Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f690db-aed8-369f-939a-74e9d63e0142.roa
File:                     57f690db-aed8-369f-939a-74e9d63e0142.roa (raw, json)
Hash identifier:          5D28YbkR+n0gC8ZenzGkdBTcAB3tYmLCzBdqB4iL+i4=
Subject key identifier:   A9:6B:AB:78:56:2E:F4:87:41:CB:42:99:1C:AC:C7:F8:19:C8:59:77
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849F01A7FB5573B52DC7759B000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f690db-aed8-369f-939a-74e9d63e0142.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     20940
IP address blocks:        2600:1410::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:7f:b5:57:3b:52:dc:77:59:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=d55ca7a1-7f52-4635-a883-36437019765f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:f5:98:84:d9:02:a3:ff:e7:8c:bc:c0:49:
                    71:d9:ef:5e:c7:8c:da:1c:78:fc:ba:5d:1e:f5:c0:
                    c7:33:21:d7:7f:dd:d6:e2:7e:e6:7b:4f:2a:d0:2f:
                    3f:b7:5a:e6:c6:d4:86:e1:6d:e4:93:63:98:63:cb:
                    6b:38:57:6a:2b:04:d8:fc:0f:1f:31:f8:92:4d:d4:
                    6d:5d:51:40:63:e6:3c:83:31:6e:61:22:93:cd:47:
                    99:ac:00:1d:c5:3a:8a:ff:41:81:9a:b7:07:ca:f3:
                    27:4c:cb:52:b0:39:e5:b1:03:b9:61:47:8a:e4:ac:
                    12:de:f1:dc:e5:7c:78:7c:95:d3:11:8f:24:c9:d0:
                    a2:b8:e5:11:fd:3e:37:9d:4b:b6:4c:3e:63:af:1a:
                    74:50:bb:15:a1:cf:14:45:0c:33:e8:f8:ef:df:a1:
                    c3:34:7c:aa:b4:9a:d2:af:96:6b:f4:e8:c6:b8:34:
                    02:00:9c:10:f0:4d:e4:ba:64:93:be:b3:d6:05:5f:
                    87:7b:f4:1a:da:21:36:bb:cc:d9:ac:25:6d:56:3c:
                    62:ac:2d:31:e0:c7:b0:d3:07:15:15:06:30:36:59:
                    d3:e3:fd:02:1d:37:19:29:5f:65:bb:54:c0:16:8a:
                    ce:23:b6:bb:d6:39:1a:27:69:12:68:0d:20:8d:a1:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6B:AB:78:56:2E:F4:87:41:CB:42:99:1C:AC:C7:F8:19:C8:59:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f690db-aed8-369f-939a-74e9d63e0142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1410::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:ec:c3:72:bc:e5:ec:76:c1:26:27:78:a3:6e:81:e5:9a:
         1b:4a:5a:db:76:51:6e:8a:9a:5c:89:71:ec:8a:71:58:a4:d9:
         02:cc:d9:09:c5:89:d6:d6:9a:16:60:e9:b5:67:5c:70:ba:c9:
         17:05:7f:44:c0:63:6b:9e:19:17:41:44:3e:10:c0:a6:51:aa:
         8d:d0:62:f9:38:64:38:e7:b4:b1:bf:a2:7f:98:db:81:1b:f8:
         c5:72:e4:20:bc:02:ad:2b:63:81:bf:3d:4f:91:9e:13:c9:c4:
         77:5a:4e:d1:1f:b9:f9:18:94:4e:0e:64:e3:b2:6b:52:f0:83:
         41:bd:c6:de:98:11:bb:1b:4e:88:87:84:bd:7f:de:98:b0:b3:
         90:a6:88:35:b8:50:b5:62:0b:14:83:62:7d:e9:42:cf:ea:ff:
         4c:2e:2d:19:33:59:75:71:90:0b:f2:ba:88:fb:78:dc:78:fc:
         79:62:bb:9e:2d:4f:7e:c8:b2:8b:48:80:f0:ba:0d:7f:29:ad:
         58:8a:1c:6b:e9:37:fa:3b:fd:3f:03:2e:32:28:df:61:1f:fb:
         07:47:a6:d9:a9:fc:5f:21:8a:f6:ca:c1:03:bf:4b:8e:49:15:
         41:66:fe:16:56:24:1f:b0:d2:c8:3f:19:81:ea:dd:d6:79:66:
         74:9d:ca:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnwGn+1VztS3HdZsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk
ZDU1Y2E3YTEtN2Y1Mi00NjM1LWE4ODMtMzY0MzcwMTk3NjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAj1mITZAqP/54y8wElx2e9ex4zaHHj8ul0e
9cDHMyHXf93W4n7me08q0C8/t1rmxtSG4W3kk2OYY8trOFdqKwTY/A8fMfiSTdRt
XVFAY+Y8gzFuYSKTzUeZrAAdxTqK/0GBmrcHyvMnTMtSsDnlsQO5YUeK5KwS3vHc
5Xx4fJXTEY8kydCiuOUR/T43nUu2TD5jrxp0ULsVoc8URQwz6Pjv36HDNHyqtJrS
r5Zr9OjGuDQCAJwQ8E3kumSTvrPWBV+He/Qa2iE2u8zZrCVtVjxirC0x4Mew0wcV
FQYwNlnT4/0CHTcZKV9lu1TAForOI7a71jkaJ2kSaA0gjaFFYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKlrq3hWLvSHQctCmRysx/gZyFl3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTdmNjkwZGItYWVkOC0z
NjlmLTkzOWEtNzRlOWQ2M2UwMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUEAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAED47MNyvOXsdsEmJ3ijboHlmhtKWtt2UW6KmlyJceyKcVik2QLM
2QnFidbWmhZg6bVnXHC6yRcFf0TAY2ueGRdBRD4QwKZRqo3QYvk4ZDjntLG/on+Y
24Eb+MVy5CC8Aq0rY4G/PU+RnhPJxHdaTtEfufkYlE4OZOOya1Lwg0G9xt6YEbsb
ToiHhL1/3piws5CmiDW4ULViCxSDYn3pQs/q/0wuLRkzWXVxkAvyuoj7eNx4/Hli
u54tT37IsotIgPC6DX8prViKHGvpN/o7/T8DLjIo32Ef+wdHptmp/F8hivbKwQO/
S45JFUFm/hZWJB+w0sg/GYHq3dZ5ZnSdyjM=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:05 2025 by rpki-client