Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa
File:                     5da813c6-3362-3a15-8c8f-01d933e11263.roa (raw, json)
Hash identifier:          Oda9AjdLjXN1UHuWRKQZDJhohIrQza/dcISV8HgFbfc=
Subject key identifier:   00:70:71:EC:0C:65:B8:08:52:4E:09:C6:20:BA:F5:71:EB:6F:25:8E
Certificate issuer:       /CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6
Certificate serial:       010D0C9F43285848CC7B8FD5131863FD2FC01900
Authority key identifier: 6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        2620:10b:b008::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:8f:d5:13:18:63:fd:2f:c0:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=824c9d35-f6f2-4c60-894b-16bcedd1f124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:96:c5:cc:a7:90:5f:b8:04:f6:1e:4d:c6:c0:
                    39:0d:54:6a:ae:06:da:84:d9:01:11:6d:df:dd:e2:
                    24:5a:a9:a9:d6:51:66:5c:da:18:6a:f2:8b:09:05:
                    c0:38:5c:dd:b5:cf:74:83:33:9c:2e:fa:0a:b5:da:
                    1c:17:8f:73:81:ab:f0:ff:47:97:7d:6a:71:a0:76:
                    48:be:f7:67:bc:1a:fa:59:a9:7c:2c:8e:29:16:bd:
                    68:46:5e:6e:35:c9:50:77:22:55:b1:c7:06:30:19:
                    ad:85:5b:33:dd:c2:eb:6f:a9:7c:5d:69:d3:cd:52:
                    26:a6:19:9f:35:f5:dd:8e:7d:65:8e:10:dd:d1:80:
                    89:27:ef:c1:e4:38:3a:5e:e2:88:a7:5f:82:3f:51:
                    df:fc:c6:7e:a0:31:c0:4d:c1:78:28:2b:fe:49:4d:
                    ba:96:fc:d6:23:dd:4d:93:3c:ac:2a:cf:37:3b:a7:
                    8b:e8:40:04:eb:63:4e:a8:8e:77:0a:bd:c3:25:47:
                    c8:f2:b9:ac:96:bb:2e:68:93:f1:ea:a6:e5:8e:46:
                    ee:b7:f0:d5:23:3e:1c:c0:69:af:62:dd:63:59:55:
                    cc:7d:5e:15:be:fa:de:38:e9:77:d9:73:b7:1d:a0:
                    71:c8:06:b3:06:08:a3:01:2a:b0:27:1b:51:d3:b7:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:70:71:EC:0C:65:B8:08:52:4E:09:C6:20:BA:F5:71:EB:6F:25:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5da813c6-3362-3a15-8c8f-01d933e11263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl

            X509v3 Authority Key Identifier:
                keyid:6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10b:b008::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:dd:5c:71:75:f0:e2:02:b1:d3:93:ba:5b:38:c1:ec:40:d4:
         5a:27:2b:ea:20:05:66:50:f4:a8:0e:7a:08:2c:84:a0:be:1d:
         c0:13:3a:22:8d:bd:51:2f:89:a0:46:62:13:80:b6:17:95:50:
         d0:b7:ec:1f:fc:45:44:f3:d8:80:58:e4:cc:4d:17:4b:b9:b0:
         e5:53:11:70:d0:d7:a6:5a:96:dc:b8:af:0b:df:22:81:65:52:
         6f:d8:00:a6:a3:ba:03:ca:37:f7:d7:8b:73:1e:6b:7f:59:cf:
         e0:f2:fe:43:54:8c:8d:ed:2b:3b:1a:27:d3:3b:41:7a:e2:f6:
         41:bb:96:ff:7d:60:a1:f3:d7:d4:c7:e9:74:f0:ce:25:38:f6:
         23:93:06:16:d5:29:01:00:99:21:f0:1e:87:08:d3:8e:9a:39:
         fc:54:d8:69:ee:1d:d4:75:6a:66:45:85:bc:f0:31:df:a1:73:
         7f:e2:17:25:bd:2f:d4:08:ca:d0:f5:94:8b:52:71:43:2e:97:
         e7:16:5e:06:82:1d:bc:7c:0d:63:c5:b7:eb:bf:aa:11:6e:05:
         44:e3:31:13:13:0f:50:0c:ac:ae:94:07:7b:4d:d0:51:87:7a:
         53:32:40:fb:b9:7f:48:9f:51:f9:ea:3c:d1:2f:46:bd:4f:21:
         b2:7a:0d:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjMe4/VExhj/S/AGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNlZjdkYjEtZDBmNy00YTk1LThjMzYtZDE2MmEyOGE1
MmM2MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
ODI0YzlkMzUtZjZmMi00YzYwLTg5NGItMTZiY2VkZDFmMTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJbFzKeQX7gE9h5NxsA5DVRqrgbahNkBEW3f
3eIkWqmp1lFmXNoYavKLCQXAOFzdtc90gzOcLvoKtdocF49zgavw/0eXfWpxoHZI
vvdnvBr6Wal8LI4pFr1oRl5uNclQdyJVsccGMBmthVsz3cLrb6l8XWnTzVImphmf
NfXdjn1ljhDd0YCJJ+/B5Dg6XuKIp1+CP1Hf/MZ+oDHATcF4KCv+SU26lvzWI91N
kzysKs83O6eL6EAE62NOqI53Cr3DJUfI8rmslrsuaJPx6qbljkbut/DVIz4cwGmv
Yt1jWVXMfV4VvvreOOl32XO3HaBxyAazBgijASqwJxtR07dA2QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFABwcewMZbgIUk4JxiC69XHrbyWOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2Vm
N2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYyYTI4YTUyYzYvNWRhODEzYzYtMzM2Mi0z
YTE1LThjOGYtMDFkOTMzZTExMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGNlZjdkYjEtZDBmNy00YTk1LThj
MzYtZDE2MmEyOGE1MmM2LzRjZWY3ZGIxLWQwZjctNGE5NS04YzM2LWQxNjJhMjhh
NTJjNi5jcmwwHwYDVR0jBBgwFoAUbEoioeXy+BtrS/P6NFeOguEXuyMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2VmN2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYy
YTI4YTUyYzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABC7AI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGbdXHF18OICsdOTuls4wexA1FonK+ogBWZQ9KgOeggshKC+HcAT
OiKNvVEviaBGYhOAtheVUNC37B/8RUTz2IBY5MxNF0u5sOVTEXDQ16Zalty4rwvf
IoFlUm/YAKajugPKN/fXi3Mea39Zz+Dy/kNUjI3tKzsaJ9M7QXri9kG7lv99YKHz
19TH6XTwziU49iOTBhbVKQEAmSHwHocI046aOfxU2GnuHdR1amZFhbzwMd+hc3/i
FyW9L9QIytD1lItScUMul+cWXgaCHbx8DWPFt+u/qhFuBUTjMRMTD1AMrK6UB3tN
0FGHelMyQPu5f0ifUfnqPNEvRr1PIbJ6DRQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:08 2025 by rpki-client