Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa
File:                     3526d53a-51ac-37b2-9014-a3209df5c50b.roa (raw, json)
Hash identifier:          2tfNARnR30cfadMX5Cgp5xjIFMjFth5dOF0T13CMIKg=
Subject key identifier:   63:F8:27:CE:8C:86:11:02:93:47:26:B3:FC:FF:86:DE:CF:85:BA:01
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584A6F20720CA2042E376ADBF7A0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     174
IP address blocks:        2001:49f0:d0ad::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:72:0c:a2:04:2e:37:6a:db:f7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=2a72fbab-cc23-4665-b0cd-81b8af6cadc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1d:e7:00:51:89:cd:5f:69:cc:2e:2d:9d:f7:
                    bb:3a:f8:e1:e7:69:df:7a:1c:dc:7d:03:34:3f:41:
                    b0:1a:ce:ce:fd:8a:d8:16:4d:25:cc:2a:51:e3:31:
                    a7:a0:0e:60:f0:07:e8:9d:4c:41:33:3a:68:73:4e:
                    0b:b6:aa:a5:d7:3d:cf:16:78:52:db:e7:73:93:97:
                    5b:c6:58:c9:c3:d0:d9:7a:df:2e:00:12:f9:2f:de:
                    53:8b:f0:29:c4:ce:9c:68:6b:ad:2b:28:2e:3f:42:
                    cd:e9:96:9b:64:5a:dd:04:2e:ff:9d:10:22:b6:e6:
                    fd:20:dc:29:fa:21:e0:1e:c4:2a:ed:67:55:dd:b6:
                    b7:d7:87:47:66:7f:a7:ef:94:78:00:57:22:97:87:
                    6e:c2:26:7c:e5:37:59:03:21:a8:e0:03:f7:96:1e:
                    4c:6e:af:2d:40:cb:ac:5d:8d:b4:23:49:b0:73:8d:
                    53:91:80:4f:1f:67:8a:08:ca:b3:74:52:94:bc:4c:
                    6e:65:1c:1d:f0:e5:78:10:6b:9b:d9:1b:26:b3:92:
                    fd:b4:c3:c9:9d:ba:5d:c5:dc:d5:eb:f7:5d:fe:c3:
                    68:42:f4:be:c8:a7:f3:68:0a:04:79:07:c2:24:0f:
                    eb:77:3e:08:21:ca:a3:62:57:45:73:a0:81:85:53:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:27:CE:8C:86:11:02:93:47:26:B3:FC:FF:86:DE:CF:85:BA:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3526d53a-51ac-37b2-9014-a3209df5c50b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d0ad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a3:ba:36:d0:bb:e0:3b:9c:24:23:5c:4c:fe:8f:0d:75:99:
         cf:85:74:44:4d:e5:e0:7e:77:0e:40:33:f4:4e:ca:2b:9e:a9:
         8c:96:06:c2:f0:e5:5e:8a:ed:0c:e5:ed:e2:15:c2:2f:8c:03:
         9b:a5:5e:c3:d0:d7:b7:87:f3:62:55:7b:95:0e:fa:8c:50:10:
         0b:24:02:c2:47:7f:7f:f8:c3:2f:ff:8e:fc:1f:b3:81:80:66:
         7c:34:34:82:32:f4:d4:de:22:34:c3:90:79:7a:5d:32:96:c5:
         29:04:ce:ba:0c:d1:5b:77:20:11:9a:3c:90:5a:d5:16:81:2e:
         55:a8:f5:94:a8:cc:9e:c8:63:d7:e8:71:cf:92:d5:08:ba:97:
         a6:2c:6e:07:ca:09:a6:15:7f:fb:3d:32:c4:2e:48:35:f8:40:
         8d:85:ad:0c:64:c9:72:70:10:0a:15:8c:8a:fb:ef:b5:e0:39:
         78:79:8b:42:ef:36:7f:6b:ee:11:a8:69:35:a6:fe:7e:ee:87:
         e6:a3:83:3b:78:92:97:c1:c6:34:c4:25:4b:51:1f:2b:46:07:
         42:94:e9:38:75:03:7a:a4:10:61:76:72:a6:94:18:28:71:ff:
         b7:04:fa:84:f1:16:0c:78:46:8d:81:67:5b:10:45:f9:c0:52:
         71:1f:51:3f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpvIHIMogQuN2rb96AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk
MmE3MmZiYWItY2MyMy00NjY1LWIwY2QtODFiOGFmNmNhZGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh3nAFGJzV9pzC4tnfe7Ovjh52nfehzcfQM0
P0GwGs7O/YrYFk0lzCpR4zGnoA5g8AfonUxBMzpoc04Ltqql1z3PFnhS2+dzk5db
xljJw9DZet8uABL5L95Ti/ApxM6caGutKyguP0LN6ZabZFrdBC7/nRAitub9INwp
+iHgHsQq7WdV3ba314dHZn+n75R4AFcil4duwiZ85TdZAyGo4AP3lh5Mbq8tQMus
XY20I0mwc41TkYBPH2eKCMqzdFKUvExuZRwd8OV4EGub2Rsms5L9tMPJnbpdxdzV
6/dd/sNoQvS+yKfzaAoEeQfCJA/rdz4IIcqjYldFc6CBhVOcmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGP4J86MhhECk0cms/z/ht7PhboBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzUyNmQ1M2EtNTFhYy0z
N2IyLTkwMTQtYTMyMDlkZjVjNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFJ8NCt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADWjujbQu+A7nCQjXEz+jw11mc+FdERN5eB+dw5AM/ROyiueqYyW
BsLw5V6K7Qzl7eIVwi+MA5ulXsPQ17eH82JVe5UO+oxQEAskAsJHf3/4wy//jvwf
s4GAZnw0NIIy9NTeIjTDkHl6XTKWxSkEzroM0Vt3IBGaPJBa1RaBLlWo9ZSozJ7I
Y9focc+S1Qi6l6YsbgfKCaYVf/s9MsQuSDX4QI2FrQxkyXJwEAoVjIr777XgOXh5
i0LvNn9r7hGoaTWm/n7uh+ajgzt4kpfBxjTEJUtRHytGB0KU6Th1A3qkEGF2cqaU
GChx/7cE+oTxFgx4Ro2BZ1sQRfnAUnEfUT8=
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:21:42 2025 by rpki-client