Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa
File:                     0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa (raw, json)
Hash identifier:          hDddf4Ltvcnva4C6HA7JBZb4SviYOXHJzIcrjSUIrKM=
Subject key identifier:   13:21:05:B5:46:C7:02:14:23:A5:26:BB:BF:7D:58:57:C4:07:37:57
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858487A2088B751ED01AD79CD6E80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     30103
IP address blocks:        2620:123:20c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:88:b7:51:ed:01:ad:79:cd:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=fb52e716-27ec-4775-b538-a8e58a154299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2b:c1:08:3d:61:97:03:cc:5b:98:35:cb:e2:
                    82:5a:df:52:5d:ff:dd:5e:10:ab:0d:a3:02:82:18:
                    3a:73:5d:23:02:9c:ae:1f:be:3c:a0:2b:f1:ae:4c:
                    2a:0c:05:3e:cb:fe:77:88:53:27:37:65:65:2c:34:
                    18:fd:ff:9d:7c:16:4f:f0:bf:a3:66:6c:73:ff:3e:
                    23:0f:71:5a:6d:89:c7:c0:e7:68:f1:4b:03:3a:b2:
                    6f:65:c6:d7:d9:82:ce:19:03:72:95:8d:e3:b4:42:
                    71:9f:8a:4c:a3:c8:6c:fa:89:14:0f:0d:95:ee:23:
                    cc:20:42:d9:16:f9:9d:cd:63:5d:32:32:eb:cb:10:
                    46:44:58:94:a5:63:c9:66:b0:f8:f6:bf:73:c8:3c:
                    0b:e6:10:d4:0d:57:05:e0:59:8f:5c:1f:0a:ee:a0:
                    fd:51:e5:4c:72:46:1f:d1:1f:76:78:59:57:29:af:
                    8a:e4:4a:98:2f:61:bc:38:5c:29:e8:57:40:d4:8e:
                    a5:6a:0f:09:2b:45:20:6c:bf:78:78:ea:8d:f6:95:
                    18:c8:85:83:b7:bc:0f:51:4d:c5:7b:9f:93:71:cf:
                    f9:09:ca:f0:54:45:af:50:d0:63:e5:a1:4d:a8:fb:
                    88:15:52:fc:31:dd:26:33:04:e0:0b:33:c0:2a:7d:
                    01:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:21:05:B5:46:C7:02:14:23:A5:26:BB:BF:7D:58:57:C4:07:37:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ac:0b:88:51:35:a7:04:1a:05:be:b2:b6:4e:16:ad:b1:ba:
         46:8c:19:f4:53:20:a9:b3:8b:b2:99:ed:b6:24:55:0f:e4:3a:
         cc:96:87:41:3b:ed:e3:d4:95:a9:b9:45:40:9d:3b:cf:d0:83:
         b3:31:23:b3:96:f4:1d:e6:38:5f:55:ce:b1:58:0e:b0:76:b8:
         2d:d2:d6:8c:cc:cc:a1:a0:80:26:0a:ff:4b:8e:3c:57:92:da:
         8e:a1:db:ae:e9:46:92:e0:8f:51:0a:9f:10:4a:0e:97:7e:c4:
         e7:b5:4d:bc:27:ed:8f:be:8a:3b:15:2b:8a:f8:67:d7:e4:a6:
         40:1e:73:4a:f3:5e:66:e6:19:0c:7f:18:2d:89:48:70:e2:29:
         9f:4b:07:f0:62:e3:3f:13:97:a8:c0:ed:92:29:b8:c0:99:3d:
         e9:a0:ca:c6:db:68:d5:1d:35:85:cf:d9:3b:e4:a2:e6:24:0d:
         d2:95:b4:47:4f:2d:44:22:17:6a:b4:8e:da:03:7b:fa:c0:60:
         13:f5:16:63:49:0f:1c:13:a2:bd:52:86:a5:39:88:98:f7:6b:
         04:86:ec:39:a8:5f:04:dc:f5:86:64:53:e8:f7:88:6a:0b:1d:
         eb:45:67:c4:c4:d2:25:0b:15:10:22:b5:92:b6:c3:46:3c:a0:
         1b:5c:41:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh6IIi3Ue0BrXnNboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
ZmI1MmU3MTYtMjdlYy00Nzc1LWI1MzgtYThlNThhMTU0Mjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SvBCD1hlwPMW5g1y+KCWt9SXf/dXhCrDaMC
ghg6c10jApyuH748oCvxrkwqDAU+y/53iFMnN2VlLDQY/f+dfBZP8L+jZmxz/z4j
D3FabYnHwOdo8UsDOrJvZcbX2YLOGQNylY3jtEJxn4pMo8hs+okUDw2V7iPMIELZ
FvmdzWNdMjLryxBGRFiUpWPJZrD49r9zyDwL5hDUDVcF4FmPXB8K7qD9UeVMckYf
0R92eFlXKa+K5EqYL2G8OFwp6FdA1I6lag8JK0UgbL94eOqN9pUYyIWDt7wPUU3F
e5+Tcc/5CcrwVEWvUNBj5aFNqPuIFVL8Md0mMwTgCzPAKn0BtQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBMhBbVGxwIUI6Umu799WFfEBzdXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMDE2NWExZGYtYjk2My0z
OWM1LWE4ZWEtNTZiMmY3MTIzZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyDB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIasC4hRNacEGgW+srZOFq2xukaMGfRTIKmzi7KZ7bYkVQ/kOsyW
h0E77ePUlam5RUCdO8/Qg7MxI7OW9B3mOF9VzrFYDrB2uC3S1ozMzKGggCYK/0uO
PFeS2o6h267pRpLgj1EKnxBKDpd+xOe1Tbwn7Y++ijsVK4r4Z9fkpkAec0rzXmbm
GQx/GC2JSHDiKZ9LB/Bi4z8Tl6jA7ZIpuMCZPemgysbbaNUdNYXP2TvkouYkDdKV
tEdPLUQiF2q0jtoDe/rAYBP1FmNJDxwTor1ShqU5iJj3awSG7DmoXwTc9YZkU+j3
iGoLHetFZ8TE0iULFRAitZK2w0Y8oBtcQRc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:51 2025 by rpki-client