Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed4a21be-91b1-393a-876b-ece55c2a5bcd.roa
File:                     ed4a21be-91b1-393a-876b-ece55c2a5bcd.roa (raw, json)
Hash identifier:          /UuMzRWLXEPUtfXvoVREFCZz++LZnipcRRyj5IlJspg=
Subject key identifier:   F8:60:8C:B0:76:88:3A:79:F3:0A:5C:2E:A2:58:11:EC:7F:09:E7:B4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7952AE1E158853FCC5E739
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed4a21be-91b1-393a-876b-ece55c2a5bcd.roa
Signing time:             Thu 19 Jun 2025 14:45:20 +0000
ROA not before:           Thu 19 Jun 2025 14:45:20 +0000
ROA not after:            Wed 17 Sep 2025 14:45:20 +0000
asID:                     22773
IP address blocks:        2600:8800:3400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:79:52:ae:1e:15:88:53:fc:c5:e7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:45:20 2025 GMT
            Not After : Sep 17 14:45:20 2025 GMT
        Subject: CN=4e73bb02-7c96-4a18-811f-8ef89f538768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e0:63:73:a2:4f:65:5a:41:fe:27:32:55:0a:
                    d4:f4:04:8c:c6:52:3b:48:12:3f:d6:17:f2:75:69:
                    77:32:cd:c2:79:1d:12:38:25:e1:68:95:fc:f0:4e:
                    cc:ad:09:59:19:83:2f:f7:6a:0a:fe:c0:d3:26:3a:
                    1d:60:3d:2c:b5:a4:cf:83:ac:de:20:81:30:7c:54:
                    90:10:43:eb:16:a6:57:e3:44:79:3b:46:48:2c:b1:
                    d9:01:18:a6:33:5a:f9:d5:29:6b:1a:0e:62:94:96:
                    56:0f:18:0a:30:00:80:bf:03:73:c4:a0:15:e3:85:
                    16:c1:a8:dd:a9:00:84:d6:3a:ef:d9:1b:e8:45:13:
                    e5:79:3a:ce:4a:d7:92:b5:3d:26:42:d0:d8:88:25:
                    f3:c7:88:db:d6:85:4b:24:70:17:37:58:65:86:7a:
                    fd:f2:2d:ef:c3:59:3d:c5:9c:e5:7b:d9:07:22:6d:
                    4a:41:a6:c4:00:59:5b:4e:db:af:fe:fe:20:e3:d5:
                    92:ce:34:b5:43:8a:6f:c9:28:e4:d5:df:71:82:1a:
                    9f:ca:ff:3b:fe:57:3b:22:cc:5a:a9:b8:65:98:87:
                    c1:bf:c3:57:db:ef:25:0c:b7:f4:a2:3d:e7:82:30:
                    ec:f0:cc:bd:cc:2f:35:82:ad:03:67:14:4f:bf:b4:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:60:8C:B0:76:88:3A:79:F3:0A:5C:2E:A2:58:11:EC:7F:09:E7:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed4a21be-91b1-393a-876b-ece55c2a5bcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:3400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a2:3d:7a:18:65:ae:10:a6:ab:87:11:75:7a:39:56:08:3c:
         f6:9c:37:ff:93:64:ae:ab:a3:1a:82:d7:e9:db:ac:6e:3d:dc:
         74:99:5a:69:8b:07:e9:01:b9:d0:6a:d3:77:a5:9f:69:39:fd:
         af:70:10:c6:1d:d6:1b:ad:38:33:76:9e:1a:d4:9d:14:3e:05:
         d8:e3:2f:82:97:98:c5:ef:3b:c0:74:be:2d:0c:f8:2b:e4:3e:
         87:6a:71:b9:4c:fa:27:43:79:23:fd:c4:58:9f:eb:2d:f3:21:
         88:b1:dc:20:a1:bc:d7:e5:9a:af:fd:4e:0c:c4:3a:99:26:c7:
         f3:15:99:53:74:ec:41:26:3b:ad:d7:f8:23:be:5d:b5:97:a3:
         c9:4f:6d:c7:06:eb:33:e9:73:54:22:67:9c:db:fe:01:28:bb:
         c1:7b:19:92:c5:02:76:c4:19:79:cd:3d:5e:a4:3d:3c:98:b8:
         25:ce:f2:a8:1c:ff:36:93:87:dc:65:05:e3:cb:f4:93:37:30:
         3d:fb:e9:3a:07:2e:23:b8:0e:37:86:6d:ea:d8:02:a0:d3:89:
         88:f3:d8:cd:ca:3d:b9:d1:79:f5:79:bd:59:ae:76:5b:c8:e1:
         b1:3a:62:fa:53:78:ca:1d:9b:24:fe:b2:19:94:7a:de:fc:1f:
         58:21:5f:91
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+eVKuHhWIU/zF5zkwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxOTE0NDUyMFoXDTI1MDkxNzE0NDUyMFowLzEtMCsGA1UEAxMk
NGU3M2JiMDItN2M5Ni00YTE4LTgxMWYtOGVmODlmNTM4NzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+Bjc6JPZVpB/icyVQrU9ASMxlI7SBI/1hfy
dWl3Ms3CeR0SOCXhaJX88E7MrQlZGYMv92oK/sDTJjodYD0staTPg6zeIIEwfFSQ
EEPrFqZX40R5O0ZILLHZARimM1r51SlrGg5ilJZWDxgKMACAvwNzxKAV44UWwajd
qQCE1jrv2RvoRRPleTrOSteStT0mQtDYiCXzx4jb1oVLJHAXN1hlhnr98i3vw1k9
xZzle9kHIm1KQabEAFlbTtuv/v4g49WSzjS1Q4pvySjk1d9xghqfyv87/lc7Isxa
qbhlmIfBv8NX2+8lDLf0oj3ngjDs8My9zC81gq0DZxRPv7TX4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPhgjLB2iDp58wpcLqJYEex/Cee0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWQ0YTIxYmUtOTFiMS0z
OTNhLTg3NmItZWNlNTVjMmE1YmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIADQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABOiPXoYZa4QpquHEXV6OVYIPPacN/+TZK6roxqC1+nbrG493HSZ
WmmLB+kBudBq03eln2k5/a9wEMYd1hutODN2nhrUnRQ+BdjjL4KXmMXvO8B0vi0M
+CvkPodqcblM+idDeSP9xFif6y3zIYix3CChvNflmq/9TgzEOpkmx/MVmVN07EEm
O63X+CO+XbWXo8lPbccG6zPpc1QiZ5zb/gEou8F7GZLFAnbEGXnNPV6kPTyYuCXO
8qgc/zaTh9xlBePL9JM3MD376ToHLiO4DjeGberYAqDTiYjz2M3KPbnRefV5vVmu
dlvI4bE6YvpTeModmyT+shmUet78H1ghX5E=
-----END CERTIFICATE-----
Generated at Wed Jul 2 14:32:41 2025 by rpki-client