Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/4a659eed-8e8f-3b10-9a74-931b638bddef.roa
File:                     4a659eed-8e8f-3b10-9a74-931b638bddef.roa (raw, json)
Hash identifier:          PMc4Adb5RadMT2x2zx9/3rxw74A5uG2/kroewBnhs9U=
Subject key identifier:   7A:07:25:5D:23:40:C4:31:70:68:2E:6D:63:7A:1A:60:48:D6:E4:58
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F43285848D6410724F53A80D37DF0CA80
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/4a659eed-8e8f-3b10-9a74-931b638bddef.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2606:9680:20c0::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:07:24:f5:3a:80:d3:7d:f0:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=49d223a3-1ba6-4db1-9610-50838c5db9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:aa:ab:0a:e9:da:33:af:b2:7f:e2:a4:94:
                    e0:19:db:0c:db:c7:bc:cd:c7:59:fa:52:7a:31:e0:
                    a6:c2:13:d5:00:8b:e1:50:27:a2:bb:c6:66:34:ff:
                    ee:d0:8a:84:e5:b4:01:fe:d3:9b:d7:83:51:3c:6c:
                    16:be:b4:a8:77:29:dc:2d:b9:77:03:54:08:1f:35:
                    50:3d:0f:07:db:30:3f:4d:a9:4d:6b:17:78:56:6a:
                    79:f4:80:d1:df:3f:bd:e1:54:54:38:1b:08:4b:b8:
                    5f:5f:38:89:c7:a6:10:f6:9c:04:b9:79:63:0b:1a:
                    3e:95:0a:53:23:ee:b2:9a:89:66:65:92:a5:52:e4:
                    6e:f4:7f:9a:94:7f:a2:ef:36:a3:79:1a:28:f8:8f:
                    7e:46:70:7d:03:3b:53:10:f4:80:8d:6b:ec:95:23:
                    37:b4:fd:ba:7d:bf:ae:3a:f6:6f:a7:e4:dc:bc:3e:
                    ab:38:75:df:30:ac:7a:a5:d0:0f:59:e3:b4:79:32:
                    36:ac:52:4a:de:13:50:0f:87:ca:fe:b5:64:b5:39:
                    fe:f9:e6:a0:f1:c9:b6:d9:3c:d3:a2:b1:f4:86:02:
                    09:3c:99:57:ff:e4:b8:ee:a8:61:e0:9a:13:14:54:
                    0e:fe:31:7c:67:3d:22:b5:85:e1:04:ca:59:b8:a1:
                    bd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:07:25:5D:23:40:C4:31:70:68:2E:6D:63:7A:1A:60:48:D6:E4:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/4a659eed-8e8f-3b10-9a74-931b638bddef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9680:20c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:fc:0b:c0:37:99:39:8a:57:ae:38:eb:72:19:43:66:97:28:
         a2:8b:67:d5:e8:9a:37:c0:d2:c9:77:c2:9b:d3:ee:0a:d8:f9:
         f5:70:c4:91:bc:b7:fa:ec:8b:07:5c:57:3a:27:70:2f:5f:24:
         27:28:cb:f2:ef:67:9a:19:4f:8e:5c:f1:b2:59:5e:19:f1:e5:
         ad:2c:32:1b:12:15:73:8b:96:4d:cb:3c:07:eb:54:98:ce:a3:
         3b:c4:fe:3a:b4:4c:b3:0c:16:bf:ee:a7:a1:96:fc:af:c6:1d:
         72:5c:82:de:20:73:d4:4a:c0:52:ee:1a:f7:8e:b5:36:c4:11:
         19:5d:7c:83:d8:b9:f8:c6:b5:7e:d7:65:00:fa:ff:4b:33:5b:
         f3:bf:44:1b:4a:91:95:e4:b1:5d:1c:77:25:cb:2d:00:0f:2c:
         1e:cd:df:62:23:d9:d8:10:6d:0b:af:10:d4:55:61:47:0e:00:
         b7:0d:dd:88:db:41:a1:dc:21:ee:eb:c5:c1:07:18:ac:45:d5:
         58:03:c0:6d:a0:15:ac:51:9b:b6:53:da:85:8f:57:19:fa:f3:
         f2:dd:10:b5:1e:8c:02:7d:53:dc:74:e2:f6:23:e1:ec:e3:ff:
         59:2b:3d:3f:ab:90:c6:d9:89:0b:81:b0:74:de:31:e3:85:58:
         d2:58:77:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjWQQck9TqA033wyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli
Njc2MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDlkMjIzYTMtMWJhNi00ZGIxLTk2MTAtNTA4MzhjNWRiOWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Oqqwrp2jOvsn/ipJTgGdsM28e8zcdZ+lJ6
MeCmwhPVAIvhUCeiu8ZmNP/u0IqE5bQB/tOb14NRPGwWvrSodyncLbl3A1QIHzVQ
PQ8H2zA/TalNaxd4Vmp59IDR3z+94VRUOBsIS7hfXziJx6YQ9pwEuXljCxo+lQpT
I+6ymolmZZKlUuRu9H+alH+i7zajeRoo+I9+RnB9AztTEPSAjWvslSM3tP26fb+u
OvZvp+TcvD6rOHXfMKx6pdAPWeO0eTI2rFJK3hNQD4fK/rVktTn++eag8cm22TzT
orH0hgIJPJlX/+S47qhh4JoTFFQO/jF8Zz0itYXhBMpZuKG97QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHoHJV0jQMQxcGgubWN6GmBI1uRYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5
MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvNGE2NTllZWQtOGU4Zi0z
YjEwLTlhNzQtOTMxYjYzOGJkZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3
ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5
YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy
Y2ZjOWI2NzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgaWgCDA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMf8C8A3mTmKV64463IZQ2aXKKKLZ9XomjfA0sl3wpvT7grY+fVw
xJG8t/rsiwdcVzoncC9fJCcoy/LvZ5oZT45c8bJZXhnx5a0sMhsSFXOLlk3LPAfr
VJjOozvE/jq0TLMMFr/up6GW/K/GHXJcgt4gc9RKwFLuGveOtTbEERldfIPYufjG
tX7XZQD6/0szW/O/RBtKkZXksV0cdyXLLQAPLB7N32Ij2dgQbQuvENRVYUcOALcN
3YjbQaHcIe7rxcEHGKxF1VgDwG2gFaxRm7ZT2oWPVxn68/LdELUejAJ9U9x04vYj
4ezj/1krPT+rkMbZiQuBsHTeMeOFWNJYd+0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:20 2025 by rpki-client