Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/3198c1f7-baa2-3710-839f-8324eb25d849.roa
File:                     3198c1f7-baa2-3710-839f-8324eb25d849.roa (raw, json)
Hash identifier:          3cTPu5IqI7C+xIyRvK93MziydUCdu4PoT1kGzU4qZxo=
Subject key identifier:   57:6E:FD:AC:41:32:74:B4:57:07:E1:3E:8B:22:A5:64:0C:7A:CD:00
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F432858489BA0B4B958FFED7ECB5A9B00
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/3198c1f7-baa2-3710-839f-8324eb25d849.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     396908
IP address blocks:        2602:f956:1::/48 maxlen: 48
                          2602:f956:2::/48 maxlen: 48
                          2602:f956:3::/48 maxlen: 48
                          2602:f956:4::/48 maxlen: 48
                          2602:f956:5::/48 maxlen: 48
                          2602:f956:6::/48 maxlen: 48
                          2602:f956:7::/48 maxlen: 48
                          2602:f956:8::/48 maxlen: 48
                          2602:f956:9::/48 maxlen: 48
                          2602:f956:a::/48 maxlen: 48
                          2602:f956:b::/48 maxlen: 48
                          2602:f956:c::/48 maxlen: 48
                          2602:f956:d::/48 maxlen: 48
                          2602:f956:e::/48 maxlen: 48
                          2602:f956:f::/48 maxlen: 48
                          2602:f956:10::/48 maxlen: 48
                          2602:f956:11::/48 maxlen: 48
                          2602:f956:12::/48 maxlen: 48
                          2602:f956:13::/48 maxlen: 48
                          2602:f956:14::/48 maxlen: 48
                          2602:f956:15::/48 maxlen: 48
                          2602:f956:16::/48 maxlen: 48
                          2602:f956:17::/48 maxlen: 48
                          2602:f956:18::/48 maxlen: 48
                          2602:f956:19::/48 maxlen: 48
                          2602:f956:1a::/48 maxlen: 48
                          2602:f956:1b::/48 maxlen: 48
                          2602:f956:1c::/48 maxlen: 48
                          2602:f956:1d::/48 maxlen: 48
                          2602:f956:1e::/48 maxlen: 48
                          2602:f956:1f::/48 maxlen: 48
                          2602:f956:20::/48 maxlen: 48
                          2602:f956:21::/48 maxlen: 48
                          2602:f956:22::/48 maxlen: 48
                          2602:f956:23::/48 maxlen: 48
                          2602:f956:24::/48 maxlen: 48
                          2602:f956:25::/48 maxlen: 48
                          2602:f956:26::/48 maxlen: 48
                          2602:f956:27::/48 maxlen: 48
                          2602:f956:28::/48 maxlen: 48
                          2602:f956:29::/48 maxlen: 48
                          2602:f956:2a::/48 maxlen: 48
                          2602:f956:2b::/48 maxlen: 48
                          2602:f956:2c::/48 maxlen: 48
                          2602:f956:2d::/48 maxlen: 48
                          2602:f956:2e::/48 maxlen: 48
                          2602:f956:2f::/48 maxlen: 48
                          2602:f956:30::/48 maxlen: 48
                          2602:f956:31::/48 maxlen: 48
                          2602:f956:32::/48 maxlen: 48
                          2602:f956:33::/48 maxlen: 48
                          2602:f956:34::/48 maxlen: 48
                          2602:f956:35::/48 maxlen: 48
                          2602:f956:36::/48 maxlen: 48
                          2602:f956:37::/48 maxlen: 48
                          2602:f956:38::/48 maxlen: 48
                          2602:f956:39::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b4:b9:58:ff:ed:7e:cb:5a:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=d5e8f163-e7b6-4b78-93de-392a71395fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7a:f0:72:2f:fe:5c:34:54:66:0c:bb:66:2a:
                    1c:38:84:f4:98:7e:37:d6:19:30:42:8c:4f:c1:e7:
                    c8:c3:1a:b1:8f:f4:98:ba:75:f7:3b:40:42:e3:d9:
                    cb:0d:3f:dc:ae:55:6b:43:53:24:e8:6d:35:38:84:
                    42:f9:0d:5f:25:2a:1e:5f:c6:e0:13:4c:2e:ad:dd:
                    6e:7f:54:12:87:aa:b9:55:fd:d4:d5:b1:e5:3b:b9:
                    b0:72:04:d7:15:2e:1a:e7:6c:0a:fc:6f:86:88:b0:
                    d6:54:d1:83:91:1f:b3:d1:45:ea:3d:45:b0:42:c4:
                    a3:02:48:6b:33:5f:16:28:2d:5d:ab:1c:e0:b3:cc:
                    da:f7:7c:92:12:c3:9e:06:c9:ad:0d:c7:e9:d8:35:
                    f3:79:d3:cd:7a:2a:ea:d1:34:b2:28:de:fa:c7:f3:
                    22:4c:85:0e:7f:8f:bf:7a:b9:1b:cf:94:8d:2b:9c:
                    93:05:3e:48:d2:26:5b:12:3b:8a:ea:19:1b:6f:75:
                    00:37:dd:e1:5c:13:e8:68:e7:ea:c1:04:77:27:08:
                    bb:dd:30:52:48:96:43:17:74:73:0f:49:49:a8:e5:
                    82:09:1e:15:30:1a:11:0b:85:b7:51:ec:02:f7:7a:
                    83:80:94:7e:29:79:82:1f:fe:71:47:f5:6b:bd:88:
                    b7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6E:FD:AC:41:32:74:B4:57:07:E1:3E:8B:22:A5:64:0C:7A:CD:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/3198c1f7-baa2-3710-839f-8324eb25d849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:1::-2602:f956:39:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0a:f3:e0:ae:ab:a4:f3:26:1a:c3:f4:7c:53:a0:1a:b3:e2:
         0e:e9:b1:4d:03:85:d8:0c:1f:26:06:22:4c:25:a1:1e:28:ba:
         dc:4c:36:72:86:f4:6f:8e:8d:ce:59:34:50:40:1c:37:52:d7:
         7a:54:3f:80:01:b3:a4:b3:ae:9f:b5:b8:9f:bf:dd:b5:45:d9:
         6c:09:4e:6f:50:dd:27:83:1f:eb:6b:e9:a5:0a:a2:7b:ba:af:
         87:ca:6f:9b:fd:7f:b0:2a:ee:8e:1d:98:78:af:7c:37:3c:b9:
         ef:a9:47:00:07:a5:9b:db:d7:13:ee:6b:0e:38:7e:ec:db:38:
         cc:8a:e0:d2:b7:4d:dd:29:1f:f8:ad:b3:e8:c3:9f:13:26:1a:
         ea:6c:de:47:af:c9:0d:b7:48:49:d8:7b:bb:c9:c1:3a:fe:44:
         eb:b1:3a:1c:b0:38:c6:80:9d:02:64:14:dc:a6:ca:4d:c2:46:
         5b:20:eb:79:b9:37:81:8e:9c:4d:98:4a:3e:4c:92:bb:ca:3b:
         86:05:ac:98:9f:e4:3c:61:f8:b7:97:72:c6:4a:78:5e:65:ee:
         42:d2:b6:0d:f3:d3:bb:e1:a0:66:28:52:31:1c:b6:06:a0:be:
         ca:ca:38:94:15:3b:fa:a3:79:9b:be:2b:4e:41:5a:20:0b:f3:
         5f:ff:bd:be
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEiboLS5WP/tfstamwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIyYzI3Y2EtZmI3Yy00Y2FkLTlmOWItNGY3NTRmODY0
MjYzMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZDVlOGYxNjMtZTdiNi00Yjc4LTkzZGUtMzkyYTcxMzk1ZmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnrwci/+XDRUZgy7ZiocOIT0mH431hkwQoxP
wefIwxqxj/SYunX3O0BC49nLDT/crlVrQ1Mk6G01OIRC+Q1fJSoeX8bgE0wurd1u
f1QSh6q5Vf3U1bHlO7mwcgTXFS4a52wK/G+GiLDWVNGDkR+z0UXqPUWwQsSjAkhr
M18WKC1dqxzgs8za93ySEsOeBsmtDcfp2DXzedPNeirq0TSyKN76x/MiTIUOf4+/
erkbz5SNK5yTBT5I0iZbEjuK6hkbb3UAN93hXBPoaOfqwQR3Jwi73TBSSJZDF3Rz
D0lJqOWCCR4VMBoRC4W3UewC93qDgJR+KXmCH/5xR/VrvYi3VwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFFdu/axBMnS0VwfhPosipWQMes0AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJj
MjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4NjQyNjMvMzE5OGMxZjctYmFhMi0z
NzEwLTgzOWYtODMyNGViMjVkODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIyYzI3Y2EtZmI3Yy00Y2FkLTlm
OWItNGY3NTRmODY0MjYzL2ViMmMyN2NhLWZiN2MtNGNhZC05ZjliLTRmNzU0Zjg2
NDI2My5jcmwwHwYDVR0jBBgwFoAUz7laojwbIP8QynSPJVz1CYmivlEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1
NGY4NjQyNjMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAvlW
AAEDBwEmAvlWADgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAJArz4K6rpPMmGsP0fFOgGrPiDumxTQOF2Awf
JgYiTCWhHii63Ew2cob0b46Nzlk0UEAcN1LXelQ/gAGzpLOun7W4n7/dtUXZbAlO
b1DdJ4Mf62vppQqie7qvh8pvm/1/sCrujh2YeK98Nzy576lHAAelm9vXE+5rDjh+
7Ns4zIrg0rdN3Skf+K2z6MOfEyYa6mzeR6/JDbdISdh7u8nBOv5E67E6HLA4xoCd
AmQU3KbKTcJGWyDrebk3gY6cTZhKPkySu8o7hgWsmJ/kPGH4t5dyxkp4XmXuQtK2
DfPTu+GgZihSMRy2BqC+yso4lBU7+qN5m74rTkFaIAvzX/+9vg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:42 2025 by rpki-client