Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7b506dad-e6ec-317b-862d-fcd90f86c60a.roa
File:                     7b506dad-e6ec-317b-862d-fcd90f86c60a.roa (raw, json)
Hash identifier:          R8fjEAKe6MKETYDUdySksodIcvc4UHQqKqEX8A7jAuE=
Subject key identifier:   B5:83:AD:D5:F7:0A:C2:42:21:63:52:BE:D2:31:21:0E:E8:C2:A8:26
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F4328584B2FC1974E36E2AA86C2D4EC60
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7b506dad-e6ec-317b-862d-fcd90f86c60a.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     32771
IP address blocks:        2620:111:8005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:97:4e:36:e2:aa:86:c2:d4:ec:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=3fdb291c-2e2f-497e-ac14-3851bc3b9170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:e2:79:08:0c:98:96:f7:ea:94:70:31:9c:
                    96:17:8e:3b:fe:db:69:b3:e4:9a:0c:e7:df:b8:ef:
                    76:75:22:75:ad:8f:36:c7:53:42:14:6c:b1:ae:70:
                    88:62:7c:3f:d1:23:2f:19:44:ab:ba:79:ae:e5:1c:
                    d7:09:60:50:7f:6a:73:a5:16:4f:2d:88:ae:90:15:
                    57:be:96:b6:42:79:be:26:6d:15:c7:49:01:20:c0:
                    94:b8:32:98:7e:8c:23:cd:5d:8b:08:bc:d8:e7:e3:
                    9b:65:1d:25:17:6a:e2:c9:4c:b0:88:5f:5b:0d:9e:
                    d6:cf:29:45:f8:6c:9c:d5:99:2b:27:64:fb:3e:94:
                    17:02:74:f6:ad:20:78:30:f3:e5:58:21:f0:6b:e1:
                    24:f7:93:05:5d:2e:ca:f2:83:25:38:10:76:01:71:
                    53:38:6c:28:cd:05:26:36:ca:60:b7:81:48:9f:72:
                    84:e2:20:24:ba:ea:e3:e0:6d:81:3a:2d:f0:b5:fc:
                    ca:23:76:2c:ba:c3:c9:cf:81:7a:ab:d7:4e:c5:73:
                    17:34:94:5b:72:88:42:3b:7e:2f:0f:1d:65:31:8f:
                    b0:ca:ca:6c:11:a1:00:76:aa:08:c1:0e:a3:66:18:
                    68:93:52:47:6b:e2:b6:89:74:15:6c:ff:84:e7:4b:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:AD:D5:F7:0A:C2:42:21:63:52:BE:D2:31:21:0E:E8:C2:A8:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/7b506dad-e6ec-317b-862d-fcd90f86c60a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:8005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:0a:cf:72:a2:2b:a0:2a:9e:db:af:e8:4f:14:e3:ba:ef:23:
         a3:44:c7:0a:5a:a3:5f:be:36:0b:85:39:4e:a3:c9:f8:88:7e:
         2b:26:a9:37:f8:c5:38:25:66:fa:26:f3:35:91:c3:0b:f2:32:
         7a:3c:a4:25:6b:33:e6:99:b1:fb:b7:58:14:de:e0:7d:31:16:
         c5:c1:0e:cd:36:a3:8d:4a:e7:ae:8a:e1:5d:1e:35:da:13:03:
         19:98:15:88:9c:38:84:7c:be:df:cc:f1:ab:b2:31:1d:0a:11:
         9f:cd:fc:22:39:42:2b:5d:84:7d:c6:3a:9c:0b:fe:1a:ca:08:
         98:7c:ab:c4:ab:cc:63:84:50:06:a2:61:bb:9e:84:41:28:31:
         f6:29:5a:e1:fe:57:24:5e:60:87:b0:71:7d:12:7e:f9:97:ac:
         10:23:e6:3f:13:04:64:c3:be:06:39:5b:cf:07:df:41:fc:a0:
         f6:68:9f:3d:0b:96:02:fd:eb:f5:1c:f2:79:da:b9:c9:4d:9d:
         a1:85:28:69:bb:ae:1b:b8:60:e0:f6:42:73:dd:3b:b2:6f:c9:
         2b:61:91:cf:9c:54:e3:83:62:ff:ad:fd:e5:b7:ac:79:c0:d1:
         cf:3a:27:d4:48:73:a3:c2:a1:ac:6b:54:78:7b:2e:46:3f:d1:
         0e:a9:b4:f9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsvwZdONuKqhsLU7GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ1OTk2NGUtY2I0NC00YmU1LTg4ZGEtMDNmYWM1NTRl
OTVjMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk
M2ZkYjI5MWMtMmUyZi00OTdlLWFjMTQtMzg1MWJjM2I5MTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/rieQgMmJb36pRwMZyWF447/ttps+SaDOff
uO92dSJ1rY82x1NCFGyxrnCIYnw/0SMvGUSrunmu5RzXCWBQf2pzpRZPLYiukBVX
vpa2Qnm+Jm0Vx0kBIMCUuDKYfowjzV2LCLzY5+ObZR0lF2riyUywiF9bDZ7WzylF
+Gyc1ZkrJ2T7PpQXAnT2rSB4MPPlWCHwa+Ek95MFXS7K8oMlOBB2AXFTOGwozQUm
Nspgt4FIn3KE4iAkuurj4G2BOi3wtfzKI3YsusPJz4F6q9dOxXMXNJRbcohCO34v
Dx1lMY+wyspsEaEAdqoIwQ6jZhhok1JHa+K2iXQVbP+E50soXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLWDrdX3CsJCIWNSvtIxIQ7owqgmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5
OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2ZhYzU1NGU5NWMvN2I1MDZkYWQtZTZlYy0z
MTdiLTg2MmQtZmNkOTBmODZjNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjQ1OTk2NGUtY2I0NC00YmU1LTg4
ZGEtMDNmYWM1NTRlOTVjLzY0NTk5NjRlLWNiNDQtNGJlNS04OGRhLTAzZmFjNTU0
ZTk1Yy5jcmwwHwYDVR0jBBgwFoAUKt7spHKs8deFfsVG4i81dJj6CmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82NDU5OTY0ZS1jYjQ0LTRiZTUtODhkYS0wM2Zh
YzU1NGU5NWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABEYAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC0Kz3KiK6Aqntuv6E8U47rvI6NExwpao1++NguFOU6jyfiIfism
qTf4xTglZvom8zWRwwvyMno8pCVrM+aZsfu3WBTe4H0xFsXBDs02o41K566K4V0e
NdoTAxmYFYicOIR8vt/M8auyMR0KEZ/N/CI5QitdhH3GOpwL/hrKCJh8q8SrzGOE
UAaiYbuehEEoMfYpWuH+VyReYIewcX0SfvmXrBAj5j8TBGTDvgY5W88H30H8oPZo
nz0LlgL96/Uc8nnauclNnaGFKGm7rhu4YOD2QnPdO7JvySthkc+cVOODYv+t/eW3
rHnA0c86J9RIc6PCoaxrVHh7LkY/0Q6ptPk=
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:38:49 2025 by rpki-client