Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d04c4fd-2e10-31fb-aaf7-9ceed58a44b8.roa
File:                     5d04c4fd-2e10-31fb-aaf7-9ceed58a44b8.roa (raw, json)
Hash identifier:          RLNdt8tr4AsyIuM9NoPwzbOP99fJMOqM7DFmZsi4POI=
Subject key identifier:   2C:B7:0B:B5:6F:D6:04:51:76:1C:26:F0:5D:9B:B6:DD:F0:97:B2:F2
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A71EB3B0C9B09299FE95D7900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d04c4fd-2e10-31fb-aaf7-9ceed58a44b8.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        2001:56a:810c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3b:0c:9b:09:29:9f:e9:5d:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=e397665b-8aa5-4e0f-b592-06aa55b2e27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:15:79:35:b7:02:d8:6a:16:99:ad:3d:11:
                    e6:87:5d:41:69:f3:56:5a:4f:8b:79:5c:40:38:8a:
                    72:64:70:9e:c0:ca:18:5e:4f:b2:83:5c:93:5b:b9:
                    3a:49:7d:10:6e:07:8b:35:b4:79:d4:fa:85:60:b5:
                    ed:2e:6c:80:33:c1:43:69:e5:60:dc:2a:8f:10:d2:
                    37:06:1a:83:31:c3:53:7e:60:64:d0:ca:fa:04:16:
                    b4:41:13:ab:9d:ab:8c:9e:49:e8:27:83:31:87:62:
                    91:38:f5:e2:1a:42:01:de:69:44:57:bc:4d:c9:99:
                    ec:90:9a:3d:4d:15:b3:f0:81:d2:28:39:c4:d1:07:
                    ce:df:b5:7c:3f:d9:e6:37:73:5f:9a:5d:62:1a:47:
                    a6:92:94:25:41:16:1f:28:a6:bb:37:84:10:17:13:
                    c4:a3:53:bb:ac:e6:90:45:aa:09:5b:37:b7:7d:36:
                    90:6e:27:62:01:5e:fc:49:a7:e5:4c:94:6a:e5:72:
                    27:68:87:1d:da:46:2f:5f:d1:a1:0b:22:e3:c1:c8:
                    8e:c8:d7:b1:c6:9c:10:d4:19:f6:e0:9a:a9:31:af:
                    a0:13:16:12:fc:de:01:28:e3:5c:8d:59:45:f0:28:
                    2f:9c:7c:25:fe:70:38:f4:49:65:0a:9b:4c:2c:be:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B7:0B:B5:6F:D6:04:51:76:1C:26:F0:5D:9B:B6:DD:F0:97:B2:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5d04c4fd-2e10-31fb-aaf7-9ceed58a44b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:810c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:99:e0:7d:d1:b7:bf:2e:8c:6b:8f:7d:88:84:d6:5f:56:
         55:7e:98:74:c4:7b:8b:df:31:75:d5:08:a1:9e:5b:47:fd:41:
         83:0f:a6:63:fd:f6:4b:5e:12:36:58:dd:6c:c4:52:b9:56:aa:
         47:a5:79:d0:ad:d8:a5:91:7f:8d:65:69:dc:91:ea:c6:80:8a:
         3a:68:58:bd:84:f8:58:ca:98:c7:32:f1:b5:49:42:3e:d4:ef:
         26:14:25:ae:2f:2a:1e:1c:96:f8:38:fa:0c:b1:cf:e3:0b:60:
         d5:ad:10:c3:0f:6f:49:25:c0:0e:be:29:ca:6d:a2:c0:f5:4f:
         65:11:f9:f3:b4:b5:19:3a:67:05:c7:72:a9:5e:bc:92:45:50:
         4b:61:cc:5d:c0:9d:d3:7f:71:a2:f8:2d:af:82:35:08:30:fe:
         00:37:8a:27:9d:61:d7:e9:c0:d6:ce:e9:22:d6:35:39:6c:f2:
         3a:e1:a2:3c:2f:f5:9d:e5:05:aa:f9:2a:1f:cc:f4:b2:3c:b1:
         42:bc:f0:f7:f1:34:53:51:29:08:60:70:e3:60:8d:e9:56:6b:
         ce:54:f8:37:02:d8:61:97:48:d0:6e:6e:d3:45:6a:b3:ee:83:
         60:28:52:83:ac:de:4d:15:c1:72:be:9b:b4:54:60:76:84:1a:
         4b:52:61:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpx6zsMmwkpn+ldeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk
ZTM5NzY2NWItOGFhNS00ZTBmLWI1OTItMDZhYTU1YjJlMjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysoVeTW3AthqFpmtPRHmh11BafNWWk+LeVxA
OIpyZHCewMoYXk+yg1yTW7k6SX0QbgeLNbR51PqFYLXtLmyAM8FDaeVg3CqPENI3
BhqDMcNTfmBk0Mr6BBa0QROrnauMnknoJ4Mxh2KROPXiGkIB3mlEV7xNyZnskJo9
TRWz8IHSKDnE0QfO37V8P9nmN3Nfml1iGkemkpQlQRYfKKa7N4QQFxPEo1O7rOaQ
RaoJWze3fTaQbidiAV78SaflTJRq5XInaIcd2kYvX9GhCyLjwciOyNexxpwQ1Bn2
4JqpMa+gExYS/N4BKONcjVlF8CgvnHwl/nA49EllCptMLL5raQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCy3C7Vv1gRRdhwm8F2btt3wl7LyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWQwNGM0ZmQtMmUxMC0z
MWZiLWFhZjctOWNlZWQ1OGE0NGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFaoEM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADa5meB90be/Loxrj32IhNZfVlV+mHTEe4vfMXXVCKGeW0f9QYMP
pmP99kteEjZY3WzEUrlWqkeledCt2KWRf41ladyR6saAijpoWL2E+FjKmMcy8bVJ
Qj7U7yYUJa4vKh4clvg4+gyxz+MLYNWtEMMPb0klwA6+KcptosD1T2UR+fO0tRk6
ZwXHcqlevJJFUEthzF3AndN/caL4La+CNQgw/gA3iiedYdfpwNbO6SLWNTls8jrh
ojwv9Z3lBar5Kh/M9LI8sUK88PfxNFNRKQhgcONgjelWa85U+DcC2GGXSNBubtNF
arPug2AoUoOs3k0VwXK+m7RUYHaEGktSYe4=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:21:02 2025 by rpki-client