Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/a2530c56-4ae7-3e94-bd19-8b409a23cec0.roa
File:                     a2530c56-4ae7-3e94-bd19-8b409a23cec0.roa (raw, json)
Hash identifier:          LYH2mt9golVx/VZ5tnFGyifp5MjXQ8Ncl7yL3xCWllM=
Subject key identifier:   4D:D2:F2:69:2A:C2:B3:F0:EB:91:AF:CC:7E:26:DD:5D:64:57:58:CF
Certificate issuer:       /CN=706746b3-2f98-4839-b419-77fa8ac86365
Certificate serial:       010D0C9F4328584A07D52F90313E1DBFCD2CEC40
Authority key identifier: DB:E2:E0:27:CA:0D:90:5F:E4:8F:10:61:B4:72:78:BE:4C:52:41:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/a2530c56-4ae7-3e94-bd19-8b409a23cec0.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     396893
IP address blocks:        2606:b440::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/706746b3-2f98-4839-b419-77fa8ac86365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/706746b3-2f98-4839-b419-77fa8ac86365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:2f:90:31:3e:1d:bf:cd:2c:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706746b3-2f98-4839-b419-77fa8ac86365
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=5d10485d-fa5e-451e-ad58-d140cd116736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:62:24:78:cd:fe:90:b0:21:90:10:ea:1a:75:
                    88:fb:67:91:7e:ee:5a:e4:74:b4:0c:c7:62:d2:33:
                    9f:7b:a7:00:44:6e:db:b0:26:64:71:da:23:2f:6d:
                    c6:bf:58:56:33:42:9b:8f:ef:6a:4d:42:7f:b7:8c:
                    1a:20:d4:fc:20:61:ce:9e:22:fc:34:d8:10:d1:20:
                    6a:7b:bd:0b:9f:9c:77:d2:ef:47:92:71:7d:15:6e:
                    f2:5d:98:db:30:bf:3e:0a:62:6f:2a:19:61:45:dd:
                    ff:87:bd:cd:b7:f9:79:8a:2e:ae:db:37:53:24:58:
                    d2:56:64:26:a1:45:d1:53:50:5a:55:ff:9b:de:31:
                    26:55:b7:99:6a:97:33:fb:5f:c1:ef:bf:b1:87:d0:
                    77:a3:b2:99:4d:43:1c:5f:9b:2d:bb:e6:d7:86:c9:
                    f8:fc:28:bd:44:82:cc:77:da:17:60:2a:31:05:bb:
                    87:98:a6:65:bb:1a:92:fe:65:56:61:f1:c7:9d:67:
                    63:97:c9:72:75:7a:f4:81:ec:c0:25:68:16:20:3c:
                    46:da:83:26:d4:93:9d:6d:22:5c:ca:f7:48:3e:c7:
                    e4:ad:b3:09:18:e6:af:bb:83:b3:eb:a6:5b:dc:54:
                    5d:63:22:3a:9b:96:f7:4d:0f:85:78:9a:54:d7:a0:
                    3f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D2:F2:69:2A:C2:B3:F0:EB:91:AF:CC:7E:26:DD:5D:64:57:58:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/a2530c56-4ae7-3e94-bd19-8b409a23cec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/706746b3-2f98-4839-b419-77fa8ac86365.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E0:27:CA:0D:90:5F:E4:8F:10:61:B4:72:78:BE:4C:52:41:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:7d:45:df:f2:d4:4f:d5:ba:f6:6d:05:1b:f4:f9:f9:e5:
         1a:4b:4a:b6:88:1b:4f:44:2b:d4:bd:bf:4d:98:67:37:75:af:
         fc:93:46:04:fe:c4:cb:22:1c:45:9b:07:66:d3:5c:aa:09:4b:
         2e:3a:86:43:61:8b:8e:dd:90:fb:9d:0a:74:37:dc:3f:c9:c4:
         d8:09:55:dd:37:88:cc:c6:88:34:c4:1b:fa:8d:f5:1b:01:d3:
         13:22:ee:da:cd:e7:c2:c8:19:50:10:2c:9f:d7:53:61:94:dd:
         4c:66:f4:0d:55:5f:28:1c:46:91:94:0f:68:65:0d:36:21:f8:
         f2:16:f1:36:46:dc:fa:a9:ed:16:44:fa:18:3d:8e:45:e6:ca:
         a4:7f:51:5c:06:56:3d:67:92:2e:1d:e5:61:0b:31:1a:44:33:
         cc:19:96:64:52:5e:19:99:52:dd:ce:8d:4a:e3:1b:a8:3d:c1:
         9d:5e:08:04:0b:34:a4:28:1b:e7:ae:11:62:37:ec:50:f3:c0:
         a9:65:57:17:7e:04:af:b1:08:0a:be:3f:4a:d8:4b:67:89:49:
         62:a1:1a:fb:60:b4:89:5d:1e:67:78:7d:03:d3:2d:14:42:12:
         1e:91:53:9a:e1:43:e3:3e:54:a3:aa:f2:64:a3:4a:db:79:9d:
         48:c0:80:4f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoH1S+QMT4dv80s7EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA2NzQ2YjMtMmY5OC00ODM5LWI0MTktNzdmYThhYzg2
MzY1MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk
NWQxMDQ4NWQtZmE1ZS00NTFlLWFkNTgtZDE0MGNkMTE2NzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2IkeM3+kLAhkBDqGnWI+2eRfu5a5HS0DMdi
0jOfe6cARG7bsCZkcdojL23Gv1hWM0Kbj+9qTUJ/t4waINT8IGHOniL8NNgQ0SBq
e70Ln5x30u9HknF9FW7yXZjbML8+CmJvKhlhRd3/h73Nt/l5ii6u2zdTJFjSVmQm
oUXRU1BaVf+b3jEmVbeZapcz+1/B77+xh9B3o7KZTUMcX5stu+bXhsn4/Ci9RILM
d9oXYCoxBbuHmKZluxqS/mVWYfHHnWdjl8lydXr0gezAJWgWIDxG2oMm1JOdbSJc
yvdIPsfkrbMJGOavu4Oz66Zb3FRdYyI6m5b3TQ+FeJpU16A/WwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFE3S8mkqwrPw65GvzH4m3V1kV1jPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDY3
NDZiMy0yZjk4LTQ4MzktYjQxOS03N2ZhOGFjODYzNjUvYTI1MzBjNTYtNGFlNy0z
ZTk0LWJkMTktOGI0MDlhMjNjZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA2NzQ2YjMtMmY5OC00ODM5LWI0
MTktNzdmYThhYzg2MzY1LzcwNjc0NmIzLTJmOTgtNDgzOS1iNDE5LTc3ZmE4YWM4
NjM2NS5jcmwwHwYDVR0jBBgwFoAU2+LgJ8oNkF/kjxBhtHJ4vkxSQc4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MDY3NDZiMy0yZjk4LTQ4MzktYjQxOS03N2Zh
OGFjODYzNjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJga0QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA/BX1F3/LUT9W69m0FG/T5+eUaS0q2iBtPRCvUvb9NmGc3da/8k0YE
/sTLIhxFmwdm01yqCUsuOoZDYYuO3ZD7nQp0N9w/ycTYCVXdN4jMxog0xBv6jfUb
AdMTIu7azefCyBlQECyf11NhlN1MZvQNVV8oHEaRlA9oZQ02IfjyFvE2Rtz6qe0W
RPoYPY5F5sqkf1FcBlY9Z5IuHeVhCzEaRDPMGZZkUl4ZmVLdzo1K4xuoPcGdXggE
CzSkKBvnrhFiN+xQ88CpZVcXfgSvsQgKvj9K2EtniUlioRr7YLSJXR5neH0D0y0U
QhIekVOa4UPjPlSjqvJko0rbeZ1IwIBP
-----END CERTIFICATE-----
Generated at Wed Jun 18 23:12:23 2025 by rpki-client