Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/a04a609d-a750-3962-9e10-281c8436cdda.roa
File:                     a04a609d-a750-3962-9e10-281c8436cdda.roa (raw, json)
Hash identifier:          udMOj2U4tW/47ImgvACX6Xr7DL8TFWQnGY0Ht+bV5o8=
Subject key identifier:   7D:79:32:58:9C:3B:80:5D:43:65:B2:4A:20:5A:36:DC:3D:5F:03:03
Certificate issuer:       /CN=497813be-498e-4129-a627-225f97d0e2b5
Certificate serial:       010D0C9F43285849FE0FEBBA4339094FAA8EF280
Authority key identifier: B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/a04a609d-a750-3962-9e10-281c8436cdda.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     399606
IP address blocks:        2606:5e40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:eb:ba:43:39:09:4f:aa:8e:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497813be-498e-4129-a627-225f97d0e2b5
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=0e3476bc-245d-454c-bc32-897b41703047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:e9:f9:18:4f:20:d7:bb:d8:da:c4:22:af:
                    31:7a:08:7f:f9:cf:2f:10:b0:b5:4c:33:60:2d:57:
                    1e:76:8e:67:d3:a1:5e:9d:60:d4:35:ff:09:8e:5b:
                    bb:2d:83:f5:c4:0c:6f:92:68:e7:92:37:3a:e1:cb:
                    e9:00:4c:d6:ad:46:60:cb:da:3e:75:39:87:69:88:
                    56:5c:41:84:11:40:1b:56:ee:70:b7:e6:62:2b:f8:
                    87:13:33:3b:7c:55:28:cf:73:33:f9:50:07:6f:51:
                    67:3a:eb:13:83:14:d0:55:0c:7c:cd:bf:5c:35:52:
                    34:50:23:c3:04:d4:40:17:d4:97:a2:54:6a:98:dd:
                    5b:01:3f:f7:77:9e:7a:b0:c3:89:c7:64:be:4e:c4:
                    49:dd:16:55:3b:11:86:ce:b4:f6:ff:27:2d:13:2b:
                    0a:f0:24:83:56:b3:57:29:c6:9b:80:e2:6f:40:b5:
                    7a:d6:de:58:af:43:75:a7:e7:cb:ec:36:6a:3e:bb:
                    be:b4:a3:f5:1d:11:33:1e:2d:43:61:00:3f:35:b0:
                    ad:c0:7d:43:6d:c7:eb:77:77:73:e3:91:0a:22:66:
                    c9:9c:b1:b3:ff:87:4f:aa:a1:ab:0e:70:f5:d3:2c:
                    44:a4:69:ba:87:69:20:57:00:bc:36:ed:07:89:7f:
                    20:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:79:32:58:9C:3B:80:5D:43:65:B2:4A:20:5A:36:DC:3D:5F:03:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/a04a609d-a750-3962-9e10-281c8436cdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5e40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:76:fd:61:5c:52:97:b5:36:d8:59:ee:d4:55:c1:47:52:ef:
         0e:88:25:38:08:de:c7:9a:37:e2:db:3a:79:8b:0d:75:6e:02:
         f6:46:a7:41:c9:2f:85:5a:91:0b:01:2f:bc:59:02:dc:d4:49:
         04:fb:5d:fd:73:0c:0d:bd:5e:c3:3f:5e:e4:cf:4c:24:19:7d:
         9d:1e:32:14:b5:9e:c6:87:75:cb:b2:67:6e:8a:df:da:ae:66:
         ef:0b:46:9b:e7:b1:2b:5d:cc:1d:16:36:53:4d:ea:ed:9c:40:
         f3:eb:be:5b:0a:d6:6e:5f:6c:f9:c2:9b:2d:47:64:52:85:42:
         93:67:9e:7e:72:b1:08:87:a7:9b:49:c8:0d:28:13:ec:27:14:
         27:5d:90:67:91:82:25:55:40:ad:ce:51:f6:ff:6a:87:c0:ae:
         93:7c:c4:80:b6:bc:5a:85:23:a8:be:d4:8e:f1:55:5d:21:72:
         f8:d1:91:76:d2:33:34:48:bc:ae:22:ea:e3:3c:b3:e5:9d:be:
         9b:a6:58:55:6c:d7:86:14:5a:8a:78:7c:ee:47:a9:2d:49:18:
         48:a5:7d:06:3f:27:09:8d:ad:a3:a3:cd:cb:41:88:e6:61:5d:
         0d:dd:9f:a1:b2:6e:a6:75:8d:f1:6a:9f:e1:ea:18:9b:e4:13:
         a2:96:93:46
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn+D+u6QzkJT6qO8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDk3ODEzYmUtNDk4ZS00MTI5LWE2MjctMjI1Zjk3ZDBl
MmI1MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk
MGUzNDc2YmMtMjQ1ZC00NTRjLWJjMzItODk3YjQxNzAzMDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXvp+RhPINe72NrEIq8xegh/+c8vELC1TDNg
LVcedo5n06FenWDUNf8Jjlu7LYP1xAxvkmjnkjc64cvpAEzWrUZgy9o+dTmHaYhW
XEGEEUAbVu5wt+ZiK/iHEzM7fFUoz3Mz+VAHb1FnOusTgxTQVQx8zb9cNVI0UCPD
BNRAF9SXolRqmN1bAT/3d556sMOJx2S+TsRJ3RZVOxGGzrT2/yctEysK8CSDVrNX
KcabgOJvQLV61t5Yr0N1p+fL7DZqPru+tKP1HREzHi1DYQA/NbCtwH1Dbcfrd3dz
45EKImbJnLGz/4dPqqGrDnD10yxEpGm6h2kgVwC8Nu0HiX8gJwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFH15MlicO4BdQ2WySiBaNtw9XwMDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OTc4
MTNiZS00OThlLTQxMjktYTYyNy0yMjVmOTdkMGUyYjUvYTA0YTYwOWQtYTc1MC0z
OTYyLTllMTAtMjgxYzg0MzZjZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk3ODEzYmUtNDk4ZS00MTI5LWE2
MjctMjI1Zjk3ZDBlMmI1LzQ5NzgxM2JlLTQ5OGUtNDEyOS1hNjI3LTIyNWY5N2Qw
ZTJiNS5jcmwwHwYDVR0jBBgwFoAUuDd7Tk8D/gmswblAiz+e8Eyi/yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80OTc4MTNiZS00OThlLTQxMjktYTYyNy0yMjVm
OTdkMGUyYjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZeQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB7dv1hXFKXtTbYWe7UVcFHUu8OiCU4CN7Hmjfi2zp5iw11bgL2RqdB
yS+FWpELAS+8WQLc1EkE+139cwwNvV7DP17kz0wkGX2dHjIUtZ7Gh3XLsmduit/a
rmbvC0ab57ErXcwdFjZTTertnEDz675bCtZuX2z5wpstR2RShUKTZ55+crEIh6eb
ScgNKBPsJxQnXZBnkYIlVUCtzlH2/2qHwK6TfMSAtrxahSOovtSO8VVdIXL40ZF2
0jM0SLyuIurjPLPlnb6bplhVbNeGFFqKeHzuR6ktSRhIpX0GPycJja2jo83LQYjm
YV0N3Z+hsm6mdY3xap/h6hib5BOilpNG
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:09:10 2025 by rpki-client