Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa
File:                     ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa (raw, json)
Hash identifier:          XW2SrIWdewMxV3Gfmk2aA7/S3+CAvagOlZnGgI03P4c=
Subject key identifier:   00:70:58:77:0F:2D:8C:FD:FD:60:65:52:E6:50:5B:29:7D:D0:BA:8F
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F43285848F22C666AFDB11CA5A7368380
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     398549
IP address blocks:        2605:dd40:8225::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:66:6a:fd:b1:1c:a5:a7:36:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=a16d0081-ac21-43f7-9bae-f9ae6724185f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:b5:07:f5:b5:2e:77:ff:25:41:c6:4b:65:
                    87:eb:03:62:dd:12:68:f1:2b:bc:f7:80:f0:3e:8c:
                    f1:54:d5:93:16:47:da:0b:15:81:c7:8f:c0:a4:98:
                    16:04:b4:0f:8f:ce:06:9f:a0:15:08:79:e8:68:fd:
                    cd:67:f8:2c:15:a3:5e:0d:77:25:f8:90:e0:cf:fd:
                    e6:d1:20:7b:20:6c:6b:b4:1c:b6:0d:cb:26:bc:96:
                    65:25:b1:96:05:d1:6f:5d:23:7e:6a:66:e0:1e:8e:
                    ce:c9:1e:bf:50:38:9e:9e:12:a7:f2:33:71:c6:5f:
                    70:27:fc:7f:b4:98:69:d3:9c:9e:e8:3e:e9:25:90:
                    26:98:c0:71:04:46:73:cd:ee:a8:4a:75:b0:94:1f:
                    77:a4:e3:06:98:3e:30:2c:2d:37:e0:f4:e1:15:d6:
                    ee:5f:be:7c:44:fa:2a:b0:50:07:d9:f9:e2:38:83:
                    2d:a4:d4:f3:a8:ad:eb:44:14:00:4f:c9:be:6e:40:
                    ce:b9:64:d5:d6:ed:91:ab:4d:bf:cc:64:98:63:22:
                    0d:da:f9:fd:9d:83:59:4d:5c:bb:7c:b8:02:ef:fc:
                    d7:94:8e:45:74:35:4d:7b:e4:4d:e8:0e:0f:11:f6:
                    8b:5d:2d:91:77:bc:44:2c:6b:4f:50:21:c5:a2:07:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:70:58:77:0F:2D:8C:FD:FD:60:65:52:E6:50:5B:29:7D:D0:BA:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8225::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:a1:18:9f:69:c0:e6:53:9e:e6:9b:4e:ee:5a:31:d2:4e:
         d2:a9:48:e9:c7:c1:45:78:7d:85:6f:b4:85:67:1e:6a:4e:91:
         b0:4b:8a:c1:61:59:99:fa:88:8b:63:ef:53:0e:d9:ae:a8:27:
         ce:a4:54:5b:66:70:93:41:bf:06:99:aa:02:71:dc:60:82:2b:
         1d:c2:e0:0d:c8:07:f3:c3:c7:c0:77:da:74:ba:96:3b:e9:39:
         49:5a:13:a2:ea:3c:6a:71:f2:96:c0:0e:07:65:c4:b6:b5:cb:
         93:c0:55:d2:d1:27:57:9d:6b:ab:9c:bc:90:3a:cb:f4:02:f0:
         13:7d:54:cc:ed:3d:2d:cb:1a:92:bd:49:1e:45:80:7c:88:b1:
         db:35:e0:9d:01:5f:a5:c9:2a:77:21:0a:26:54:a4:49:de:25:
         f3:03:3a:97:f9:ab:8b:b3:ed:5d:65:e6:ae:d9:fd:2d:1c:db:
         2c:26:ed:cb:01:09:7b:cf:22:4c:11:f1:90:76:ce:cc:a1:d9:
         66:52:ae:d0:d3:ac:dd:0e:0f:8e:f5:6a:0c:b7:bf:fa:c5:74:
         ab:62:68:db:d7:fe:80:e6:68:42:a0:d2:94:ed:fe:17:5d:2a:
         64:ec:21:79:f9:56:90:dc:c1:64:bd:5f:d1:eb:32:5b:f2:78:
         2f:e5:60:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjyLGZq/bEcpac2g4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
YTE2ZDAwODEtYWMyMS00M2Y3LTliYWUtZjlhZTY3MjQxODVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IS1B/W1Lnf/JUHGS2WH6wNi3RJo8Su894Dw
PozxVNWTFkfaCxWBx4/ApJgWBLQPj84Gn6AVCHnoaP3NZ/gsFaNeDXcl+JDgz/3m
0SB7IGxrtBy2DcsmvJZlJbGWBdFvXSN+ambgHo7OyR6/UDienhKn8jNxxl9wJ/x/
tJhp05ye6D7pJZAmmMBxBEZzze6oSnWwlB93pOMGmD4wLC034PThFdbuX758RPoq
sFAH2fniOIMtpNTzqK3rRBQAT8m+bkDOuWTV1u2Rq02/zGSYYyIN2vn9nYNZTVy7
fLgC7/zXlI5FdDVNe+RN6A4PEfaLXS2Rd7xELGtPUCHFogcDZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFABwWHcPLYz9/WBlUuZQWyl90LqPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvY2E2YjQxZDAtNWRmZC0z
Y2NmLTk4NGYtMGFhNTg4Yzk4MGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXdQIIl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGpWoRifacDmU57mm07uWjHSTtKpSOnHwUV4fYVvtIVnHmpOkbBL
isFhWZn6iItj71MO2a6oJ86kVFtmcJNBvwaZqgJx3GCCKx3C4A3IB/PDx8B32nS6
ljvpOUlaE6LqPGpx8pbADgdlxLa1y5PAVdLRJ1eda6ucvJA6y/QC8BN9VMztPS3L
GpK9SR5FgHyIsds14J0BX6XJKnchCiZUpEneJfMDOpf5q4uz7V1l5q7Z/S0c2ywm
7csBCXvPIkwR8ZB2zsyh2WZSrtDTrN0OD471agy3v/rFdKtiaNvX/oDmaEKg0pTt
/hddKmTsIXn5VpDcwWS9X9HrMlvyeC/lYJg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:28:31 2025 by rpki-client