-3f0e-b1db-5dae81d69d87.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:20bf::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a0:af:48:5e:a0:1c:07:2d:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=30d77f5c-99b7-46bb-a595-a0e4e1d473b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:3a:e2:ab:3b:33:25:b0:1a:e5:87:1e:da:
                    5d:d1:05:27:d8:91:7b:24:c0:b1:6c:85:e1:f3:7e:
                    8a:5f:ad:8f:88:52:5d:e2:09:a0:b9:59:da:85:6f:
                    78:d4:ca:dd:1a:53:09:e2:e9:2e:d9:20:81:87:7f:
                    68:0b:fe:2d:3d:26:91:07:ed:c0:b8:d5:5f:52:5a:
                    aa:d0:6e:4b:28:84:2f:88:3e:18:5c:6c:b9:45:aa:
                    0e:b5:20:a2:5f:79:a7:fa:34:67:05:2d:ed:11:56:
                    81:3d:19:c2:ad:dc:49:97:c0:91:11:26:fe:4f:d9:
                    c5:a3:bf:5f:9d:89:67:fc:26:16:ae:cd:e5:cd:ef:
                    df:c1:44:16:9b:e7:b5:98:f8:84:85:5d:34:77:47:
                    36:eb:5f:5e:c9:f6:a3:45:6b:30:11:7b:e4:f3:a8:
                    15:2a:35:12:e8:3e:a9:38:00:32:46:41:1d:62:35:
                    80:59:a1:24:69:56:39:63:ec:5a:2c:4b:93:15:25:
                    bf:f6:33:3e:f7:81:f9:11:54:e0:a3:89:d8:06:b7:
                    c1:48:cb:9a:33:d0:88:5b:cc:2b:b3:f4:31:a6:00:
                    8e:40:50:9c:06:ea:89:a1:04:c6:11:ca:2b:9e:67:
                    64:96:b8:b8:29:e2:85:17:ab:9b:36:0c:ad:05:e4:
                    85:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F4:75:F6:70:98:BA:CD:54:C2:5C:A4:8D:ED:C6:9D:86:EF:F0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c736370-3653-3f0e-b1db-5dae81d69d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:74:d5:b8:58:1f:4d:91:0e:e5:13:f5:33:6a:f4:6d:ab:
         bc:2a:4f:b8:94:b4:ee:7c:03:94:61:37:d8:4c:f8:60:72:80:
         7b:7d:61:96:91:0f:1d:63:c2:28:e1:dc:47:02:48:be:2d:06:
         6e:52:03:2e:c2:a0:34:eb:42:e8:bd:eb:9c:b4:da:dc:79:9a:
         33:1f:ac:51:ac:5a:be:bd:a9:da:24:2c:20:e7:31:ea:02:4d:
         f6:81:d1:61:33:fa:8f:1c:b9:ab:88:b6:13:fd:5b:a6:0d:1e:
         19:ca:07:4a:3c:c3:22:f7:e3:4c:7f:06:42:c5:f5:c5:17:59:
         8b:a8:db:9a:8a:06:a0:61:a3:a0:a1:3f:40:71:b4:76:cf:50:
         96:e7:7b:ed:f2:dd:41:66:fa:84:b9:a4:a7:e2:3b:48:c1:42:
         60:6e:68:4d:85:80:c1:b1:e4:d1:ed:bb:5c:15:97:7e:74:b4:
         86:ff:5d:10:4b:69:aa:5d:b6:da:88:46:40:bd:4d:c4:ef:63:
         8f:87:d2:67:11:c2:ee:81:2e:0a:43:c8:3e:35:a1:02:b9:ff:
         01:f3:39:08:44:4d:9d:84:4c:df:20:a0:57:6e:34:f9:94:f4:
         fb:5e:54:b2:1f:4f:2c:05:1b:36:9c:cc:41:02:47:43:ad:f7:
         01:b7:2c:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1DqCvSF6gHActOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
MzBkNzdmNWMtOTliNy00NmJiLWE1OTUtYTBlNGUxZDQ3M2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC064qs7MyWwGuWHHtpd0QUn2JF7JMCxbIXh
836KX62PiFJd4gmguVnahW941MrdGlMJ4uku2SCBh39oC/4tPSaRB+3AuNVfUlqq
0G5LKIQviD4YXGy5RaoOtSCiX3mn+jRnBS3tEVaBPRnCrdxJl8CRESb+T9nFo79f
nYln/CYWrs3lze/fwUQWm+e1mPiEhV00d0c2619eyfajRWswEXvk86gVKjUS6D6p
OAAyRkEdYjWAWaEkaVY5Y+xaLEuTFSW/9jM+94H5EVTgo4nYBrfBSMuaM9CIW8wr
s/QxpgCOQFCcBuqJoQTGEcornmdklri4KeKFF6ubNgytBeSF9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOP0dfZwmLrNVMJcpI3txp2G7/C3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvOGM3MzYzNzAtMzY1My0z
ZjBlLWIxZGItNWRhZTgxZDY5ZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCC/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFWodNW4WB9NkQ7lE/UzavRtq7wqT7iUtO58A5RhN9hM+GBygHt9
YZaRDx1jwijh3EcCSL4tBm5SAy7CoDTrQui965y02tx5mjMfrFGsWr69qdokLCDn
MeoCTfaB0WEz+o8cuauIthP9W6YNHhnKB0o8wyL340x/BkLF9cUXWYuo25qKBqBh
o6ChP0BxtHbPUJbne+3y3UFm+oS5pKfiO0jBQmBuaE2FgMGx5NHtu1wVl350tIb/
XRBLaapdttqIRkC9TcTvY4+H0mcRwu6BLgpDyD41oQK5/wHzOQhETZ2ETN8goFdu
NPmU9PteVLIfTywFGzaczEECR0Ot9wG3LGE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:03:18 2025 by rpki-client