Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/485238eb-befd-3155-b2f1-2742ca094bfa.roa
File:                     485238eb-befd-3155-b2f1-2742ca094bfa.roa (raw, json)
Hash identifier:          S13PY+g33za1KEHh5FYej3WghFBFV0pmVrcyJ+1N6ck=
Subject key identifier:   74:06:96:AC:85:01:2D:BC:4D:3B:1A:92:C6:C5:2D:1F:FA:B5:67:60
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F4328584AC01653D0AA03BEB676901420
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/485238eb-befd-3155-b2f1-2742ca094bfa.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        2620:a0:200e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:53:d0:aa:03:be:b6:76:90:14:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=cbce47fc-ba9d-4bc5-967c-18dde3a6522b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:4b:0e:03:9a:32:eb:90:bb:3e:da:86:17:
                    eb:61:1b:da:05:39:61:96:e6:e4:a9:2e:c6:27:ab:
                    f0:68:cc:df:81:ce:87:55:5e:d3:22:8c:d3:46:cc:
                    65:79:6d:69:47:c5:6f:f4:1c:40:32:99:39:6d:88:
                    7b:3a:ba:7b:27:ac:18:de:87:91:ae:65:62:99:24:
                    6e:07:6b:c9:71:15:2c:c2:08:a9:1c:01:95:1d:27:
                    f5:06:4b:10:ba:e4:11:23:db:5e:54:7a:ea:b3:fd:
                    42:95:16:7e:5b:b4:43:55:bc:5a:bc:d7:6e:2c:40:
                    d6:07:08:7e:94:1b:4f:22:22:1b:0d:e0:fe:84:73:
                    75:30:f0:12:de:b6:ae:63:b9:e2:23:c1:43:d9:71:
                    69:00:13:fa:53:cd:54:a1:d6:f2:32:7a:47:6e:2d:
                    98:1a:d2:26:dd:63:6a:9e:04:bd:c3:8a:b5:55:8b:
                    6b:2f:8f:d4:92:ad:bc:9f:61:96:58:03:32:9c:6c:
                    74:e6:c5:36:e4:49:a1:59:b5:4b:63:06:98:81:00:
                    af:90:08:78:21:7c:f2:e5:1b:a1:2c:b7:47:cc:62:
                    cd:06:c2:04:2b:fb:53:69:e6:f9:01:3b:39:3c:fd:
                    3f:3b:46:bc:de:ad:df:97:fc:89:78:7a:f0:19:12:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:96:AC:85:01:2D:BC:4D:3B:1A:92:C6:C5:2D:1F:FA:B5:67:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/485238eb-befd-3155-b2f1-2742ca094bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:200e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:46:ea:8f:fd:26:22:a8:bc:29:73:71:04:c3:42:f8:86:1c:
         a3:8c:bd:13:26:57:e7:d7:e4:9f:44:63:6d:6b:7b:cc:fa:97:
         e3:39:43:65:9a:2c:3e:c2:99:e7:1b:dd:26:70:c7:65:22:1c:
         cd:68:c0:39:c5:67:69:50:96:af:08:a0:80:e2:94:a4:d9:8d:
         cb:8b:fa:b6:c2:61:76:33:cf:60:05:cd:50:6d:8e:55:6c:86:
         37:4b:a8:e9:0b:b7:2e:09:ca:f8:f4:69:7f:61:6e:f7:fb:70:
         7e:74:3d:29:48:55:34:c1:53:bf:e7:01:f7:31:8a:fc:f1:e1:
         c1:2b:77:86:d6:33:96:22:8a:e5:61:58:a6:89:a1:2a:a8:ad:
         c6:07:a0:63:c1:5b:e0:59:ab:4a:f8:c6:e2:7d:03:23:ac:c3:
         e9:af:11:8e:3c:2d:8f:d0:f5:d4:6c:fd:5e:e7:0b:67:2a:fc:
         c1:8e:6e:d4:2d:02:33:81:30:64:ea:5f:69:78:6b:99:cd:05:
         af:0b:e9:4d:da:ed:d6:7a:36:1d:ab:24:55:94:d7:af:42:64:
         2e:76:1f:f1:aa:e8:e7:ae:32:6f:8d:e1:5d:cf:82:dc:8f:d4:
         82:6a:55:05:45:eb:d4:e0:2b:83:5c:10:31:9a:2a:01:64:33:
         8f:c3:8d:bf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErAFlPQqgO+tnaQFCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ0NDgxMjQtNmU0NS00MGNhLWI1NTEtMjhlZjM2NGM5
OWM3MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
Y2JjZTQ3ZmMtYmE5ZC00YmM1LTk2N2MtMThkZGUzYTY1MjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD5LDgOaMuuQuz7ahhfrYRvaBTlhlubkqS7G
J6vwaMzfgc6HVV7TIozTRsxleW1pR8Vv9BxAMpk5bYh7Orp7J6wY3oeRrmVimSRu
B2vJcRUswgipHAGVHSf1BksQuuQRI9teVHrqs/1ClRZ+W7RDVbxavNduLEDWBwh+
lBtPIiIbDeD+hHN1MPAS3rauY7niI8FD2XFpABP6U81UodbyMnpHbi2YGtIm3WNq
ngS9w4q1VYtrL4/Ukq28n2GWWAMynGx05sU25EmhWbVLYwaYgQCvkAh4IXzy5Ruh
LLdHzGLNBsIEK/tTaeb5ATs5PP0/O0a83q3fl/yJeHrwGRKuNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHQGlqyFAS28TTsaksbFLR/6tWdgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0
ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVmMzY0Yzk5YzcvNDg1MjM4ZWItYmVmZC0z
MTU1LWIyZjEtMjc0MmNhMDk0YmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmQ0NDgxMjQtNmU0NS00MGNhLWI1
NTEtMjhlZjM2NGM5OWM3LzJkNDQ4MTI0LTZlNDUtNDBjYS1iNTUxLTI4ZWYzNjRj
OTljNy5jcmwwHwYDVR0jBBgwFoAUJX0bU4WU/K2RPsORNHt3eV5Y9aYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZDQ0ODEyNC02ZTQ1LTQwY2EtYjU1MS0yOGVm
MzY0Yzk5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAoCAO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA9G6o/9JiKovClzcQTDQviGHKOMvRMmV+fX5J9EY21re8z6l+M5
Q2WaLD7Cmecb3SZwx2UiHM1owDnFZ2lQlq8IoIDilKTZjcuL+rbCYXYzz2AFzVBt
jlVshjdLqOkLty4Jyvj0aX9hbvf7cH50PSlIVTTBU7/nAfcxivzx4cErd4bWM5Yi
iuVhWKaJoSqorcYHoGPBW+BZq0r4xuJ9AyOsw+mvEY48LY/Q9dRs/V7nC2cq/MGO
btQtAjOBMGTqX2l4a5nNBa8L6U3a7dZ6Nh2rJFWU169CZC52H/Gq6OeuMm+N4V3P
gtyP1IJqVQVF69TgK4NcEDGaKgFkM4/Djb8=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:57:53 2025 by rpki-client