Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bc6cfdde-216a-35da-83a5-db62d0724ac4.roa
File:                     bc6cfdde-216a-35da-83a5-db62d0724ac4.roa (raw, json)
Hash identifier:          RuNK9pf29Gek4+NAAKnpu1YQlroMpgWakYw/1yebMfA=
Subject key identifier:   82:45:FD:64:DD:08:24:95:DC:DE:33:28:46:75:6D:0C:3B:D8:0A:AC
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A1465685480FA284F385FD1F0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bc6cfdde-216a-35da-83a5-db62d0724ac4.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:2013::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:68:54:80:fa:28:4f:38:5f:d1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=bdcd557e-319c-479b-b199-866995ba33ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:3b:83:57:2b:0b:05:b5:b8:71:d7:44:b4:
                    0d:04:55:74:12:03:f2:e0:37:5f:38:64:21:85:c1:
                    40:0f:6a:7c:b6:9b:9c:a6:14:99:68:49:34:46:5d:
                    54:43:bb:7b:d0:27:08:97:7d:c3:51:84:e6:c0:5d:
                    c3:4b:10:d0:02:78:f7:a6:9b:09:f6:80:e4:60:28:
                    ce:d2:c9:3e:92:e0:9a:53:15:14:c5:4a:6b:65:9f:
                    7d:e2:92:c2:5d:c2:68:99:01:65:d0:62:ff:e3:19:
                    8a:06:92:0d:81:d2:ff:13:34:d1:7f:44:d1:38:56:
                    80:7e:3c:d6:84:7e:be:be:3f:d9:f7:67:64:f3:39:
                    cd:c5:9b:b8:bd:f5:e9:87:44:e2:49:d1:f5:00:2d:
                    84:a3:e9:f0:7b:2d:1f:7a:d3:96:ba:5a:13:3d:f9:
                    e9:8d:5a:fe:aa:1b:2b:5f:f0:23:a4:e5:8c:00:e9:
                    b7:fc:b1:50:38:95:3c:43:88:d3:c8:ba:4c:d9:77:
                    bf:61:e2:d6:8b:c3:19:b0:1e:4e:7d:63:9e:f1:54:
                    1e:22:aa:96:e7:dd:53:f8:43:50:67:71:17:58:39:
                    64:bb:8a:c5:05:75:33:90:00:20:3c:5e:47:9b:a0:
                    9a:8f:17:9d:92:ea:3d:01:45:2b:77:0b:e6:fb:08:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:45:FD:64:DD:08:24:95:DC:DE:33:28:46:75:6D:0C:3B:D8:0A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bc6cfdde-216a-35da-83a5-db62d0724ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2013::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:c3:3a:b9:3f:35:a6:30:99:02:1e:56:9b:da:33:fd:38:04:
         fd:72:e5:08:eb:42:24:f9:20:35:a4:7f:38:b9:90:a3:01:6a:
         41:6f:ac:dc:5b:ce:7f:49:27:32:b2:df:10:14:74:30:f0:d1:
         64:9e:f9:05:58:a5:e6:1c:ef:c6:c6:45:a8:3e:12:1f:6e:57:
         fe:87:c1:2f:d3:cd:a6:7b:2d:e5:f6:4b:32:1c:67:7f:9c:df:
         fa:f1:a2:77:f2:95:58:62:c5:e9:1b:47:13:5b:8b:01:09:90:
         f0:90:54:ae:d0:7b:0a:6c:40:a5:85:0d:04:49:86:20:2d:ba:
         34:1c:55:39:c1:d0:85:70:f7:a3:6e:90:19:ee:88:bd:2c:48:
         3a:cd:db:58:f1:a9:00:23:b0:40:75:ed:b7:43:bd:5d:91:5a:
         86:9c:d2:fd:a6:38:82:92:f3:35:0c:8b:d4:c1:39:c5:ee:ee:
         ab:f3:f3:2b:e0:36:3c:8c:7e:17:62:21:c2:65:57:a6:cb:cc:
         82:37:e3:43:65:ec:ce:5a:cf:81:e1:81:33:d2:44:5b:1f:98:
         b1:f0:ba:31:20:28:cd:8f:fb:33:0d:b6:f3:df:77:6d:b6:b9:
         5b:23:0c:fc:4f:0a:a5:e2:7b:00:3c:1c:16:0c:33:5a:d2:d9:
         80:3c:65:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZWhUgPooTzhf0fAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
YmRjZDU1N2UtMzE5Yy00NzliLWIxOTktODY2OTk1YmEzM2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9M7g1crCwW1uHHXRLQNBFV0EgPy4DdfOGQh
hcFAD2p8tpucphSZaEk0Rl1UQ7t70CcIl33DUYTmwF3DSxDQAnj3ppsJ9oDkYCjO
0sk+kuCaUxUUxUprZZ994pLCXcJomQFl0GL/4xmKBpINgdL/EzTRf0TROFaAfjzW
hH6+vj/Z92dk8znNxZu4vfXph0TiSdH1AC2Eo+nwey0fetOWuloTPfnpjVr+qhsr
X/AjpOWMAOm3/LFQOJU8Q4jTyLpM2Xe/YeLWi8MZsB5OfWOe8VQeIqqW591T+ENQ
Z3EXWDlku4rFBXUzkAAgPF5Hm6Cajxedkuo9AUUrdwvm+wiXmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIJF/WTdCCSV3N4zKEZ1bQw72AqsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvYmM2Y2ZkZGUtMjE2YS0z
NWRhLTgzYTUtZGI2MmQwNzI0YWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCAT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJjDOrk/NaYwmQIeVpvaM/04BP1y5QjrQiT5IDWkfzi5kKMBakFv
rNxbzn9JJzKy3xAUdDDw0WSe+QVYpeYc78bGRag+Eh9uV/6HwS/TzaZ7LeX2SzIc
Z3+c3/rxonfylVhixekbRxNbiwEJkPCQVK7QewpsQKWFDQRJhiAtujQcVTnB0IVw
96NukBnuiL0sSDrN21jxqQAjsEB17bdDvV2RWoac0v2mOIKS8zUMi9TBOcXu7qvz
8yvgNjyMfhdiIcJlV6bLzII340Nl7M5az4HhgTPSRFsfmLHwujEgKM2P+zMNtvPf
d222uVsjDPxPCqXiewA8HBYMM1rS2YA8ZbI=
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:04:36 2025 by rpki-client