Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/346c0404-e073-3b76-846c-4cd361fcdd35.roa
File:                     346c0404-e073-3b76-846c-4cd361fcdd35.roa (raw, json)
Hash identifier:          2ilO+HWna9gqGBu8eDMrpV6wrGDqmeinNvoEcq2iz2s=
Subject key identifier:   6D:AC:7E:66:38:A2:F5:16:A6:CA:16:6F:99:1F:BF:7B:58:65:AF:FC
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B39C57BC4AE970AE5CB97D180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/346c0404-e073-3b76-846c-4cd361fcdd35.roa
Signing time:             Wed 17 Sep 2025 15:06:41 +0000
ROA not before:           Wed 17 Sep 2025 15:06:41 +0000
ROA not after:            Tue 16 Dec 2025 16:06:41 +0000
asID:                     0
IP address blocks:        2001:506:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:c5:7b:c4:ae:97:0a:e5:cb:97:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 17 15:06:41 2025 GMT
            Not After : Dec 16 16:06:41 2025 GMT
        Subject: CN=321154b0-23dc-4caa-86e6-565a0523f71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d4:bc:2e:c6:f9:70:5b:72:7e:f1:43:b0:c7:
                    36:fe:6e:a6:a1:7c:f4:2c:c3:cf:a4:28:92:41:40:
                    b7:66:90:95:32:fd:e3:63:51:b1:98:e1:73:dc:b2:
                    ce:a6:d4:d3:91:1c:26:a8:3b:25:05:c3:9d:d4:61:
                    cc:e1:37:fb:3f:1f:99:91:e3:62:07:f6:c9:a7:6f:
                    96:64:9d:ec:c6:01:a7:03:5e:f8:0e:fe:63:e3:ec:
                    0e:d9:30:1f:3d:b3:f4:3d:24:4c:5e:cf:44:6f:1c:
                    23:81:29:b6:86:f7:5d:f7:9c:8d:d9:e8:e5:5c:3b:
                    0b:3d:06:6f:ec:81:48:ea:9d:f5:0f:27:13:aa:d1:
                    7e:91:e9:5d:a0:1e:6b:db:69:32:7d:09:55:a9:f0:
                    17:7e:04:58:c4:b0:25:df:16:27:a1:f3:d5:c3:0f:
                    fb:13:a4:27:da:0f:3d:0f:f9:bb:ec:a0:d4:72:f7:
                    bb:24:e0:ea:5e:88:8a:88:7d:c8:dc:39:fb:24:51:
                    f3:ea:11:1c:4c:cf:23:8f:58:bd:b9:f7:9e:a1:6f:
                    0e:ab:1d:89:fe:85:97:76:9b:f2:90:87:8d:06:1e:
                    c6:9d:9e:29:d7:38:3c:71:c3:4e:f0:75:97:1e:08:
                    f4:19:cc:52:be:fc:89:63:96:4b:ad:2e:ae:3a:ef:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AC:7E:66:38:A2:F5:16:A6:CA:16:6F:99:1F:BF:7B:58:65:AF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/346c0404-e073-3b76-846c-4cd361fcdd35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:506:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c1:14:e7:48:af:70:03:23:23:31:0f:e3:54:d2:eb:31:27:
         9a:ab:7b:4f:6f:ab:45:8a:f5:66:68:9f:2c:39:2b:ba:a9:c2:
         33:33:62:54:a9:6d:6c:4a:57:c5:6c:ac:52:42:cc:d0:17:45:
         41:c8:c3:e2:14:f6:0b:53:9e:a0:8a:7c:ff:e3:f8:07:a6:9b:
         45:16:02:2f:49:d4:b0:3c:f6:06:71:1f:cf:aa:a1:92:8c:63:
         ff:ab:1c:ba:09:e4:e9:25:02:6c:44:bb:a6:94:32:1c:64:9b:
         93:b0:4c:7d:55:b4:67:c5:21:40:f2:67:01:bb:20:20:02:12:
         02:d6:ec:d4:42:f0:26:45:0d:64:fc:e9:8e:3f:e3:c5:e2:4c:
         de:88:c9:ca:fd:77:ad:bf:c2:61:53:15:fb:e4:9c:ca:9e:f4:
         20:c3:ad:f7:8c:a3:0e:eb:40:01:7f:5f:4e:14:98:11:92:4d:
         68:22:0d:a3:89:61:e3:ce:b7:0b:fe:a7:34:30:8f:71:fe:58:
         fc:dd:a5:61:69:07:43:79:ca:7c:63:5a:37:a1:f7:60:c4:c5:
         ba:f5:ee:62:a4:11:1d:41:e9:e4:9d:00:14:7d:93:9f:12:5d:
         91:a1:dc:43:3b:35:74:2b:39:1d:27:8b:d3:cb:4d:94:62:b2:
         de:8e:4e:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs5xXvErpcK5cuX0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDkxNzE1MDY0MVoXDTI1MTIxNjE2MDY0MVowLzEtMCsGA1UEAxMk
MzIxMTU0YjAtMjNkYy00Y2FhLTg2ZTYtNTY1YTA1MjNmNzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdS8Lsb5cFtyfvFDsMc2/m6moXz0LMPPpCiS
QUC3ZpCVMv3jY1GxmOFz3LLOptTTkRwmqDslBcOd1GHM4Tf7Px+ZkeNiB/bJp2+W
ZJ3sxgGnA174Dv5j4+wO2TAfPbP0PSRMXs9EbxwjgSm2hvdd95yN2ejlXDsLPQZv
7IFI6p31DycTqtF+keldoB5r22kyfQlVqfAXfgRYxLAl3xYnofPVww/7E6Qn2g89
D/m77KDUcve7JODqXoiKiH3I3Dn7JFHz6hEcTM8jj1i9ufeeoW8Oqx2J/oWXdpvy
kIeNBh7GnZ4p1zg8ccNO8HWXHgj0GcxSvvyJY5ZLrS6uOu8GAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG2sfmY4ovUWpsoWb5kfv3tYZa/8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzQ2YzA0MDQtZTA3My0z
Yjc2LTg0NmMtNGNkMzYxZmNkZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBgEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABDBFOdIr3ADIyMxD+NU0usxJ5qre09vq0WK9WZonyw5K7qpwjMz
YlSpbWxKV8VsrFJCzNAXRUHIw+IU9gtTnqCKfP/j+Aemm0UWAi9J1LA89gZxH8+q
oZKMY/+rHLoJ5OklAmxEu6aUMhxkm5OwTH1VtGfFIUDyZwG7ICACEgLW7NRC8CZF
DWT86Y4/48XiTN6Iycr9d62/wmFTFfvknMqe9CDDrfeMow7rQAF/X04UmBGSTWgi
DaOJYePOtwv+pzQwj3H+WPzdpWFpB0N5ynxjWjeh92DExbr17mKkER1B6eSdABR9
k58SXZGh3EM7NXQrOR0ni9PLTZRist6OTsw=
-----END CERTIFICATE-----
Generated at Wed Oct 8 14:06:40 2025 by rpki-client