Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/6269a69e-bf5b-3e8d-803e-453361f16e27.roa
File:                     6269a69e-bf5b-3e8d-803e-453361f16e27.roa (raw, json)
Hash identifier:          XYpulEpEMthcVoabKcYdGkiyigNWXsIaVnB6/fBvJC8=
Subject key identifier:   DF:62:46:9D:EB:E8:60:2C:12:66:2B:6A:42:80:78:92:0F:E3:E7:69
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F432858482BF555DE30C6B809C9B17800
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/6269a69e-bf5b-3e8d-803e-453361f16e27.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2605:84c0:54::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:55:de:30:c6:b8:09:c9:b1:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=d57b3dc2-49cf-4123-b727-6e02f2466240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:81:00:ca:a4:ad:75:cc:d0:2b:25:d9:84:
                    de:66:8f:dc:3e:c3:32:57:20:b0:9b:b6:7b:de:45:
                    7f:9a:c6:5e:bd:5d:5c:79:ee:5d:af:29:bf:ba:dc:
                    3c:ca:7e:11:3e:28:10:78:fc:bd:88:83:20:e0:88:
                    f6:83:c5:48:11:ec:7b:28:5e:77:f2:c2:07:29:3c:
                    06:7f:16:21:1e:34:c8:ab:d8:c0:6a:3a:2c:07:1c:
                    d8:44:c1:15:81:85:77:23:ad:c4:56:e7:bd:0c:b6:
                    7d:74:d3:9e:ad:54:78:26:8a:9e:1e:7e:d1:01:30:
                    3b:26:56:f2:c8:e1:a7:e7:5a:55:52:ce:ac:7a:a9:
                    01:d5:e3:b6:a7:3b:7e:6c:e1:15:90:9d:c1:9a:89:
                    c4:3f:3a:2f:34:d5:40:3a:a2:ac:0d:b1:85:a0:f8:
                    c5:6e:97:db:27:50:d8:13:ec:51:05:e2:f1:50:24:
                    be:4b:a3:0b:c5:12:74:67:3e:29:df:0e:24:31:e2:
                    96:03:64:40:eb:11:9b:8a:f4:05:5c:6b:0b:57:f5:
                    1c:65:f6:16:54:8a:b9:95:1a:bb:8a:53:b0:31:c0:
                    55:bc:0b:5f:f9:24:69:8b:cb:d8:7b:0a:b7:46:8d:
                    b4:b3:1e:28:47:57:82:5c:03:0a:0a:bd:85:71:a0:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:62:46:9D:EB:E8:60:2C:12:66:2B:6A:42:80:78:92:0F:E3:E7:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/6269a69e-bf5b-3e8d-803e-453361f16e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:68:1c:37:d3:41:17:8d:17:90:bb:b3:0f:44:09:cb:32:
         c2:88:a3:f9:61:7c:56:43:a6:dd:f8:e6:eb:e2:d8:10:81:de:
         1f:27:b1:14:d1:52:9f:74:d1:81:88:4e:c8:b8:1a:d0:70:ce:
         56:b1:0c:38:02:91:2f:56:d6:9b:7b:92:8b:10:c8:5d:eb:fe:
         5a:88:af:ba:4a:02:e6:4b:bd:e0:b1:be:24:e1:2a:28:2c:24:
         2f:b3:60:ca:b9:c5:25:14:d5:60:56:44:0c:76:41:a7:cb:e0:
         ea:d7:50:30:32:64:57:30:a1:5c:6e:1f:c7:29:64:e8:48:08:
         79:77:36:86:22:9c:72:9c:ca:2e:89:a4:b6:f9:c7:d3:7d:25:
         7a:d7:ef:1b:19:35:a5:12:1f:38:1b:74:6b:89:1c:ae:04:69:
         18:fa:1f:4a:cc:d9:c6:63:6c:58:84:60:9d:01:48:47:55:9d:
         de:59:52:cc:54:24:42:dc:cc:b3:f2:77:08:e2:e4:a0:94:07:
         5f:c3:2f:bd:67:39:f5:3d:c6:5a:f7:32:0a:36:5d:57:bd:62:
         d4:cf:91:64:bd:70:fb:55:82:3e:3b:14:0f:a6:ee:bc:4e:0d:
         fb:26:57:c1:da:90:f4:6c:ce:ce:16:83:35:c9:84:d8:9b:b3:
         bd:97:fb:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgr9VXeMMa4CcmxeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3
MDBjMB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDU3YjNkYzItNDljZi00MTIzLWI3MjctNmUwMmYyNDY2MjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfmBAMqkrXXM0Csl2YTeZo/cPsMyVyCwm7Z7
3kV/msZevV1cee5drym/utw8yn4RPigQePy9iIMg4Ij2g8VIEex7KF538sIHKTwG
fxYhHjTIq9jAajosBxzYRMEVgYV3I63EVue9DLZ9dNOerVR4JoqeHn7RATA7Jlby
yOGn51pVUs6seqkB1eO2pzt+bOEVkJ3BmonEPzovNNVAOqKsDbGFoPjFbpfbJ1DY
E+xRBeLxUCS+S6MLxRJ0Zz4p3w4kMeKWA2RA6xGbivQFXGsLV/UcZfYWVIq5lRq7
ilOwMcBVvAtf+SRpi8vYewq3Ro20sx4oR1eCXAMKCr2FcaDExQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN9iRp3r6GAsEmYrakKAeJIP4+dpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3
MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvNjI2OWE2OWUtYmY1Yi0z
ZThkLTgwM2UtNDUzMzYxZjE2ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0
MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2
NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy
N2E5NjcwMGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWEwABU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJxKaBw300EXjReQu7MPRAnLMsKIo/lhfFZDpt345uvi2BCB3h8n
sRTRUp900YGITsi4GtBwzlaxDDgCkS9W1pt7kosQyF3r/lqIr7pKAuZLveCxviTh
KigsJC+zYMq5xSUU1WBWRAx2QafL4OrXUDAyZFcwoVxuH8cpZOhICHl3NoYinHKc
yi6JpLb5x9N9JXrX7xsZNaUSHzgbdGuJHK4EaRj6H0rM2cZjbFiEYJ0BSEdVnd5Z
UsxUJELczLPydwji5KCUB1/DL71nOfU9xlr3Mgo2XVe9YtTPkWS9cPtVgj47FA+m
7rxODfsmV8HakPRszs4WgzXJhNibs72X+3M=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:07 2025 by rpki-client