Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa
File:                     5587e601-3810-3cad-ad39-d5b549845ba7.roa (raw, json)
Hash identifier:          u/eu/hmgjoMfG+clJtkxVonwqZs5Bof1JbBsFd44eRU=
Subject key identifier:   9F:89:02:7E:43:E7:2B:CF:76:78:1C:98:A4:69:93:23:1A:95:06:95
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F432858491C0C26866577FB530CF52C00
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa
Signing time:             Fri 07 Mar 2025 14:00:52 +0000
ROA not before:           Fri 07 Mar 2025 14:00:52 +0000
ROA not after:            Thu 05 Jun 2025 13:00:52 +0000
asID:                     4186
IP address blocks:        2602:fbdc:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1c:0c:26:86:65:77:fb:53:0c:f5:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Mar  7 14:00:52 2025 GMT
            Not After : Jun  5 13:00:52 2025 GMT
        Subject: CN=b8ba5cfa-cb72-4d5f-b367-4f54c67a7870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:89:41:b5:89:19:68:9c:8a:83:f7:5c:e9:
                    83:b5:43:00:bd:21:cd:d3:c7:c8:c9:f5:90:fb:ca:
                    fb:fc:4f:fd:a2:97:f1:92:ab:ba:e9:f4:fc:02:d0:
                    2d:cf:4f:e6:9d:1b:b9:4a:db:2c:62:55:3f:45:ad:
                    1f:1c:5b:9c:2d:7d:54:9d:5b:2d:5b:82:04:78:80:
                    ea:b4:76:99:8f:3d:59:46:26:de:74:08:7d:a0:28:
                    bc:d2:6e:98:b0:cb:f1:b8:f3:d5:56:9a:9e:a0:16:
                    38:f5:75:da:f3:e6:57:b6:57:31:76:8a:4b:10:f8:
                    77:b9:e1:7b:de:22:33:d7:15:ad:3e:0c:2b:01:2a:
                    64:33:48:0c:06:38:05:26:12:ae:7b:4c:b8:98:d4:
                    5f:bd:55:e6:f5:87:01:ff:1e:30:4f:a9:b8:e2:6e:
                    af:5f:05:fe:fb:f0:16:e7:e3:62:c9:db:42:3a:cf:
                    0b:68:f0:58:a5:f8:16:bc:78:98:81:a1:f4:f9:a2:
                    5a:f9:73:b0:7b:b1:e8:23:7d:cb:df:9e:84:00:3b:
                    42:ca:68:85:a8:03:31:68:ee:9e:e4:8d:6a:82:38:
                    ba:bc:a0:f7:4f:07:63:7f:93:95:bc:ec:c8:81:c7:
                    60:c2:bb:f2:2f:40:a8:fb:7b:f8:a0:94:25:c4:83:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:89:02:7E:43:E7:2B:CF:76:78:1C:98:A4:69:93:23:1A:95:06:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:1e:7a:d7:d9:72:ce:cc:5e:67:34:1c:32:4d:15:a8:94:
         9b:78:a9:4f:d2:05:b4:94:9f:67:f6:59:45:24:9e:a5:61:6a:
         5c:3d:7c:7d:24:6a:e8:5f:83:f4:57:bb:ae:a7:4b:bb:e3:a6:
         38:fd:1c:b3:f9:64:be:12:50:24:56:08:3e:f7:a9:8a:b0:88:
         e8:78:56:f8:68:e0:45:6f:90:44:32:f3:63:1f:a3:76:ed:78:
         f2:4b:d2:12:f9:ab:d3:d6:02:7c:0c:3a:bd:f4:cf:14:7b:47:
         63:c0:fa:ca:71:c4:4d:1f:5e:5a:c3:38:31:66:ed:90:90:18:
         ea:1d:84:a3:8d:ed:28:15:12:11:9c:90:81:8a:77:c6:6f:cd:
         6d:80:09:ea:e1:37:7c:df:6a:8f:4b:ba:58:98:36:ac:b4:a7:
         91:4f:8b:ea:2c:8a:2a:95:11:6c:41:bf:97:d8:d8:a6:ca:19:
         cc:cf:f2:c7:6e:9f:3e:68:ea:27:06:69:18:10:4b:6b:e2:bd:
         4a:e8:e0:b4:94:bb:89:0c:91:6b:19:34:64:ef:10:3f:ea:eb:
         73:0a:6d:ee:1d:67:4e:f5:2e:92:fa:e1:e5:9a:ff:3a:c7:35:
         5a:ee:f6:22:8b:03:72:35:a8:f2:f2:cf:c6:d7:74:42:dc:13:
         42:ed:40:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkcDCaGZXf7Uwz1LAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI1MDMwNzE0MDA1MloXDTI1MDYwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YjhiYTVjZmEtY2I3Mi00ZDVmLWIzNjctNGY1NGM2N2E3ODcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4KJQbWJGWicioP3XOmDtUMAvSHN08fIyfWQ
+8r7/E/9opfxkqu66fT8AtAtz0/mnRu5StssYlU/Ra0fHFucLX1UnVstW4IEeIDq
tHaZjz1ZRibedAh9oCi80m6YsMvxuPPVVpqeoBY49XXa8+ZXtlcxdopLEPh3ueF7
3iIz1xWtPgwrASpkM0gMBjgFJhKue0y4mNRfvVXm9YcB/x4wT6m44m6vXwX++/AW
5+NiydtCOs8LaPBYpfgWvHiYgaH0+aJa+XOwe7HoI33L356EADtCymiFqAMxaO6e
5I1qgji6vKD3Twdjf5OVvOzIgcdgwrvyL0Co+3v4oJQlxIMwGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ+JAn5D5yvPdngcmKRpkyMalQaVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvNTU4N2U2MDEtMzgxMC0z
Y2FkLWFkMzktZDViNTQ5ODQ1YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAO6HnrX2XLOzF5nNBwyTRWolJt4qU/SBbSUn2f2WUUknqVhalw9
fH0kauhfg/RXu66nS7vjpjj9HLP5ZL4SUCRWCD73qYqwiOh4Vvho4EVvkEQy82Mf
o3btePJL0hL5q9PWAnwMOr30zxR7R2PA+spxxE0fXlrDODFm7ZCQGOodhKON7SgV
EhGckIGKd8ZvzW2ACerhN3zfao9LuliYNqy0p5FPi+osiiqVEWxBv5fY2KbKGczP
8sdunz5o6icGaRgQS2vivUro4LSUu4kMkWsZNGTvED/q63MKbe4dZ071LpL64eWa
/zrHNVru9iKLA3I1qPLyz8bXdELcE0LtQKo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:33 2025 by rpki-client