Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa
File:                     0f4421e9-f24b-3fb4-80a3-278119725959.roa (raw, json)
Hash identifier:          83r0z0wyIAla1W1fxyhCZHxnwsxiHeFSDHvcWrxImJM=
Subject key identifier:   B1:12:43:CD:33:62:29:09:36:7F:11:0A:CE:DF:1B:97:28:FE:17:04
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584A73509975C050E73C506903A0
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     4213
IP address blocks:        2607:f820::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:99:75:c0:50:e7:3c:50:69:03:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=ce6c94e2-08e1-4d5d-bf47-46859962ed7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:05:6d:85:35:a2:8d:eb:ed:8f:be:80:95:
                    91:02:62:0c:39:9a:5d:d7:75:77:38:a8:dc:d1:7d:
                    0e:34:8f:e8:c1:a8:63:3f:a8:97:35:5b:09:85:67:
                    bb:cc:47:b0:b4:7f:15:8c:0d:4a:98:eb:8c:9b:0e:
                    ea:d2:44:a6:db:3b:04:7d:06:4c:04:71:3f:d2:2b:
                    79:2b:25:14:85:a9:bf:05:e1:6a:be:65:99:a9:82:
                    47:7a:a9:4d:7c:70:2c:22:68:fd:29:87:53:03:a9:
                    37:ee:8c:b9:29:fa:e4:66:05:e1:af:8d:ac:44:12:
                    63:bd:12:56:60:09:d9:bf:be:b2:dd:e9:9d:27:5b:
                    30:e1:00:a3:53:a7:44:bd:49:ab:8e:18:b9:55:98:
                    b0:49:61:55:74:9e:b7:b1:df:11:84:25:a9:b2:56:
                    6e:3d:c5:12:46:6d:86:49:b4:77:25:f5:1a:0a:47:
                    04:6f:51:62:be:fc:03:55:aa:51:44:42:a9:0c:35:
                    3a:b8:39:a1:2c:d3:d4:72:b2:dc:1c:81:90:54:99:
                    7e:c9:14:03:50:a6:ff:ae:c9:35:bf:c3:8a:f7:89:
                    8d:e4:8d:a9:1d:1f:6b:c8:d3:4c:97:8a:6e:21:f4:
                    f5:e6:f5:f9:89:30:b3:f5:dc:c1:05:0d:b4:9b:12:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:43:CD:33:62:29:09:36:7F:11:0A:CE:DF:1B:97:28:FE:17:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f820::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:26:24:d8:5a:cd:cc:7a:b6:02:4a:93:c0:66:be:51:34:ea:
         72:25:88:02:d6:be:fe:d1:72:c4:e0:19:6d:91:67:fe:c7:57:
         46:65:65:71:d7:35:f6:52:43:4c:2f:4c:0c:1b:f3:16:79:bd:
         ab:fc:29:4d:71:17:27:2b:78:b7:de:d8:18:8c:e3:60:24:ae:
         97:15:15:71:f9:76:95:eb:d4:f7:35:b9:40:3d:d2:fe:88:2c:
         d1:50:32:63:82:a9:8f:72:74:7c:89:86:30:39:19:4f:88:fd:
         c0:cb:36:c6:10:81:4b:a9:56:9a:71:3c:a3:fe:03:ed:98:bb:
         3c:ab:6e:94:58:28:ca:9d:68:32:6a:a6:56:94:82:56:c8:11:
         73:f4:7f:34:8d:e1:b5:e2:ad:81:f6:f8:cc:0c:e9:d7:4a:da:
         45:04:a2:c5:54:24:39:6e:c8:d5:eb:a7:ec:82:33:0e:da:47:
         13:0b:89:1a:46:ad:69:05:66:b7:e4:94:88:1c:bd:c4:5e:8a:
         d1:0b:96:b7:01:83:3e:bb:b0:43:e8:a7:43:2e:09:ff:c1:60:
         fa:a1:22:3e:8d:3d:6b:48:f2:45:6f:75:b4:97:b5:10:e2:fd:
         de:ea:dc:e0:e7:5b:97:96:c3:87:43:88:d5:7e:f8:99:a3:7d:
         d1:3f:80:d9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpzUJl1wFDnPFBpA6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz
ZWJmMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
Y2U2Yzk0ZTItMDhlMS00ZDVkLWJmNDctNDY4NTk5NjJlZDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0sFbYU1oo3r7Y++gJWRAmIMOZpd13V3OKjc
0X0ONI/owahjP6iXNVsJhWe7zEewtH8VjA1KmOuMmw7q0kSm2zsEfQZMBHE/0it5
KyUUham/BeFqvmWZqYJHeqlNfHAsImj9KYdTA6k37oy5KfrkZgXhr42sRBJjvRJW
YAnZv76y3emdJ1sw4QCjU6dEvUmrjhi5VZiwSWFVdJ63sd8RhCWpslZuPcUSRm2G
SbR3JfUaCkcEb1FivvwDVapRREKpDDU6uDmhLNPUcrLcHIGQVJl+yRQDUKb/rsk1
v8OK94mN5I2pHR9ryNNMl4puIfT15vX5iTCz9dzBBQ20mxKMRQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLESQ80zYikJNn8RCs7fG5co/hcEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl
NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMGY0NDIxZTktZjI0Yi0z
ZmI0LTgwYTMtMjc4MTE5NzI1OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw
ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm
M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm
YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4IDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQArJiTYWs3MerYCSpPAZr5RNOpyJYgC1r7+0XLE4BltkWf+x1dGZWVx
1zX2UkNML0wMG/MWeb2r/ClNcRcnK3i33tgYjONgJK6XFRVx+XaV69T3NblAPdL+
iCzRUDJjgqmPcnR8iYYwORlPiP3AyzbGEIFLqVaacTyj/gPtmLs8q26UWCjKnWgy
aqZWlIJWyBFz9H80jeG14q2B9vjMDOnXStpFBKLFVCQ5bsjV66fsgjMO2kcTC4ka
Rq1pBWa35JSIHL3EXorRC5a3AYM+u7BD6KdDLgn/wWD6oSI+jT1rSPJFb3W0l7UQ
4v3e6tzg51uXlsOHQ4jVfviZo33RP4DZ
-----END CERTIFICATE-----
Generated at Sat Jul 12 00:33:47 2025 by rpki-client