Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa
File:                     3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa (raw, json)
Hash identifier:          1gZ80bb0JS4+eAMuAT4eFTglN00mB1J2V19faOw5tAg=
Subject key identifier:   EF:BD:25:BC:38:B5:68:84:F3:8A:D4:0D:86:37:E6:90:F2:65:35:59
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584A9E96174B5EAC86FE8EE75C80
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     32982
IP address blocks:        2607:f368:a004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:17:4b:5e:ac:86:fe:8e:e7:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=19ccabf5-0106-4d01-8144-ac51402a2712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:8b:51:31:71:ec:1e:84:04:e0:11:b4:04:
                    0f:70:82:9e:d1:28:4b:a2:ab:3f:73:df:4b:67:9f:
                    9d:27:27:78:77:73:72:5b:88:2d:09:99:24:99:f0:
                    d5:3e:9e:18:21:6e:de:64:f0:bf:83:b8:45:db:74:
                    58:a5:c9:ff:58:72:6d:51:07:2f:dd:d3:d2:0b:66:
                    6a:d8:89:ac:5a:b2:3e:3d:5d:28:70:4c:1f:7f:6f:
                    19:7b:7b:dc:a4:db:58:40:3f:b6:35:5f:b9:d2:8e:
                    59:cd:4e:1c:5d:7b:ff:da:d5:9b:12:d9:f6:b5:44:
                    1f:a1:84:2c:be:6e:cc:12:82:fc:8b:55:fd:9d:b8:
                    25:0f:14:26:ca:93:40:b9:ce:88:eb:ef:3a:6c:c7:
                    b8:48:70:9c:dd:1f:6a:fc:81:cb:4c:51:d9:d0:ab:
                    ad:9a:50:28:93:19:da:36:d4:65:63:c7:08:d9:04:
                    af:90:b9:ed:39:e9:ba:0b:4a:57:2c:e7:13:64:a7:
                    ff:4a:72:2a:2d:39:85:86:75:9d:14:b7:3b:13:ed:
                    f1:c7:dc:54:10:93:ba:97:49:89:88:66:37:a5:bf:
                    c4:b1:b6:9f:3e:73:0c:16:e2:23:ac:c1:a5:75:8f:
                    9b:ff:8f:7f:3b:11:da:fe:eb:95:4a:3d:20:53:85:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BD:25:BC:38:B5:68:84:F3:8A:D4:0D:86:37:E6:90:F2:65:35:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1f:35:6a:5e:f6:8e:2e:de:98:e1:22:c3:66:a4:a4:56:5a:
         55:53:ad:0a:02:d9:f3:dd:33:bb:c0:8d:14:d4:b9:ac:6d:61:
         24:ca:43:86:21:61:10:2f:b0:db:1b:95:fb:23:61:37:c2:10:
         4c:60:1e:a2:c9:20:b6:be:36:fc:e3:5b:b3:63:bd:4a:90:b7:
         05:1d:2b:3b:87:20:7f:aa:4d:c4:1c:f9:1c:99:dd:91:7e:a3:
         dc:e3:11:4d:bc:31:7e:79:f6:94:65:a6:f6:ea:44:7a:dd:36:
         f0:83:c2:54:78:d9:1a:6f:4d:b6:b5:33:d9:3e:1b:32:fc:26:
         c1:44:33:f0:0f:20:6d:47:32:9b:50:d9:27:88:3e:72:51:46:
         ff:62:27:83:34:fa:72:56:74:12:0e:48:1b:11:6d:20:41:26:
         2a:ed:b5:e4:ac:95:68:c2:04:d1:7e:2d:b3:70:37:16:10:3c:
         97:4f:93:9d:82:92:56:dd:31:09:25:10:8e:2e:67:2b:60:23:
         55:83:2a:94:b3:f3:29:3e:66:0c:a0:86:ec:92:ed:94:c1:ba:
         5f:7d:83:6f:b5:f3:e9:dd:ec:98:d9:35:29:40:2c:e6:ec:86:
         32:16:2e:a7:71:dc:cc:35:89:9c:5a:4e:2e:9d:dd:a7:6a:e9:
         67:14:56:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqelhdLXqyG/o7nXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNk
OWM3MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
MTljY2FiZjUtMDEwNi00ZDAxLTgxNDQtYWM1MTQwMmEyNzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3SLUTFx7B6EBOARtAQPcIKe0ShLoqs/c99L
Z5+dJyd4d3NyW4gtCZkkmfDVPp4YIW7eZPC/g7hF23RYpcn/WHJtUQcv3dPSC2Zq
2ImsWrI+PV0ocEwff28Ze3vcpNtYQD+2NV+50o5ZzU4cXXv/2tWbEtn2tUQfoYQs
vm7MEoL8i1X9nbglDxQmypNAuc6I6+86bMe4SHCc3R9q/IHLTFHZ0KutmlAokxna
NtRlY8cI2QSvkLntOem6C0pXLOcTZKf/SnIqLTmFhnWdFLc7E+3xx9xUEJO6l0mJ
iGY3pb/EsbafPnMMFuIjrMGldY+b/49/OxHa/uuVSj0gU4W8fwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO+9Jbw4tWiE84rUDYY35pDyZTVZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjAx
YjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvM2Q1MWZmOTYtMmY4OC0z
NGZkLTk3NWItMWEzMmNmMmYxZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYwMWI2OTQtNjI0Mi00YjFjLWE4
NDEtZDBhNzIxNGNkOWM3L2U2MDFiNjk0LTYyNDItNGIxYy1hODQxLWQwYTcyMTRj
ZDljNy5jcmwwHwYDVR0jBBgwFoAUlnqmOy7TqmVEC36L9Uu68e2VUAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3
MjE0Y2Q5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfzaKAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEIfNWpe9o4u3pjhIsNmpKRWWlVTrQoC2fPdM7vAjRTUuaxtYSTK
Q4YhYRAvsNsblfsjYTfCEExgHqLJILa+NvzjW7NjvUqQtwUdKzuHIH+qTcQc+RyZ
3ZF+o9zjEU28MX559pRlpvbqRHrdNvCDwlR42RpvTba1M9k+GzL8JsFEM/APIG1H
MptQ2SeIPnJRRv9iJ4M0+nJWdBIOSBsRbSBBJirtteSslWjCBNF+LbNwNxYQPJdP
k52CklbdMQklEI4uZytgI1WDKpSz8yk+ZgyghuyS7ZTBul99g2+18+nd7JjZNSlA
LObshjIWLqdx3Mw1iZxaTi6d3adq6WcUVs4=
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:36:35 2025 by rpki-client