Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa
File:                     1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa (raw, json)
Hash identifier:          +YTf/K3UqSBOzr8uRxyggeXRdw/qgXDBKBtgh235OcA=
Subject key identifier:   A9:EC:5B:5A:AD:17:2D:56:A7:96:39:6C:6C:9D:18:77:63:3B:09:D0
Certificate issuer:       /CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
Certificate serial:       010D0C9F4328584AFEE6A45132BCCCD8A2B15200
Authority key identifier: 44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     32217
IP address blocks:        2604:8440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a4:51:32:bc:cc:d8:a2:b1:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28e1f9ea-24bf-4c22-a182-fc925d5a819c
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=eae80f50-b6d6-4b17-804a-f9be2e0fda61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:03:bd:02:50:9e:df:f6:e3:75:01:f5:31:
                    0d:78:f9:f9:7c:db:a0:43:4d:5b:fb:f4:97:24:05:
                    79:6f:e9:dd:0d:83:c3:31:56:55:b1:ca:4a:11:c1:
                    af:19:d2:2b:85:7e:b7:83:ab:e7:44:1a:1f:ad:e5:
                    db:22:6a:9a:97:32:13:ae:f2:22:d0:06:47:4c:07:
                    1c:e6:86:af:7c:f0:51:88:fb:a5:ab:41:9a:13:12:
                    b6:0a:67:56:66:6e:b0:5f:de:ce:e6:16:e6:56:51:
                    fa:47:ae:8d:d9:65:65:c2:f9:05:f1:f1:bb:20:73:
                    1c:ef:0a:90:8a:ef:e9:ce:2b:41:de:5d:59:a6:f1:
                    17:ef:e2:ab:52:95:e7:25:8b:b2:12:2b:14:37:f5:
                    4a:e8:af:b4:c2:56:d7:66:9c:aa:40:00:00:1f:ba:
                    4f:31:44:4e:2a:3e:cf:ea:22:0b:ee:ad:19:78:bd:
                    49:47:de:35:7b:2f:15:6f:10:d1:ef:27:69:5e:3e:
                    b9:e2:de:cb:9c:b2:7c:96:63:75:a3:ae:df:83:52:
                    a7:d8:ed:ea:bb:b0:0a:07:a5:54:15:49:61:df:aa:
                    24:fb:4a:ea:de:e2:82:b6:a7:ec:f3:47:e7:48:76:
                    b0:75:dd:22:af:bf:19:96:9f:4a:08:33:36:8c:82:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EC:5B:5A:AD:17:2D:56:A7:96:39:6C:6C:9D:18:77:63:3B:09:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/1363b2c3-63ea-3b3d-913f-f7adf06eda35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c/28e1f9ea-24bf-4c22-a182-fc925d5a819c.crl

            X509v3 Authority Key Identifier:
                keyid:44:97:0C:F7:E2:B0:F7:B3:51:4F:9D:79:7E:5C:C3:97:F9:6E:1B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28e1f9ea-24bf-4c22-a182-fc925d5a819c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:df:a2:38:20:96:1d:77:4b:af:b7:18:81:b3:ec:a7:fb:e2:
         de:fd:db:f4:ae:78:06:09:33:93:aa:11:c7:be:2c:ad:e0:b1:
         80:26:f7:3d:ed:cb:a5:43:a0:5f:27:82:d7:a0:8a:29:d0:e9:
         1f:10:85:e8:c0:af:40:c7:3c:70:24:91:c0:4a:4d:cd:ca:1e:
         fe:f2:64:a6:6f:01:4c:c7:58:d8:97:d3:1d:42:74:47:28:a6:
         a0:b8:c5:d8:d2:80:fc:bb:ee:87:ab:bd:17:93:05:43:3e:60:
         75:59:76:73:3c:4d:95:73:c8:3b:50:db:ed:4a:bc:ae:43:1d:
         23:4b:03:51:ed:f0:fc:98:1f:9a:0c:fb:79:90:f5:07:a0:19:
         af:f3:61:bf:92:2e:fb:f2:f6:06:c7:72:96:80:95:97:94:e5:
         9d:55:c8:1c:a6:c9:c2:f0:36:84:7b:e2:cc:8d:12:d5:4b:74:
         05:cb:39:07:67:0b:7b:ac:10:47:7d:ad:41:9f:a8:47:b7:25:
         37:b5:3a:2f:00:76:78:f1:50:3c:86:99:8c:7f:78:4c:4d:54:
         6f:9b:7f:7d:c6:1c:ce:a2:53:34:12:14:34:08:15:35:c2:a1:
         31:41:c3:aa:74:0c:cb:6c:62:66:9a:f2:56:11:d6:b5:ba:b3:
         17:64:3f:73
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr+5qRRMrzM2KKxUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhlMWY5ZWEtMjRiZi00YzIyLWExODItZmM5MjVkNWE4
MTljMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZWFlODBmNTAtYjZkNi00YjE3LTgwNGEtZjliZTJlMGZkYTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4oDvQJQnt/243UB9TENePn5fNugQ01b+/SX
JAV5b+ndDYPDMVZVscpKEcGvGdIrhX63g6vnRBofreXbImqalzITrvIi0AZHTAcc
5oavfPBRiPulq0GaExK2CmdWZm6wX97O5hbmVlH6R66N2WVlwvkF8fG7IHMc7wqQ
iu/pzitB3l1ZpvEX7+KrUpXnJYuyEisUN/VK6K+0wlbXZpyqQAAAH7pPMUROKj7P
6iIL7q0ZeL1JR941ey8VbxDR7ydpXj654t7LnLJ8lmN1o67fg1Kn2O3qu7AKB6VU
FUlh36ok+0rq3uKCtqfs80fnSHawdd0ir78Zlp9KCDM2jIILiQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKnsW1qtFy1Wp5Y5bGydGHdjOwnQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUx
ZjllYS0yNGJmLTRjMjItYTE4Mi1mYzkyNWQ1YTgxOWMvMTM2M2IyYzMtNjNlYS0z
YjNkLTkxM2YtZjdhZGYwNmVkYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjhlMWY5ZWEtMjRiZi00YzIyLWEx
ODItZmM5MjVkNWE4MTljLzI4ZTFmOWVhLTI0YmYtNGMyMi1hMTgyLWZjOTI1ZDVh
ODE5Yy5jcmwwHwYDVR0jBBgwFoAURJcM9+Kw97NRT515flzDl/luGxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yOGUxZjllYS0yNGJmLTRjMjItYTE4Mi1mYzky
NWQ1YTgxOWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSEQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBn36I4IJYdd0uvtxiBs+yn++Le/dv0rngGCTOTqhHHviyt4LGAJvc9
7culQ6BfJ4LXoIop0OkfEIXowK9AxzxwJJHASk3Nyh7+8mSmbwFMx1jYl9MdQnRH
KKaguMXY0oD8u+6Hq70XkwVDPmB1WXZzPE2Vc8g7UNvtSryuQx0jSwNR7fD8mB+a
DPt5kPUHoBmv82G/ki778vYGx3KWgJWXlOWdVcgcpsnC8DaEe+LMjRLVS3QFyzkH
Zwt7rBBHfa1Bn6hHtyU3tTovAHZ48VA8hpmMf3hMTVRvm399xhzOolM0EhQ0CBU1
wqExQcOqdAzLbGJmmvJWEda1urMXZD9z
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:27:03 2025 by rpki-client