Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/0726cbd7-47b2-310b-81c6-237c982c6b9f.roa
File:                     0726cbd7-47b2-310b-81c6-237c982c6b9f.roa (raw, json)
Hash identifier:          FLoPlWZ7FVDV8sr6/2K52ffDKCrwHWlZQwGYap+E0TE=
Subject key identifier:   18:DE:8B:4D:95:7C:49:1D:11:EF:DC:AA:C2:8A:50:C6:C5:E4:0A:C8
Certificate issuer:       /CN=624ed502-24b2-4939-bd7e-39531ca3404a
Certificate serial:       010D0C9F4328584A0ADE5FF1759FC84F3FEFDAE0
Authority key identifier: 9F:18:AC:DB:16:0D:4C:DC:2A:88:3A:D8:8D:7C:A8:9E:5A:5D:44:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/0726cbd7-47b2-310b-81c6-237c982c6b9f.roa
Signing time:             Sun 01 Jun 2025 03:06:54 +0000
ROA not before:           Sun 01 Jun 2025 03:06:54 +0000
ROA not after:            Sat 30 Aug 2025 03:06:54 +0000
asID:                     30058
IP address blocks:        2620:fe:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0a:de:5f:f1:75:9f:c8:4f:3f:ef:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ed502-24b2-4939-bd7e-39531ca3404a
        Validity
            Not Before: Jun  1 03:06:54 2025 GMT
            Not After : Aug 30 03:06:54 2025 GMT
        Subject: CN=826e144b-bbe3-4d9f-868d-ca5efa3d3452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:99:51:ca:e8:e4:90:83:dd:50:67:71:3c:
                    3b:ea:9b:51:71:1d:7d:07:5f:7f:57:f3:ae:2a:7a:
                    c0:8f:75:b9:7b:60:5d:31:5b:3e:98:19:c9:2f:94:
                    64:80:68:4e:cb:0f:99:7d:68:1e:5e:e8:99:82:c7:
                    1c:4b:49:d1:b1:d6:89:44:da:e0:0b:f4:1f:fc:07:
                    56:e8:cb:42:b1:0a:5d:d7:13:87:d3:4e:e5:98:4d:
                    ff:e9:10:b8:cd:32:35:82:51:b2:08:e3:cf:92:88:
                    e1:91:b6:a3:52:c6:b0:d7:11:16:5d:c1:dd:3e:59:
                    87:b7:5f:07:0c:58:99:d1:ee:92:57:c0:3a:87:5e:
                    aa:75:9e:f9:a5:0c:3a:ce:5b:b9:f0:4a:06:39:48:
                    ac:9f:51:b3:fe:e6:5d:09:bc:5e:7a:1a:44:3a:25:
                    c5:6f:19:ed:79:17:28:8d:c0:b9:7f:03:5d:1b:d0:
                    81:1c:12:14:ae:85:20:2a:75:b0:c7:54:dc:72:9b:
                    32:98:39:98:fb:a4:63:24:e2:ec:16:c4:49:82:b9:
                    3c:cb:3e:60:99:ea:07:33:4f:9e:37:90:a5:4c:3d:
                    df:ee:e9:10:c9:66:b6:90:2b:82:e3:53:1e:26:35:
                    3b:45:37:2b:1d:61:10:7e:0d:21:79:c9:90:16:7d:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DE:8B:4D:95:7C:49:1D:11:EF:DC:AA:C2:8A:50:C6:C5:E4:0A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/0726cbd7-47b2-310b-81c6-237c982c6b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a/624ed502-24b2-4939-bd7e-39531ca3404a.crl

            X509v3 Authority Key Identifier:
                keyid:9F:18:AC:DB:16:0D:4C:DC:2A:88:3A:D8:8D:7C:A8:9E:5A:5D:44:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/624ed502-24b2-4939-bd7e-39531ca3404a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:fe:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:26:a4:e6:3b:4d:e2:86:e9:fd:97:7e:25:8f:3d:2a:19:3d:
         11:e7:37:b8:33:c1:38:d2:42:88:ec:57:8f:77:f0:26:e3:26:
         fe:a7:7e:31:aa:79:ae:2f:57:a8:66:50:13:15:7c:e2:ac:0c:
         33:d9:e4:82:9d:34:68:33:7c:90:b1:66:7d:fa:f2:a3:00:93:
         94:32:8a:f1:e7:30:2b:72:28:97:85:7e:66:03:e3:e4:f8:81:
         db:37:e9:fe:08:5d:04:9c:51:99:55:0f:29:c0:99:3a:eb:17:
         21:79:b8:8b:26:82:98:b0:89:e5:ba:27:9d:b9:ba:4a:58:06:
         27:7f:94:2c:d2:6e:56:eb:4e:76:4c:8e:61:e0:0f:af:db:8e:
         07:04:20:03:ae:b2:1a:6c:16:c5:97:99:42:d1:26:dd:61:b6:
         b9:cd:48:1a:57:d6:99:b0:60:ed:46:fb:2b:24:14:63:4f:77:
         e4:09:ed:b7:7a:c5:1a:80:55:23:d3:20:9e:24:6b:d0:ca:bb:
         f0:99:d4:e7:1e:0d:e9:a0:14:2a:e9:a3:92:38:3d:31:b8:78:
         bb:1c:24:73:c7:d1:9f:f1:88:1e:2d:bb:18:50:0a:38:2d:79:
         54:ba:ab:4b:b1:b5:9e:5b:3b:a1:b2:fd:05:d7:f6:ca:8a:7a:
         2c:03:99:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoK3l/xdZ/ITz/v2uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjI0ZWQ1MDItMjRiMi00OTM5LWJkN2UtMzk1MzFjYTM0
MDRhMB4XDTI1MDYwMTAzMDY1NFoXDTI1MDgzMDAzMDY1NFowLzEtMCsGA1UEAxMk
ODI2ZTE0NGItYmJlMy00ZDlmLTg2OGQtY2E1ZWZhM2QzNDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVKZUcro5JCD3VBncTw76ptRcR19B19/V/Ou
KnrAj3W5e2BdMVs+mBnJL5RkgGhOyw+ZfWgeXuiZgsccS0nRsdaJRNrgC/Qf/AdW
6MtCsQpd1xOH007lmE3/6RC4zTI1glGyCOPPkojhkbajUsaw1xEWXcHdPlmHt18H
DFiZ0e6SV8A6h16qdZ75pQw6zlu58EoGOUisn1Gz/uZdCbxeehpEOiXFbxnteRco
jcC5fwNdG9CBHBIUroUgKnWwx1TccpsymDmY+6RjJOLsFsRJgrk8yz5gmeoHM0+e
N5ClTD3f7ukQyWa2kCuC41MeJjU7RTcrHWEQfg0hecmQFn0xxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBjei02VfEkdEe/cqsKKUMbF5ArIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82MjRl
ZDUwMi0yNGIyLTQ5MzktYmQ3ZS0zOTUzMWNhMzQwNGEvMDcyNmNiZDctNDdiMi0z
MTBiLTgxYzYtMjM3Yzk4MmM2YjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjI0ZWQ1MDItMjRiMi00OTM5LWJk
N2UtMzk1MzFjYTM0MDRhLzYyNGVkNTAyLTI0YjItNDkzOS1iZDdlLTM5NTMxY2Ez
NDA0YS5jcmwwHwYDVR0jBBgwFoAUnxis2xYNTNwqiDrYjXyonlpdRKQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy82MjRlZDUwMi0yNGIyLTQ5MzktYmQ3ZS0zOTUz
MWNhMzQwNGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA/iBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF8mpOY7TeKG6f2XfiWPPSoZPRHnN7gzwTjSQojsV4938CbjJv6n
fjGqea4vV6hmUBMVfOKsDDPZ5IKdNGgzfJCxZn368qMAk5QyivHnMCtyKJeFfmYD
4+T4gds36f4IXQScUZlVDynAmTrrFyF5uIsmgpiwieW6J525ukpYBid/lCzSblbr
TnZMjmHgD6/bjgcEIAOushpsFsWXmULRJt1htrnNSBpX1pmwYO1G+yskFGNPd+QJ
7bd6xRqAVSPTIJ4ka9DKu/CZ1OceDemgFCrpo5I4PTG4eLscJHPH0Z/xiB4tuxhQ
CjgteVS6q0uxtZ5bO6Gy/QXX9sqKeiwDma8=
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:33 2025 by rpki-client