Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/004214fc-b41f-3eeb-895b-563153d34ef6.roa
File:                     004214fc-b41f-3eeb-895b-563153d34ef6.roa (raw, json)
Hash identifier:          OKN1e64CMs6fyEvLe+mnKKUXc1eZopPSeFv795bHwgg=
Subject key identifier:   65:BB:A8:6B:61:06:C4:F6:D7:FE:30:3F:8B:C6:C8:9C:B8:74:DD:62
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584B110C02C2D7FB67DF1FDF5A00
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/004214fc-b41f-3eeb-895b-563153d34ef6.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2620:116:800e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:02:c2:d7:fb:67:df:1f:df:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=002eb4d8-4718-4542-9cfb-09de4bca2bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:e1:26:99:6a:db:bc:0b:ce:90:e1:dc:70:
                    44:81:b5:81:3c:ca:51:bf:28:62:44:60:d0:01:84:
                    34:5f:57:ce:5e:38:36:18:7c:cb:c4:20:b0:b3:5a:
                    a6:87:5b:47:6c:99:20:0d:27:d5:3d:2e:37:5c:93:
                    29:8a:e1:cd:85:83:82:93:17:66:55:c4:77:53:0b:
                    5a:d2:f9:92:6f:d1:dc:e3:22:e2:4f:b3:fb:2b:5e:
                    73:ee:29:b7:af:16:fa:2d:cb:21:d9:2d:6c:ac:63:
                    91:df:c1:d1:cb:a5:da:80:59:e9:7c:2d:6f:c1:3c:
                    e1:ab:d9:2d:95:82:26:fb:96:d8:0c:44:e7:0d:4d:
                    b3:b6:ab:04:ae:8f:44:da:84:d6:94:f4:15:f7:02:
                    e4:3f:b4:26:24:aa:31:f6:a7:3a:64:8f:07:17:5c:
                    a5:0c:c3:94:67:31:16:fd:a8:7b:9b:ff:4d:70:6a:
                    81:9e:fd:97:9d:a6:ae:0e:aa:9c:d1:b2:50:75:57:
                    62:ca:2b:df:53:d9:dc:aa:b9:b8:a9:27:1c:51:aa:
                    6d:6b:cb:10:92:fe:8c:02:af:36:27:62:26:c7:5c:
                    bb:7b:00:62:45:ed:27:ee:9b:13:e3:29:2d:8a:94:
                    d4:9b:fa:57:ad:23:fd:19:45:ed:f2:0d:6f:66:e8:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BB:A8:6B:61:06:C4:F6:D7:FE:30:3F:8B:C6:C8:9C:B8:74:DD:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/004214fc-b41f-3eeb-895b-563153d34ef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ef:09:8c:67:8e:90:cd:7c:84:77:8d:e7:7e:18:18:cd:c2:
         f7:67:ff:b5:9b:94:0a:10:d0:80:e9:ec:78:18:81:8f:1d:6d:
         b4:05:28:49:12:98:6c:79:cf:a7:6b:ea:fe:54:2e:05:b9:b3:
         fa:6e:68:5f:f0:f5:8d:26:30:34:cd:82:19:e9:22:a1:dd:a8:
         4d:2a:9d:71:e5:c2:89:18:1b:59:41:9e:0d:e6:31:98:19:b2:
         34:cf:af:c4:7f:e3:3c:62:84:ec:d7:9f:fe:8d:f9:bb:38:d7:
         63:f3:62:7d:52:cf:d3:35:f3:54:4f:ae:ea:e3:64:a1:4d:ac:
         be:b7:f1:48:82:6f:e7:32:f8:b4:a6:39:76:bd:47:a1:b0:0e:
         ee:c5:90:b5:2a:e4:7c:bc:7a:b3:c8:1d:e9:ee:84:40:28:69:
         fb:ee:74:60:5b:10:5a:20:7e:d3:9f:9e:e1:c6:bc:9d:dd:f6:
         5a:27:14:86:62:32:4a:18:62:aa:c8:2a:1d:d1:9a:1d:f5:13:
         48:a4:89:e8:0d:1a:be:78:52:5e:19:d1:3f:be:08:63:48:a2:
         cd:ca:81:b6:6f:80:cf:64:50:59:1c:10:b0:7c:cd:4e:c3:61:
         4b:7e:f1:3d:9f:58:93:60:69:1e:a5:ef:0c:40:cb:3a:13:da:
         c2:cc:6b:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsRDALC1/tn3x/fWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5
Mzc4MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk
MDAyZWI0ZDgtNDcxOC00NTQyLTljZmItMDlkZTRiY2EyYmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVfhJplq27wLzpDh3HBEgbWBPMpRvyhiRGDQ
AYQ0X1fOXjg2GHzLxCCws1qmh1tHbJkgDSfVPS43XJMpiuHNhYOCkxdmVcR3Uwta
0vmSb9Hc4yLiT7P7K15z7im3rxb6Lcsh2S1srGOR38HRy6XagFnpfC1vwTzhq9kt
lYIm+5bYDETnDU2ztqsEro9E2oTWlPQV9wLkP7QmJKox9qc6ZI8HF1ylDMOUZzEW
/ah7m/9NcGqBnv2XnaauDqqc0bJQdVdiyivfU9ncqrm4qSccUapta8sQkv6MAq82
J2Imx1y7ewBiRe0n7psT4yktipTUm/pXrSP9GUXt8g1vZuhoOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGW7qGthBsT21/4wP4vGyJy4dN1iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy
MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMDA0MjE0ZmMtYjQxZi0z
ZWViLTg5NWItNTYzMTUzZDM0ZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz
MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0
OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi
MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACXvCYxnjpDNfIR3jed+GBjNwvdn/7WblAoQ0IDp7HgYgY8dbbQF
KEkSmGx5z6dr6v5ULgW5s/puaF/w9Y0mMDTNghnpIqHdqE0qnXHlwokYG1lBng3m
MZgZsjTPr8R/4zxihOzXn/6N+bs412PzYn1Sz9M181RPrurjZKFNrL638UiCb+cy
+LSmOXa9R6GwDu7FkLUq5Hy8erPIHenuhEAoafvudGBbEFogftOfnuHGvJ3d9lon
FIZiMkoYYqrIKh3Rmh31E0ikiegNGr54Ul4Z0T++CGNIos3KgbZvgM9kUFkcELB8
zU7DYUt+8T2fWJNgaR6l7wxAyzoT2sLMax8=
-----END CERTIFICATE-----
Generated at Wed Sep 17 05:16:02 2025 by rpki-client