Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/b997d817-4fa0-3f4d-b90b-0646406d600a.roa
File:                     b997d817-4fa0-3f4d-b90b-0646406d600a.roa (raw, json)
Hash identifier:          CNjIUPS6VBf+68GPFeufn0ydbg41t97gF624BQeZLRE=
Subject key identifier:   13:7A:A6:2A:19:51:A9:67:B7:A9:52:73:4D:E9:B9:09:98:17:CC:9A
Certificate issuer:       /CN=1fe8849b-66cd-4afe-9b0b-970eafad1175
Certificate serial:       010D0C9F4328584AA42B884BB697CF674FE30240
Authority key identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/b997d817-4fa0-3f4d-b90b-0646406d600a.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     1008
IP address blocks:        2606:e040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:88:4b:b6:97:cf:67:4f:e3:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe8849b-66cd-4afe-9b0b-970eafad1175
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=da783585-e786-4717-a4ac-87df8d114992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:2a:dc:72:c7:fd:3a:37:e2:2b:23:12:0c:
                    eb:81:d2:c8:85:bd:3d:bd:eb:3c:dd:b7:11:2a:e3:
                    54:a7:6b:dd:55:d0:2e:69:2b:65:67:55:78:bd:b7:
                    4b:2d:99:22:78:37:ee:b9:47:d4:25:d1:4b:5d:1e:
                    47:1d:ab:a6:c8:0a:64:34:dc:70:98:b3:b0:c4:0e:
                    8e:08:ef:6e:7f:7e:bb:8a:81:1c:1c:5c:93:84:50:
                    ec:26:b5:96:e4:8f:1e:87:d3:fa:1b:5c:77:21:4c:
                    ab:75:1e:69:4f:f8:26:72:87:80:6c:b6:0f:71:d8:
                    4e:a9:fc:df:c9:e0:d2:d1:23:2e:f9:71:e1:5d:d9:
                    de:fa:08:78:f1:a0:d1:3d:90:3f:bd:2e:8e:94:55:
                    b0:d9:45:8b:68:16:f7:11:3a:e1:15:6e:fb:95:26:
                    4f:59:07:07:08:37:e9:3c:d8:53:56:2f:22:d9:ea:
                    b6:bc:b0:da:05:60:c8:af:19:3b:e6:fd:f8:e6:05:
                    f1:80:ca:bb:23:28:86:95:3e:5d:f2:5b:be:ec:cd:
                    f5:a6:87:27:84:cc:1a:ea:08:16:60:3c:0a:66:c4:
                    10:9d:51:ac:8d:f7:69:65:02:b0:21:c0:b4:5c:78:
                    e9:42:67:5c:9c:41:7c:a3:90:97:1f:7a:c5:ff:ac:
                    dd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7A:A6:2A:19:51:A9:67:B7:A9:52:73:4D:E9:B9:09:98:17:CC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/b997d817-4fa0-3f4d-b90b-0646406d600a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl

            X509v3 Authority Key Identifier:
                keyid:BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:e040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:9d:3f:77:c1:ea:d6:4a:b6:79:31:ef:d0:49:67:67:ae:c5:
         3b:69:5a:63:b6:f5:d0:d0:72:56:8d:d7:40:c5:02:4d:0a:d7:
         2b:19:1f:2e:54:c7:01:3d:27:d5:88:09:43:56:78:30:e8:21:
         c9:c0:49:97:e4:05:d1:42:49:09:d6:ee:9c:f3:58:d2:00:79:
         d3:e4:37:9c:47:01:da:54:ab:b1:79:4a:62:c4:7b:b9:be:72:
         4b:36:8a:7e:e5:79:16:d5:c4:4e:b8:a9:1c:9c:20:2c:6a:a7:
         86:27:8b:6d:b7:e5:81:57:af:8f:ce:6a:f2:d2:4e:46:2d:15:
         0a:ef:0e:2f:95:3d:d6:5f:7e:44:3d:37:74:8c:82:72:50:e4:
         ce:4a:2a:6b:42:58:06:d3:af:d0:b4:89:49:09:95:22:e1:4a:
         71:bb:12:fc:88:58:78:dc:35:5f:69:51:4f:3e:24:84:e7:27:
         73:96:fb:e1:13:28:bf:ce:c4:11:f3:c9:b9:2c:21:ba:04:79:
         80:49:73:7d:6d:4b:42:b1:6f:36:86:45:38:58:20:df:81:3a:
         93:6b:2e:2f:79:8e:08:60:d1:4c:4b:f4:2a:f8:bc:18:7e:a9:
         27:4a:8d:a8:ac:27:28:3f:d0:e5:18:58:73:00:43:3a:18:a6:
         d9:c3:f3:16
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqkK4hLtpfPZ0/jAkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZlODg0OWItNjZjZC00YWZlLTliMGItOTcwZWFmYWQx
MTc1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
ZGE3ODM1ODUtZTc4Ni00NzE3LWE0YWMtODdkZjhkMTE0OTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Egq3HLH/To34isjEgzrgdLIhb09ves83bcR
KuNUp2vdVdAuaStlZ1V4vbdLLZkieDfuuUfUJdFLXR5HHaumyApkNNxwmLOwxA6O
CO9uf367ioEcHFyThFDsJrWW5I8eh9P6G1x3IUyrdR5pT/gmcoeAbLYPcdhOqfzf
yeDS0SMu+XHhXdne+gh48aDRPZA/vS6OlFWw2UWLaBb3ETrhFW77lSZPWQcHCDfp
PNhTVi8i2eq2vLDaBWDIrxk75v345gXxgMq7IyiGlT5d8lu+7M31pocnhMwa6ggW
YDwKZsQQnVGsjfdpZQKwIcC0XHjpQmdcnEF8o5CXH3rF/6zdJwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBN6pioZUalnt6lSc03puQmYF8yaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4
ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBlYWZhZDExNzUvYjk5N2Q4MTctNGZhMC0z
ZjRkLWI5MGItMDY0NjQwNmQ2MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWZlODg0OWItNjZjZC00YWZlLTli
MGItOTcwZWFmYWQxMTc1LzFmZTg4NDliLTY2Y2QtNGFmZS05YjBiLTk3MGVhZmFk
MTE3NS5jcmwwHwYDVR0jBBgwFoAUvqggnBNe/PnuaZjOhE646NyD9JUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBl
YWZhZDExNzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbgQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBZnT93werWSrZ5Me/QSWdnrsU7aVpjtvXQ0HJWjddAxQJNCtcrGR8u
VMcBPSfViAlDVngw6CHJwEmX5AXRQkkJ1u6c81jSAHnT5DecRwHaVKuxeUpixHu5
vnJLNop+5XkW1cROuKkcnCAsaqeGJ4ttt+WBV6+Pzmry0k5GLRUK7w4vlT3WX35E
PTd0jIJyUOTOSiprQlgG06/QtIlJCZUi4UpxuxL8iFh43DVfaVFPPiSE5ydzlvvh
Eyi/zsQR88m5LCG6BHmASXN9bUtCsW82hkU4WCDfgTqTay4veY4IYNFMS/Qq+LwY
fqknSo2orCcoP9DlGFhzAEM6GKbZw/MW
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:53 2025 by rpki-client