Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/3b85d474-2af7-357e-b6cf-df184cf9fbef.roa
File:                     3b85d474-2af7-357e-b6cf-df184cf9fbef.roa (raw, json)
Hash identifier:          aFRRwHDzGIzbVsI4XuLnUWm/a532ORPyWwRA/gL3XQ0=
Subject key identifier:   57:71:27:51:69:D9:B4:BA:76:4E:DF:D4:D2:DA:C3:D0:7B:3C:19:AB
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F43285848CC7B9B37EC8BA4B5FCFA1CA0
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/3b85d474-2af7-357e-b6cf-df184cf9fbef.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     3635
IP address blocks:        2610:20:3000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:9b:37:ec:8b:a4:b5:fc:fa:1c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=f5251846-8240-4425-856a-1345580173ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:9e:41:da:c3:42:c0:1f:9b:0f:e5:0e:5f:
                    7a:1a:84:4b:34:cd:43:cb:ba:c1:57:89:fc:3c:b6:
                    09:bf:ce:29:18:1c:e6:05:c3:4a:8c:3c:89:60:c3:
                    ee:e4:43:9e:d6:b2:1f:4b:b6:46:69:8b:08:50:a8:
                    14:22:31:7b:30:3d:8c:ad:10:88:b4:2e:67:37:be:
                    26:a0:5e:76:99:d1:61:ab:af:1f:bd:50:b0:90:52:
                    73:c7:9a:5a:c0:0a:17:94:34:49:66:c1:1f:b4:01:
                    c2:57:f7:48:33:a4:5f:5e:77:df:f3:68:02:f9:a4:
                    66:30:8d:e5:98:5f:94:57:4b:1a:7b:7e:75:74:cb:
                    00:27:33:b2:41:11:a4:80:01:ee:cf:97:e0:84:7a:
                    f4:98:70:02:fd:18:f3:49:6d:81:88:f2:d5:a2:01:
                    cf:78:4c:5d:6e:90:90:a8:69:b7:8f:e5:8c:e1:76:
                    59:de:b7:7b:72:0f:56:44:2e:85:6f:a1:35:84:cd:
                    44:b8:72:ad:7e:7a:db:be:2b:b3:f6:c1:c5:77:95:
                    42:12:48:ad:ce:90:6a:4a:a1:47:79:00:a1:78:04:
                    c7:01:35:2d:49:73:73:2a:66:8d:8f:30:98:48:61:
                    61:b2:ff:50:f3:d9:c8:2d:18:ad:2d:68:ca:4b:05:
                    b0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:71:27:51:69:D9:B4:BA:76:4E:DF:D4:D2:DA:C3:D0:7B:3C:19:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/3b85d474-2af7-357e-b6cf-df184cf9fbef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:1e:25:96:66:24:d8:46:4f:3d:00:f5:71:a8:16:f5:ec:df:
         19:77:27:d7:5c:90:9e:b4:92:b3:01:95:77:83:ca:ba:66:07:
         be:28:28:f7:75:39:68:83:58:a6:a8:9f:22:78:b6:58:5e:15:
         f5:60:c2:58:d0:48:48:2f:1e:fe:4a:41:06:13:78:d2:b3:65:
         25:00:58:be:26:46:ae:88:fe:15:7c:6c:a5:1f:93:ac:c4:99:
         04:c7:2f:ad:fb:7e:ce:67:7e:13:b9:d5:59:fe:fe:f6:82:e7:
         2d:cc:64:b4:bd:3b:ff:01:15:39:03:60:4a:14:af:b3:c0:e3:
         24:6a:1c:ce:c0:60:42:42:8d:eb:e1:d1:ea:18:0d:96:30:8b:
         36:a9:8f:bb:7c:5e:99:b6:cd:69:51:9d:ca:d6:7e:d1:e6:cf:
         ee:24:32:02:fa:7e:8f:76:9a:63:e8:89:9a:ba:45:b1:1f:bf:
         df:a3:08:ac:f4:ad:ca:05:30:7a:53:aa:52:04:ed:71:6d:2b:
         76:1a:87:f0:3e:6d:ae:bf:5d:9b:2c:36:a1:53:d5:81:4e:fa:
         c4:6c:c4:d2:db:04:4a:23:41:fa:ba:29:c7:21:21:61:3d:73:
         0f:99:80:5d:b3:57:8c:01:36:4a:6b:76:a5:af:ab:45:27:14:
         97:7a:18:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjMe5s37Iuktfz6HKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm
YWI3MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
ZjUyNTE4NDYtODI0MC00NDI1LTg1NmEtMTM0NTU4MDE3M2VjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8yeQdrDQsAfmw/lDl96GoRLNM1Dy7rBV4n8
PLYJv84pGBzmBcNKjDyJYMPu5EOe1rIfS7ZGaYsIUKgUIjF7MD2MrRCItC5nN74m
oF52mdFhq68fvVCwkFJzx5pawAoXlDRJZsEftAHCV/dIM6RfXnff82gC+aRmMI3l
mF+UV0sae351dMsAJzOyQRGkgAHuz5fghHr0mHAC/RjzSW2BiPLVogHPeExdbpCQ
qGm3j+WM4XZZ3rd7cg9WRC6Fb6E1hM1EuHKtfnrbviuz9sHFd5VCEkitzpBqSqFH
eQCheATHATUtSXNzKmaNjzCYSGFhsv9Q89nILRitLWjKSwWwxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFdxJ1Fp2bS6dk7f1NLaw9B7PBmrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk
NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvM2I4NWQ0NzQtMmFmNy0z
NTdlLWI2Y2YtZGYxODRjZjlmYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2
ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3
ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4
ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIDAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAIeJZZmJNhGTz0A9XGoFvXs3xl3J9dckJ60krMBlXeDyrpmB74o
KPd1OWiDWKaonyJ4tlheFfVgwljQSEgvHv5KQQYTeNKzZSUAWL4mRq6I/hV8bKUf
k6zEmQTHL637fs5nfhO51Vn+/vaC5y3MZLS9O/8BFTkDYEoUr7PA4yRqHM7AYEJC
jevh0eoYDZYwizapj7t8Xpm2zWlRncrWftHmz+4kMgL6fo92mmPoiZq6RbEfv9+j
CKz0rcoFMHpTqlIE7XFtK3Yah/A+ba6/XZssNqFT1YFO+sRsxNLbBEojQfq6Kcch
IWE9cw+ZgF2zV4wBNkprdqWvq0UnFJd6GII=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:31 2025 by rpki-client