Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/412889ef-4fb1-3cc7-a062-92546b1ab937.roa
File:                     412889ef-4fb1-3cc7-a062-92546b1ab937.roa (raw, json)
Hash identifier:          EDG9/d490b+Zgh1n035jdX/2nux61T1b8eLrnPkPcMc=
Subject key identifier:   76:FE:55:E0:2F:00:25:CC:6A:05:A6:A0:D6:07:E8:FA:B3:F9:BE:B3
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285849F17FC203BB82559791CCA600
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/412889ef-4fb1-3cc7-a062-92546b1ab937.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     9009
IP address blocks:        2607:6b80:57::/48 maxlen: 48
                          2607:6b80:5b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c2:03:bb:82:55:97:91:cc:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=56c47452-88e6-4fb3-ae0b-4bebac5d6851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:85:bb:0e:96:ca:c8:fe:b6:2b:72:37:5d:
                    e2:83:fd:0c:b5:9f:50:b9:12:39:1f:ad:f0:0e:19:
                    c1:d6:ec:17:77:58:77:46:1c:d7:ab:0a:45:3d:25:
                    78:ae:af:2e:a3:96:bc:f7:a8:90:63:d0:c8:e5:5a:
                    36:85:fa:b0:b1:1e:40:0f:1f:86:50:a1:01:b9:c6:
                    c9:43:4b:4f:84:c9:de:62:dd:97:84:58:31:9b:e6:
                    43:48:45:79:71:ed:50:f9:97:cc:e1:cf:39:bd:74:
                    18:18:92:77:fe:cc:b4:24:3a:f8:c0:9c:29:a1:a4:
                    a3:fc:4e:7b:32:0c:8d:5f:e5:5b:83:6c:b5:4d:82:
                    34:a0:79:b0:09:01:48:c8:9f:74:92:a4:d3:76:04:
                    d2:cf:7b:78:e4:88:4a:56:f8:85:86:e9:e8:a2:76:
                    4d:81:64:84:9f:dd:6d:3a:75:a8:72:34:1b:01:d8:
                    24:0b:aa:8c:4b:c7:97:03:28:cc:8c:3d:b6:6d:cb:
                    ad:ab:64:ed:a9:83:f8:45:c6:fd:1c:a4:96:a8:c8:
                    32:9b:f1:98:06:98:8f:bf:32:55:13:18:42:22:26:
                    b5:57:08:a3:06:3f:e7:af:c5:84:9e:04:9b:29:20:
                    ca:9f:d5:43:52:b3:5c:04:27:f7:01:44:c7:e7:4c:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FE:55:E0:2F:00:25:CC:6A:05:A6:A0:D6:07:E8:FA:B3:F9:BE:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/412889ef-4fb1-3cc7-a062-92546b1ab937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:57::/48
                  2607:6b80:5b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:03:f9:69:79:fb:85:86:70:b3:f9:59:8f:fa:dd:e6:0e:1b:
         50:6d:98:b9:2b:90:df:ee:f3:73:68:95:ef:a6:b4:63:86:85:
         90:eb:7a:b6:a6:d8:13:f5:2b:a1:4d:16:4b:0b:44:d9:3e:9a:
         38:ab:07:ca:81:b5:28:17:c6:61:75:91:6a:66:e0:09:73:1f:
         fe:57:ce:27:5f:51:ca:03:48:10:8d:2c:de:e3:22:b6:f5:72:
         4b:57:32:d0:57:ce:4d:d3:66:2e:ff:d8:57:24:a4:1d:d3:c8:
         e5:20:07:cf:aa:40:3b:ce:a6:91:a6:01:f9:69:52:4c:e4:70:
         f4:0c:9d:a1:59:ff:ba:be:e5:e8:94:51:cf:e8:bc:ea:f1:a1:
         f0:4b:22:70:4a:f7:bb:76:64:b9:7c:d6:6c:7a:a9:71:be:88:
         fe:0d:23:6e:4e:d3:71:aa:1b:ae:ed:b6:6a:16:9b:cf:6f:2c:
         99:2a:bd:60:5f:29:d0:84:6d:aa:0a:09:72:cb:55:b6:ca:84:
         ea:ed:05:a6:80:d3:3a:e5:70:6c:e4:57:c0:3b:a0:f5:fb:71:
         07:7a:31:f1:97:22:22:f5:2b:37:d3:65:40:08:6f:41:3f:46:
         02:e8:52:4d:56:c4:1d:0e:c5:3d:09:42:01:40:4a:1b:3f:11:
         52:6b:d6:7f
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEnxf8IDu4JVl5HMpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
NTZjNDc0NTItODhlNi00ZmIzLWFlMGItNGJlYmFjNWQ2ODUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqCFuw6Wysj+tityN13ig/0MtZ9QuRI5H63w
DhnB1uwXd1h3RhzXqwpFPSV4rq8uo5a896iQY9DI5Vo2hfqwsR5ADx+GUKEBucbJ
Q0tPhMneYt2XhFgxm+ZDSEV5ce1Q+ZfM4c85vXQYGJJ3/sy0JDr4wJwpoaSj/E57
MgyNX+Vbg2y1TYI0oHmwCQFIyJ90kqTTdgTSz3t45IhKVviFhunoonZNgWSEn91t
OnWocjQbAdgkC6qMS8eXAyjMjD22bcutq2TtqYP4Rcb9HKSWqMgym/GYBpiPvzJV
ExhCIia1VwijBj/nr8WEngSbKSDKn9VDUrNcBCf3AUTH50ygcQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFHb+VeAvACXMagWmoNYH6Pqz+b6zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvNDEyODg5ZWYtNGZiMS0z
Y2M3LWEwNjItOTI1NDZiMWFiOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgdrgABX
AwcAJgdrgABbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAB8D+Wl5+4WGcLP5WY/63eYOG1BtmLkrkN/u83No
le+mtGOGhZDreram2BP1K6FNFksLRNk+mjirB8qBtSgXxmF1kWpm4AlzH/5Xzidf
UcoDSBCNLN7jIrb1cktXMtBXzk3TZi7/2FckpB3TyOUgB8+qQDvOppGmAflpUkzk
cPQMnaFZ/7q+5eiUUc/ovOrxofBLInBK97t2ZLl81mx6qXG+iP4NI25O03GqG67t
tmoWm89vLJkqvWBfKdCEbaoKCXLLVbbKhOrtBaaA0zrlcGzkV8A7oPX7cQd6MfGX
IiL1KzfTZUAIb0E/RgLoUk1WxB0OxT0JQgFAShs/EVJr1n8=
-----END CERTIFICATE-----
Generated at Tue Jun 3 10:11:46 2025 by rpki-client