Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/e920e671-3670-3710-b360-5b60d6614beb.roa
File:                     e920e671-3670-3710-b360-5b60d6614beb.roa (raw, json)
Hash identifier:          wbUj2XBNom2e/uz3o5aREzpRXNtLFnRqJKoda/VN4l4=
Subject key identifier:   41:0B:58:B1:9D:C6:F0:36:72:96:AC:A8:17:E2:11:84:16:C2:24:60
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F43285848265FF6F47F45013485768480
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/e920e671-3670-3710-b360-5b60d6614beb.roa
Signing time:             Mon 09 Dec 2024 14:00:51 +0000
ROA not before:           Mon 09 Dec 2024 14:00:51 +0000
ROA not after:            Sun 09 Mar 2025 13:00:51 +0000
asID:                     63801
IP address blocks:        2602:f87f::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:5f:f6:f4:7f:45:01:34:85:76:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Dec  9 14:00:51 2024 GMT
            Not After : Mar  9 13:00:51 2025 GMT
        Subject: CN=f28c70b6-2370-451e-8185-147fb35669f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:6e:a8:38:c5:94:4e:39:db:f1:e0:b3:f7:
                    ec:3c:40:16:1f:d0:64:02:1e:6c:9c:90:4d:be:b9:
                    21:4f:07:51:08:50:76:dd:76:da:1b:c6:41:2c:1c:
                    5d:87:34:33:d4:68:55:11:11:7e:22:5f:9e:dc:0e:
                    6f:43:49:17:03:6e:40:28:b5:c0:f5:a6:6e:39:3a:
                    c8:51:b1:25:fa:e4:1e:a6:79:f6:aa:fc:04:6f:0d:
                    24:5e:48:69:7f:26:dd:58:c7:6f:dc:e1:1f:93:e4:
                    85:58:3e:9f:ee:6a:46:83:cf:82:7c:13:2e:64:53:
                    bb:c7:ac:ec:7b:b3:e3:f1:aa:ed:ad:1e:f7:f9:ce:
                    3e:5e:c3:5a:6f:8d:6c:ed:ca:35:1a:7d:0c:74:07:
                    ad:0e:fb:cb:70:9d:62:da:b4:60:44:59:a3:65:5d:
                    12:a4:16:3b:fc:84:50:b1:a6:cb:d1:8e:fd:a6:b4:
                    06:3e:94:45:50:ca:ff:b8:d4:d4:81:40:cc:30:4c:
                    42:0f:c2:2d:2c:cd:fd:a1:ab:7c:4c:5f:b6:4b:cc:
                    ba:62:32:20:80:aa:5d:da:b5:43:35:23:99:ad:09:
                    df:4c:88:86:29:54:b6:5f:5a:62:9e:a3:e2:10:60:
                    e0:4a:fb:fc:6c:68:ed:8a:73:75:89:1f:69:11:b8:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0B:58:B1:9D:C6:F0:36:72:96:AC:A8:17:E2:11:84:16:C2:24:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/e920e671-3670-3710-b360-5b60d6614beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f87f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:86:ab:e8:11:f6:54:c0:91:c5:e7:f4:90:a9:48:9c:48:61:
         10:61:f2:05:76:98:db:da:2c:ba:5b:24:e3:17:87:56:09:82:
         3d:a9:f8:95:f9:6d:80:bb:5a:53:81:b4:34:ce:b2:55:f1:6d:
         3e:56:ac:0a:bf:ab:88:aa:33:66:1a:3f:82:0c:99:61:b7:08:
         1c:25:4d:53:f7:e0:18:81:2a:00:27:c5:5f:cb:7e:01:8d:9c:
         cf:46:f6:ad:04:e1:2d:c5:1f:21:d1:89:37:5a:89:03:e6:ef:
         85:5a:60:89:d9:88:ca:51:3f:6e:e9:bc:54:9b:8b:cd:f3:09:
         d7:51:6e:21:55:35:a7:fe:ae:10:67:4d:9f:2b:35:9b:87:23:
         eb:2b:b7:80:f6:81:ea:63:48:70:b8:fe:b1:11:bf:5c:01:0c:
         34:6b:a2:a1:29:e3:84:73:ec:2f:b0:c0:1c:f4:29:ab:d8:2a:
         de:05:7c:9c:9c:af:61:2e:9f:31:2f:8b:d3:86:5d:5c:be:1c:
         cf:1a:94:2a:7e:66:e1:f7:ea:31:82:42:07:f6:ba:a9:b4:79:
         5b:76:7a:77:70:dd:5d:0a:e6:7b:5c:18:4e:80:1a:ab:6b:b6:
         98:1b:f5:fd:0d:9b:ae:fe:d3:05:c0:b0:57:97:54:8e:da:c5:
         02:f2:c3:3c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgmX/b0f0UBNIV2hIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU5YjgyNjgtNjRjZS00N2VmLTk5M2QtYTNiYjc4MmJk
N2E5MB4XDTI0MTIwOTE0MDA1MVoXDTI1MDMwOTEzMDA1MVowLzEtMCsGA1UEAxMk
ZjI4YzcwYjYtMjM3MC00NTFlLTgxODUtMTQ3ZmIzNTY2OWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXluqDjFlE452/Hgs/fsPEAWH9BkAh5snJBN
vrkhTwdRCFB23XbaG8ZBLBxdhzQz1GhVERF+Il+e3A5vQ0kXA25AKLXA9aZuOTrI
UbEl+uQepnn2qvwEbw0kXkhpfybdWMdv3OEfk+SFWD6f7mpGg8+CfBMuZFO7x6zs
e7Pj8artrR73+c4+XsNab41s7co1Gn0MdAetDvvLcJ1i2rRgRFmjZV0SpBY7/IRQ
sabL0Y79prQGPpRFUMr/uNTUgUDMMExCD8ItLM39oat8TF+2S8y6YjIggKpd2rVD
NSOZrQnfTIiGKVS2X1pinqPiEGDgSvv8bGjtinN1iR9pEbjcNQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEELWLGdxvA2cpasqBfiEYQWwiRgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNTli
ODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2JiNzgyYmQ3YTkvZTkyMGU2NzEtMzY3MC0z
NzEwLWIzNjAtNWI2MGQ2NjE0YmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTU5YjgyNjgtNjRjZS00N2VmLTk5
M2QtYTNiYjc4MmJkN2E5LzE1OWI4MjY4LTY0Y2UtNDdlZi05OTNkLWEzYmI3ODJi
ZDdhOS5jcmwwHwYDVR0jBBgwFoAUoN/rIMKe9QONZjwZATOREHKcd1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNTliODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2Ji
NzgyYmQ3YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL4fwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA6oar6BH2VMCRxef0kKlInEhhEGHyBXaY29osulsk4xeHVgmCPan4
lfltgLtaU4G0NM6yVfFtPlasCr+riKozZho/ggyZYbcIHCVNU/fgGIEqACfFX8t+
AY2cz0b2rQThLcUfIdGJN1qJA+bvhVpgidmIylE/bum8VJuLzfMJ11FuIVU1p/6u
EGdNnys1m4cj6yu3gPaB6mNIcLj+sRG/XAEMNGuioSnjhHPsL7DAHPQpq9gq3gV8
nJyvYS6fMS+L04ZdXL4czxqUKn5m4ffqMYJCB/a6qbR5W3Z6d3DdXQrme1wYToAa
q2u2mBv1/Q2brv7TBcCwV5dUjtrFAvLDPA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:15 2025 by rpki-client