Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa
File:                     1941cca8-631b-3a22-acab-d02a1b20a72c.roa (raw, json)
Hash identifier:          rjYWuUHQuPzTqTbD/F43yKE5VWn3dJB9TJ3nNwWSPyw=
Subject key identifier:   64:64:6F:AA:D5:F4:C2:9E:27:67:89:63:7C:A4:7D:36:DE:59:CB:CB
Certificate issuer:       /CN=a7bb872d-e597-498e-8bd5-d2efae320554
Certificate serial:       010D0C9F43285848A1361293FBE3416549545440
Authority key identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     20473
IP address blocks:        2606:ed40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:12:93:fb:e3:41:65:49:54:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bb872d-e597-498e-8bd5-d2efae320554
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=31a3ae2f-8d09-4c53-850c-0e7f3bd930a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:10:b7:1b:0d:f3:ff:d7:d3:5e:6c:03:ee:2e:
                    33:81:58:91:77:3e:3f:1d:85:ff:a1:0f:6a:b5:e3:
                    88:70:25:ae:cd:08:e8:fb:12:b3:ef:aa:c9:80:ff:
                    b2:1d:2f:58:01:d1:aa:86:29:1e:48:2d:f6:c7:c3:
                    5e:74:b6:3b:37:13:1e:5e:a7:00:d1:5d:c2:26:e5:
                    ce:56:1c:98:24:d9:09:86:61:92:18:f8:63:de:7b:
                    b7:90:74:5f:35:ae:e8:26:10:a0:7d:de:fc:ed:69:
                    f6:47:35:0c:a2:e8:16:50:8e:de:21:3a:82:19:45:
                    9b:ff:00:d8:7d:d6:e5:32:aa:bc:47:a6:83:83:a4:
                    3f:3b:c3:e3:d6:44:b9:f2:31:a6:aa:0c:66:17:c0:
                    cb:a4:99:4a:30:4f:99:b1:d3:84:7e:95:05:21:e2:
                    bc:0f:d9:0a:8e:1c:21:93:91:42:7b:27:9a:7b:bf:
                    4c:c8:dc:de:f6:d2:ac:1f:2a:9f:9c:b7:36:4c:17:
                    0c:b6:1c:65:c7:bb:7c:65:7a:16:fa:be:31:df:24:
                    64:04:af:10:66:13:58:0f:4d:bc:e2:fe:50:f2:4a:
                    12:a5:ed:2f:f7:a2:53:7f:3c:f3:b9:69:22:e8:88:
                    e9:82:a3:dc:28:a8:1a:b1:09:ec:53:c3:d9:09:f5:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:64:6F:AA:D5:F4:C2:9E:27:67:89:63:7C:A4:7D:36:DE:59:CB:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl

            X509v3 Authority Key Identifier:
                keyid:0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:2c:83:4e:71:fb:e3:7c:a8:e0:bf:a6:49:96:1c:fb:e8:3f:
         75:2b:d8:d2:d2:36:24:21:ae:12:a0:60:8f:8d:fe:9e:fe:47:
         50:4f:ba:29:15:85:1a:8f:e1:5d:a6:14:86:23:9b:0b:b1:3e:
         d5:86:84:41:1f:5d:9c:b0:a0:5f:30:79:40:e5:aa:2b:59:13:
         f8:22:c7:9c:d3:ce:50:3e:df:48:77:72:7e:9f:df:b0:28:62:
         4e:52:ce:16:a4:61:c8:81:5d:52:57:86:f8:78:5f:80:d2:75:
         2b:1e:db:2f:72:97:1c:fb:a2:17:fb:3d:44:00:43:1b:bf:e8:
         58:b1:d9:9a:07:5e:6b:2e:5f:46:13:c4:37:77:d7:2d:02:77:
         5d:d8:8f:1c:f5:9c:80:a2:3f:7a:77:20:b6:ea:28:bc:7a:e5:
         09:1b:ed:7e:a3:da:60:11:51:21:42:d1:be:e0:af:17:04:6d:
         45:8b:79:93:64:e2:29:90:77:2f:b3:94:fe:08:5a:ce:eb:8b:
         2e:ed:83:6c:73:54:9e:a8:2d:92:18:21:bb:e6:45:dd:f0:11:
         aa:93:9d:58:c8:e6:7a:a5:fa:56:00:23:77:7a:9a:30:e2:59:
         7c:8e:70:13:bb:e3:88:77:45:2d:d9:ec:37:92:18:3e:c5:4f:
         2a:9b:48:0e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEihNhKT++NBZUlUVEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdiYjg3MmQtZTU5Ny00OThlLThiZDUtZDJlZmFlMzIw
NTU0MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
MzFhM2FlMmYtOGQwOS00YzUzLTg1MGMtMGU3ZjNiZDkzMGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBC3Gw3z/9fTXmwD7i4zgViRdz4/HYX/oQ9q
teOIcCWuzQjo+xKz76rJgP+yHS9YAdGqhikeSC32x8NedLY7NxMeXqcA0V3CJuXO
VhyYJNkJhmGSGPhj3nu3kHRfNa7oJhCgfd787Wn2RzUMougWUI7eITqCGUWb/wDY
fdblMqq8R6aDg6Q/O8Pj1kS58jGmqgxmF8DLpJlKME+ZsdOEfpUFIeK8D9kKjhwh
k5FCeyeae79MyNze9tKsHyqfnLc2TBcMthxlx7t8ZXoW+r4x3yRkBK8QZhNYD028
4v5Q8koSpe0v96JTfzzzuWki6IjpgqPcKKgasQnsU8PZCfWbYQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGRkb6rV9MKeJ2eJY3ykfTbeWcvLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hN2Ji
ODcyZC1lNTk3LTQ5OGUtOGJkNS1kMmVmYWUzMjA1NTQvMTk0MWNjYTgtNjMxYi0z
YTIyLWFjYWItZDAyYTFiMjBhNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTdiYjg3MmQtZTU5Ny00OThlLThi
ZDUtZDJlZmFlMzIwNTU0L2E3YmI4NzJkLWU1OTctNDk4ZS04YmQ1LWQyZWZhZTMy
MDU1NC5jcmwwHwYDVR0jBBgwFoAUC8EfTnl51j+L4kq4T5khA3lCaX0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hN2JiODcyZC1lNTk3LTQ5OGUtOGJkNS1kMmVm
YWUzMjA1NTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbtQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCYLINOcfvjfKjgv6ZJlhz76D91K9jS0jYkIa4SoGCPjf6e/kdQT7op
FYUaj+FdphSGI5sLsT7VhoRBH12csKBfMHlA5aorWRP4Isec085QPt9Id3J+n9+w
KGJOUs4WpGHIgV1SV4b4eF+A0nUrHtsvcpcc+6IX+z1EAEMbv+hYsdmaB15rLl9G
E8Q3d9ctAndd2I8c9ZyAoj96dyC26ii8euUJG+1+o9pgEVEhQtG+4K8XBG1Fi3mT
ZOIpkHcvs5T+CFrO64su7YNsc1SeqC2SGCG75kXd8BGqk51YyOZ6pfpWACN3epow
4ll8jnATu+OId0Ut2ew3khg+xU8qm0gO
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:05 2025 by rpki-client