Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa
File:                     d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa (raw, json)
Hash identifier:          osfMkggFUVgY8UlOCkcU+ReJbcNN5HIMkeQI0wXX5sM=
Subject key identifier:   D0:92:C7:3B:57:F8:F7:17:1C:05:EC:6E:AD:59:9E:80:61:57:37:4F
Certificate issuer:       /CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f
Certificate serial:       010D0C9F4328584A6825F9CF41B32B7088F7BFE0
Authority key identifier: 28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     54429
IP address blocks:        2602:fd94::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f9:cf:41:b3:2b:70:88:f7:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=0351f3da-30d6-4cc1-a903-230520fa54cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:93:02:36:54:fa:e2:84:9b:99:b0:4b:e1:
                    19:13:72:4b:6e:ac:48:aa:ef:bf:c4:4c:a4:fd:e1:
                    f7:7b:89:46:57:4b:6f:b3:1a:09:ec:33:1a:47:18:
                    49:c2:75:3b:6e:4c:5b:5b:db:15:ab:46:fb:6c:4c:
                    89:5f:c9:b7:59:17:e3:d2:9b:57:57:5b:02:25:36:
                    70:73:b6:48:ea:5b:77:c1:ea:4a:26:e4:6b:0d:91:
                    53:65:de:0b:ec:ce:a3:c4:d9:a3:b6:a7:fc:ed:a2:
                    90:be:60:e9:85:b0:f6:76:29:7a:bb:d2:ab:c6:48:
                    ea:5c:8d:52:2f:15:4c:4d:44:cc:34:be:ee:49:a2:
                    31:ea:85:04:f0:a7:56:5d:5e:24:e8:59:d3:45:f0:
                    33:4d:fa:7b:5a:81:be:a4:58:a0:d3:03:84:39:a8:
                    fa:68:9b:17:24:c1:2e:75:f0:3e:09:8d:83:4e:04:
                    7b:8d:55:8f:83:eb:27:2b:0d:f0:b1:89:eb:54:21:
                    41:f5:ff:1c:72:a0:e0:e1:59:bb:21:05:37:4b:f1:
                    ce:1b:c4:7c:f0:4f:50:a0:e5:48:f8:33:f3:df:78:
                    06:a0:d1:29:fa:af:46:97:c3:2f:ca:d7:e4:38:95:
                    3a:ed:dd:8c:c0:a9:c1:d8:96:c9:10:08:87:3b:0a:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:92:C7:3B:57:F8:F7:17:1C:05:EC:6E:AD:59:9E:80:61:57:37:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl

            X509v3 Authority Key Identifier:
                keyid:28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd94::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e9:7a:ce:2a:96:15:43:b1:7a:33:ea:c0:13:d8:2f:ec:3f:
         a1:fb:6d:00:c9:77:f4:68:e1:05:7a:15:c6:3f:d6:10:2a:52:
         cf:24:0e:4c:da:1b:f6:97:2f:b8:d9:a6:e6:77:f5:e6:69:d5:
         c1:cf:ae:d5:e2:c6:8a:46:50:00:51:b3:2a:54:f4:79:6f:03:
         6e:74:07:13:fd:5b:7b:fd:5a:5c:a8:28:a6:1e:c5:03:1a:e4:
         b2:10:ed:f1:d3:5c:5d:69:d5:05:e3:8d:d4:ab:fb:25:f3:a5:
         85:af:9e:1a:3a:05:6a:aa:e2:53:bd:a1:6e:b7:ce:91:47:2e:
         ad:82:58:ce:ba:9b:65:80:d6:a3:93:23:9c:73:a2:62:cf:8f:
         11:c3:d4:44:44:24:bf:72:4b:cd:22:2e:4e:c0:8a:54:db:c2:
         b5:b1:43:71:8f:ca:ee:16:43:a0:a1:41:52:ce:4e:65:96:98:
         8a:14:91:a8:88:09:63:a1:da:a3:0e:10:74:cb:7c:32:49:e4:
         5c:0a:4f:1b:7d:4b:94:fa:6d:a8:1f:97:1f:00:94:3f:cf:b5:
         cc:e4:60:98:53:12:37:a6:1e:95:e1:ee:2e:63:4c:e9:19:ce:
         12:f8:1f:7c:51:90:88:d4:f4:e7:44:6b:34:9e:3b:18:ee:ac:
         4a:30:51:d5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpoJfnPQbMrcIj3v+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWEwMjI1MTQtZWE5ZS00Y2ViLTlkMWItOTc2OGJlZTM2
YTRmMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
MDM1MWYzZGEtMzBkNi00Y2MxLWE5MDMtMjMwNTIwZmE1NGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf2TAjZU+uKEm5mwS+EZE3JLbqxIqu+/xEyk
/eH3e4lGV0tvsxoJ7DMaRxhJwnU7bkxbW9sVq0b7bEyJX8m3WRfj0ptXV1sCJTZw
c7ZI6lt3wepKJuRrDZFTZd4L7M6jxNmjtqf87aKQvmDphbD2dil6u9KrxkjqXI1S
LxVMTUTMNL7uSaIx6oUE8KdWXV4k6FnTRfAzTfp7WoG+pFig0wOEOaj6aJsXJMEu
dfA+CY2DTgR7jVWPg+snKw3wsYnrVCFB9f8ccqDg4Vm7IQU3S/HOG8R88E9QoOVI
+DPz33gGoNEp+q9Gl8MvytfkOJU67d2MwKnB2JbJEAiHOwqPUQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNCSxztX+PcXHAXsbq1ZnoBhVzdPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lYTAy
MjUxNC1lYTllLTRjZWItOWQxYi05NzY4YmVlMzZhNGYvZDdlODM2YjUtYzcwYS0z
ZDM2LWFkNzctOWJhMjhlYjhlOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWEwMjI1MTQtZWE5ZS00Y2ViLTlk
MWItOTc2OGJlZTM2YTRmL2VhMDIyNTE0LWVhOWUtNGNlYi05ZDFiLTk3NjhiZWUz
NmE0Zi5jcmwwHwYDVR0jBBgwFoAUKEDCAdB25eH59zQrMjdY49x72H0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lYTAyMjUxNC1lYTllLTRjZWItOWQxYi05NzY4
YmVlMzZhNGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9lAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADul6ziqWFUOxejPqwBPYL+w/ofttAMl39GjhBXoVxj/WECpSzyQO
TNob9pcvuNmm5nf15mnVwc+u1eLGikZQAFGzKlT0eW8DbnQHE/1be/1aXKgoph7F
AxrkshDt8dNcXWnVBeON1Kv7JfOlha+eGjoFaqriU72hbrfOkUcurYJYzrqbZYDW
o5MjnHOiYs+PEcPUREQkv3JLzSIuTsCKVNvCtbFDcY/K7hZDoKFBUs5OZZaYihSR
qIgJY6Haow4QdMt8MknkXApPG31LlPptqB+XHwCUP8+1zORgmFMSN6YeleHuLmNM
6RnOEvgffFGQiNT050RrNJ47GO6sSjBR1Q==
-----END CERTIFICATE-----
Generated at Mon Jul 7 05:16:44 2025 by rpki-client