Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/5b195705-a590-3c4a-aefd-6bdb153d07d5.roa
File:                     5b195705-a590-3c4a-aefd-6bdb153d07d5.roa (raw, json)
Hash identifier:          xnUZCZcfnxrnZ8RkkFgwHTuxDQ2fMtZ2wD1h2v0C8Yc=
Subject key identifier:   93:14:E3:FE:C6:42:7E:26:94:3B:22:D0:05:16:0D:DF:6F:A9:00:ED
Certificate issuer:       /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
Certificate serial:       010D0C9F4328584A63F5B822741556134040FDD8
Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/5b195705-a590-3c4a-aefd-6bdb153d07d5.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     833
IP address blocks:        2602:fc19::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b8:22:74:15:56:13:40:40:fd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=3a8562eb-2c42-408f-8a08-e616cefc5216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:56:f7:74:bb:26:86:a2:32:28:54:cf:9f:
                    c9:2e:98:f7:0e:a4:3f:16:14:65:fa:ba:87:4b:2d:
                    41:66:e1:72:a5:52:26:57:38:54:f8:30:5d:f9:4f:
                    c7:1a:0d:85:77:04:b4:b3:00:16:b0:fb:31:ce:3c:
                    9e:e7:e2:2e:12:a3:f0:50:e3:e6:19:0f:04:50:44:
                    b7:83:9f:e0:eb:4d:6b:b9:c6:99:d3:8d:67:67:99:
                    50:98:bc:06:b8:3d:5e:2a:cc:bb:fa:56:4a:d4:56:
                    20:1e:91:45:7e:91:40:26:25:98:5e:f7:f9:25:b2:
                    20:27:d3:1c:97:e4:ee:69:a3:fa:b7:32:5b:15:56:
                    79:12:ca:66:b8:55:f4:c5:dd:a3:e7:c6:64:73:9e:
                    0a:98:b7:36:0a:2e:2f:94:1d:b4:50:2e:ed:31:06:
                    14:14:98:d3:d0:55:8b:d9:cd:1d:19:88:37:7f:4f:
                    f2:c5:7a:98:f3:a3:64:e1:56:be:6f:77:10:57:5e:
                    9d:6c:81:ed:46:92:b9:d8:ef:94:aa:d4:7a:16:12:
                    5e:62:49:4f:40:46:8c:3b:43:e7:2b:a4:3e:86:66:
                    0c:e2:59:0c:00:17:52:51:ef:5a:85:f8:8b:b4:c2:
                    c2:96:51:da:2f:c8:e3:8c:de:61:4f:62:16:6d:6b:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:14:E3:FE:C6:42:7E:26:94:3B:22:D0:05:16:0D:DF:6F:A9:00:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/5b195705-a590-3c4a-aefd-6bdb153d07d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl

            X509v3 Authority Key Identifier:
                keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc19::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1e:f4:aa:b6:c5:a3:aa:ea:c5:3c:77:11:ee:83:ac:2c:08:
         ff:92:a8:13:c0:0f:f6:bd:1e:62:26:7d:cb:57:46:28:8e:9d:
         0e:1a:79:6e:6e:b7:b8:7d:00:13:1f:51:d6:0c:c3:98:6e:5c:
         60:a8:49:a4:d8:09:c3:65:1f:15:1c:6b:ff:ac:0f:20:03:a5:
         21:5e:38:2f:2b:24:61:8e:66:a1:7c:b0:2f:51:f0:bf:a6:0e:
         fa:a6:70:c7:b1:80:32:76:cc:ca:1b:0c:38:4d:37:58:dd:99:
         79:4a:73:01:3d:7a:2f:b3:e6:f0:30:aa:5d:42:c4:80:f2:57:
         9e:b2:4c:f6:0b:8b:c4:95:1a:63:0d:21:6d:b3:cf:86:e5:9f:
         4f:b5:45:77:61:87:83:cb:0a:d1:99:9f:35:c7:ca:90:ce:96:
         24:8a:50:eb:48:af:75:f5:f4:dc:92:d5:6e:dc:92:f2:3f:a2:
         a7:80:fc:1d:d0:69:24:b8:cd:ce:36:6b:8c:65:9a:bf:f9:cb:
         d4:0d:38:f0:22:8c:46:41:0f:80:f0:63:2f:f8:24:4f:45:f2:
         7e:65:fc:43:3d:d6:73:a3:be:a2:bb:42:b2:42:88:92:33:39:
         bc:0e:c4:97:59:11:89:ea:f7:59:0b:88:3a:96:e7:49:a2:45:
         f1:2e:fe:f1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpj9bgidBVWE0BA/dgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4
YzUwMB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk
M2E4NTYyZWItMmM0Mi00MDhmLThhMDgtZTYxNmNlZmM1MjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY5W93S7JoaiMihUz5/JLpj3DqQ/FhRl+rqH
Sy1BZuFypVImVzhU+DBd+U/HGg2FdwS0swAWsPsxzjye5+IuEqPwUOPmGQ8EUES3
g5/g601rucaZ041nZ5lQmLwGuD1eKsy7+lZK1FYgHpFFfpFAJiWYXvf5JbIgJ9Mc
l+TuaaP6tzJbFVZ5EspmuFX0xd2j58Zkc54KmLc2Ci4vlB20UC7tMQYUFJjT0FWL
2c0dGYg3f0/yxXqY86Nk4Va+b3cQV16dbIHtRpK52O+UqtR6FhJeYklPQEaMO0Pn
K6Q+hmYM4lkMABdSUe9ahfiLtMLCllHaL8jjjN5hT2IWbWv9IQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJMU4/7GQn4mlDsi0AUWDd9vqQDtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4
ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvNWIxOTU3MDUtYTU5MC0z
YzRhLWFlZmQtNmJkYjE1M2QwN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk
ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy
OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh
ZWExMjhjNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8GQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIh70qrbFo6rqxTx3Ee6DrCwI/5KoE8AP9r0eYiZ9y1dGKI6dDhp5
bm63uH0AEx9R1gzDmG5cYKhJpNgJw2UfFRxr/6wPIAOlIV44LyskYY5moXywL1Hw
v6YO+qZwx7GAMnbMyhsMOE03WN2ZeUpzAT16L7Pm8DCqXULEgPJXnrJM9guLxJUa
Yw0hbbPPhuWfT7VFd2GHg8sK0ZmfNcfKkM6WJIpQ60ivdfX03JLVbtyS8j+ip4D8
HdBpJLjNzjZrjGWav/nL1A048CKMRkEPgPBjL/gkT0XyfmX8Qz3Wc6O+ortCskKI
kjM5vA7El1kRier3WQuIOpbnSaJF8S7+8Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:37 2025 by rpki-client