Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa
File:                     a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa (raw, json)
Hash identifier:          MJlUbkcD75xipiWzS+iBKO/O6hSWtIJ2+ElrobI60xk=
Subject key identifier:   5A:F6:8E:F6:40:A1:B8:C5:83:83:C2:2E:28:DF:21:7A:65:3D:82:41
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F43285848C2B6477564EA6033BF3D9680
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     11721
IP address blocks:        2602:fa8a:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:47:75:64:ea:60:33:bf:3d:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=925a29a2-aa64-423a-a5c9-cd8ec3cfeb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:17:a8:8b:b0:24:c6:a5:ac:6e:ba:6a:7d:
                    be:43:b9:90:bb:eb:26:4f:2b:46:e7:a2:c3:e7:bd:
                    71:20:09:3c:e1:65:38:1f:85:21:7d:41:ae:38:14:
                    19:e4:57:6c:19:c0:7a:83:58:ac:23:79:d3:c7:bc:
                    35:6d:78:58:9b:0a:c7:7a:98:7c:39:fc:24:c7:b6:
                    94:70:aa:d0:d1:03:8c:32:f3:85:91:89:85:88:d0:
                    20:90:2a:aa:2e:42:e7:14:79:cf:9e:6e:63:24:d5:
                    d3:2a:e9:d0:e9:86:f4:b8:15:8c:86:e6:da:5b:e0:
                    ff:07:04:43:4d:be:0f:d5:aa:40:dc:29:c8:04:29:
                    f5:7b:a0:c2:63:43:c2:c3:eb:a5:fe:99:e8:84:dd:
                    44:a7:06:33:d5:ac:e4:84:45:00:55:58:4f:50:3b:
                    96:0e:ba:d1:f9:2a:ec:b4:54:b9:34:d6:ef:3c:7e:
                    78:d8:14:b8:76:e4:c1:fc:d0:aa:b9:5b:f2:43:ab:
                    b0:9a:03:88:d7:75:1d:1a:11:42:11:78:db:85:8e:
                    ad:7b:0b:46:6b:f8:74:9a:11:40:44:5f:11:c6:2f:
                    e2:e5:a6:c9:92:33:11:b1:2d:81:e2:b9:b6:af:e7:
                    80:b8:b1:69:62:ad:dd:36:a8:e7:0e:d4:d0:3d:93:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F6:8E:F6:40:A1:B8:C5:83:83:C2:2E:28:DF:21:7A:65:3D:82:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f9:5c:8c:65:7e:ff:91:a7:a4:38:26:3d:99:71:b6:b2:69:
         e3:d6:a4:81:aa:e3:0c:d6:61:ac:13:3f:74:22:42:60:48:76:
         cf:52:bf:c7:50:a3:92:94:34:90:47:67:23:b8:40:bb:3b:54:
         04:8f:e8:1d:7d:64:31:94:c2:1b:2e:4d:d7:44:cf:12:12:50:
         6a:f0:d7:ac:b2:db:3a:49:8a:ab:53:cb:cb:84:0b:b8:2f:cc:
         8d:08:fe:23:89:dd:53:83:2c:b2:1d:49:83:64:02:c6:46:21:
         16:06:05:51:ba:b7:5f:25:27:1c:72:85:47:4e:46:ac:c3:04:
         3f:62:9a:5f:93:a1:a2:4a:5a:5b:28:75:89:39:30:c8:86:cb:
         6b:bd:81:81:b7:68:65:cb:19:ce:80:dc:bb:a4:d2:9c:3c:52:
         a6:72:1e:9c:72:f0:30:1f:85:14:ea:ea:80:55:eb:ab:92:d1:
         0d:fb:a9:ea:39:b2:9f:c7:c8:47:35:ed:7b:05:26:7d:3e:26:
         f8:66:84:57:67:57:ee:eb:eb:3b:65:88:f3:8a:3d:5e:9c:a2:
         ed:da:d5:6c:6d:a2:28:11:cf:5c:8c:d8:52:92:f5:25:38:99:
         f8:81:48:c5:ad:1b:57:27:81:63:e8:c7:2c:bf:08:3a:d8:ca:
         99:7a:ee:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjCtkd1ZOpgM789loAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZmUzNjItODllNC00YWU4LWI5YTItNjFiMGU1NTIz
Yzc4MB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk
OTI1YTI5YTItYWE2NC00MjNhLWE1YzktY2Q4ZWMzY2ZlYjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgUXqIuwJMalrG66an2+Q7mQu+smTytG56LD
571xIAk84WU4H4UhfUGuOBQZ5FdsGcB6g1isI3nTx7w1bXhYmwrHeph8Ofwkx7aU
cKrQ0QOMMvOFkYmFiNAgkCqqLkLnFHnPnm5jJNXTKunQ6Yb0uBWMhubaW+D/BwRD
Tb4P1apA3CnIBCn1e6DCY0PCw+ul/pnohN1EpwYz1azkhEUAVVhPUDuWDrrR+Srs
tFS5NNbvPH542BS4duTB/NCquVvyQ6uwmgOI13UdGhFCEXjbhY6tewtGa/h0mhFA
RF8Rxi/i5abJkjMRsS2B4rm2r+eAuLFpYq3dNqjnDtTQPZNtOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFr2jvZAobjFg4PCLijfIXplPYJBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjdm
ZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIwZTU1MjNjNzgvYTc4Y2Q3OWQtZDFkYi0z
YzI0LThmZTgtZDAyNWVkMTFiMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI3ZmUzNjItODllNC00YWU4LWI5
YTItNjFiMGU1NTIzYzc4LzkyN2ZlMzYyLTg5ZTQtNGFlOC1iOWEyLTYxYjBlNTUy
M2M3OC5jcmwwHwYDVR0jBBgwFoAUGtcHAlWwKq479wLsfcQu5WW9QqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85MjdmZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIw
ZTU1MjNjNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6igAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGb5XIxlfv+Rp6Q4Jj2ZcbayaePWpIGq4wzWYawTP3QiQmBIds9S
v8dQo5KUNJBHZyO4QLs7VASP6B19ZDGUwhsuTddEzxISUGrw16yy2zpJiqtTy8uE
C7gvzI0I/iOJ3VODLLIdSYNkAsZGIRYGBVG6t18lJxxyhUdORqzDBD9iml+ToaJK
WlsodYk5MMiGy2u9gYG3aGXLGc6A3Luk0pw8UqZyHpxy8DAfhRTq6oBV66uS0Q37
qeo5sp/HyEc17XsFJn0+JvhmhFdnV+7r6ztliPOKPV6cou3a1WxtoigRz1yM2FKS
9SU4mfiBSMWtG1cngWPoxyy/CDrYypl67pI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:06 2025 by rpki-client