Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f46bce4a-e3c6-324e-b5bd-5676ed5674e3.roa
File:                     f46bce4a-e3c6-324e-b5bd-5676ed5674e3.roa (raw, json)
Hash identifier:          W4ARULW7FaZsS+HSrQIIcPLyg8AgKFl9oiqUanG3C48=
Subject key identifier:   DE:B1:A1:03:D2:56:5F:46:C0:D9:77:FA:AE:5B:C1:1E:B3:DC:C0:B3
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F43285848EF613B5577EC310F9FE61A40
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f46bce4a-e3c6-324e-b5bd-5676ed5674e3.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     20253
IP address blocks:        2606:bc40:203::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3b:55:77:ec:31:0f:9f:e6:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=c2d6741b-5745-4c9a-b81a-d26a4c18a45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f8:74:15:3e:83:40:d1:6c:8f:ac:61:16:c8:
                    35:97:75:d6:d6:78:fa:fc:c6:64:45:ef:ef:d1:37:
                    90:9e:bb:2b:50:38:c7:9a:85:e0:7f:1b:59:60:3b:
                    29:dc:fc:19:7f:d7:72:55:4b:3e:fb:ab:ba:94:a7:
                    8f:98:c0:13:25:91:49:c9:4a:c9:be:0e:dd:b2:14:
                    83:8e:df:ff:2d:4d:c9:47:69:bb:53:8a:7a:00:50:
                    81:15:bc:71:0f:ff:87:ba:43:8d:0c:c7:92:12:96:
                    88:77:86:42:f3:e8:0a:8c:1c:26:b7:76:1c:da:21:
                    0d:f3:7b:65:81:78:45:a3:39:ca:67:e0:b3:8c:05:
                    06:49:f5:46:c1:97:6f:c6:c6:b7:2a:a0:85:42:6c:
                    a5:b4:d1:4e:71:89:99:3c:08:35:52:53:a8:d5:83:
                    76:56:e8:19:c8:ea:b0:79:b8:94:16:6d:da:82:c1:
                    72:70:d8:6f:29:33:02:c2:1e:cc:ba:2e:02:7e:2a:
                    b0:39:1c:75:ae:6b:55:cd:a8:73:0c:9e:8d:17:04:
                    97:02:e0:a3:29:56:22:db:c0:02:8e:fb:f8:8b:09:
                    c5:bc:f3:f8:b5:13:29:38:aa:ff:ae:51:69:83:60:
                    07:96:6f:2d:a5:55:8d:bd:d6:a6:d2:de:6c:09:2d:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B1:A1:03:D2:56:5F:46:C0:D9:77:FA:AE:5B:C1:1E:B3:DC:C0:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/f46bce4a-e3c6-324e-b5bd-5676ed5674e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:203::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:49:09:d2:30:7e:6f:c7:17:47:42:68:16:a4:eb:cd:76:33:
         de:e1:55:18:49:4d:fb:85:bf:ff:23:78:6a:22:5f:cb:31:bf:
         6c:ab:99:fe:94:8f:91:81:df:d7:9d:1d:06:95:23:04:0e:8e:
         13:a4:88:13:4b:b0:34:fb:88:1a:40:16:32:80:20:48:c4:63:
         e8:27:cd:e2:9f:a0:80:fd:cd:0a:3b:d9:e5:db:e1:2c:03:e0:
         a1:75:18:78:d4:0c:8e:3d:ce:77:f9:4c:90:ca:18:a2:6a:69:
         e9:a5:5e:e6:26:bb:c8:82:74:fe:52:93:15:be:ec:a6:10:7d:
         7d:5d:93:f3:ca:8b:da:c9:63:ac:c3:30:21:ee:ce:49:06:73:
         16:5a:d7:ab:a0:28:83:92:ba:d0:6f:7e:c0:2a:f1:8e:38:e2:
         df:70:2a:1f:c0:95:8f:c2:ed:07:a1:a1:00:d2:53:c2:dc:dd:
         d9:a0:a6:5f:35:f2:9e:ae:55:89:5c:35:9a:01:cb:cc:4f:f1:
         11:44:29:4d:a8:a2:65:eb:28:a5:9d:c1:cf:28:51:ea:c8:a9:
         7b:96:23:99:f8:74:53:4b:36:2b:7b:4a:fa:e1:11:6d:27:9e:
         c1:f8:f2:9b:c7:a6:65:37:fb:2a:f3:f7:5f:3b:25:f1:97:a7:
         ea:a1:e8:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYTtVd+wxD5/mGkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
YzJkNjc0MWItNTc0NS00YzlhLWI4MWEtZDI2YTRjMThhNDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvh0FT6DQNFsj6xhFsg1l3XW1nj6/MZkRe/v
0TeQnrsrUDjHmoXgfxtZYDsp3PwZf9dyVUs++6u6lKePmMATJZFJyUrJvg7dshSD
jt//LU3JR2m7U4p6AFCBFbxxD/+HukONDMeSEpaId4ZC8+gKjBwmt3Yc2iEN83tl
gXhFoznKZ+CzjAUGSfVGwZdvxsa3KqCFQmyltNFOcYmZPAg1UlOo1YN2VugZyOqw
ebiUFm3agsFycNhvKTMCwh7Mui4CfiqwORx1rmtVzahzDJ6NFwSXAuCjKVYi28AC
jvv4iwnFvPP4tRMpOKr/rlFpg2AHlm8tpVWNvdam0t5sCS2H9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN6xoQPSVl9GwNl3+q5bwR6z3MCzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZjQ2YmNlNGEtZTNjNi0z
MjRlLWI1YmQtNTY3NmVkNTY3NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAID
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGNJCdIwfm/HF0dCaBak6812M97hVRhJTfuFv/8jeGoiX8sxv2yr
mf6Uj5GB39edHQaVIwQOjhOkiBNLsDT7iBpAFjKAIEjEY+gnzeKfoID9zQo72eXb
4SwD4KF1GHjUDI49znf5TJDKGKJqaemlXuYmu8iCdP5SkxW+7KYQfX1dk/PKi9rJ
Y6zDMCHuzkkGcxZa16ugKIOSutBvfsAq8Y444t9wKh/AlY/C7QehoQDSU8Lc3dmg
pl818p6uVYlcNZoBy8xP8RFEKU2oomXrKKWdwc8oUerIqXuWI5n4dFNLNit7Svrh
EW0nnsH48pvHpmU3+yrz9187JfGXp+qh6Ao=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:31:29 2025 by rpki-client