Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa
File:                     573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa (raw, json)
Hash identifier:          jqM95YphIqXY7vPOx6zgvlnOyDIl6pBlK4aHnHJ50LI=
Subject key identifier:   DB:5B:E0:92:57:84:A9:48:F7:AE:67:9F:4E:5F:E6:D8:F2:B7:E9:AD
Certificate issuer:       /CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
Certificate serial:       010D0C9F4328584B196C057D326D9E4FABD31B80
Authority key identifier: 1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     214483
IP address blocks:        2602:f756:29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:05:7d:32:6d:9e:4f:ab:d3:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=f8513303-74de-478a-bc9f-5503998b2bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:3a:27:7a:c8:89:16:51:82:7c:06:84:54:
                    39:f5:2c:67:36:c1:62:f1:ee:d4:99:78:e9:9e:5b:
                    78:9f:88:11:ce:65:0f:c5:2a:7b:ef:52:35:7b:3b:
                    fe:cf:9d:9a:11:56:ff:97:c8:db:d7:24:5a:3b:6e:
                    5f:23:e2:32:df:f6:0f:6b:c3:7f:08:15:06:99:68:
                    1e:42:7d:8f:d4:72:bf:2e:0a:4c:cf:7d:f8:04:b7:
                    b5:48:57:ac:b7:6e:31:a5:c4:eb:40:98:10:0e:2e:
                    1f:04:e9:75:d2:56:96:e5:15:d8:7c:8c:3d:de:a0:
                    64:df:d1:99:73:b5:e5:bf:35:0b:1d:39:ba:42:46:
                    a8:6f:ff:bb:5c:40:ee:e4:7f:e4:3d:61:ee:99:74:
                    21:39:7c:97:2b:19:32:ee:b7:53:01:03:4e:76:c3:
                    98:4e:fa:7a:fa:bd:9c:12:7b:aa:7e:6f:28:7d:64:
                    1b:ef:35:e4:e7:cf:c1:da:db:9a:20:ce:0d:89:67:
                    78:1c:6c:16:1d:88:47:3d:55:2a:ed:17:af:4c:66:
                    9c:5b:bc:f6:62:86:1b:eb:a4:47:67:de:c3:90:c6:
                    66:02:40:ac:1a:a1:a1:f4:c4:51:ac:67:26:6b:ef:
                    fb:fc:68:40:8f:91:5f:89:b7:0c:75:d0:85:ac:25:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5B:E0:92:57:84:A9:48:F7:AE:67:9F:4E:5F:E6:D8:F2:B7:E9:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/573dfa7c-ce27-31a9-a765-ae048e0cb5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f756:29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:52:5d:9a:29:5d:72:ef:12:0d:0f:56:e5:d8:a0:c3:e3:2e:
         08:47:7e:a7:ff:10:7f:6c:11:a0:3b:fb:9e:2e:ee:b6:6a:66:
         41:e8:fd:39:71:73:c9:60:71:8d:fd:56:4b:30:5b:d7:a2:89:
         ae:be:71:a5:92:f1:26:9e:a6:a0:ac:51:31:d4:70:c6:ec:0b:
         72:2d:52:2b:dd:30:f2:89:57:b2:e3:f0:71:41:cc:48:38:c0:
         84:52:11:41:a8:83:35:61:99:03:56:af:04:c3:74:76:1f:c1:
         a6:d9:10:c5:e9:8a:be:77:75:dd:10:2c:c5:0e:d3:3c:27:70:
         28:af:3f:fc:b5:45:f8:4b:07:01:a6:57:30:9b:69:71:b7:79:
         b6:22:e5:d5:71:a1:ad:5f:37:16:8d:c1:b2:98:ae:70:85:f4:
         b5:ea:75:06:90:0e:89:52:f0:9f:18:aa:0c:94:0e:b4:01:39:
         e4:6e:87:90:77:23:03:62:3f:82:ba:cb:18:8c:11:7a:33:2f:
         70:54:e1:92:27:32:87:c3:ae:27:1d:60:e6:29:f3:f3:6a:b0:
         b4:a9:c0:78:4b:d8:f2:c6:95:6a:9d:3e:60:3a:3e:5f:65:43:
         b4:22:20:4c:d8:bf:38:5a:18:c7:22:71:23:2d:db:44:e1:7b:
         1b:7b:9a:ac
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsZbAV9Mm2eT6vTG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdiYmEwZTAtZmI3Yi00OWU1LWJjZjgtNTQ5NGExZjRj
ZGU3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk
Zjg1MTMzMDMtNzRkZS00NzhhLWJjOWYtNTUwMzk5OGIyYmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWo6J3rIiRZRgnwGhFQ59SxnNsFi8e7UmXjp
nlt4n4gRzmUPxSp771I1ezv+z52aEVb/l8jb1yRaO25fI+Iy3/YPa8N/CBUGmWge
Qn2P1HK/LgpMz334BLe1SFest24xpcTrQJgQDi4fBOl10laW5RXYfIw93qBk39GZ
c7XlvzULHTm6Qkaob/+7XEDu5H/kPWHumXQhOXyXKxky7rdTAQNOdsOYTvp6+r2c
Enuqfm8ofWQb7zXk58/B2tuaIM4NiWd4HGwWHYhHPVUq7RevTGacW7z2YoYb66RH
Z97DkMZmAkCsGqGh9MRRrGcma+/7/GhAj5FfibcMddCFrCXH6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNtb4JJXhKlI965nn05f5tjyt+mtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Ji
YTBlMC1mYjdiLTQ5ZTUtYmNmOC01NDk0YTFmNGNkZTcvNTczZGZhN2MtY2UyNy0z
MWE5LWE3NjUtYWUwNDhlMGNiNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdiYmEwZTAtZmI3Yi00OWU1LWJj
ZjgtNTQ5NGExZjRjZGU3L2M3YmJhMGUwLWZiN2ItNDllNS1iY2Y4LTU0OTRhMWY0
Y2RlNy5jcmwwHwYDVR0jBBgwFoAUHcEwUKNSLTycF61s8O5VgkIzk/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2JiYTBlMC1mYjdiLTQ5ZTUtYmNmOC01NDk0
YTFmNGNkZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3VgAp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB5SXZopXXLvEg0PVuXYoMPjLghHfqf/EH9sEaA7+54u7rZqZkHo
/Tlxc8lgcY39VkswW9eiia6+caWS8SaepqCsUTHUcMbsC3ItUivdMPKJV7Lj8HFB
zEg4wIRSEUGogzVhmQNWrwTDdHYfwabZEMXpir53dd0QLMUO0zwncCivP/y1RfhL
BwGmVzCbaXG3ebYi5dVxoa1fNxaNwbKYrnCF9LXqdQaQDolS8J8YqgyUDrQBOeRu
h5B3IwNiP4K6yxiMEXozL3BU4ZInMofDricdYOYp8/NqsLSpwHhL2PLGlWqdPmA6
Pl9lQ7QiIEzYvzhaGMcicSMt20Thext7mqw=
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:24 2025 by rpki-client