Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/22155043-6f19-3c19-b951-75ed01fc47ae.roa
File:                     22155043-6f19-3c19-b951-75ed01fc47ae.roa (raw, json)
Hash identifier:          aCKomXpjiqIJGSyN7IMLWRzcQFg55npm1M4GuqT8efI=
Subject key identifier:   03:ED:01:1A:8C:2B:B1:8A:11:12:67:30:44:C4:E4:4F:6A:39:9C:7E
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584A5335A9719A83EC8C94026E20
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/22155043-6f19-3c19-b951-75ed01fc47ae.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:a9:71:9a:83:ec:8c:94:02:6e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=a74b5b32-c47e-4fff-84ef-f5c5399ce460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:e3:7e:f0:38:4e:83:f4:0c:1e:6d:1e:6e:
                    cd:4b:41:76:32:68:15:43:0e:f0:83:fb:e5:bf:52:
                    bc:1e:91:54:3c:1e:c1:51:92:db:aa:2b:74:94:18:
                    71:90:7b:00:44:d1:ff:96:bc:5b:d0:f2:45:19:49:
                    c4:4f:71:29:54:a7:28:6e:c5:be:aa:b4:3b:fc:e2:
                    40:56:37:a7:1e:7a:30:68:85:48:c7:b9:be:01:c8:
                    e4:2f:38:91:5b:36:57:9e:1b:85:02:56:62:2c:42:
                    a9:ae:e0:0a:9f:6e:be:8e:8a:6d:68:84:e4:45:88:
                    c4:3b:97:5b:0e:26:9f:f3:ee:d4:53:08:6c:fe:d1:
                    55:41:42:6b:a1:fb:c2:f8:e5:f8:58:26:e5:72:74:
                    33:24:3c:1a:bf:86:64:74:60:02:ee:99:3c:e7:20:
                    f4:82:40:09:7c:2f:73:2a:09:b0:b9:61:66:f7:4c:
                    5e:48:1d:be:67:6d:6e:25:4c:a6:55:70:93:36:42:
                    de:6c:89:90:0b:45:df:24:e4:d8:34:e3:0a:97:8e:
                    79:0d:c6:bb:d5:4f:7b:8a:da:6e:b0:d5:33:51:43:
                    8e:1c:59:a7:21:03:83:74:43:14:34:85:95:b4:e8:
                    0d:68:e2:af:87:86:b2:63:8a:c2:b9:2b:a2:1c:7e:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:ED:01:1A:8C:2B:B1:8A:11:12:67:30:44:C4:E4:4F:6A:39:9C:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/22155043-6f19-3c19-b951-75ed01fc47ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:20:32:09:04:76:1e:73:af:73:d8:9a:81:95:9b:63:a1:3d:
         58:45:01:f2:48:d9:26:48:1f:88:db:81:39:4e:02:e6:20:a7:
         06:df:da:dd:e2:20:31:2c:66:b4:65:cc:2a:75:2e:9e:38:e2:
         5c:d1:b4:7b:e1:f6:28:f3:a9:c3:47:42:46:e4:6c:eb:fa:ac:
         95:b5:41:22:1c:d8:28:88:5c:54:e0:6e:66:6a:f6:1a:78:b5:
         43:77:30:67:40:eb:c4:66:1a:b7:7f:d7:c0:fc:ee:90:b9:b1:
         1f:1d:01:d1:93:5d:a1:a4:59:03:60:ca:60:da:2e:6c:30:68:
         a0:ae:93:3d:6a:3a:62:1a:a1:9f:e1:8b:33:7c:77:11:3b:d2:
         de:b5:a3:c4:63:20:8a:b4:ff:03:59:54:a0:68:07:44:72:50:
         9a:2a:6f:06:c0:83:8e:7c:16:da:0d:66:a2:92:e3:c8:4f:1b:
         31:08:ab:83:4d:cd:d5:c6:1c:2f:dd:0b:fc:5e:b6:d9:87:f9:
         98:6d:57:1a:48:79:85:26:68:70:c3:a6:cf:70:78:a7:c3:6d:
         e1:b1:9c:50:46:c6:c9:35:b3:f3:21:7a:ef:bc:6d:06:8b:35:
         9b:73:b7:c8:63:78:4a:fa:93:40:6f:c7:c3:42:02:d3:bf:23:
         ed:27:cc:f5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpTNalxmoPsjJQCbiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
YTc0YjViMzItYzQ3ZS00ZmZmLTg0ZWYtZjVjNTM5OWNlNDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8fjfvA4ToP0DB5tHm7NS0F2MmgVQw7wg/vl
v1K8HpFUPB7BUZLbqit0lBhxkHsARNH/lrxb0PJFGUnET3EpVKcobsW+qrQ7/OJA
VjenHnowaIVIx7m+AcjkLziRWzZXnhuFAlZiLEKpruAKn26+joptaITkRYjEO5db
Diaf8+7UUwhs/tFVQUJrofvC+OX4WCblcnQzJDwav4ZkdGAC7pk85yD0gkAJfC9z
KgmwuWFm90xeSB2+Z21uJUymVXCTNkLebImQC0XfJOTYNOMKl455Dca71U97itpu
sNUzUUOOHFmnIQODdEMUNIWVtOgNaOKvh4ayY4rCuSuiHH6LDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAPtARqMK7GKERJnMETE5E9qOZx+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMjIxNTUwNDMtNmYxOS0z
YzE5LWI5NTEtNzVlZDAxZmM0N2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVKgO8C
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACIgMgkEdh5zr3PYmoGVm2OhPVhFAfJI2SZIH4jbgTlOAuYgpwbf
2t3iIDEsZrRlzCp1Lp444lzRtHvh9ijzqcNHQkbkbOv6rJW1QSIc2CiIXFTgbmZq
9hp4tUN3MGdA68RmGrd/18D87pC5sR8dAdGTXaGkWQNgymDaLmwwaKCukz1qOmIa
oZ/hizN8dxE70t61o8RjIIq0/wNZVKBoB0RyUJoqbwbAg458FtoNZqKS48hPGzEI
q4NNzdXGHC/dC/xettmH+ZhtVxpIeYUmaHDDps9weKfDbeGxnFBGxsk1s/Mheu+8
bQaLNZtzt8hjeEr6k0Bvx8NCAtO/I+0nzPU=
-----END CERTIFICATE-----
Generated at Sat Aug 2 14:05:33 2025 by rpki-client