Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/1e62cea0-b758-350e-8198-1006787cdbd5.roa
File:                     1e62cea0-b758-350e-8198-1006787cdbd5.roa (raw, json)
Hash identifier:          jgbYulmot++3hAU9kIOvjP5XW3VJlmOpdf3l8UkAIwY=
Subject key identifier:   E1:73:13:98:33:5F:AC:AE:FA:72:89:36:93:99:36:BC:07:75:0E:E6
Certificate issuer:       /CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
Certificate serial:       010D0C9F43285848EF6154760D70551577514280
Authority key identifier: F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/1e62cea0-b758-350e-8198-1006787cdbd5.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     19747
IP address blocks:        2620:131:3000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:54:76:0d:70:55:15:77:51:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=a77ac595-4050-48cf-8214-946692c975a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:41:67:bf:bc:50:56:4b:1d:3f:9d:81:3c:70:
                    ad:d7:0a:55:bc:ca:20:1c:b0:bd:49:15:56:39:e2:
                    07:0f:d8:5c:96:71:f7:b2:9f:e6:ab:e9:a6:6a:9c:
                    6c:d6:49:e0:82:33:be:6f:d8:f1:e9:bb:de:b2:a3:
                    6c:d7:03:e5:60:be:75:40:18:5e:22:77:01:74:0c:
                    15:ba:1f:96:92:f7:33:01:cd:ba:0c:55:a4:cc:99:
                    ba:0e:a5:54:00:21:a0:3b:b5:1a:dc:29:37:48:52:
                    8e:ba:de:5a:38:51:6b:33:60:50:fa:59:60:c5:bb:
                    53:2b:4f:33:a2:af:60:f8:0f:b5:0e:60:07:47:35:
                    37:46:0f:2d:94:24:a1:24:ad:50:d5:33:fc:e2:3b:
                    1f:62:77:e4:8a:c4:a7:b2:5e:ca:eb:32:44:32:0f:
                    9e:01:43:53:8b:39:3f:b5:e9:5b:67:f2:b4:f2:f1:
                    db:b3:c0:14:94:53:4c:10:45:f7:11:74:40:7f:f2:
                    db:6e:02:6c:a8:1a:0f:69:c1:74:89:fa:a5:38:b6:
                    e3:fb:13:37:1b:34:88:7e:1a:32:29:fb:33:7c:32:
                    06:b2:1e:9f:ff:3c:67:76:ff:59:4b:fc:84:14:06:
                    67:9a:95:9f:0d:dc:79:c1:b8:da:e3:71:7b:6a:f8:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:73:13:98:33:5F:AC:AE:FA:72:89:36:93:99:36:BC:07:75:0E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/1e62cea0-b758-350e-8198-1006787cdbd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl

            X509v3 Authority Key Identifier:
                keyid:F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:131:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:69:cd:2f:c5:2e:a3:e6:04:a8:4b:40:14:98:b0:ae:03:c4:
         e6:81:68:1a:7f:eb:b9:44:b9:4f:b1:31:3a:8e:5e:9d:27:20:
         34:61:a0:c1:1f:b0:04:9e:de:83:26:a8:0a:a4:06:de:2a:00:
         43:cb:34:07:96:fb:1b:3f:e6:52:e3:89:aa:6c:1e:8d:8b:08:
         6d:9b:6a:ba:6f:b7:af:02:32:3b:70:f6:82:e2:4c:a5:4e:d0:
         94:c3:a9:cc:a8:87:1b:7a:b5:41:39:30:7e:bf:9b:bb:85:ad:
         86:3e:e8:e6:90:9e:1c:64:d5:99:b3:52:71:c3:60:82:3f:a1:
         eb:e4:7d:b6:5c:a2:17:4c:d7:96:7b:7e:51:76:98:99:e7:f3:
         29:7c:8a:0d:fc:56:51:d0:f7:6a:3a:f0:e5:b3:73:6c:9e:05:
         24:6d:60:68:bb:8e:4b:4c:5c:d5:f6:fb:b2:54:e2:c5:96:de:
         99:af:a3:b8:0d:eb:5d:0c:5b:be:23:ab:af:39:ac:b7:48:f5:
         78:eb:da:a3:e1:ac:25:78:2d:74:7d:f4:dd:8f:7e:3c:a7:4c:
         1b:38:bd:f4:73:5d:bf:70:42:6b:a8:f7:ad:06:f6:f7:91:24:
         8a:c9:86:1c:ac:3d:d4:42:b5:27:54:14:9d:b9:97:e0:54:a4:
         18:1c:ce:ba
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYVR2DXBVFXdRQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjliMDAxM2ItYWE4Zi00MWJmLWE2ZjktMGIxYzA3MmY1
OTQwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
YTc3YWM1OTUtNDA1MC00OGNmLTgyMTQtOTQ2NjkyYzk3NWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkFnv7xQVksdP52BPHCt1wpVvMogHLC9SRVW
OeIHD9hclnH3sp/mq+mmapxs1knggjO+b9jx6bvesqNs1wPlYL51QBheIncBdAwV
uh+WkvczAc26DFWkzJm6DqVUACGgO7Ua3Ck3SFKOut5aOFFrM2BQ+llgxbtTK08z
oq9g+A+1DmAHRzU3Rg8tlCShJK1Q1TP84jsfYnfkisSnsl7K6zJEMg+eAUNTizk/
telbZ/K08vHbs8AUlFNMEEX3EXRAf/LbbgJsqBoPacF0ifqlOLbj+xM3GzSIfhoy
KfszfDIGsh6f/zxndv9ZS/yEFAZnmpWfDdx5wbja43F7avj+PwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOFzE5gzX6yu+nKJNpOZNrwHdQ7mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIw
MDEzYi1hYThmLTQxYmYtYTZmOS0wYjFjMDcyZjU5NDAvMWU2MmNlYTAtYjc1OC0z
NTBlLTgxOTgtMTAwNjc4N2NkYmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjliMDAxM2ItYWE4Zi00MWJmLWE2
ZjktMGIxYzA3MmY1OTQwL2I5YjAwMTNiLWFhOGYtNDFiZi1hNmY5LTBiMWMwNzJm
NTk0MC5jcmwwHwYDVR0jBBgwFoAU9yw4cAI09lqb56K3XUux6UQcdBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIwMDEzYi1hYThmLTQxYmYtYTZmOS0wYjFj
MDcyZjU5NDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABMTAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADtpzS/FLqPmBKhLQBSYsK4DxOaBaBp/67lEuU+xMTqOXp0nIDRh
oMEfsASe3oMmqAqkBt4qAEPLNAeW+xs/5lLjiapsHo2LCG2barpvt68CMjtw9oLi
TKVO0JTDqcyohxt6tUE5MH6/m7uFrYY+6OaQnhxk1ZmzUnHDYII/oevkfbZcohdM
15Z7flF2mJnn8yl8ig38VlHQ92o68OWzc2yeBSRtYGi7jktMXNX2+7JU4sWW3pmv
o7gN610MW74jq685rLdI9Xjr2qPhrCV4LXR99N2PfjynTBs4vfRzXb9wQmuo960G
9veRJIrJhhysPdRCtSdUFJ25l+BUpBgczro=
-----END CERTIFICATE-----
Generated at Tue Apr 15 17:01:13 2025 by rpki-client