Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/681846f7-c88b-3855-a9c4-86d03b0db501.roa
File:                     681846f7-c88b-3855-a9c4-86d03b0db501.roa (raw, json)
Hash identifier:          1iWgJIjbnlIxPpZoGP3/VvtyTwVgtlrwFflRHbpXv/o=
Subject key identifier:   7B:E8:52:A5:58:37:59:D0:40:D1:DE:18:BC:B0:46:4C:91:D9:EE:97
Certificate issuer:       /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial:       010D0C9F4328584AD23BCFCA66C019CA2971A780
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/681846f7-c88b-3855-a9c4-86d03b0db501.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     3754
IP address blocks:        2620:f:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:cf:ca:66:c0:19:ca:29:71:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=c4db9507-742e-49d5-8ad1-df7f8eddbfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:27:b2:da:1a:24:b5:60:db:18:bf:75:6b:e7:
                    d7:cb:8e:de:10:e2:57:c0:ae:03:fa:c2:cf:a5:33:
                    b4:35:52:5d:b3:81:80:20:d0:c1:48:d8:53:bf:53:
                    26:9b:0f:f7:ce:02:b3:9d:4e:98:8e:6c:5e:bb:fd:
                    d6:bf:51:8a:c4:a8:e9:c2:dc:db:2e:1d:0c:ca:35:
                    8a:16:3a:76:f1:04:a3:38:e9:38:9b:30:ed:02:2f:
                    f2:aa:e9:e3:89:26:f2:21:da:90:5d:7b:bd:f2:4b:
                    47:be:2b:66:d0:62:95:fe:80:51:a8:be:b0:86:f5:
                    9b:95:2b:24:55:73:1f:b4:09:42:d3:5f:c2:85:6e:
                    8b:b6:d2:4e:2b:23:3a:ab:f2:fe:ea:02:bb:54:f3:
                    39:b2:72:0c:6a:39:8a:17:22:3f:91:70:21:86:66:
                    23:96:04:84:fc:50:9d:cf:14:c4:b5:ef:a3:30:12:
                    62:79:59:df:eb:e5:9d:b4:f8:d8:c0:38:cc:bc:7a:
                    7c:f4:73:e3:49:8b:a2:12:91:9b:51:02:5b:1f:db:
                    36:81:c4:ee:87:5b:1c:10:35:46:ec:93:18:8e:8d:
                    b5:ab:3d:ca:9d:4a:b7:1b:80:2c:a4:e8:ca:4f:8d:
                    c5:d3:20:75:6a:04:36:ac:8a:f7:51:53:7f:4f:b0:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E8:52:A5:58:37:59:D0:40:D1:DE:18:BC:B0:46:4C:91:D9:EE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/681846f7-c88b-3855-a9c4-86d03b0db501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:be:45:74:91:4d:ec:ab:bb:79:a5:a0:6d:64:cf:13:7a:b7:
         f8:01:e1:c2:af:28:d0:ba:a0:5d:0c:f1:cd:3c:fa:c0:15:2c:
         89:b8:16:1b:24:26:1a:c6:96:2e:49:8d:d3:4b:ec:54:55:82:
         b5:17:ae:b8:72:fc:39:8d:78:72:74:82:1d:9a:0b:13:41:a8:
         62:c2:1d:ff:84:14:d6:e3:f9:17:7c:81:f6:f7:a7:d6:9e:49:
         0a:6e:77:41:a7:98:6c:15:56:8d:e4:46:4f:29:2c:8b:a2:7d:
         5f:f8:7b:67:27:30:cf:3a:1e:41:aa:6d:6b:f6:06:b2:ba:19:
         7e:8f:b2:3b:5d:dc:cb:f0:79:6d:4f:a6:f3:a8:29:d9:f3:84:
         33:00:00:65:99:25:14:09:b5:82:a7:97:32:05:42:9b:d2:3c:
         44:71:1e:9f:9b:9c:eb:66:14:8a:5a:66:ad:a1:ee:0d:91:e3:
         a5:48:c2:b0:7f:7c:7f:8b:95:5c:ed:15:a3:f5:12:10:a4:db:
         f7:f7:9a:6d:e5:33:89:1a:01:42:00:9c:c3:74:e0:8e:63:28:
         3a:13:cb:96:d1:2c:85:ab:ce:b7:e0:1c:7a:29:1c:b6:9b:20:
         52:79:ef:ad:b7:a0:90:73:f7:45:72:12:04:df:0f:5e:bf:c1:
         8b:a2:87:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErSO8/KZsAZyilxp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZGEyMzktNzkzZS00MDgyLWFmZGUtNjQ1OGYyMzE5
ZTdlMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
YzRkYjk1MDctNzQyZS00OWQ1LThhZDEtZGY3ZjhlZGRiZmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyey2hoktWDbGL91a+fXy47eEOJXwK4D+sLP
pTO0NVJds4GAINDBSNhTv1Mmmw/3zgKznU6Yjmxeu/3Wv1GKxKjpwtzbLh0MyjWK
Fjp28QSjOOk4mzDtAi/yqunjiSbyIdqQXXu98ktHvitm0GKV/oBRqL6whvWblSsk
VXMftAlC01/ChW6LttJOKyM6q/L+6gK7VPM5snIMajmKFyI/kXAhhmYjlgSE/FCd
zxTEte+jMBJieVnf6+WdtPjYwDjMvHp89HPjSYuiEpGbUQJbH9s2gcTuh1scEDVG
7JMYjo21qz3KnUq3G4AspOjKT43F0yB1agQ2rIr3UVN/T7A93wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHvoUqVYN1nQQNHeGLywRkyR2e6XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJk
YTIzOS03OTNlLTQwODItYWZkZS02NDU4ZjIzMTllN2UvNjgxODQ2ZjctYzg4Yi0z
ODU1LWE5YzQtODZkMDNiMGRiNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGUyZGEyMzktNzkzZS00MDgyLWFm
ZGUtNjQ1OGYyMzE5ZTdlLzhlMmRhMjM5LTc5M2UtNDA4Mi1hZmRlLTY0NThmMjMx
OWU3ZS5jcmwwHwYDVR0jBBgwFoAUth6wyClvWdBkK0QvQaw4WOAHAegwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJkYTIzOS03OTNlLTQwODItYWZkZS02NDU4
ZjIzMTllN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAADwAG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABy+RXSRTeyru3mloG1kzxN6t/gB4cKvKNC6oF0M8c08+sAVLIm4
FhskJhrGli5JjdNL7FRVgrUXrrhy/DmNeHJ0gh2aCxNBqGLCHf+EFNbj+Rd8gfb3
p9aeSQpud0GnmGwVVo3kRk8pLIuifV/4e2cnMM86HkGqbWv2BrK6GX6Psjtd3Mvw
eW1PpvOoKdnzhDMAAGWZJRQJtYKnlzIFQpvSPERxHp+bnOtmFIpaZq2h7g2R46VI
wrB/fH+LlVztFaP1EhCk2/f3mm3lM4kaAUIAnMN04I5jKDoTy5bRLIWrzrfgHHop
HLabIFJ57623oJBz90VyEgTfD16/wYuih84=
-----END CERTIFICATE-----
Generated at Thu Aug 21 06:58:02 2025 by rpki-client