Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9b4b33fc-4a7e-3283-a578-c21d78b670b9.roa
File:                     9b4b33fc-4a7e-3283-a578-c21d78b670b9.roa (raw, json)
Hash identifier:          ZqJawxrHE78w28DkNbVbiX4XXhP2GggBuHczAxCjXyQ=
Subject key identifier:   BC:87:5F:78:2E:C1:82:FD:65:8E:C5:6E:8E:D2:23:E5:CF:B6:8B:6E
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A5FC5E5D09CC25321D0186F00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9b4b33fc-4a7e-3283-a578-c21d78b670b9.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        2606:f4c0:3000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e5:d0:9c:c2:53:21:d0:18:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=fc3ec45e-5e73-412e-84ba-4b3cca8ef535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:0e:54:f6:f5:f5:92:19:99:34:9d:74:02:
                    e1:e5:9b:c5:03:29:76:74:06:e5:ad:18:b6:27:b9:
                    29:ba:0a:2d:b1:c8:ad:ee:5f:a6:8a:bb:3d:b3:c4:
                    2a:0a:2c:cf:dd:64:d3:23:56:f8:ec:95:c7:a2:ec:
                    29:30:64:fe:c5:ea:56:22:c8:5a:ad:cb:9c:1e:46:
                    0f:64:a7:79:4c:bc:1a:08:93:d2:b7:5b:b4:04:e7:
                    bd:26:fc:e3:aa:4d:32:b7:84:b1:7f:4a:1b:c2:1a:
                    ea:e4:69:02:15:f7:3a:75:41:ff:f8:89:95:5b:f3:
                    72:61:14:55:58:8e:38:64:ef:6b:a3:c8:03:a5:99:
                    c9:08:9e:2f:5e:4b:2a:5c:b6:55:0b:85:a5:1b:68:
                    45:62:9e:d2:9d:7c:ee:39:d0:3a:ad:1d:65:df:65:
                    7e:c4:35:c8:14:ff:fd:13:5b:76:f2:19:2e:81:d7:
                    69:d5:1a:05:c6:1d:a5:d0:c4:31:d7:f6:fe:2d:04:
                    f6:44:24:ba:f6:c4:7f:5a:e5:8f:90:13:1b:7c:7e:
                    87:43:5c:be:1f:11:d8:cc:dd:7d:4f:e9:89:e0:ac:
                    45:63:8b:0a:65:21:28:4e:33:e7:64:4e:66:39:b1:
                    2b:17:fc:99:38:9f:4c:8e:38:5b:40:89:28:07:eb:
                    55:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:87:5F:78:2E:C1:82:FD:65:8E:C5:6E:8E:D2:23:E5:CF:B6:8B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9b4b33fc-4a7e-3283-a578-c21d78b670b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:42:1c:41:d5:ba:7b:ff:6d:fc:a3:a6:cb:b8:0b:39:d4:00:
         f5:df:22:79:ab:16:67:0d:ed:3f:aa:0d:12:95:01:e4:13:e7:
         f4:bf:e4:36:32:6e:c0:9b:08:f2:44:60:76:96:cf:7b:38:ef:
         93:71:4c:80:33:db:e5:88:bd:08:9b:76:02:98:e0:55:84:7b:
         b3:60:ae:ab:ab:e5:e3:d4:d4:3c:77:26:06:22:ce:87:3a:d5:
         37:17:84:5b:35:5a:0f:a5:21:d9:6b:ab:df:60:46:77:56:2a:
         c2:20:34:79:9e:fa:0a:9b:8a:6e:1e:ce:fb:b3:5c:bc:e7:85:
         57:bd:32:56:b0:27:b9:48:b0:73:71:ad:e5:9e:e7:9f:8f:f4:
         c5:b0:20:28:79:35:5e:a7:7f:42:e4:df:db:f7:1d:59:c0:e0:
         dc:9a:60:6a:9e:91:1e:6b:93:71:fd:c3:c7:59:87:ac:4f:11:
         12:c2:c7:cc:aa:e4:01:c7:cf:8a:87:0b:5a:db:dd:46:cb:71:
         36:e5:10:ef:d1:73:03:30:fb:ad:6a:8e:95:63:0e:f4:13:84:
         f7:18:40:27:62:10:ba:09:68:0f:3a:5c:30:6a:2a:d8:a3:b1:
         c7:f6:2f:f0:6c:86:80:40:80:75:3a:0f:1c:45:80:46:58:90:
         94:c7:4d:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpfxeXQnMJTIdAYbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk
ZmMzZWM0NWUtNWU3My00MTJlLTg0YmEtNGIzY2NhOGVmNTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrgOVPb19ZIZmTSddALh5ZvFAyl2dAblrRi2
J7kpugotscit7l+mirs9s8QqCizP3WTTI1b47JXHouwpMGT+xepWIsharcucHkYP
ZKd5TLwaCJPSt1u0BOe9Jvzjqk0yt4Sxf0obwhrq5GkCFfc6dUH/+ImVW/NyYRRV
WI44ZO9ro8gDpZnJCJ4vXksqXLZVC4WlG2hFYp7SnXzuOdA6rR1l32V+xDXIFP/9
E1t28hkugddp1RoFxh2l0MQx1/b+LQT2RCS69sR/WuWPkBMbfH6HQ1y+HxHYzN19
T+mJ4KxFY4sKZSEoTjPnZE5mObErF/yZOJ9MjjhbQIkoB+tV+wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLyHX3guwYL9ZY7Fbo7SI+XPtotuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvOWI0YjMzZmMtNGE3ZS0z
MjgzLWE1NzgtYzIxZDc4YjY3MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgb0wDAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAeEIcQdW6e/9t/KOmy7gLOdQA9d8ieasWZw3tP6oNEpUB5BPn9L/k
NjJuwJsI8kRgdpbPezjvk3FMgDPb5Yi9CJt2ApjgVYR7s2Cuq6vl49TUPHcmBiLO
hzrVNxeEWzVaD6Uh2Wur32BGd1YqwiA0eZ76CpuKbh7O+7NcvOeFV70yVrAnuUiw
c3Gt5Z7nn4/0xbAgKHk1Xqd/QuTf2/cdWcDg3Jpgap6RHmuTcf3Dx1mHrE8REsLH
zKrkAcfPiocLWtvdRstxNuUQ79FzAzD7rWqOlWMO9BOE9xhAJ2IQugloDzpcMGoq
2KOxx/Yv8GyGgECAdToPHEWARliQlMdN7Q==
-----END CERTIFICATE-----
Generated at Thu Jul 10 02:10:41 2025 by rpki-client