Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52923386-ec52-32c3-870e-b15ca5e36c08.roa
File:                     52923386-ec52-32c3-870e-b15ca5e36c08.roa (raw, json)
Hash identifier:          RZvodox98Ct56nmBar6aaG3YYukyvXrnBsFIcBhUhI4=
Subject key identifier:   34:12:8A:1E:24:6F:6D:E0:69:75:9B:19:E9:5F:98:19:1C:5F:D0:16
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00675A9787376A3478753C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52923386-ec52-32c3-870e-b15ca5e36c08.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8b8d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:75:a9:78:73:76:a3:47:87:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=8c91fd01-3d49-433d-9c70-c1148f300d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:f3:f4:fb:12:ac:bf:5f:93:64:bc:9e:fc:
                    43:f7:2a:45:15:ff:37:56:97:f9:03:90:09:1c:7f:
                    ca:4b:4f:de:55:a0:b5:7c:d0:7f:29:7f:cc:9b:2f:
                    27:7e:93:c1:24:da:a9:5a:e7:ac:6e:8c:2c:f6:ae:
                    e8:f5:99:de:f0:93:6b:73:0c:48:69:e1:47:a2:35:
                    60:35:a2:33:68:4b:93:ca:7f:73:d7:81:f4:5a:6a:
                    cb:f6:a5:d3:7d:d3:0f:f8:aa:ae:39:d4:d4:f1:d3:
                    17:3f:db:f6:71:a5:a6:a7:f6:c8:72:20:3e:46:f6:
                    66:3d:84:e3:db:ec:37:19:0c:4f:51:0e:ad:0c:f3:
                    78:a9:60:eb:b2:bb:e4:eb:1c:ff:1e:2c:2b:b7:24:
                    e0:1e:84:4f:02:2d:25:1b:47:f9:6c:c3:89:43:ae:
                    71:80:e6:df:17:79:ce:41:d8:fc:2a:89:67:42:d1:
                    e5:d9:e1:5b:dc:21:74:c2:79:ef:e3:98:f6:e2:17:
                    9d:af:31:b6:ac:84:80:a3:28:d8:4c:72:16:4d:77:
                    9e:c9:0c:ed:1a:5d:0d:2c:ea:00:7d:52:72:86:33:
                    e4:68:1c:5a:73:bd:a1:ef:6a:4b:84:9b:63:7c:90:
                    f6:7a:3b:15:e6:1e:84:1a:4c:9a:46:11:08:46:ae:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:12:8A:1E:24:6F:6D:E0:69:75:9B:19:E9:5F:98:19:1C:5F:D0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/52923386-ec52-32c3-870e-b15ca5e36c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8b8d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3a:aa:f7:04:68:d1:0c:bb:fb:8f:1c:5b:70:0f:f3:01:89:
         ea:c1:21:ee:c5:d0:8d:d0:99:40:99:85:33:fb:f9:fd:55:ac:
         70:35:53:71:d9:c0:a1:f2:fb:64:df:6c:22:66:02:63:f4:5a:
         eb:14:02:14:9f:12:1b:26:1e:74:6e:e8:1b:de:7d:e5:c6:0b:
         9b:10:d1:1e:18:83:9d:41:52:ba:d9:bd:54:4d:34:ea:bc:20:
         eb:3c:6d:ad:ca:75:be:12:c3:8a:91:b2:50:9a:18:c0:d4:59:
         36:ac:3f:a0:4d:18:c1:4f:d1:d9:99:01:09:61:8c:a7:23:7f:
         28:f2:a9:3d:1a:78:cc:85:99:cd:dd:16:54:21:e3:81:60:2a:
         dc:23:3d:1a:97:9e:1f:32:88:98:b6:b9:ef:c1:d8:47:b3:b9:
         c6:58:7a:0c:71:81:10:a3:87:69:5e:0e:cf:c2:65:aa:bb:3c:
         08:78:a0:3a:10:ad:a4:55:59:39:d4:ab:79:39:fe:56:88:1a:
         42:f1:0b:a5:d4:ae:3b:6b:de:ab:94:78:5f:02:4a:70:1e:42:
         c5:94:3c:cd:b4:c5:15:00:03:aa:ec:5b:51:5c:a1:72:f3:13:
         a2:62:9c:29:fb:9a:d8:87:17:af:09:fa:d2:0c:03:ee:ea:4c:
         06:d8:63:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjgBnWpeHN2o0eHU8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
OGM5MWZkMDEtM2Q0OS00MzNkLTljNzAtYzExNDhmMzAwZDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9/z9PsSrL9fk2S8nvxD9ypFFf83Vpf5A5AJ
HH/KS0/eVaC1fNB/KX/Mmy8nfpPBJNqpWuesbows9q7o9Zne8JNrcwxIaeFHojVg
NaIzaEuTyn9z14H0WmrL9qXTfdMP+KquOdTU8dMXP9v2caWmp/bIciA+RvZmPYTj
2+w3GQxPUQ6tDPN4qWDrsrvk6xz/HiwrtyTgHoRPAi0lG0f5bMOJQ65xgObfF3nO
Qdj8KolnQtHl2eFb3CF0wnnv45j24hedrzG2rISAoyjYTHIWTXeeyQztGl0NLOoA
fVJyhjPkaBxac72h72pLhJtjfJD2ejsV5h6EGkyaRhEIRq4qKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDQSih4kb23gaXWbGelfmBkcX9AWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTI5MjMzODYtZWM1Mi0z
MmMzLTg3MGUtYjE1Y2E1ZTM2YzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYuN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFs6qvcEaNEMu/uPHFtwD/MBierBIe7F0I3QmUCZhTP7+f1VrHA1
U3HZwKHy+2TfbCJmAmP0WusUAhSfEhsmHnRu6BvefeXGC5sQ0R4Yg51BUrrZvVRN
NOq8IOs8ba3Kdb4Sw4qRslCaGMDUWTasP6BNGMFP0dmZAQlhjKcjfyjyqT0aeMyF
mc3dFlQh44FgKtwjPRqXnh8yiJi2ue/B2EezucZYegxxgRCjh2leDs/CZaq7PAh4
oDoQraRVWTnUq3k5/laIGkLxC6XUrjtr3quUeF8CSnAeQsWUPM20xRUAA6rsW1Fc
oXLzE6JinCn7mtiHF68J+tIMA+7qTAbYYwM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:12 2025 by rpki-client