Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/1c6a78b9-c377-3b7a-833d-0306da95276c.roa
File:                     1c6a78b9-c377-3b7a-833d-0306da95276c.roa (raw, json)
Hash identifier:          hsMMW0QYXzkLgfgavoOsJR5E2lASyFSHaMMTXuX5cWY=
Subject key identifier:   3E:3D:8F:07:54:80:EB:2E:1B:3A:F4:6F:EA:46:66:1C:6D:F5:1B:61
Certificate issuer:       /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
Certificate serial:       010D0C9F4328584AFC1BF6156A2A657DEDB28820
Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/1c6a78b9-c377-3b7a-833d-0306da95276c.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     30176
IP address blocks:        2607:f698::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:f6:15:6a:2a:65:7d:ed:b2:88:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=be01d87a-e477-489d-b27b-a8f13801b27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:70:a8:15:a7:ae:9e:24:7d:c3:86:29:26:
                    df:17:1a:ff:09:05:ba:6d:0b:2c:86:48:d8:35:e2:
                    bf:e5:61:c8:42:34:9a:f2:c3:ca:c2:b7:19:c6:f7:
                    5a:3b:87:de:f9:aa:66:44:3e:a7:0d:55:45:4b:cd:
                    1d:e0:60:ff:8f:46:a4:23:ee:f4:57:46:15:11:3a:
                    8f:a4:02:c3:dc:1c:b2:40:ab:e6:30:a8:e6:e5:00:
                    85:4b:6b:7a:ed:82:f6:f0:10:fd:bc:7a:78:c9:a6:
                    86:8f:5e:ab:2e:57:3d:85:7b:ca:20:e7:98:76:14:
                    79:e0:fc:d6:cf:5b:a0:a6:83:f5:e8:2a:56:28:31:
                    b9:ed:f5:53:4c:f6:8b:c1:6f:46:37:ea:f0:8a:28:
                    94:eb:43:93:07:22:e9:c1:ab:e5:08:fa:2b:e4:3d:
                    70:34:71:6a:2e:6b:c4:f5:d0:44:80:da:fd:14:c2:
                    1a:48:b9:c0:14:e8:a6:6a:95:63:cb:8b:fe:ff:f0:
                    a1:00:00:7f:28:77:5d:6a:5b:79:47:ec:47:e0:0e:
                    dd:f6:17:c0:30:81:44:2a:aa:8b:09:49:50:da:06:
                    d9:71:13:73:83:9d:36:dc:95:9a:b8:81:61:95:e4:
                    78:7d:2a:42:87:b2:49:04:6f:76:b0:04:e2:87:eb:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3D:8F:07:54:80:EB:2E:1B:3A:F4:6F:EA:46:66:1C:6D:F5:1B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/1c6a78b9-c377-3b7a-833d-0306da95276c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl

            X509v3 Authority Key Identifier:
                keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f698::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7c:1c:d3:aa:48:fe:9b:47:bc:2b:50:c4:8c:86:65:a3:bd:
         bc:56:43:9f:e5:a8:41:f6:aa:5b:88:47:69:c6:f1:8b:4d:1e:
         10:0f:f1:35:9c:d0:09:af:25:ce:01:4c:b9:36:f7:f7:5b:8d:
         f8:99:f2:9c:bd:b0:8b:df:af:ca:54:e4:13:09:21:83:b4:e9:
         24:3a:86:a4:dd:9b:35:b4:26:91:52:e3:f5:23:46:23:b3:68:
         cc:a5:e8:9d:0c:24:b8:e2:c0:ae:29:2b:56:eb:d1:32:2f:f5:
         99:8e:38:f5:0c:86:69:0d:87:00:be:87:17:20:66:d9:c8:a5:
         ef:bf:d0:6e:5b:ef:1d:ae:12:d9:b7:62:de:94:59:4d:e6:7e:
         35:78:dd:3f:52:9e:4e:96:a3:2e:d1:24:78:c2:e4:d0:9e:30:
         3e:66:56:8b:26:4a:71:a4:cc:d8:df:74:be:4a:a1:cd:87:73:
         f3:49:66:83:b8:10:2a:43:1f:43:59:af:60:fc:af:82:51:52:
         9e:77:2a:22:29:61:20:34:5a:83:4a:bb:6e:10:40:90:92:5e:
         dd:36:1b:f1:6b:e4:58:a8:f6:31:c2:d8:32:6c:67:06:fd:b4:
         1b:fe:71:a7:a2:71:57:6b:5e:6d:4a:38:78:35:02:dd:e5:66:
         0e:3e:d7:5a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr8G/YVaiplfe2yiCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyOTU4MjAtMDNiYy00YTRlLTgwNzItN2NiZjc0OGY0
YzZkMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
YmUwMWQ4N2EtZTQ3Ny00ODlkLWIyN2ItYThmMTM4MDFiMjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3xwqBWnrp4kfcOGKSbfFxr/CQW6bQsshkjY
NeK/5WHIQjSa8sPKwrcZxvdaO4fe+apmRD6nDVVFS80d4GD/j0akI+70V0YVETqP
pALD3ByyQKvmMKjm5QCFS2t67YL28BD9vHp4yaaGj16rLlc9hXvKIOeYdhR54PzW
z1ugpoP16CpWKDG57fVTTPaLwW9GN+rwiiiU60OTByLpwavlCPor5D1wNHFqLmvE
9dBEgNr9FMIaSLnAFOimapVjy4v+//ChAAB/KHddalt5R+xH4A7d9hfAMIFEKqqL
CUlQ2gbZcRNzg5023JWauIFhleR4fSpCh7JJBG92sATih+vODwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFD49jwdUgOsuGzr0b+pGZhxt9RthMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5
NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2JmNzQ4ZjRjNmQvMWM2YTc4YjktYzM3Ny0z
YjdhLTgzM2QtMDMwNmRhOTUyNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTgyOTU4MjAtMDNiYy00YTRlLTgw
NzItN2NiZjc0OGY0YzZkL2U4Mjk1ODIwLTAzYmMtNGE0ZS04MDcyLTdjYmY3NDhm
NGM2ZC5jcmwwHwYDVR0jBBgwFoAUGt9TWH5SbG/MuhYDvE0QNRjo5qQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2Jm
NzQ4ZjRjNmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf2mDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAwfBzTqkj+m0e8K1DEjIZlo728VkOf5ahB9qpbiEdpxvGLTR4QD/E1
nNAJryXOAUy5Nvf3W434mfKcvbCL36/KVOQTCSGDtOkkOoak3Zs1tCaRUuP1I0Yj
s2jMpeidDCS44sCuKStW69EyL/WZjjj1DIZpDYcAvocXIGbZyKXvv9BuW+8drhLZ
t2LelFlN5n41eN0/Up5OlqMu0SR4wuTQnjA+ZlaLJkpxpMzY33S+SqHNh3PzSWaD
uBAqQx9DWa9g/K+CUVKedyoiKWEgNFqDSrtuEECQkl7dNhvxa+RYqPYxwtgybGcG
/bQb/nGnonFXa15tSjh4NQLd5WYOPtda
-----END CERTIFICATE-----
Generated at Sat Sep 13 19:34:55 2025 by rpki-client