Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/83cbad37-4643-3bc3-825f-7a3fcbf1b6c5.roa
File:                     83cbad37-4643-3bc3-825f-7a3fcbf1b6c5.roa (raw, json)
Hash identifier:          mwjzUFKjNsAke6fswdiAut2W58RQj5N8oXqvSSSnK0g=
Subject key identifier:   F9:99:D0:C6:3A:14:88:95:1C:3F:85:4C:53:32:99:39:7C:EC:1F:0D
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A146569B82684B641A5A91300
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/83cbad37-4643-3bc3-825f-7a3fcbf1b6c5.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:2028::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:69:b8:26:84:b6:41:a5:a9:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=37dd3c85-2994-48d7-b32e-6be53e8bebc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4b:10:d2:dc:a2:0f:5a:83:21:d1:10:69:3d:
                    83:7c:2c:56:0d:f2:2d:c9:bb:9c:2c:07:a5:fc:94:
                    32:fc:11:81:35:f4:ef:01:93:a0:c6:40:37:aa:18:
                    15:78:bd:35:a6:c0:a7:95:f0:67:8d:e2:7b:15:68:
                    48:9d:52:11:e2:8f:cd:d6:d0:e0:3a:2b:0a:81:78:
                    c1:e5:bf:47:05:09:2e:f8:c1:04:f6:3c:f7:c2:1a:
                    89:89:31:9b:42:d8:98:34:4d:c2:af:fa:89:e1:b4:
                    e3:33:14:08:47:99:bb:76:b3:d3:21:39:a4:20:48:
                    72:d6:4c:ed:d3:10:93:ec:04:99:45:a3:7e:80:8f:
                    03:4c:0b:c8:c7:fc:bf:ac:72:9c:07:0d:50:75:4b:
                    2b:6d:28:26:8f:61:de:c0:7f:3e:94:84:d4:b0:c6:
                    82:91:3a:a6:69:4a:2a:c3:df:73:f0:02:53:46:1c:
                    61:9c:5d:fa:fe:aa:5c:07:5b:5d:1b:3e:3d:50:d5:
                    33:5f:37:e8:6b:0b:8c:13:bc:3d:3f:96:5a:35:20:
                    f7:43:2c:d6:7a:c3:6b:f0:cf:d1:24:95:f0:a2:72:
                    6f:0d:d4:df:90:5c:f0:1d:31:b8:4b:18:fb:7f:45:
                    d7:68:c5:7c:97:59:ff:72:1d:db:eb:b0:22:1e:aa:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:99:D0:C6:3A:14:88:95:1C:3F:85:4C:53:32:99:39:7C:EC:1F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/83cbad37-4643-3bc3-825f-7a3fcbf1b6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:37:55:c9:59:e6:2b:27:8d:25:98:f6:39:0c:6e:da:82:97:
         05:8c:15:f6:b5:51:2d:cc:34:b1:cc:98:bf:64:ee:a5:21:b7:
         aa:84:51:a4:ac:3d:b9:df:90:48:29:76:64:cd:f7:cc:d2:bc:
         0d:9b:55:49:54:2b:ca:4a:7c:79:f3:43:c7:96:de:e5:1b:65:
         52:97:31:3f:9d:07:49:46:91:4e:c1:94:e2:27:41:22:08:1d:
         92:48:e4:27:06:d8:ba:13:ec:0c:65:7d:51:20:29:17:09:ad:
         2d:b2:87:bc:01:2f:ef:cc:b9:d9:45:38:b9:89:28:dd:f3:23:
         1f:b9:0c:91:65:c0:4a:c2:49:04:d0:3a:ee:ea:60:20:6f:d8:
         15:61:a8:96:74:53:3d:20:ef:5f:b6:32:80:af:fc:67:7f:04:
         08:b5:62:67:e0:6b:c9:41:e1:37:fd:46:77:21:67:42:d7:65:
         a9:1a:39:4b:6a:8b:19:7f:3a:4d:da:7f:a8:39:a5:e0:85:56:
         96:48:e9:a8:06:be:d6:60:ae:22:b7:67:5b:f9:49:b9:46:5d:
         22:bb:c9:7b:a9:ed:ea:85:79:30:62:21:28:23:8f:7f:a7:cb:
         d0:df:83:1d:60:47:39:88:dc:58:ce:c7:83:bc:7f:e8:64:76:
         51:c7:ea:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZWm4JoS2QaWpEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
MzdkZDNjODUtMjk5NC00OGQ3LWIzMmUtNmJlNTNlOGJlYmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiksQ0tyiD1qDIdEQaT2DfCxWDfItybucLAel
/JQy/BGBNfTvAZOgxkA3qhgVeL01psCnlfBnjeJ7FWhInVIR4o/N1tDgOisKgXjB
5b9HBQku+MEE9jz3whqJiTGbQtiYNE3Cr/qJ4bTjMxQIR5m7drPTITmkIEhy1kzt
0xCT7ASZRaN+gI8DTAvIx/y/rHKcBw1QdUsrbSgmj2HewH8+lITUsMaCkTqmaUoq
w99z8AJTRhxhnF36/qpcB1tdGz49UNUzXzfoawuME7w9P5ZaNSD3QyzWesNr8M/R
JJXwonJvDdTfkFzwHTG4Sxj7f0XXaMV8l1n/ch3b67AiHqqGRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPmZ0MY6FIiVHD+FTFMymTl87B8NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvODNjYmFkMzctNDY0My0z
YmMzLTgyNWYtN2EzZmNiZjFiNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCAo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFc3VclZ5isnjSWY9jkMbtqClwWMFfa1US3MNLHMmL9k7qUht6qE
UaSsPbnfkEgpdmTN98zSvA2bVUlUK8pKfHnzQ8eW3uUbZVKXMT+dB0lGkU7BlOIn
QSIIHZJI5CcG2LoT7AxlfVEgKRcJrS2yh7wBL+/MudlFOLmJKN3zIx+5DJFlwErC
SQTQOu7qYCBv2BVhqJZ0Uz0g71+2MoCv/Gd/BAi1Ymfga8lB4Tf9RnchZ0LXZaka
OUtqixl/Ok3af6g5peCFVpZI6agGvtZgriK3Z1v5SblGXSK7yXup7eqFeTBiISgj
j3+ny9Dfgx1gRzmI3FjOx4O8f+hkdlHH6lY=
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:04:25 2025 by rpki-client