Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18298c09-4143-378c-ac9b-ee619422d41d.roa
File:                     18298c09-4143-378c-ac9b-ee619422d41d.roa (raw, json)
Hash identifier:          JSiwLeteMVBdl33oOw60w3fprjVi452tRlPbFxeuNXw=
Subject key identifier:   5E:7B:29:14:8B:C2:1C:39:3D:DC:2B:5B:C2:CD:9C:84:4C:E4:EB:AB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584901952E3734AB7538D990FF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18298c09-4143-378c-ac9b-ee619422d41d.roa
Signing time:             Wed 26 Feb 2025 02:30:13 +0000
ROA not before:           Wed 26 Feb 2025 02:30:13 +0000
ROA not after:            Tue 27 May 2025 01:30:13 +0000
asID:                     4128
IP address blocks:        2001:470:3f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:01:95:2e:37:34:ab:75:38:d9:90:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 26 02:30:13 2025 GMT
            Not After : May 27 01:30:13 2025 GMT
        Subject: CN=b11abe0e-d8ef-43a1-bb77-474c82951b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:f2:b4:f8:1a:a5:54:8d:95:95:31:3b:a9:
                    b9:b5:31:fc:f8:66:c0:56:46:55:24:42:9c:ff:bf:
                    c8:b3:ca:91:58:c0:8f:47:7a:98:88:7e:e6:cc:2e:
                    be:b4:0b:d2:14:c0:3d:53:99:8b:92:f1:a4:99:91:
                    75:2a:f1:54:0a:33:91:9d:f8:71:bb:3c:f6:fc:7b:
                    07:07:41:a6:fa:d8:a4:ab:6a:cb:c8:33:58:7c:90:
                    f1:11:f1:b4:b1:1e:12:d0:c9:51:72:f2:c8:39:cb:
                    4c:17:da:ff:5d:25:5e:25:23:9d:a0:1a:33:27:24:
                    7d:c1:b0:53:b3:92:c6:d4:7f:a5:5c:12:e7:ef:ab:
                    46:b9:ea:08:d8:13:46:96:00:9b:b0:a4:0c:56:b7:
                    83:8f:d2:dc:db:dd:8c:a8:f2:84:12:96:1f:97:ba:
                    32:c2:bb:4d:4f:2e:dd:6e:97:2b:08:8d:d2:8a:fa:
                    a6:43:24:84:ab:aa:79:23:92:a8:52:cb:21:e4:33:
                    8e:3b:b3:9e:14:49:34:63:81:30:a1:09:24:64:f9:
                    fc:ea:b6:95:6a:21:22:bc:f1:ec:b5:a6:48:d7:25:
                    50:47:e0:18:ab:cb:14:b1:91:1b:4a:db:25:88:f1:
                    07:2f:47:e7:58:26:d6:e2:1f:77:5a:ee:54:9c:f1:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7B:29:14:8B:C2:1C:39:3D:DC:2B:5B:C2:CD:9C:84:4C:E4:EB:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/18298c09-4143-378c-ac9b-ee619422d41d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:56:dc:37:dd:17:d5:f9:64:42:76:5c:ca:76:58:ea:86:
         f4:25:2f:f1:3a:47:82:7f:7f:86:20:e0:db:4d:71:1e:83:7c:
         80:c9:36:de:da:33:b6:b4:77:bf:b8:80:6e:c2:81:b8:31:f9:
         1b:6c:24:ae:6d:df:4f:97:fd:0a:85:37:6d:80:6e:23:79:33:
         9c:2f:02:e1:ac:54:e8:9a:8d:56:c0:90:c4:b4:f5:c1:bd:4b:
         87:7a:07:0b:30:20:45:73:0c:da:be:90:67:cf:5c:92:2b:e4:
         2e:86:5e:49:aa:8b:96:db:1c:98:a2:87:09:5e:f8:9d:1f:2c:
         20:3f:6c:0f:88:96:7a:d3:43:38:a7:05:34:58:99:b2:ee:97:
         63:91:39:5d:80:5f:72:50:61:ea:f9:45:04:62:34:27:87:d2:
         ba:ce:ec:66:39:32:bd:b6:5a:ed:01:42:19:b1:dd:5e:b0:fe:
         2c:05:15:59:da:d0:cc:41:26:96:a5:a3:ec:b0:6c:9f:1d:e9:
         3f:01:2d:6b:31:88:ec:a5:a7:c1:5b:c3:72:81:b0:8d:26:6a:
         59:e4:f1:be:1d:e8:0c:d5:6a:55:be:81:fd:bc:aa:25:0c:11:
         81:69:29:f1:7b:53:3c:1e:82:05:00:61:f7:dd:69:94:b9:61:
         76:0a:3f:b1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkBlS43NKt1ONmQ/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyNjAyMzAxM1oXDTI1MDUyNzAxMzAxM1owLzEtMCsGA1UEAxMk
YjExYWJlMGUtZDhlZi00M2ExLWJiNzctNDc0YzgyOTUxYjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh/ytPgapVSNlZUxO6m5tTH8+GbAVkZVJEKc
/7/Is8qRWMCPR3qYiH7mzC6+tAvSFMA9U5mLkvGkmZF1KvFUCjORnfhxuzz2/HsH
B0Gm+tikq2rLyDNYfJDxEfG0sR4S0MlRcvLIOctMF9r/XSVeJSOdoBozJyR9wbBT
s5LG1H+lXBLn76tGueoI2BNGlgCbsKQMVreDj9Lc292MqPKEEpYfl7oywrtNTy7d
bpcrCI3SivqmQySEq6p5I5KoUssh5DOOO7OeFEk0Y4EwoQkkZPn86raVaiEivPHs
taZI1yVQR+AYq8sUsZEbStsliPEHL0fnWCbW4h93Wu5UnPHQqwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF57KRSLwhw5PdwrW8LNnIRM5OurMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTgyOThjMDktNDE0My0z
NzhjLWFjOWItZWU2MTk0MjJkNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGuFVtw33RfV+WRCdlzKdljqhvQlL/E6R4J/f4Yg4NtNcR6DfIDJ
Nt7aM7a0d7+4gG7Cgbgx+RtsJK5t30+X/QqFN22AbiN5M5wvAuGsVOiajVbAkMS0
9cG9S4d6BwswIEVzDNq+kGfPXJIr5C6GXkmqi5bbHJiihwle+J0fLCA/bA+IlnrT
QzinBTRYmbLul2OROV2AX3JQYer5RQRiNCeH0rrO7GY5Mr22Wu0BQhmx3V6w/iwF
FVna0MxBJpalo+ywbJ8d6T8BLWsxiOylp8Fbw3KBsI0malnk8b4d6AzValW+gf28
qiUMEYFpKfF7UzweggUAYffdaZS5YXYKP7E=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:51:14 2025 by rpki-client