Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/8b3596de-5dd6-3d74-9e71-334336ad5edf.roa
File:                     8b3596de-5dd6-3d74-9e71-334336ad5edf.roa (raw, json)
Hash identifier:          +2fdraWM4DX7LjE9XNgWUXu2VM0i39Km/6RohlkKJgw=
Subject key identifier:   78:DD:1D:1E:68:FF:6E:34:46:4F:2E:58:72:4B:2F:41:59:CD:A4:5A
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584A8575F116555240E7A862AFC0
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/8b3596de-5dd6-3d74-9e71-334336ad5edf.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     206216
IP address blocks:        2602:fb54:152::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f1:16:55:52:40:e7:a8:62:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=b0c208fb-10a9-4353-bbb7-eee9dd05c9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:f3:1c:c0:ed:0f:c9:d8:3d:23:51:74:96:
                    98:a8:30:3a:86:29:2d:73:52:8b:c0:7b:9f:64:9c:
                    67:2a:cc:9a:a0:06:f6:ea:f8:bf:59:8a:67:4b:ad:
                    bf:0e:f1:f1:a6:d6:53:cf:d7:e0:4d:28:30:42:49:
                    68:d0:34:50:b8:73:06:df:35:1d:24:92:27:12:6e:
                    e2:87:78:e5:d2:fe:3e:ca:21:86:8e:a3:c9:81:b5:
                    5d:24:8e:d9:95:47:4a:c2:e0:2e:29:91:9c:f3:5b:
                    23:8b:90:04:81:64:7d:7d:fc:2b:0d:aa:5f:5b:4b:
                    55:8e:c0:5d:38:b1:1a:e3:5b:3f:d9:94:14:a1:eb:
                    2b:8e:3d:a0:4d:48:ed:44:65:cd:c1:4a:c5:97:3a:
                    af:27:c9:5c:7b:ec:04:2a:3c:0d:82:9a:f7:53:96:
                    fb:7d:69:29:89:42:89:09:21:2a:5b:45:e5:d8:4c:
                    87:f9:74:fa:11:ca:73:66:96:cb:49:ee:fd:a4:35:
                    e0:02:f3:f2:59:b8:f2:54:44:76:d1:41:ea:08:e1:
                    1a:83:e7:82:36:80:02:c3:06:1c:87:13:cf:f8:d7:
                    7c:bf:5e:f7:3c:cf:d3:bc:0d:7c:e4:5f:f8:1c:e2:
                    c8:02:07:46:f5:ba:a8:88:a1:9d:47:cb:18:55:49:
                    b4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DD:1D:1E:68:FF:6E:34:46:4F:2E:58:72:4B:2F:41:59:CD:A4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/8b3596de-5dd6-3d74-9e71-334336ad5edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:152::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:8f:ad:3e:b2:73:54:ab:40:85:79:27:39:00:90:4d:f7:b3:
         d3:74:2a:26:d3:45:78:0b:ba:d0:07:de:6d:d2:8a:92:a7:ef:
         e2:4e:d1:e9:10:da:af:a8:d7:1d:e9:40:73:61:57:cf:30:d7:
         aa:c4:a3:54:99:ac:01:d5:c6:80:51:b4:46:12:c4:0a:d1:4e:
         8b:df:51:3d:ae:fb:fb:0c:d6:c2:28:d8:3e:e1:41:2e:ed:00:
         99:12:a9:84:2a:ee:1f:92:5c:b9:da:a8:8d:af:6d:1d:ff:a4:
         80:d2:88:df:f5:38:2a:d6:5e:25:cb:c4:1c:78:51:c4:ca:70:
         26:29:e8:f9:d0:e3:20:da:bb:37:79:cd:d0:aa:25:5b:18:7e:
         44:8f:b2:72:75:f8:69:f4:88:63:12:54:49:88:23:e4:fa:e6:
         f3:43:b7:28:3f:8d:06:b9:fa:16:12:9d:7d:47:1d:4e:8b:08:
         9d:61:87:3d:24:f1:b3:65:76:2d:5a:4f:d1:c3:f0:54:bc:c8:
         2b:4e:eb:ab:e9:5c:00:43:a9:b3:b5:b5:16:f1:da:28:2f:9e:
         12:55:3a:f1:f5:00:33:91:f8:3e:b5:14:fb:57:e5:b8:4f:4c:
         77:87:a5:46:82:be:50:c4:b0:5f:c7:00:48:52:e7:ad:33:9b:
         2c:23:f5:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqFdfEWVVJA56hir8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk
YjBjMjA4ZmItMTBhOS00MzUzLWJiYjctZWVlOWRkMDVjOWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHPzHMDtD8nYPSNRdJaYqDA6hiktc1KLwHuf
ZJxnKsyaoAb26vi/WYpnS62/DvHxptZTz9fgTSgwQklo0DRQuHMG3zUdJJInEm7i
h3jl0v4+yiGGjqPJgbVdJI7ZlUdKwuAuKZGc81sji5AEgWR9ffwrDapfW0tVjsBd
OLEa41s/2ZQUoesrjj2gTUjtRGXNwUrFlzqvJ8lce+wEKjwNgpr3U5b7fWkpiUKJ
CSEqW0Xl2EyH+XT6EcpzZpbLSe79pDXgAvPyWbjyVER20UHqCOEag+eCNoACwwYc
hxPP+Nd8v173PM/TvA185F/4HOLIAgdG9bqoiKGdR8sYVUm0pwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHjdHR5o/240Rk8uWHJLL0FZzaRaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvOGIzNTk2ZGUtNWRkNi0z
ZDc0LTllNzEtMzM0MzM2YWQ1ZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7VAFS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGqPrT6yc1SrQIV5JzkAkE33s9N0KibTRXgLutAH3m3SipKn7+JO
0ekQ2q+o1x3pQHNhV88w16rEo1SZrAHVxoBRtEYSxArRTovfUT2u+/sM1sIo2D7h
QS7tAJkSqYQq7h+SXLnaqI2vbR3/pIDSiN/1OCrWXiXLxBx4UcTKcCYp6PnQ4yDa
uzd5zdCqJVsYfkSPsnJ1+Gn0iGMSVEmII+T65vNDtyg/jQa5+hYSnX1HHU6LCJ1h
hz0k8bNldi1aT9HD8FS8yCtO66vpXABDqbO1tRbx2igvnhJVOvH1ADOR+D61FPtX
5bhPTHeHpUaCvlDEsF/HAEhS560zmywj9eo=
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:14:47 2025 by rpki-client