Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/80358e81-b908-31db-92bd-660e4dadeeef.roa
File:                     80358e81-b908-31db-92bd-660e4dadeeef.roa (raw, json)
Hash identifier:          bmQwS4tbTJAaMKkd2EXPwT3tcYCSbPaQlTxGbt7syAo=
Subject key identifier:   38:47:7A:10:D7:EE:31:CC:8C:E3:50:E7:28:66:91:BE:83:6E:3B:B5
Certificate issuer:       /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Certificate serial:       010D0C9F4328584AC1D77479E30E87B5897ADC80
Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/80358e81-b908-31db-92bd-660e4dadeeef.roa
Signing time:             Tue 05 Aug 2025 16:00:42 +0000
ROA not before:           Tue 05 Aug 2025 16:00:42 +0000
ROA not after:            Mon 03 Nov 2025 17:00:42 +0000
asID:                     5400
IP address blocks:        2606:f100:d000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:d7:74:79:e3:0e:87:b5:89:7a:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
        Validity
            Not Before: Aug  5 16:00:42 2025 GMT
            Not After : Nov  3 17:00:42 2025 GMT
        Subject: CN=5141a796-8e58-4ea2-a3fd-df373024a4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:2b:89:82:f0:59:e2:52:4b:d2:66:2a:07:
                    19:7d:90:2a:8c:3a:34:29:84:76:4b:0c:7a:eb:0a:
                    8e:4d:83:e6:a9:45:5b:80:ba:e5:ef:3c:02:f4:fe:
                    21:99:fd:a9:80:72:50:e3:29:63:f4:56:22:f7:de:
                    63:a4:1f:f0:b5:25:ec:ad:bd:40:c0:bd:6a:39:6f:
                    80:57:ec:05:2d:1c:bf:37:75:9a:4e:18:a4:92:e2:
                    96:f9:41:7d:05:38:8b:0f:4d:dd:3f:e2:22:13:7c:
                    6d:72:9b:3e:35:94:b3:33:04:c8:9a:f6:81:f7:95:
                    62:92:23:b6:b1:54:e3:a6:0c:09:bd:eb:47:96:9b:
                    21:e1:96:a2:b1:cf:94:41:da:af:bd:59:c7:93:c8:
                    38:d1:82:cd:5f:f0:98:b4:f9:a8:52:ef:3a:6e:33:
                    83:02:27:e9:c0:28:8b:2c:a0:75:9e:eb:26:e6:04:
                    da:58:46:63:48:8a:eb:73:40:04:89:5b:bc:7c:91:
                    3c:8f:6d:a3:33:d6:16:17:c7:e4:1e:aa:39:ef:e8:
                    c1:53:7c:24:39:1e:34:d5:27:67:d1:59:71:c1:7a:
                    b2:3e:a2:cb:ce:f5:63:01:6c:0b:60:03:b0:6e:43:
                    82:0d:1e:56:e4:d2:36:f5:fc:1b:6e:9f:59:1c:4d:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:47:7A:10:D7:EE:31:CC:8C:E3:50:E7:28:66:91:BE:83:6E:3B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/80358e81-b908-31db-92bd-660e4dadeeef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl

            X509v3 Authority Key Identifier:
                keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f100:d000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:2b:f3:60:e9:bd:d8:06:44:22:b6:35:bb:e4:66:10:d0:7a:
         72:af:07:51:04:a0:ea:99:21:3b:43:04:c7:e2:25:98:dd:e7:
         2a:31:3a:0d:58:d0:a1:0e:13:62:05:2a:f5:4b:1b:e1:29:47:
         be:ab:ee:7b:04:98:49:c5:c3:35:79:89:5c:35:fa:ab:9b:0d:
         62:de:83:fe:27:40:f3:86:74:93:82:b4:70:b2:46:97:f3:16:
         3f:aa:9a:a2:17:e4:71:97:58:a3:8a:e4:fe:28:b7:c6:c4:6b:
         62:65:a1:e1:60:99:fc:99:d1:2c:f2:74:05:14:7c:21:ec:42:
         44:c7:f0:8d:e8:d6:6d:f4:06:eb:32:83:1c:b8:ab:7e:81:23:
         40:27:0b:2d:9a:df:48:89:f8:ee:29:6f:1d:85:cf:51:34:86:
         9d:a1:39:2b:ea:37:bf:fc:b8:aa:2d:12:2b:39:55:20:50:1c:
         8f:82:b1:7b:74:0e:07:c9:2d:bd:d0:cd:a0:dc:12:2c:f6:91:
         df:5a:fd:3a:4b:d3:83:20:13:45:32:f6:b9:fa:16:20:48:4c:
         0a:9d:8a:ff:f6:65:5c:1e:d0:45:76:0b:fa:9f:76:97:50:6d:
         bc:1c:78:f8:ec:53:cf:89:62:9c:b2:2c:c7:f9:f7:01:08:9a:
         23:1c:92:69
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErB13R54w6HtYl63IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFhMjRhMjItZjhlMi00MzlmLWEyZDUtZDQ5NzUzOGQ3
YmNiMB4XDTI1MDgwNTE2MDA0MloXDTI1MTEwMzE3MDA0MlowLzEtMCsGA1UEAxMk
NTE0MWE3OTYtOGU1OC00ZWEyLWEzZmQtZGYzNzMwMjRhNGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSoriYLwWeJSS9JmKgcZfZAqjDo0KYR2Swx6
6wqOTYPmqUVbgLrl7zwC9P4hmf2pgHJQ4ylj9FYi995jpB/wtSXsrb1AwL1qOW+A
V+wFLRy/N3WaThikkuKW+UF9BTiLD03dP+IiE3xtcps+NZSzMwTImvaB95VikiO2
sVTjpgwJvetHlpsh4Zaisc+UQdqvvVnHk8g40YLNX/CYtPmoUu86bjODAifpwCiL
LKB1nusm5gTaWEZjSIrrc0AEiVu8fJE8j22jM9YWF8fkHqo57+jBU3wkOR401Sdn
0VlxwXqyPqLLzvVjAWwLYAOwbkOCDR5W5NI29fwbbp9ZHE2gFQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDhHehDX7jHMjONQ5yhmkb6Dbju1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEy
NGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3NTM4ZDdiY2IvODAzNThlODEtYjkwOC0z
MWRiLTkyYmQtNjYwZTRkYWRlZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzFhMjRhMjItZjhlMi00MzlmLWEy
ZDUtZDQ5NzUzOGQ3YmNiLzMxYTI0YTIyLWY4ZTItNDM5Zi1hMmQ1LWQ0OTc1Mzhk
N2JjYi5jcmwwHwYDVR0jBBgwFoAUY2JD6lbckFOLXgDzWNjeh2KTioswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEyNGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3
NTM4ZDdiY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgbxANAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAvSvzYOm92AZEIrY1u+RmENB6cq8HUQSg6pkhO0MEx+IlmN3nKjE6
DVjQoQ4TYgUq9Usb4SlHvqvuewSYScXDNXmJXDX6q5sNYt6D/idA84Z0k4K0cLJG
l/MWP6qaohfkcZdYo4rk/ii3xsRrYmWh4WCZ/JnRLPJ0BRR8IexCRMfwjejWbfQG
6zKDHLirfoEjQCcLLZrfSIn47ilvHYXPUTSGnaE5K+o3v/y4qi0SKzlVIFAcj4Kx
e3QOB8ktvdDNoNwSLPaR31r9OkvTgyATRTL2ufoWIEhMCp2K//ZlXB7QRXYL+p92
l1BtvBx4+OxTz4linLIsx/n3AQiaIxySaQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:43 2025 by rpki-client