Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/a600e5cf-d500-321d-9338-5549b162eadb.roa
File:                     a600e5cf-d500-321d-9338-5549b162eadb.roa (raw, json)
Hash identifier:          2nmxdFZunmquMP5kZsXrfZF7DfEmfeDei+2Om1VAccY=
Subject key identifier:   FD:B5:5C:CD:30:B9:2A:9E:BD:77:AF:B7:FA:06:67:5E:24:62:7E:59
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A14657B8A736E9EA7427AB4C0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/a600e5cf-d500-321d-9338-5549b162eadb.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:20ba::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7b:8a:73:6e:9e:a7:42:7a:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=d0d70b28-5c91-4eea-9b12-8a54dd7f6be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:dd:6a:e2:54:c9:bd:fd:96:34:95:d0:a1:
                    6c:88:b4:0c:c0:e9:83:64:18:f3:a7:ef:68:1a:d6:
                    43:64:ec:ea:1f:17:82:04:b9:1a:93:43:09:e3:ba:
                    4e:71:94:e7:55:78:39:22:56:4e:6d:f0:2f:06:b5:
                    1c:29:34:02:41:50:18:ab:f8:6d:cc:b1:3e:42:b3:
                    57:ef:cf:d1:6f:5e:cd:53:2e:b1:21:15:f8:94:45:
                    b7:e0:0a:6e:fe:e4:8f:fd:23:9f:60:d1:d4:bb:33:
                    49:0c:c5:c7:ed:72:4f:0f:29:7e:2c:78:ba:36:c0:
                    73:da:35:9a:03:44:d0:29:ae:82:de:e7:72:e3:27:
                    c3:b5:ac:4f:cc:89:29:ca:21:1b:4c:cc:73:c3:49:
                    d5:32:83:01:f5:f6:00:5e:61:fb:27:53:25:91:b5:
                    09:e4:4e:72:8f:96:c7:ab:86:65:a9:f6:be:b3:ac:
                    ee:99:b2:e4:06:97:05:4f:26:f9:14:72:33:b8:9c:
                    fe:b3:1b:97:12:d8:e3:a6:3a:26:a5:8e:0f:61:0e:
                    a4:f6:53:0a:51:a8:4f:4e:6a:0a:82:32:14:8d:e6:
                    e1:07:1c:8f:06:fb:97:08:f0:fd:e2:98:69:bd:7e:
                    e2:12:13:d1:04:e6:78:b4:09:d5:d4:1e:54:17:61:
                    95:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B5:5C:CD:30:B9:2A:9E:BD:77:AF:B7:FA:06:67:5E:24:62:7E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/a600e5cf-d500-321d-9338-5549b162eadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20ba::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:8d:16:3b:fb:06:b0:44:2a:df:68:78:08:5f:26:b3:cc:
         42:13:01:eb:34:d3:03:cd:d3:63:fd:bd:62:19:47:96:c6:34:
         3d:77:18:56:f4:56:53:dc:5c:72:0a:7f:7d:de:39:f4:41:99:
         2f:53:a8:7d:07:e4:27:20:4a:26:aa:d8:2a:8a:bf:13:84:84:
         ff:9f:2f:c0:c5:88:ae:46:c8:54:d8:23:d0:88:08:51:3e:1c:
         2f:09:3d:19:d1:f7:a2:f9:6a:7d:f1:a1:3f:e3:a4:04:f1:99:
         8a:dc:da:01:9c:5b:85:df:da:b6:0e:fe:62:00:7e:05:df:3f:
         dc:99:87:92:45:1d:df:08:9f:c8:e2:af:65:08:bd:96:6e:32:
         aa:ad:4a:61:d4:0a:ad:bc:23:3f:b3:df:4b:db:4f:0d:8d:4d:
         99:0a:b9:34:5b:50:71:46:47:44:64:21:ca:bf:83:20:34:d2:
         05:8c:f5:7c:84:0a:3f:65:e6:ac:35:6c:e2:5e:1e:62:12:98:
         8f:b6:c6:0d:ef:b7:42:97:af:c7:b4:1b:6c:68:bc:40:b5:c5:
         8a:d8:f0:0e:27:49:ff:83:93:84:7b:fb:a0:6f:f8:e8:1e:15:
         42:69:6d:01:69:90:64:b3:b3:c9:b5:c9:17:6c:17:37:b0:ff:
         a1:96:8a:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoUZXuKc26ep0J6tMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZDBkNzBiMjgtNWM5MS00ZWVhLTliMTItOGE1NGRkN2Y2YmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyfdauJUyb39ljSV0KFsiLQMwOmDZBjzp+9o
GtZDZOzqHxeCBLkak0MJ47pOcZTnVXg5IlZObfAvBrUcKTQCQVAYq/htzLE+QrNX
78/Rb17NUy6xIRX4lEW34Apu/uSP/SOfYNHUuzNJDMXH7XJPDyl+LHi6NsBz2jWa
A0TQKa6C3udy4yfDtaxPzIkpyiEbTMxzw0nVMoMB9fYAXmH7J1MlkbUJ5E5yj5bH
q4Zlqfa+s6zumbLkBpcFTyb5FHIzuJz+sxuXEtjjpjompY4PYQ6k9lMKUahPTmoK
gjIUjebhBxyPBvuXCPD94phpvX7iEhPRBOZ4tAnV1B5UF2GVrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP21XM0wuSqevXevt/oGZ14kYn5ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvYTYwMGU1Y2YtZDUwMC0z
MjFkLTkzMzgtNTU0OWIxNjJlYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCC6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACw+jRY7+wawRCrfaHgIXyazzEITAes00wPN02P9vWIZR5bGND13
GFb0VlPcXHIKf33eOfRBmS9TqH0H5CcgSiaq2CqKvxOEhP+fL8DFiK5GyFTYI9CI
CFE+HC8JPRnR96L5an3xoT/jpATxmYrc2gGcW4Xf2rYO/mIAfgXfP9yZh5JFHd8I
n8jir2UIvZZuMqqtSmHUCq28Iz+z30vbTw2NTZkKuTRbUHFGR0RkIcq/gyA00gWM
9XyECj9l5qw1bOJeHmISmI+2xg3vt0KXr8e0G2xovEC1xYrY8A4nSf+Dk4R7+6Bv
+OgeFUJpbQFpkGSzs8m1yRdsFzew/6GWilM=
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:05:54 2025 by rpki-client