Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef414330-5dc5-3905-8f06-47b953191411.roa
File:                     ef414330-5dc5-3905-8f06-47b953191411.roa (raw, json)
Hash identifier:          tlqEnJ/1b6r8lLOxfUuxDYlsNJkUP0dYkvIH/KW8+QQ=
Subject key identifier:   BB:75:C1:2F:45:70:E6:E6:50:C8:09:CC:DF:6C:11:EA:85:BC:1A:29
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849D85F8D5AD729BB26C5F4FFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef414330-5dc5-3905-8f06-47b953191411.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     33905
IP address blocks:        2600:1480:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:8d:5a:d7:29:bb:26:c5:f4:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=54df481a-58f9-4317-a4e0-7d41557da7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:e1:ee:87:45:1c:8f:c9:7c:0c:94:64:9e:
                    cc:19:ad:4b:10:d9:73:ce:80:68:4d:53:c5:cd:17:
                    bc:be:e3:d3:c4:dc:7a:1f:8f:fe:ba:5c:9c:31:ce:
                    44:c0:7a:91:4b:a2:36:c5:26:cc:03:24:e2:80:ff:
                    a7:93:51:81:b6:76:1a:cf:bb:a8:13:4a:14:85:51:
                    9d:84:64:a3:2d:1e:8c:41:46:ff:a4:66:5e:0b:6c:
                    e6:35:6c:88:08:e0:8d:a7:89:4b:5c:e0:1a:05:db:
                    e6:4b:d3:06:d1:df:7d:54:2b:59:0b:69:5f:2f:26:
                    79:06:24:32:dd:6b:e5:d8:cc:ac:83:d5:60:25:31:
                    55:13:b3:d2:ae:65:09:a0:4a:9a:cb:ad:08:b8:a1:
                    b3:1d:97:73:75:82:d0:5e:a4:e1:a9:1f:1d:46:b7:
                    15:f8:38:aa:f0:69:c7:db:2d:ca:f6:f5:49:1a:de:
                    32:0d:63:93:77:ae:3d:42:36:12:83:d9:92:60:f4:
                    e0:ca:d4:ba:71:52:d5:77:1e:53:a4:3d:0c:8b:5d:
                    c6:9a:0d:0d:24:75:93:d3:4c:0b:6f:69:ae:b0:c5:
                    c8:06:51:3f:56:2a:b6:7e:7f:6a:4f:61:f5:09:da:
                    f9:f7:31:b5:e2:0c:14:35:dc:2f:f4:89:2b:fe:ce:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:75:C1:2F:45:70:E6:E6:50:C8:09:CC:DF:6C:11:EA:85:BC:1A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef414330-5dc5-3905-8f06-47b953191411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:63:0b:88:63:aa:ac:44:66:ae:47:8b:e1:26:1f:7a:93:
         ee:6a:09:56:32:cb:57:db:a6:00:bf:33:2b:a4:51:e2:20:4d:
         0c:06:d0:78:31:8e:04:12:e3:4e:67:51:5d:65:e4:d0:13:e3:
         7a:08:73:ac:9a:59:b8:51:d0:ae:48:b8:85:ec:95:dc:86:11:
         e3:d4:43:28:49:43:65:d6:43:28:c2:a6:5d:db:f0:05:ff:83:
         2d:1d:bd:f1:2f:ef:82:38:8c:ae:49:5b:4e:a0:7c:fe:27:b7:
         f7:71:9a:12:72:30:43:c7:f7:f5:22:4a:f5:5e:38:a1:cb:82:
         9f:ba:9d:63:ef:5f:db:a1:1b:d0:70:fc:1e:28:4a:9c:57:9e:
         a1:a4:70:37:17:d9:db:20:74:18:d7:ba:d0:6c:c2:fc:c9:a6:
         fa:53:bd:de:c7:83:f7:55:ad:09:9d:5a:32:6a:61:63:6b:cf:
         d1:70:53:08:6e:18:e0:66:67:45:1f:7d:cd:c9:56:29:cf:e0:
         05:7c:4f:bd:69:5a:02:9a:1f:31:fe:75:bd:d8:1c:48:66:8b:
         e3:d4:f7:c2:98:5c:d1:c6:39:d9:02:0f:6a:ca:62:6f:b5:38:
         62:d2:87:3a:be:4c:a8:1a:2a:0b:e8:25:18:02:a8:2e:33:7f:
         e0:59:5d:08
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnYX41a1ym7JsX0/8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
NTRkZjQ4MWEtNThmOS00MzE3LWE0ZTAtN2Q0MTU1N2RhN2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohrh7odFHI/JfAyUZJ7MGa1LENlzzoBoTVPF
zRe8vuPTxNx6H4/+ulycMc5EwHqRS6I2xSbMAyTigP+nk1GBtnYaz7uoE0oUhVGd
hGSjLR6MQUb/pGZeC2zmNWyICOCNp4lLXOAaBdvmS9MG0d99VCtZC2lfLyZ5BiQy
3Wvl2Mysg9VgJTFVE7PSrmUJoEqay60IuKGzHZdzdYLQXqThqR8dRrcV+Diq8GnH
2y3K9vVJGt4yDWOTd649QjYSg9mSYPTgytS6cVLVdx5TpD0Mi13Gmg0NJHWT00wL
b2musMXIBlE/Viq2fn9qT2H1Cdr59zG14gwUNdwv9Ikr/s6Z9QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLt1wS9FcObmUMgJzN9sEeqFvBopMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWY0MTQzMzAtNWRjNS0z
OTA1LThmMDYtNDdiOTUzMTkxNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAUgGAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVb1jC4hjqqxEZq5Hi+EmH3qT7moJVjLLV9umAL8zK6RR4iBNDAbQ
eDGOBBLjTmdRXWXk0BPjeghzrJpZuFHQrki4heyV3IYR49RDKElDZdZDKMKmXdvw
Bf+DLR298S/vgjiMrklbTqB8/ie393GaEnIwQ8f39SJK9V44ocuCn7qdY+9f26Eb
0HD8HihKnFeeoaRwNxfZ2yB0GNe60GzC/Mmm+lO93seD91WtCZ1aMmphY2vP0XBT
CG4Y4GZnRR99zclWKc/gBXxPvWlaApofMf51vdgcSGaL49T3wphc0cY52QIPaspi
b7U4YtKHOr5MqBoqC+glGAKoLjN/4FldCA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:24 2025 by rpki-client