Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d1deef13-731f-3ecc-8c19-4aed187675e1.roa
File:                     d1deef13-731f-3ecc-8c19-4aed187675e1.roa (raw, json)
Hash identifier:          Wr4h94l7WDB16iF8tIDR/dLTkd17gkzYa95MqGzDFNs=
Subject key identifier:   0C:5A:AC:B3:25:4E:5A:7C:64:17:13:0D:9A:0D:34:98:A1:D6:29:86
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584B4BF4B8FA1C5F3C446F324480
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d1deef13-731f-3ecc-8c19-4aed187675e1.roa
Signing time:             Wed 24 Sep 2025 03:26:25 +0000
ROA not before:           Wed 24 Sep 2025 03:26:25 +0000
ROA not after:            Tue 23 Dec 2025 04:26:25 +0000
asID:                     212238
IP address blocks:        2607:740:5b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:f4:b8:fa:1c:5f:3c:44:6f:32:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep 24 03:26:25 2025 GMT
            Not After : Dec 23 04:26:25 2025 GMT
        Subject: CN=ea3b09d0-4a87-4e4f-8113-26ae1d1f9876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:81:3c:4f:06:4e:5f:af:23:1b:ec:8e:14:
                    05:c9:07:13:2a:4c:5b:fa:c2:c4:73:98:37:c4:67:
                    49:47:5e:df:28:8f:f9:3b:76:30:bb:a2:17:22:3d:
                    58:e5:fe:1f:a5:a5:a5:5a:b5:cb:fe:9f:e9:47:c8:
                    cb:3f:45:a0:e4:50:61:79:5d:d6:05:c1:ee:26:8a:
                    da:13:b8:4b:e4:6d:5a:d5:a9:8c:ef:c3:3c:2f:f2:
                    77:82:66:af:bf:8a:e6:66:06:f1:51:1e:e7:46:dc:
                    74:3d:a8:40:7a:c6:55:e7:f4:a3:21:75:6e:6a:5b:
                    df:23:8e:e2:6f:23:fc:2b:12:63:20:92:98:2b:97:
                    9d:47:4c:e8:da:d4:21:17:7a:d0:00:f6:fa:8c:82:
                    50:d3:2c:91:97:0c:41:25:d8:b3:32:59:b6:21:18:
                    1b:7b:6f:6f:fa:ba:ee:77:2c:e8:01:00:de:1f:94:
                    46:e5:de:6d:06:b8:66:89:7b:9d:79:08:86:6f:b6:
                    13:e4:93:c6:85:ee:5b:88:5e:e5:2a:3a:95:c0:be:
                    63:6e:c5:21:5a:a5:3c:51:10:22:af:5e:eb:74:95:
                    ef:bd:95:3a:d2:a8:d9:f6:11:10:1f:54:22:fb:d7:
                    d2:ec:3b:41:b6:54:bb:d3:6e:f9:61:2a:01:09:0f:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5A:AC:B3:25:4E:5A:7C:64:17:13:0D:9A:0D:34:98:A1:D6:29:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d1deef13-731f-3ecc-8c19-4aed187675e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:5b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:90:53:48:04:78:11:44:6e:3e:47:98:0c:cc:b1:b4:f7:5d:
         5f:eb:d1:15:d9:4e:44:a1:62:db:d1:c9:7c:85:ac:07:d6:00:
         c9:77:a5:62:c8:71:4c:8e:ff:de:60:e5:6f:c7:49:73:ae:bf:
         06:40:15:04:09:ea:38:f5:7c:1e:a4:de:0e:3b:af:8a:fc:3c:
         d1:ee:57:75:e3:0b:97:e4:dd:e8:df:b5:c4:bc:36:83:08:91:
         b9:42:c5:69:e3:01:3c:f4:1e:ee:98:b5:bc:2e:38:fd:e0:f1:
         2e:66:17:c2:d8:1d:dd:39:5a:84:99:b4:7c:04:f4:38:2d:5b:
         58:0e:ed:ae:1a:70:55:5f:1c:4a:64:f8:1a:29:ef:ec:34:15:
         a9:a8:6e:d0:c4:b8:07:48:b1:ee:f7:df:c3:51:ae:28:11:ca:
         f2:d3:09:2d:ff:60:5c:55:35:e8:81:b3:fa:08:74:7c:0c:eb:
         59:ce:aa:d1:0b:29:30:7f:bf:47:b9:8c:f2:1e:90:ff:5a:66:
         83:ad:d3:df:f4:42:4a:59:8d:d8:a0:80:db:eb:12:78:bc:14:
         2a:31:78:b0:c4:d4:a2:dc:34:6d:3c:57:72:4a:d5:68:a4:4a:
         f0:7a:75:35:0a:68:ab:ce:ce:d2:85:61:5e:7a:bf:d1:eb:a7:
         cc:47:42:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtL9Lj6HF88RG8yRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI1MDkyNDAzMjYyNVoXDTI1MTIyMzA0MjYyNVowLzEtMCsGA1UEAxMk
ZWEzYjA5ZDAtNGE4Ny00ZTRmLTgxMTMtMjZhZTFkMWY5ODc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEaBPE8GTl+vIxvsjhQFyQcTKkxb+sLEc5g3
xGdJR17fKI/5O3Ywu6IXIj1Y5f4fpaWlWrXL/p/pR8jLP0Wg5FBheV3WBcHuJora
E7hL5G1a1amM78M8L/J3gmavv4rmZgbxUR7nRtx0PahAesZV5/SjIXVualvfI47i
byP8KxJjIJKYK5edR0zo2tQhF3rQAPb6jIJQ0yyRlwxBJdizMlm2IRgbe29v+rru
dyzoAQDeH5RG5d5tBrhmiXudeQiGb7YT5JPGhe5biF7lKjqVwL5jbsUhWqU8URAi
r17rdJXvvZU60qjZ9hEQH1Qi+9fS7DtBtlS70275YSoBCQ/+dwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAxarLMlTlp8ZBcTDZoNNJih1imGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZDFkZWVmMTMtNzMxZi0z
ZWNjLThjMTktNGFlZDE4NzY3NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACOQU0gEeBFEbj5HmAzMsbT3XV/r0RXZTkShYtvRyXyFrAfWAMl3
pWLIcUyO/95g5W/HSXOuvwZAFQQJ6jj1fB6k3g47r4r8PNHuV3XjC5fk3ejftcS8
NoMIkblCxWnjATz0Hu6YtbwuOP3g8S5mF8LYHd05WoSZtHwE9DgtW1gO7a4acFVf
HEpk+Bop7+w0FamobtDEuAdIse7338NRrigRyvLTCS3/YFxVNeiBs/oIdHwM61nO
qtELKTB/v0e5jPIekP9aZoOt09/0QkpZjdiggNvrEni8FCoxeLDE1KLcNG08V3JK
1WikSvB6dTUKaKvOztKFYV56v9Hrp8xHQkc=
-----END CERTIFICATE-----
Generated at Sat Oct 11 18:44:24 2025 by rpki-client