Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/58508676-c564-3b25-9efe-078141906c59.roa
File:                     58508676-c564-3b25-9efe-078141906c59.roa (raw, json)
Hash identifier:          ag3AyjcIhI8MR/evC/NNkh6x7H/NodQ1NDnpQyF5Qcg=
Subject key identifier:   62:43:A7:4C:81:F2:D1:08:27:D0:2F:CC:6F:92:DE:AF:03:76:31:49
Certificate issuer:       /CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
Certificate serial:       010D0C9F432858487755E0B29AEF21DFC8E82600
Authority key identifier: 93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/58508676-c564-3b25-9efe-078141906c59.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     197547
IP address blocks:        2602:fa33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:e0:b2:9a:ef:21:df:c8:e8:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=feab0391-20a9-4a25-b167-05e742ead186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:8e:23:03:ff:61:53:01:b2:30:9b:d4:b2:
                    6a:66:e5:7c:ed:e6:f8:39:53:97:ff:16:07:04:4a:
                    c7:5a:ff:41:b5:ce:6e:db:3c:4f:1a:3c:2f:44:70:
                    81:f4:1a:60:60:2d:88:51:37:2e:48:ba:30:7a:b4:
                    72:5d:5f:11:40:6a:2d:33:af:fe:36:e0:1b:ee:8f:
                    a3:0f:39:bf:e1:9d:d0:b4:73:8f:65:2f:01:ec:1d:
                    cc:bb:8a:6b:0c:ca:c6:1e:1a:5c:72:5e:32:4e:1b:
                    34:ad:67:4d:c3:21:5e:4a:bf:ee:c0:88:4f:94:39:
                    f8:84:ea:4c:6e:c8:76:d2:fb:92:37:f5:d9:6a:3b:
                    d4:0d:1d:a8:a6:8b:e1:65:be:b5:be:6b:ed:45:0f:
                    d2:42:cc:f8:50:60:7c:c2:53:10:b2:70:19:7c:b5:
                    32:13:a8:7e:ee:81:17:b6:03:62:de:c6:e7:0b:34:
                    89:4e:f4:ca:81:16:56:82:de:ac:ea:ee:68:ef:25:
                    08:eb:4c:ba:8d:4c:c8:48:f3:b9:d6:a2:bf:3d:21:
                    8b:2a:48:a8:d2:01:e3:10:91:3d:01:61:e5:72:3e:
                    be:be:ff:1e:42:d0:46:d0:ea:58:df:6a:e1:50:6a:
                    36:58:16:6f:7a:37:0a:2e:a0:97:cb:1e:8b:db:94:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:43:A7:4C:81:F2:D1:08:27:D0:2F:CC:6F:92:DE:AF:03:76:31:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/58508676-c564-3b25-9efe-078141906c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl

            X509v3 Authority Key Identifier:
                keyid:93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa33::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:92:96:e1:37:e0:35:8f:b1:bd:ed:70:be:89:6d:8b:92:
         d9:c0:ec:40:ba:15:05:a2:12:e6:29:ec:ee:86:f9:ea:5b:22:
         56:f2:5f:9b:e7:29:67:43:00:67:66:76:ab:1b:c0:fb:07:a5:
         76:0b:b0:51:0e:52:0a:3f:14:16:ad:6f:02:f9:27:ef:e4:f2:
         a5:b7:1d:b8:79:7c:8a:a1:c0:a5:c2:f3:01:bd:19:56:f9:a2:
         83:9f:e0:76:f3:1f:9b:b2:87:68:24:da:be:24:fb:65:57:f8:
         91:81:11:30:88:0e:21:aa:55:69:27:40:a0:d7:3a:37:37:cd:
         3d:82:d0:dc:d6:b6:38:82:2f:ef:b6:8b:cf:44:43:9a:72:42:
         3e:31:2e:27:88:b1:c8:e4:63:ad:d7:11:6b:75:5e:62:a4:4e:
         c1:de:d5:c2:ce:a5:ff:76:98:4d:5c:58:a6:db:32:78:1e:ab:
         3d:44:f5:e6:3c:37:22:2d:c3:06:ac:a3:3d:62:a6:2e:df:bc:
         c4:f1:70:f7:81:23:34:c0:19:37:d5:4b:2b:6c:f3:68:84:86:
         2e:f6:7d:4b:03:e6:02:e7:0c:f0:3e:71:05:d7:ab:8a:2a:dc:
         8a:75:7e:9d:03:8f:19:6c:9a:2d:77:c1:54:e8:d2:4d:43:3e:
         d4:0b:ea:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh3VeCymu8h38joJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM0ZmQ5ODYtMWFmNy00Mzg5LWJmOTEtZDRiOTJlZGM5
YWM5MB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk
ZmVhYjAzOTEtMjBhOS00YTI1LWIxNjctMDVlNzQyZWFkMTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxiOIwP/YVMBsjCb1LJqZuV87eb4OVOX/xYH
BErHWv9Btc5u2zxPGjwvRHCB9BpgYC2IUTcuSLowerRyXV8RQGotM6/+NuAb7o+j
Dzm/4Z3QtHOPZS8B7B3Mu4prDMrGHhpccl4yThs0rWdNwyFeSr/uwIhPlDn4hOpM
bsh20vuSN/XZajvUDR2opovhZb61vmvtRQ/SQsz4UGB8wlMQsnAZfLUyE6h+7oEX
tgNi3sbnCzSJTvTKgRZWgt6s6u5o7yUI60y6jUzISPO51qK/PSGLKkio0gHjEJE9
AWHlcj6+vv8eQtBG0OpY32rhUGo2WBZvejcKLqCXyx6L25Ro+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGJDp0yB8tEIJ9AvzG+S3q8DdjFJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82YzRm
ZDk4Ni0xYWY3LTQzODktYmY5MS1kNGI5MmVkYzlhYzkvNTg1MDg2NzYtYzU2NC0z
YjI1LTllZmUtMDc4MTQxOTA2YzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNmM0ZmQ5ODYtMWFmNy00Mzg5LWJm
OTEtZDRiOTJlZGM5YWM5LzZjNGZkOTg2LTFhZjctNDM4OS1iZjkxLWQ0YjkyZWRj
OWFjOS5jcmwwHwYDVR0jBBgwFoAUk97V0B5ktd6g/I05HEet+rJKUaAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82YzRmZDk4Ni0xYWY3LTQzODktYmY5MS1kNGI5
MmVkYzlhYzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6MwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABwhkpbhN+A1j7G97XC+iW2LktnA7EC6FQWiEuYp7O6G+epbIlby
X5vnKWdDAGdmdqsbwPsHpXYLsFEOUgo/FBatbwL5J+/k8qW3Hbh5fIqhwKXC8wG9
GVb5ooOf4HbzH5uyh2gk2r4k+2VX+JGBETCIDiGqVWknQKDXOjc3zT2C0NzWtjiC
L++2i89EQ5pyQj4xLieIscjkY63XEWt1XmKkTsHe1cLOpf92mE1cWKbbMngeqz1E
9eY8NyItwwasoz1ipi7fvMTxcPeBIzTAGTfVSyts82iEhi72fUsD5gLnDPA+cQXX
q4oq3Ip1fp0Djxlsmi13wVTo0k1DPtQL6oI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:15 2025 by rpki-client