Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/75f98aba-05a3-38de-a4f7-6a4e4f9701f8.roa
File:                     75f98aba-05a3-38de-a4f7-6a4e4f9701f8.roa (raw, json)
Hash identifier:          IlqHgAv2yM/5SRa8QOM7riXhFxkxnWFvKQIEWNU9ay4=
Subject key identifier:   B5:B6:C2:10:DF:BF:2D:D6:F3:DA:CC:9E:63:1A:A8:0A:3C:87:4F:EC
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F43285848C84B9DE8E237EC74F217BA80
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/75f98aba-05a3-38de-a4f7-6a4e4f9701f8.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     6556
IP address blocks:        2602:815:900f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:9d:e8:e2:37:ec:74:f2:17:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=c088522f-11c0-4aeb-a68a-ed5f8fcfe34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:76:98:10:fb:0e:69:76:74:26:48:71:91:
                    c0:1e:d4:79:04:d9:58:af:8c:d4:b5:65:3d:4f:2e:
                    84:2c:7d:6c:be:36:88:1d:0f:ca:ec:19:e4:86:27:
                    6f:40:f3:b5:c7:7f:dc:b3:69:59:80:f8:39:34:ba:
                    0c:60:25:8f:a0:d1:31:cf:7e:e5:7d:ff:9f:91:38:
                    b5:1a:8b:19:cf:b1:d0:7c:35:16:c9:11:4f:11:f2:
                    2f:d4:65:f7:88:e7:f5:f9:7a:41:19:8b:4c:ef:5e:
                    2a:b0:22:8b:88:6f:c8:c5:20:42:e1:df:d4:81:69:
                    64:3d:89:3a:dd:e4:9a:0e:03:8e:a0:7b:4a:0d:d1:
                    69:55:bb:d8:e0:bb:16:fd:9f:18:09:47:c4:42:32:
                    96:48:b7:ea:f7:06:2a:58:1c:00:ff:d9:0e:c0:51:
                    ce:2f:45:d3:e6:c0:a4:90:50:52:d9:d8:ac:71:a7:
                    5d:43:c4:a1:e0:31:2d:a0:57:95:e2:ea:5c:0f:6f:
                    47:d2:87:85:64:f7:b7:ac:83:a3:e7:81:f7:76:53:
                    d6:1e:04:54:44:a8:49:8f:f3:27:57:4e:ee:1b:8e:
                    4c:fb:1b:7c:46:0f:e2:29:06:87:cc:10:e0:b8:52:
                    73:e7:84:20:19:62:6b:1c:58:ad:a8:96:a4:11:5b:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B6:C2:10:DF:BF:2D:D6:F3:DA:CC:9E:63:1A:A8:0A:3C:87:4F:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/75f98aba-05a3-38de-a4f7-6a4e4f9701f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:900f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:50:e2:17:3d:e1:e0:5b:ca:8b:97:4a:e8:9c:e9:1a:5f:
         07:00:9e:6f:d4:c0:ea:95:ed:50:66:0e:7d:80:b2:b6:c9:e4:
         95:49:d2:7d:cf:16:3b:f5:d8:71:3b:fc:ef:10:d4:fe:76:f9:
         be:a8:62:22:04:cb:00:c9:b4:df:02:0b:ad:be:a7:25:2d:7d:
         37:59:46:4f:14:d4:67:0c:dc:ca:26:98:2c:9c:b5:c7:0d:55:
         21:6a:4f:02:a0:77:27:32:85:93:39:37:16:38:72:5f:fc:67:
         1a:fd:06:27:59:16:b4:a4:96:77:4d:00:a9:f7:b2:ef:85:73:
         8d:23:94:87:1b:95:1f:52:de:d1:4d:08:0a:b9:8e:1a:35:5b:
         51:c9:bd:77:f9:ab:2e:70:94:fe:c3:1f:7c:ce:48:f3:47:e8:
         45:7e:df:f6:84:54:71:c5:89:f0:4f:82:87:77:8e:4a:a6:bb:
         25:e3:4d:cc:5a:6d:32:ce:8e:27:52:39:b4:da:3d:36:2d:f8:
         3c:cc:50:42:b5:13:e8:25:c0:56:5b:d3:11:02:57:30:e4:55:
         e7:64:8c:90:7b:71:fe:36:f4:35:7e:0c:1c:24:43:51:f8:8f:
         ef:09:63:12:6d:b4:1d:de:81:6d:3c:da:b7:53:68:a7:60:b6:
         1d:41:7a:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjIS53o4jfsdPIXuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFlZjVjYzEtOTY5Ny00MDE2LWE3YjEtODQxMDY1MjAx
MjhhMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
YzA4ODUyMmYtMTFjMC00YWViLWE2OGEtZWQ1ZjhmY2ZlMzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9V2mBD7Dml2dCZIcZHAHtR5BNlYr4zUtWU9
Ty6ELH1svjaIHQ/K7BnkhidvQPO1x3/cs2lZgPg5NLoMYCWPoNExz37lff+fkTi1
GosZz7HQfDUWyRFPEfIv1GX3iOf1+XpBGYtM714qsCKLiG/IxSBC4d/UgWlkPYk6
3eSaDgOOoHtKDdFpVbvY4LsW/Z8YCUfEQjKWSLfq9wYqWBwA/9kOwFHOL0XT5sCk
kFBS2discaddQ8Sh4DEtoFeV4upcD29H0oeFZPe3rIOj54H3dlPWHgRURKhJj/Mn
V07uG45M+xt8Rg/iKQaHzBDguFJz54QgGWJrHFitqJakEVv4ZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLW2whDfvy3W89rMnmMaqAo8h0/sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYWVm
NWNjMS05Njk3LTQwMTYtYTdiMS04NDEwNjUyMDEyOGEvNzVmOThhYmEtMDVhMy0z
OGRlLWE0ZjctNmE0ZTRmOTcwMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGFlZjVjYzEtOTY5Ny00MDE2LWE3
YjEtODQxMDY1MjAxMjhhL2RhZWY1Y2MxLTk2OTctNDAxNi1hN2IxLTg0MTA2NTIw
MTI4YS5jcmwwHwYDVR0jBBgwFoAUU5ElfGQKg+eUefKE5srTZ00KJZAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYWVmNWNjMS05Njk3LTQwMTYtYTdiMS04NDEw
NjUyMDEyOGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFZAP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAED1UOIXPeHgW8qLl0ronOkaXwcAnm/UwOqV7VBmDn2AsrbJ5JVJ
0n3PFjv12HE7/O8Q1P52+b6oYiIEywDJtN8CC62+pyUtfTdZRk8U1GcM3MommCyc
tccNVSFqTwKgdycyhZM5NxY4cl/8Zxr9BidZFrSklndNAKn3su+Fc40jlIcblR9S
3tFNCAq5jho1W1HJvXf5qy5wlP7DH3zOSPNH6EV+3/aEVHHFifBPgod3jkqmuyXj
TcxabTLOjidSObTaPTYt+DzMUEK1E+glwFZb0xECVzDkVedkjJB7cf429DV+DBwk
Q1H4j+8JYxJttB3egW082rdTaKdgth1Beoc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:57 2025 by rpki-client