Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/ce0c7722-759e-370a-97db-df696609d036.roa
File:                     ce0c7722-759e-370a-97db-df696609d036.roa (raw, json)
Hash identifier:          Gg2ezHfBW5jR5SDRmi49m6NbuIIO2kDhbkVY4OobIew=
Subject key identifier:   D6:6F:4A:C3:F3:FC:28:8C:B8:2E:63:C8:3B:2B:67:59:A6:75:80:C0
Certificate issuer:       /CN=92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2
Certificate serial:       010D0C9F4328584A5CFB34A45DA8EAACF521F340
Authority key identifier: 11:F0:BB:48:66:EF:CD:56:DD:93:34:E2:22:56:D9:2D:D4:BF:F1:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/ce0c7722-759e-370a-97db-df696609d036.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     397727
IP address blocks:        2602:814:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:34:a4:5d:a8:ea:ac:f5:21:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=0585838d-bd80-46be-aafc-3968d23597b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:42:81:d6:1f:69:0b:e6:60:2c:51:02:88:b3:
                    54:a5:f0:fd:cc:28:0d:cf:fb:27:92:a5:23:4d:42:
                    7f:0c:c0:44:34:36:eb:7f:87:ad:82:d1:a0:12:65:
                    78:d4:af:72:b5:89:18:43:89:f7:95:bf:80:e8:4b:
                    f1:7a:1a:fd:28:cc:32:26:b7:0a:09:16:c8:5a:9d:
                    9f:3d:dd:ac:f8:09:ca:d3:9b:46:b9:d8:a2:63:26:
                    d2:1c:16:a5:e1:57:4f:d2:d6:84:10:d8:42:f6:c4:
                    fc:04:61:3a:65:2f:13:1e:9f:8b:0d:2d:ac:9e:ca:
                    31:b2:c4:02:43:75:91:b9:52:ce:b9:b6:f8:53:f1:
                    63:ca:09:c4:5f:00:88:9b:e7:db:c8:bc:61:c6:00:
                    ec:9f:9c:ac:2e:d8:95:fa:4a:b6:5b:ee:56:f5:4f:
                    22:f8:7b:f6:87:83:65:9e:32:00:53:70:c7:a5:ec:
                    58:7e:58:02:63:6d:37:0f:65:8c:b1:60:ce:dd:fd:
                    93:aa:ca:67:e1:9c:3a:3e:e8:6e:a1:0d:64:3f:0b:
                    32:26:2e:d8:c8:32:b7:d7:3b:91:a0:7e:cd:7f:f8:
                    d7:18:e8:cd:10:9b:09:5c:bc:a8:39:c9:12:33:cb:
                    59:ad:cb:5d:83:4f:29:7e:5a:bf:16:de:40:5a:77:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6F:4A:C3:F3:FC:28:8C:B8:2E:63:C8:3B:2B:67:59:A6:75:80:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/ce0c7722-759e-370a-97db-df696609d036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.crl

            X509v3 Authority Key Identifier:
                keyid:11:F0:BB:48:66:EF:CD:56:DD:93:34:E2:22:56:D9:2D:D4:BF:F1:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4d:36:c4:01:c8:5e:8b:04:f1:6a:4f:f3:c8:cc:65:02:ae:
         04:7a:c6:01:2e:54:91:33:0b:ea:81:09:f5:65:d9:94:eb:41:
         ef:3c:f9:c9:b1:46:f0:57:fd:19:bd:c4:d0:58:e9:57:6b:c5:
         59:70:89:10:c7:ca:08:f1:28:20:bc:7e:de:81:08:a0:e5:6d:
         9a:40:1c:b0:5a:01:bc:e1:83:64:b3:bd:c8:09:e2:e4:2e:00:
         fa:35:14:b4:d5:8c:c9:9c:cb:1a:c5:86:b5:c2:54:13:6a:14:
         72:82:6d:30:3c:17:44:0e:95:6d:b9:08:23:d3:e5:84:62:de:
         4c:b4:71:90:2c:c7:9e:e3:5d:cd:c7:fb:dc:4f:56:40:15:e6:
         8e:79:e8:ee:56:92:a6:87:64:73:f0:e3:34:f9:13:5c:74:17:
         3f:33:ca:42:d1:4b:11:8e:ed:86:51:bf:35:ed:36:fe:51:45:
         97:4c:57:7b:6f:76:3c:4b:e0:f2:ab:51:ed:ef:87:10:c8:05:
         cc:83:bf:2e:bb:0e:27:68:3f:56:13:ce:9d:d8:14:34:21:18:
         cb:ab:e7:48:cf:be:8c:25:15:97:6a:c9:46:24:6e:ce:86:fa:
         8a:fe:50:ca:4e:01:f8:cd:92:8a:96:15:ef:9d:a2:01:d0:33:
         9a:aa:d9:66
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc+zSkXajqrPUh80AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTJjNGYyNTAtYjY4Yi00YmI1LTg2ZTQtYzBmZGY0M2Y0
Y2QyMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
MDU4NTgzOGQtYmQ4MC00NmJlLWFhZmMtMzk2OGQyMzU5N2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0KB1h9pC+ZgLFECiLNUpfD9zCgNz/snkqUj
TUJ/DMBENDbrf4etgtGgEmV41K9ytYkYQ4n3lb+A6Evxehr9KMwyJrcKCRbIWp2f
Pd2s+AnK05tGudiiYybSHBal4VdP0taEENhC9sT8BGE6ZS8THp+LDS2snsoxssQC
Q3WRuVLOubb4U/FjygnEXwCIm+fbyLxhxgDsn5ysLtiV+kq2W+5W9U8i+Hv2h4Nl
njIAU3DHpexYflgCY203D2WMsWDO3f2Tqspn4Zw6PuhuoQ1kPwsyJi7YyDK31zuR
oH7Nf/jXGOjNEJsJXLyoOckSM8tZrctdg08pflq/Ft5AWnfGDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNZvSsPz/CiMuC5jyDsrZ1mmdYDAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MmM0
ZjI1MC1iNjhiLTRiYjUtODZlNC1jMGZkZjQzZjRjZDIvY2UwYzc3MjItNzU5ZS0z
NzBhLTk3ZGItZGY2OTY2MDlkMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTJjNGYyNTAtYjY4Yi00YmI1LTg2
ZTQtYzBmZGY0M2Y0Y2QyLzkyYzRmMjUwLWI2OGItNGJiNS04NmU0LWMwZmRmNDNm
NGNkMi5jcmwwHwYDVR0jBBgwFoAUEfC7SGbvzVbdkzTiIlbZLdS/8ekwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MmM0ZjI1MC1iNjhiLTRiYjUtODZlNC1jMGZk
ZjQzZjRjZDIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFIAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGhNNsQByF6LBPFqT/PIzGUCrgR6xgEuVJEzC+qBCfVl2ZTrQe88
+cmxRvBX/Rm9xNBY6VdrxVlwiRDHygjxKCC8ft6BCKDlbZpAHLBaAbzhg2SzvcgJ
4uQuAPo1FLTVjMmcyxrFhrXCVBNqFHKCbTA8F0QOlW25CCPT5YRi3ky0cZAsx57j
Xc3H+9xPVkAV5o556O5WkqaHZHPw4zT5E1x0Fz8zykLRSxGO7YZRvzXtNv5RRZdM
V3tvdjxL4PKrUe3vhxDIBcyDvy67DidoP1YTzp3YFDQhGMur50jPvowlFZdqyUYk
bs6G+or+UMpOAfjNkoqWFe+dogHQM5qq2WY=
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:22:46 2025 by rpki-client