Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/c4bc4f69-17fd-3b53-b956-a8746edde5fc.roa
File:                     c4bc4f69-17fd-3b53-b956-a8746edde5fc.roa (raw, json)
Hash identifier:          CJrfPr5GiIbiUTctqGzE/Zmvc2cHlQ0GLVQ+R15noZo=
Subject key identifier:   7F:4F:D7:29:4B:E4:5E:D1:4F:F3:85:36:BB:05:2C:E9:FB:EB:FA:AC
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F432858489075F285E857DA2CD1FA7880
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/c4bc4f69-17fd-3b53-b956-a8746edde5fc.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     51999
IP address blocks:        2602:fcf6::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:f2:85:e8:57:da:2c:d1:fa:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=293ab7e2-c502-4b31-9c75-7b4bd477f9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:ad:0f:1b:65:1c:a1:97:a7:f7:a1:64:06:
                    49:61:3b:91:4e:85:61:14:e0:bf:9b:07:f6:60:0e:
                    90:98:ad:e7:8e:a8:26:c6:c9:af:cc:b0:30:72:20:
                    b1:ff:4d:0b:df:ff:52:3f:d7:a1:6e:fc:ba:e4:55:
                    6c:6c:8b:73:bc:b0:f7:d3:43:38:b4:63:94:e7:e0:
                    31:c6:a0:4d:d2:53:bd:ff:a4:8b:50:b7:05:cb:a0:
                    06:39:c3:93:69:8e:88:32:5a:7c:5d:4a:ca:32:77:
                    71:ea:3a:d7:1f:ba:ac:b1:1f:7d:dc:17:59:23:4d:
                    0d:64:4d:42:1c:9d:59:81:e4:94:3e:e3:1b:ea:0e:
                    de:d1:e2:da:3d:48:59:5e:0b:65:36:2d:98:77:9f:
                    63:84:37:ce:6a:0a:30:87:1d:f0:26:36:8a:24:78:
                    61:c6:f4:77:89:aa:c6:73:43:1c:5b:c2:07:c1:d7:
                    69:e9:f8:ab:88:7d:f1:36:60:4e:bb:f9:13:bc:b1:
                    a9:b4:5f:b1:6f:05:87:85:44:ca:c5:b9:87:5f:1b:
                    bd:63:7d:fb:bc:c2:51:f3:5b:78:22:de:71:1d:b7:
                    5c:c5:c7:5e:00:fa:58:57:aa:9e:9c:c7:bd:21:58:
                    3b:2a:93:96:53:4f:a4:05:8b:d0:62:5a:33:2b:75:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4F:D7:29:4B:E4:5E:D1:4F:F3:85:36:BB:05:2C:E9:FB:EB:FA:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/c4bc4f69-17fd-3b53-b956-a8746edde5fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcf6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a0:1b:45:17:68:e8:c8:15:8f:20:1a:86:8d:69:6b:77:42:
         2b:57:f1:cd:4c:a6:ca:37:83:09:8e:ee:03:62:61:22:2a:d9:
         96:eb:08:66:b8:fb:db:b5:b1:81:a6:6c:1e:a4:45:5d:3c:5c:
         ec:95:5d:df:aa:91:a1:de:da:37:d9:c4:38:15:ce:2c:08:d9:
         8f:15:5c:c7:25:ef:18:3a:bb:eb:8a:3f:f6:53:63:38:52:90:
         f7:eb:01:10:29:91:0f:61:47:f0:0e:97:3c:b0:b7:a8:e8:67:
         77:2c:ce:37:5e:1c:8c:5c:7e:98:f6:94:86:44:fa:e2:0e:19:
         72:f1:e5:40:ca:45:63:a1:fe:5b:2f:85:e2:a1:2e:39:81:d9:
         7b:42:66:d8:44:20:8e:ed:7d:41:c1:78:0d:da:3c:43:78:11:
         b7:0b:55:c4:94:fb:4e:89:ad:42:6f:11:87:c7:7e:6c:39:8b:
         e5:b1:b8:b4:93:0c:95:b4:9f:e4:30:b0:5c:4a:f5:cd:fc:74:
         0c:46:93:87:e8:59:82:4a:49:79:0d:af:f5:8b:6b:52:f6:6e:
         5d:a4:8f:63:68:85:f4:be:ef:f9:b4:bd:39:85:dd:ca:df:8d:
         34:2f:ef:d4:ed:94:64:eb:de:69:72:2d:26:67:b4:ea:d6:4f:
         4f:51:78:d5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiQdfKF6FfaLNH6eIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUyZGI3NDMtYjQ0Mi00MDY2LThlMDItMGRjZDQ3NDcx
ZGNlMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
MjkzYWI3ZTItYzUwMi00YjMxLTljNzUtN2I0YmQ0NzdmOWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgetDxtlHKGXp/ehZAZJYTuRToVhFOC/mwf2
YA6QmK3njqgmxsmvzLAwciCx/00L3/9SP9ehbvy65FVsbItzvLD300M4tGOU5+Ax
xqBN0lO9/6SLULcFy6AGOcOTaY6IMlp8XUrKMndx6jrXH7qssR993BdZI00NZE1C
HJ1ZgeSUPuMb6g7e0eLaPUhZXgtlNi2Yd59jhDfOagowhx3wJjaKJHhhxvR3iarG
c0McW8IHwddp6firiH3xNmBOu/kTvLGptF+xbwWHhUTKxbmHXxu9Y337vMJR81t4
It5xHbdcxcdeAPpYV6qenMe9IVg7KpOWU0+kBYvQYlozK3XudwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFH9P1ylL5F7RT/OFNrsFLOn76/qsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NTJk
Yjc0My1iNDQyLTQwNjYtOGUwMi0wZGNkNDc0NzFkY2UvYzRiYzRmNjktMTdmZC0z
YjUzLWI5NTYtYTg3NDZlZGRlNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTUyZGI3NDMtYjQ0Mi00MDY2LThl
MDItMGRjZDQ3NDcxZGNlLzU1MmRiNzQzLWI0NDItNDA2Ni04ZTAyLTBkY2Q0NzQ3
MWRjZS5jcmwwHwYDVR0jBBgwFoAU6m0i4+Sxndvay/Dik7AYgek/mbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NTJkYjc0My1iNDQyLTQwNjYtOGUwMi0wZGNk
NDc0NzFkY2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL89gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAA6AbRRdo6MgVjyAaho1pa3dCK1fxzUymyjeDCY7uA2JhIirZlusI
Zrj727WxgaZsHqRFXTxc7JVd36qRod7aN9nEOBXOLAjZjxVcxyXvGDq764o/9lNj
OFKQ9+sBECmRD2FH8A6XPLC3qOhndyzON14cjFx+mPaUhkT64g4ZcvHlQMpFY6H+
Wy+F4qEuOYHZe0Jm2EQgju19QcF4Ddo8Q3gRtwtVxJT7TomtQm8Rh8d+bDmL5bG4
tJMMlbSf5DCwXEr1zfx0DEaTh+hZgkpJeQ2v9YtrUvZuXaSPY2iF9L7v+bS9OYXd
yt+NNC/v1O2UZOveaXItJme06tZPT1F41Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:45 2025 by rpki-client