Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7cd53b18-84bc-3058-88b5-0aa5a64fe4fe.roa
File:                     7cd53b18-84bc-3058-88b5-0aa5a64fe4fe.roa (raw, json)
Hash identifier:          J2EBfgz27N1zxqXz5BPNNJHPkfbFhcSzWw+dlTOjfV0=
Subject key identifier:   14:A0:CF:ED:C2:46:3F:85:58:7C:3D:DE:81:F6:37:A5:8F:F6:25:42
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584902EC305FCAD5A9E1520ED7C0
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7cd53b18-84bc-3058-88b5-0aa5a64fe4fe.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     11105
IP address blocks:        2607:f8f0:620::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:30:5f:ca:d5:a9:e1:52:0e:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=fa731e28-3ec7-4766-bc3d-0f8dd6ddd841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:e1:41:ba:d6:37:58:50:86:d6:ff:83:ea:
                    71:e1:ab:01:13:ba:43:2c:e7:b9:a1:0c:1e:f1:85:
                    e8:7e:70:29:f1:92:2a:16:39:85:32:7e:9a:22:01:
                    f4:0f:6e:64:fe:ac:f4:a7:23:7d:ce:cd:1c:d4:05:
                    95:ea:4e:27:68:ec:af:ca:6b:a7:ee:19:4b:42:85:
                    04:21:18:15:57:fe:cc:f4:b1:79:62:36:90:1e:1f:
                    1b:0c:ac:49:78:28:e6:2a:3a:b8:0d:36:da:b2:a9:
                    e8:4c:d2:8e:46:bb:fe:28:68:81:ed:26:2a:49:f2:
                    32:ca:8c:ef:fe:66:b8:45:5e:2a:84:5a:40:36:f6:
                    2a:12:d3:81:bd:7f:87:c8:5b:b0:be:24:b0:10:8f:
                    76:68:c9:38:49:d5:0c:86:e6:8c:73:ec:c1:53:49:
                    13:9b:05:ea:07:54:df:40:98:ad:8b:0d:fa:83:93:
                    f1:28:b1:76:8e:aa:c9:06:d6:c4:b8:dc:b1:f9:9a:
                    ac:6e:2f:b5:c2:aa:79:d4:95:f8:c3:69:ab:a8:a3:
                    44:41:c0:e0:1b:41:d7:df:bb:79:c6:a1:6b:52:1e:
                    cf:21:00:97:48:fb:66:71:b4:04:56:57:ef:0a:2f:
                    04:64:94:09:f8:ba:fd:ef:1f:fa:ba:c7:99:a8:8a:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A0:CF:ED:C2:46:3F:85:58:7C:3D:DE:81:F6:37:A5:8F:F6:25:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7cd53b18-84bc-3058-88b5-0aa5a64fe4fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:620::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:12:b9:70:49:37:a2:c1:f0:32:5d:d4:c5:b1:cf:7c:3d:34:
         0e:87:05:c5:d3:bd:67:36:de:0f:de:35:03:24:d7:4e:3a:ed:
         d0:98:da:0b:d7:2f:a6:2f:b3:ed:63:3d:96:34:71:60:88:ab:
         65:03:90:36:25:51:4b:8b:ce:79:09:1d:c4:f7:30:75:b5:c5:
         6d:d3:9c:39:fe:dd:65:55:1f:1a:54:c2:55:b2:c2:e7:c9:c4:
         3d:e0:ab:4c:62:a8:50:5f:89:cb:3d:b6:aa:c0:5e:a6:b4:19:
         90:51:33:22:36:30:e1:99:7c:81:14:2a:c7:14:ea:1e:ea:42:
         9d:bf:2f:f6:a8:4a:07:24:9b:c7:86:b6:37:c0:52:3a:41:d8:
         ec:fb:0f:84:1e:6e:2b:6c:dd:ea:5c:ed:6a:5d:56:a7:a4:18:
         2f:d4:11:76:fb:28:ad:d1:86:d6:7e:06:10:77:65:bd:b9:ca:
         b6:f1:41:35:89:28:74:e3:e6:97:42:e4:d4:94:14:5a:90:4c:
         ca:8c:ee:2b:7c:f7:c9:2f:fc:c7:75:58:f1:53:9d:56:78:04:
         71:ee:6a:93:d2:15:b0:16:ea:82:00:20:f8:b2:15:bc:88:20:
         d2:52:46:bc:10:80:65:ad:9f:99:8c:07:e5:2d:c8:b2:3f:58:
         6b:22:f1:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkC7DBfytWp4VIO18AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux
OGNmMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
ZmE3MzFlMjgtM2VjNy00NzY2LWJjM2QtMGY4ZGQ2ZGRkODQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpjhQbrWN1hQhtb/g+px4asBE7pDLOe5oQwe
8YXofnAp8ZIqFjmFMn6aIgH0D25k/qz0pyN9zs0c1AWV6k4naOyvymun7hlLQoUE
IRgVV/7M9LF5YjaQHh8bDKxJeCjmKjq4DTbasqnoTNKORrv+KGiB7SYqSfIyyozv
/ma4RV4qhFpANvYqEtOBvX+HyFuwviSwEI92aMk4SdUMhuaMc+zBU0kTmwXqB1Tf
QJitiw36g5PxKLF2jqrJBtbEuNyx+Zqsbi+1wqp51JX4w2mrqKNEQcDgG0HX37t5
xqFrUh7PIQCXSPtmcbQEVlfvCi8EZJQJ+Lr97x/6useZqIp22QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBSgz+3CRj+FWHw93oH2N6WP9iVCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi
NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvN2NkNTNiMTgtODRiYy0z
MDU4LTg4YjUtMGFhNWE2NGZlNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5
MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl
MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli
NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AYg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHsSuXBJN6LB8DJd1MWxz3w9NA6HBcXTvWc23g/eNQMk10467dCY
2gvXL6Yvs+1jPZY0cWCIq2UDkDYlUUuLznkJHcT3MHW1xW3TnDn+3WVVHxpUwlWy
wufJxD3gq0xiqFBfics9tqrAXqa0GZBRMyI2MOGZfIEUKscU6h7qQp2/L/aoSgck
m8eGtjfAUjpB2Oz7D4Qebits3epc7WpdVqekGC/UEXb7KK3RhtZ+BhB3Zb25yrbx
QTWJKHTj5pdC5NSUFFqQTMqM7it898kv/Md1WPFTnVZ4BHHuapPSFbAW6oIAIPiy
FbyIINJSRrwQgGWtn5mMB+UtyLI/WGsi8Wg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:39 2025 by rpki-client