Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa
File:                     b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa (raw, json)
Hash identifier:          sqmdxhtaSpO2cYL3+hhpe02hfy0WgWa8SmTTbIklAXo=
Subject key identifier:   A2:20:D8:A5:CC:9D:1B:84:08:8C:79:DB:B5:6A:45:64:8F:0F:DB:BE
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F43285848E9CBD8F3CC1A65306837AD80
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     2906
IP address blocks:        2620:10c:7000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:d8:f3:cc:1a:65:30:68:37:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=fc723569-8cee-4baf-8708-3b961bb9e20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:29:4b:5d:49:c5:88:09:88:3f:18:4c:f9:16:
                    dd:af:a6:3f:22:6c:df:aa:56:9a:87:43:b1:5a:1d:
                    b4:5e:34:33:01:b0:07:df:4c:b7:f1:b3:b9:9a:8e:
                    76:36:f1:3f:01:19:d0:52:05:54:62:c1:ae:05:bd:
                    32:d1:ec:04:0a:ce:e9:9f:99:98:86:a6:9c:e9:96:
                    04:86:ed:f1:7c:5d:40:43:7a:54:34:a7:36:5c:66:
                    ff:63:c4:95:a4:2d:79:35:90:32:3d:49:a1:9f:90:
                    de:a5:ed:62:a6:38:58:1d:d9:e4:ef:40:4b:b4:42:
                    20:8c:f7:b2:98:5c:14:f4:41:a4:72:8e:9c:c7:0a:
                    7d:d5:4f:fc:f5:19:20:52:ac:8a:90:f5:93:33:3e:
                    8f:ca:0f:dd:e7:b3:99:8b:60:96:37:35:f0:20:2b:
                    b1:d8:55:bf:8d:8f:9c:f2:7a:6c:35:1f:30:ee:58:
                    07:91:fa:fd:18:04:1d:98:b6:0d:53:27:f8:9c:90:
                    15:a1:f8:ed:6e:ed:29:2e:07:2f:19:70:19:0f:db:
                    ae:6f:1b:10:dc:a9:33:df:73:2f:c8:ff:36:1a:4b:
                    2f:6f:7d:e0:df:a5:76:32:39:4b:75:7a:43:05:eb:
                    f0:cc:f7:96:02:11:62:09:1e:bd:7a:5d:1e:aa:fd:
                    b7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:20:D8:A5:CC:9D:1B:84:08:8C:79:DB:B5:6A:45:64:8F:0F:DB:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/b66e3bc8-0233-351b-be9f-dad47d29f8aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10c:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:47:f8:aa:68:01:47:11:0b:01:da:70:1d:76:20:ea:d6:82:
         61:78:a3:73:22:00:8c:8a:be:1b:7e:61:39:49:e2:bb:31:fb:
         29:bd:6c:61:9c:75:b3:21:f8:6f:61:4a:70:42:b4:08:fa:5a:
         28:a6:d8:fe:d0:de:7a:ee:a2:0b:b9:8a:67:2a:6b:76:a5:e5:
         7f:77:60:36:d7:8a:81:0e:46:31:1a:c6:a4:ac:dc:81:a1:1a:
         70:59:6a:fa:1b:d3:41:ad:af:7c:b0:7c:34:69:8c:7a:30:93:
         5f:fe:af:87:ea:3b:eb:4e:2b:fd:06:0c:d0:39:35:45:d5:0e:
         4a:1e:dd:15:22:76:7d:16:9f:05:98:10:6c:7d:0d:eb:c7:73:
         71:87:70:98:0c:42:1b:8e:62:cd:e0:93:d4:ea:74:5a:ee:fd:
         e0:0c:c7:34:3a:eb:8f:cf:ad:43:f0:af:d4:90:ee:d6:6c:5a:
         20:06:5f:42:a8:eb:55:24:2f:85:72:26:1f:8e:cc:6f:22:89:
         1e:a9:1b:e2:ef:14:ac:15:6c:d3:12:a1:22:ef:77:af:df:51:
         78:0f:a3:65:76:ee:eb:05:fb:cd:31:d3:75:f5:bf:0c:e4:55:
         ff:8f:a1:92:9d:56:16:60:c5:a9:70:5b:c5:2f:78:e0:e7:b4:
         76:52:5b:f1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjpy9jzzBplMGg3rYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl
NTdjMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
ZmM3MjM1NjktOGNlZS00YmFmLTg3MDgtM2I5NjFiYjllMjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSlLXUnFiAmIPxhM+Rbdr6Y/Imzfqlaah0Ox
Wh20XjQzAbAH30y38bO5mo52NvE/ARnQUgVUYsGuBb0y0ewECs7pn5mYhqac6ZYE
hu3xfF1AQ3pUNKc2XGb/Y8SVpC15NZAyPUmhn5Depe1ipjhYHdnk70BLtEIgjPey
mFwU9EGkco6cxwp91U/89RkgUqyKkPWTMz6Pyg/d57OZi2CWNzXwICux2FW/jY+c
8npsNR8w7lgHkfr9GAQdmLYNUyf4nJAVofjtbu0pLgcvGXAZD9uubxsQ3Kkz33Mv
yP82Gksvb33g36V2MjlLdXpDBevwzPeWAhFiCR69el0eqv23PQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKIg2KXMnRuECIx527VqRWSPD9u+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2
NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvYjY2ZTNiYzgtMDIzMy0z
NTFiLWJlOWYtZGFkNDdkMjlmOGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk
Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2
ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2
NWIyNmU1N2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABDHAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMVH+KpoAUcRCwHacB12IOrWgmF4o3MiAIyKvht+YTlJ4rsx+ym9
bGGcdbMh+G9hSnBCtAj6Wiim2P7Q3nruogu5imcqa3al5X93YDbXioEORjEaxqSs
3IGhGnBZavob00Gtr3ywfDRpjHowk1/+r4fqO+tOK/0GDNA5NUXVDkoe3RUidn0W
nwWYEGx9DevHc3GHcJgMQhuOYs3gk9TqdFru/eAMxzQ664/PrUPwr9SQ7tZsWiAG
X0Ko61UkL4VyJh+OzG8iiR6pG+LvFKwVbNMSoSLvd6/fUXgPo2V27usF+80x03X1
vwzkVf+PoZKdVhZgxalwW8UveODntHZSW/E=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:22 2025 by rpki-client