Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/48212ce7-34e1-3cf8-8b85-3b3592a5cf61.roa
File:                     48212ce7-34e1-3cf8-8b85-3b3592a5cf61.roa (raw, json)
Hash identifier:          EtzcUxC1cVcRKBvW+6qvldfKmZMbvrnVDXD612p+stw=
Subject key identifier:   0B:A8:5E:C4:B6:A6:5B:59:AC:03:9D:71:5A:3F:C8:96:D2:25:A1:C9
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849C4D4CCF861834922DE761F6E
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/48212ce7-34e1-3cf8-8b85-3b3592a5cf61.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     1239
IP address blocks:        2001:49f0:d00a::/48 maxlen: 48
                          2001:49f0:d00d::/48 maxlen: 48
                          2001:49f0:d023::/48 maxlen: 48
                          2001:49f0:d0ae::/48 maxlen: 48
                          2001:49f0:d0f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cc:f8:61:83:49:22:de:76:1f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=e8b0f712-d784-4fb5-9d8e-0b4438ed7898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:2d:8f:ef:4c:de:43:f8:94:e3:ba:d5:a2:
                    89:3d:c5:f0:24:e0:e2:e4:f3:6a:92:18:e7:f4:2f:
                    29:da:86:e4:e0:43:26:dc:f3:e6:9d:9a:19:ba:6e:
                    06:97:d4:d0:d0:9d:4a:22:72:86:25:37:c6:2a:fe:
                    6b:d3:c3:8f:31:94:e9:f5:f3:15:2d:9f:7b:7c:01:
                    19:87:a4:49:71:f0:5a:6a:c9:e7:ba:95:43:c8:db:
                    ca:fc:c9:fa:7d:c8:3f:85:c4:54:d9:89:0a:3f:5e:
                    d3:a5:2a:f1:a9:c7:cf:6c:4a:4f:bc:4f:dd:bd:33:
                    52:0c:53:42:9d:98:1b:95:59:4d:57:bf:21:7a:e4:
                    dc:bd:02:4d:91:3d:86:de:c4:c7:44:ee:a3:0b:1c:
                    7e:8d:1a:9b:a8:ab:be:3d:1f:98:45:72:bf:87:96:
                    1b:3b:b7:52:29:48:81:88:0f:fe:10:9e:33:26:4b:
                    45:3e:0f:d3:31:fe:6f:66:d1:3d:9e:0a:71:10:53:
                    fb:92:8e:56:08:bb:d9:fb:89:5f:76:95:47:22:d2:
                    4c:44:4c:12:78:2d:67:34:e7:03:2a:8a:2d:71:94:
                    b2:9c:97:1a:02:9f:26:da:af:a6:6e:6a:3d:e5:53:
                    cb:72:3d:02:86:15:f2:10:ad:0b:28:25:19:14:9d:
                    24:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:5E:C4:B6:A6:5B:59:AC:03:9D:71:5A:3F:C8:96:D2:25:A1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/48212ce7-34e1-3cf8-8b85-3b3592a5cf61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d00a::/48
                  2001:49f0:d00d::/48
                  2001:49f0:d023::/48
                  2001:49f0:d0ae::/48
                  2001:49f0:d0f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:76:de:90:d7:86:41:77:d4:2e:72:23:c2:6c:fe:89:5f:84:
         e5:36:dc:54:18:2b:15:e8:30:5a:57:5b:09:4a:74:a8:89:1e:
         2f:7e:51:cc:8f:33:07:6a:a3:ea:7c:94:85:41:37:96:26:6c:
         00:1b:e1:8c:da:fd:0b:12:f8:ca:c0:74:33:44:90:8e:09:ee:
         a2:87:2c:a6:ad:19:6d:c1:5d:59:f3:40:ba:c7:3e:10:fb:bc:
         f1:3c:4f:37:6d:d6:39:1a:38:5c:09:41:31:7f:8c:b1:03:1d:
         a9:bf:ae:69:1f:df:c6:de:37:84:6d:55:1a:9e:e4:e0:28:e3:
         41:c7:14:35:85:b3:e4:05:f1:61:1c:8a:eb:d6:9c:69:f2:cf:
         0c:77:f1:ac:15:58:71:4a:f3:39:f3:d7:7f:60:83:58:36:95:
         f5:17:74:a3:ee:59:87:e6:da:b8:9f:0d:1f:c6:93:b0:12:ef:
         0b:48:ef:2e:8c:00:af:df:e8:23:5d:37:d0:2e:06:0d:f9:13:
         50:2e:57:c0:e0:29:d2:96:a4:d0:96:87:e2:4d:d0:e1:9a:fd:
         fc:28:0e:02:2a:cb:04:19:7c:33:63:c2:01:2e:99:ef:44:35:
         c9:6a:b6:23:a3:12:5f:a5:ad:37:6f:03:0d:45:7e:3e:34:39:
         b7:0a:20:5a
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEnE1Mz4YYNJIt52H24wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk
ZThiMGY3MTItZDc4NC00ZmI1LTlkOGUtMGI0NDM4ZWQ3ODk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFUtj+9M3kP4lOO61aKJPcXwJODi5PNqkhjn
9C8p2obk4EMm3PPmnZoZum4Gl9TQ0J1KInKGJTfGKv5r08OPMZTp9fMVLZ97fAEZ
h6RJcfBaasnnupVDyNvK/Mn6fcg/hcRU2YkKP17TpSrxqcfPbEpPvE/dvTNSDFNC
nZgblVlNV78heuTcvQJNkT2G3sTHRO6jCxx+jRqbqKu+PR+YRXK/h5YbO7dSKUiB
iA/+EJ4zJktFPg/TMf5vZtE9ngpxEFP7ko5WCLvZ+4lfdpVHItJMREwSeC1nNOcD
KootcZSynJcaAp8m2q+mbmo95VPLcj0ChhXyEK0LKCUZFJ0k8QIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFAuoXsS2pltZrAOdcVo/yJbSJaHJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNDgyMTJjZTctMzRlMS0z
Y2Y4LThiODUtM2IzNTkyYTVjZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAIAFJ8NAK
AwcAIAFJ8NANAwcAIAFJ8NAjAwcAIAFJ8NCuAwcAIAFJ8ND2MFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEN2
3pDXhkF31C5yI8Js/olfhOU23FQYKxXoMFpXWwlKdKiJHi9+UcyPMwdqo+p8lIVB
N5YmbAAb4Yza/QsS+MrAdDNEkI4J7qKHLKatGW3BXVnzQLrHPhD7vPE8Tzdt1jka
OFwJQTF/jLEDHam/rmkf38beN4RtVRqe5OAo40HHFDWFs+QF8WEciuvWnGnyzwx3
8awVWHFK8znz139gg1g2lfUXdKPuWYfm2rifDR/Gk7AS7wtI7y6MAK/f6CNdN9Au
Bg35E1AuV8DgKdKWpNCWh+JN0OGa/fwoDgIqywQZfDNjwgEume9ENclqtiOjEl+l
rTdvAw1Ffj40ObcKIFo=
-----END CERTIFICATE-----
Generated at Tue Jun 3 03:38:53 2025 by rpki-client