Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a96cc9f-684d-3801-a955-05bd23addfaf.roa
File:                     4a96cc9f-684d-3801-a955-05bd23addfaf.roa (raw, json)
Hash identifier:          LokQN0zG3/Ts8+VMoescDR90wpxXe3T/1rTKAiAo2SQ=
Subject key identifier:   EF:8F:6B:1B:3E:2F:D5:C3:CE:14:95:99:ED:CB:58:BD:DE:0F:FF:10
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848D90BB83AEF625D4B10DDF220
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a96cc9f-684d-3801-a955-05bd23addfaf.roa
Signing time:             Tue 11 Feb 2025 14:00:52 +0000
ROA not before:           Tue 11 Feb 2025 14:00:52 +0000
ROA not after:            Mon 12 May 2025 13:00:52 +0000
asID:                     27887
IP address blocks:        2001:470:37b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:0b:b8:3a:ef:62:5d:4b:10:dd:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 11 14:00:52 2025 GMT
            Not After : May 12 13:00:52 2025 GMT
        Subject: CN=431e446b-455c-4c07-8d2f-4ed17d1f6fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c3:9d:a1:73:99:8e:7d:c6:31:18:ad:55:43:
                    79:9a:b3:c9:57:e5:03:a7:77:3f:d0:64:24:3a:b8:
                    cf:13:dc:79:07:1a:b8:bf:6e:5c:a4:ad:32:54:f6:
                    9e:09:84:5c:7b:41:51:88:b1:63:66:6d:29:63:61:
                    a7:e1:c3:40:e8:6b:cf:c5:3f:23:25:e5:ef:97:6a:
                    9f:40:8a:03:14:3f:bb:eb:8a:a3:20:68:64:66:f7:
                    fc:f4:3b:c4:a5:99:88:b4:c3:6e:3c:55:02:40:52:
                    a3:30:7f:b4:e2:88:21:11:d1:67:9d:10:0e:c2:ef:
                    f6:80:c2:a3:01:cb:b0:72:8d:b2:e1:22:09:61:46:
                    0c:c8:27:b6:f8:f7:a3:df:29:72:23:1b:9b:94:36:
                    f0:80:92:46:3a:56:57:56:f2:e5:4e:5c:c1:25:b8:
                    bf:e4:00:e3:6f:39:9c:2f:c0:69:a0:7f:c7:aa:59:
                    23:c1:4a:e6:35:1a:91:73:bd:39:f9:a9:12:ed:f7:
                    16:02:cd:64:49:fd:b4:8c:fe:78:7a:10:80:0e:43:
                    43:df:91:a7:91:40:ce:dd:23:89:71:85:3e:5b:ee:
                    c5:21:bb:73:e2:55:56:22:42:62:cb:f6:2f:4d:db:
                    16:f7:3d:0d:2e:a1:a0:2f:9d:00:7c:9e:50:17:7b:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8F:6B:1B:3E:2F:D5:C3:CE:14:95:99:ED:CB:58:BD:DE:0F:FF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a96cc9f-684d-3801-a955-05bd23addfaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:37b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:9c:92:f7:8f:6b:ad:3a:cc:93:c0:6f:45:d6:bd:24:75:11:
         a4:bd:9b:5b:84:b0:f8:3c:e1:de:22:07:eb:a2:5e:f2:45:e0:
         8c:72:47:9a:b0:4a:c6:fc:0b:27:42:6c:d9:bc:18:f0:2a:01:
         db:d0:a0:6d:9a:75:eb:c6:27:15:01:c4:ba:bb:c5:f1:64:4c:
         47:49:66:05:26:41:ec:8a:4e:ab:43:fb:2e:30:da:2f:3b:46:
         e7:ea:95:a2:4f:75:9e:f4:3b:63:ee:89:1f:6e:fd:91:00:01:
         8c:8a:17:11:d6:4c:80:b3:9f:3c:76:7c:00:b4:43:41:a3:3c:
         d6:80:36:d7:67:b7:b0:6d:ff:4a:c0:dc:75:98:7c:a5:3c:e0:
         47:4f:52:07:16:70:ff:6a:7a:f7:d5:bc:76:4f:84:88:b3:86:
         34:24:8e:aa:df:a0:0f:11:ac:cc:f8:ee:c9:c1:2d:2e:91:37:
         b3:52:65:02:f1:6e:ef:b6:ac:18:f0:67:e3:be:01:6b:d0:1b:
         97:b0:aa:08:23:d8:97:eb:ad:bc:17:2c:4a:4a:db:6e:fd:fc:
         dd:ad:fd:c4:7a:f6:cc:05:62:b4:60:14:2b:ef:d7:0d:98:66:
         a0:6a:06:3d:d6:20:e8:79:30:29:e1:23:a4:4b:ec:d3:c3:dc:
         e6:69:a2:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjZC7g672JdSxDd8iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIxMTE0MDA1MloXDTI1MDUxMjEzMDA1MlowLzEtMCsGA1UEAxMk
NDMxZTQ0NmItNDU1Yy00YzA3LThkMmYtNGVkMTdkMWY2ZmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMOdoXOZjn3GMRitVUN5mrPJV+UDp3c/0GQk
OrjPE9x5Bxq4v25cpK0yVPaeCYRce0FRiLFjZm0pY2Gn4cNA6GvPxT8jJeXvl2qf
QIoDFD+764qjIGhkZvf89DvEpZmItMNuPFUCQFKjMH+04oghEdFnnRAOwu/2gMKj
Acuwco2y4SIJYUYMyCe2+Pej3ylyIxublDbwgJJGOlZXVvLlTlzBJbi/5ADjbzmc
L8BpoH/HqlkjwUrmNRqRc705+akS7fcWAs1kSf20jP54ehCADkND35GnkUDO3SOJ
cYU+W+7FIbtz4lVWIkJiy/YvTdsW9z0NLqGgL50AfJ5QF3uYWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO+Paxs+L9XDzhSVme3LWL3eD/8QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGE5NmNjOWYtNjg0ZC0z
ODAxLWE5NTUtMDViZDIzYWRkZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALmckvePa606zJPAb0XWvSR1EaS9m1uEsPg84d4iB+uiXvJF4Ixy
R5qwSsb8CydCbNm8GPAqAdvQoG2adevGJxUBxLq7xfFkTEdJZgUmQeyKTqtD+y4w
2i87RufqlaJPdZ70O2PuiR9u/ZEAAYyKFxHWTICznzx2fAC0Q0GjPNaANtdnt7Bt
/0rA3HWYfKU84EdPUgcWcP9qevfVvHZPhIizhjQkjqrfoA8RrMz47snBLS6RN7NS
ZQLxbu+2rBjwZ+O+AWvQG5ewqggj2JfrrbwXLEpK2279/N2t/cR69swFYrRgFCvv
1w2YZqBqBj3WIOh5MCnhI6RL7NPD3OZpovc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:59 2025 by rpki-client