Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ef1b3344-c905-30cf-aa32-014affac7e18.roa
File:                     ef1b3344-c905-30cf-aa32-014affac7e18.roa (raw, json)
Hash identifier:          Ugh0dCRxNQ7xEKfCHGWS+STdYjW28un/X8SW848zbxU=
Subject key identifier:   5C:6E:6A:64:7B:54:AE:4B:38:81:BC:D4:92:AA:0E:C1:27:1F:7B:0D
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F43285848D2113CAFEAFFA274919E6F80
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ef1b3344-c905-30cf-aa32-014affac7e18.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     55195
IP address blocks:        2620:10a:80e3::/48 maxlen: 48
                          2620:10a:80e4::/48 maxlen: 48
                          2620:10a:80e6::/48 maxlen: 48
                          2620:10a:80e8::/48 maxlen: 48
                          2620:10a:80e9::/48 maxlen: 48
                          2620:10a:80ea::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:3c:af:ea:ff:a2:74:91:9e:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=3dea7cc5-1de1-48a3-9844-88cbe144ff66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:cf:82:fa:64:de:ce:70:19:35:e8:9f:7b:
                    11:b9:6f:a9:e1:5b:33:41:76:48:04:89:11:81:1a:
                    c0:4b:ca:14:40:8c:3b:5c:8d:e6:9a:23:c2:5f:74:
                    2a:fd:67:99:33:95:48:45:47:db:7f:c3:b5:fe:89:
                    c7:47:ea:2d:4c:87:84:d7:60:d3:44:ca:f2:aa:be:
                    71:bf:8e:c5:12:20:5b:cd:d0:04:b1:41:7d:2c:e1:
                    f0:96:4c:29:1b:0f:80:de:18:6e:a1:ae:93:24:12:
                    4c:79:c9:bc:67:d6:37:c2:9b:07:80:f6:71:82:65:
                    fe:1f:cb:26:c9:c2:d0:8d:66:03:ef:fe:43:d1:e4:
                    ab:9e:d3:3d:e8:7d:3e:63:97:d2:63:ea:bb:f2:44:
                    d1:34:c8:c4:a7:c6:68:e1:e2:da:7a:9f:71:a6:3a:
                    a6:f2:eb:e2:77:8e:0d:6a:4b:dd:26:99:3a:31:46:
                    05:ef:79:ac:79:57:12:ca:83:57:f3:9f:31:fe:d8:
                    7a:0e:a0:11:c0:ff:01:a2:25:42:1e:63:1f:5f:55:
                    fa:58:8e:52:1b:ad:bc:eb:04:35:34:54:6b:97:ec:
                    0e:52:dd:c1:a8:c0:59:da:4b:8e:37:03:60:98:19:
                    17:50:22:d9:7c:fd:c2:02:89:08:40:1b:03:22:98:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6E:6A:64:7B:54:AE:4B:38:81:BC:D4:92:AA:0E:C1:27:1F:7B:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ef1b3344-c905-30cf-aa32-014affac7e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80e3::-2620:10a:80e4:ffff:ffff:ffff:ffff:ffff
                  2620:10a:80e6::/48
                  2620:10a:80e8::-2620:10a:80ea:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:95:4b:94:f0:3f:a8:79:37:5f:f3:68:8b:f0:97:f6:89:d6:
         11:e6:94:8c:72:ec:bc:f6:91:e7:bf:bb:d4:3d:d8:79:5a:48:
         1e:c4:c6:98:ca:3b:cc:10:50:8d:3d:b5:88:41:9f:41:7b:8a:
         d1:a2:58:d9:e1:2d:f6:2a:11:5e:cc:f8:10:e6:80:f2:45:58:
         ac:c3:55:47:39:38:a8:32:23:ed:c1:d5:2b:f0:ad:cc:81:a1:
         a7:c0:1b:b8:56:57:c1:93:fd:48:b4:4e:d0:29:fb:6c:ab:14:
         b4:0f:23:8a:3d:2f:31:ac:a6:c5:e8:eb:6d:99:29:36:be:fe:
         66:97:e6:7c:ca:9c:eb:0c:ac:cc:5d:6f:55:3d:e5:94:36:99:
         48:06:8c:a8:dd:b4:99:fd:31:b9:3c:7e:7a:d3:70:de:97:da:
         9e:82:95:9f:fd:4a:32:25:fb:2e:cf:b2:fe:4e:b5:73:aa:c5:
         77:7c:36:71:16:a6:50:03:b0:9b:f6:e9:46:e1:e3:8c:b7:e0:
         fd:c4:eb:89:45:b5:cd:e6:9d:46:f3:1a:4a:d4:f0:37:01:3a:
         d8:3c:d7:db:88:09:38:40:80:35:8e:17:40:df:92:35:c0:8a:
         8f:47:e0:65:c2:9f:2f:b1:de:66:34:7d:33:4b:b3:d8:c9:f5:
         19:df:5d:58
-----BEGIN CERTIFICATE-----
MIIGbjCCBVagAwIBAgIUAQ0Mn0MoWEjSETyv6v+idJGeb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx
OGU4MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
M2RlYTdjYzUtMWRlMS00OGEzLTk4NDQtODhjYmUxNDRmZjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvnPgvpk3s5wGTXon3sRuW+p4VszQXZIBIkR
gRrAS8oUQIw7XI3mmiPCX3Qq/WeZM5VIRUfbf8O1/onHR+otTIeE12DTRMryqr5x
v47FEiBbzdAEsUF9LOHwlkwpGw+A3hhuoa6TJBJMecm8Z9Y3wpsHgPZxgmX+H8sm
ycLQjWYD7/5D0eSrntM96H0+Y5fSY+q78kTRNMjEp8Zo4eLaep9xpjqm8uvid44N
akvdJpk6MUYF73mseVcSyoNX858x/th6DqARwP8BoiVCHmMfX1X6WI5SG6286wQ1
NFRrl+wOUt3BqMBZ2kuONwNgmBkXUCLZfP3CAokIQBsDIphTdwIDAQABo4IDgDCC
A3wwHQYDVR0OBBYEFFxuamR7VK5LOIG81JKqDsEnH3sNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2
MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvZWYxYjMzNDQtYzkwNS0z
MGNmLWFhMzItMDE0YWZmYWM3ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2
MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi
MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5
NzZhYjE4ZTguY2VyMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAAjAxMBIDBwAmIAEK
gOMDBwAmIAEKgOQDBwAmIAEKgOYwEgMHAyYgAQqA6AMHACYgAQqA6jBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQASlUuU8D+oeTdf82iL8Jf2idYR5pSMcuy89pHnv7vUPdh5WkgexMaYyjvMEFCN
PbWIQZ9Be4rRoljZ4S32KhFezPgQ5oDyRVisw1VHOTioMiPtwdUr8K3MgaGnwBu4
VlfBk/1ItE7QKftsqxS0DyOKPS8xrKbF6OttmSk2vv5ml+Z8ypzrDKzMXW9VPeWU
NplIBoyo3bSZ/TG5PH5603Del9qegpWf/UoyJfsuz7L+TrVzqsV3fDZxFqZQA7Cb
9ulG4eOMt+D9xOuJRbXN5p1G8xpK1PA3ATrYPNfbiAk4QIA1jhdA35I1wIqPR+Bl
wp8vsd5mNH0zS7PYyfUZ311Y
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:40:11 2025 by rpki-client