Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8dac55a8-ba25-329c-a1c9-2c03a9e9da2e.roa
File:                     8dac55a8-ba25-329c-a1c9-2c03a9e9da2e.roa (raw, json)
Hash identifier:          GgjIp9G6+KMPQgEiyU+0EEniSWj01eND93SLHH7nqR4=
Subject key identifier:   D4:32:A3:2F:0F:9F:98:6D:07:2C:A6:DC:25:71:AC:E9:2D:D0:98:7D
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285848CB164DBA22FC1851299C00E4
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8dac55a8-ba25-329c-a1c9-2c03a9e9da2e.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     54994
IP address blocks:        2607:b300:fd08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:4d:ba:22:fc:18:51:29:9c:00:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=af328031-1f05-42e3-8d57-0494c30c2f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:41:8b:b1:26:e0:d4:82:0e:26:39:89:d2:86:
                    2c:ec:77:e7:55:6d:b1:47:1f:4f:ce:89:0d:bb:f3:
                    9c:2c:fc:f0:80:a5:99:ce:f0:96:b8:ad:7a:da:89:
                    3c:ae:51:83:8b:a6:24:76:25:c5:aa:e3:6b:55:d7:
                    fa:01:47:27:6c:09:e4:15:cb:78:03:8a:bc:77:57:
                    23:51:70:f2:72:44:4f:e6:95:0a:6c:98:68:1f:02:
                    e9:55:9b:2d:da:a8:dd:93:24:f8:6d:60:ec:b6:7e:
                    f0:5c:1e:0c:f2:b3:5c:2c:60:5f:50:9f:51:39:aa:
                    eb:24:a8:01:86:70:02:da:99:f4:3b:3c:e9:63:8d:
                    8c:e0:e0:99:f4:43:2a:36:f6:be:7c:fc:c3:e8:b8:
                    bc:55:af:3e:f4:46:8f:15:8a:3e:5f:c3:bb:b1:f0:
                    33:68:3c:ee:25:b7:d2:67:4f:ea:20:69:4c:99:38:
                    68:9f:17:97:16:0b:38:8b:16:c8:ae:fd:ba:7c:e8:
                    c9:eb:72:1f:a8:e4:e5:5c:34:2d:67:ce:b3:3c:79:
                    25:04:ae:db:e3:cf:4f:bd:23:87:60:4d:ce:c1:25:
                    c4:82:ac:62:b5:7d:63:aa:32:cb:4e:35:58:83:c0:
                    b3:51:a3:7c:0d:75:2d:b6:f0:5a:09:19:e3:25:45:
                    21:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:32:A3:2F:0F:9F:98:6D:07:2C:A6:DC:25:71:AC:E9:2D:D0:98:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8dac55a8-ba25-329c-a1c9-2c03a9e9da2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b300:fd08::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:40:13:4a:d2:56:b9:8c:2b:36:36:ec:77:ac:73:7b:aa:2a:
         4d:f8:dd:c9:08:98:91:b8:73:8e:33:67:98:ef:96:07:8e:64:
         4c:b1:c5:2a:83:a4:ee:36:20:f6:83:35:35:c2:88:da:80:7d:
         bf:8a:05:66:b4:aa:4c:00:90:4c:aa:96:ff:a5:9d:b2:cf:f4:
         f6:47:9e:15:4b:8e:3b:a2:a9:e3:5d:b2:90:f0:eb:ee:b5:17:
         8f:a4:33:81:b1:49:e4:21:55:70:5a:2f:96:b4:ec:81:16:f1:
         d2:70:d2:52:74:5d:d8:e6:94:79:6d:16:79:af:e9:8f:ba:31:
         d6:db:7b:66:c6:6d:78:d0:b1:7e:5c:56:e5:be:c2:de:99:03:
         01:78:17:d1:70:f8:f2:71:c3:d2:cb:da:4a:b3:85:58:09:b1:
         23:25:22:58:0b:50:fe:01:8d:b1:33:f1:b0:ff:2a:22:3b:c6:
         8a:13:37:8e:fc:06:1a:d1:71:45:86:15:66:d2:d4:fc:10:8f:
         69:af:39:d3:20:e7:53:91:0e:23:5f:bb:64:dd:b9:6a:74:26:
         7a:a3:9f:de:45:59:ec:46:76:53:79:bc:1e:06:c0:e1:db:80:
         78:d3:90:0b:ce:43:b0:f6:62:98:07:be:95:59:4a:1e:86:81:
         db:b3:9d:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjLFk26IvwYUSmcAOQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk
YWYzMjgwMzEtMWYwNS00MmUzLThkNTctMDQ5NGMzMGMyZjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEGLsSbg1IIOJjmJ0oYs7HfnVW2xRx9PzokN
u/OcLPzwgKWZzvCWuK162ok8rlGDi6YkdiXFquNrVdf6AUcnbAnkFct4A4q8d1cj
UXDyckRP5pUKbJhoHwLpVZst2qjdkyT4bWDstn7wXB4M8rNcLGBfUJ9ROarrJKgB
hnAC2pn0OzzpY42M4OCZ9EMqNva+fPzD6Li8Va8+9EaPFYo+X8O7sfAzaDzuJbfS
Z0/qIGlMmThonxeXFgs4ixbIrv26fOjJ63IfqOTlXDQtZ86zPHklBK7b489PvSOH
YE3OwSXEgqxitX1jqjLLTjVYg8CzUaN8DXUttvBaCRnjJUUhGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNQyoy8Pn5htByym3CVxrOkt0Jh9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvOGRhYzU1YTgtYmEyNS0z
MjljLWExYzktMmMwM2E5ZTlkYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgezAP0I
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADNAE0rSVrmMKzY27Hesc3uqKk343ckImJG4c44zZ5jvlgeOZEyx
xSqDpO42IPaDNTXCiNqAfb+KBWa0qkwAkEyqlv+lnbLP9PZHnhVLjjuiqeNdspDw
6+61F4+kM4GxSeQhVXBaL5a07IEW8dJw0lJ0XdjmlHltFnmv6Y+6Mdbbe2bGbXjQ
sX5cVuW+wt6ZAwF4F9Fw+PJxw9LL2kqzhVgJsSMlIlgLUP4BjbEz8bD/KiI7xooT
N478BhrRcUWGFWbS1PwQj2mvOdMg51ORDiNfu2TduWp0Jnqjn95FWexGdlN5vB4G
wOHbgHjTkAvOQ7D2YpgHvpVZSh6GgduznQQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:42:31 2025 by rpki-client