Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/6f88b126-a16c-3df0-bdd4-74340943109e.roa
File:                     6f88b126-a16c-3df0-bdd4-74340943109e.roa (raw, json)
Hash identifier:          JgtndJe4SP8KBeU3TxgXX1Mz1AUzc6VF7kYNLdOtlkQ=
Subject key identifier:   5A:A1:BC:96:7B:F8:52:5C:E1:F7:24:F4:05:AA:72:CF:67:6A:99:4D
Certificate issuer:       /CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
Certificate serial:       010D0C9F4328584A90A0B494F4E65036D1DF6CE0
Authority key identifier: 58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/6f88b126-a16c-3df0-bdd4-74340943109e.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     54657
IP address blocks:        2607:5340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b4:94:f4:e6:50:36:d1:df:6c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=ec554eb1-a805-43b6-9558-aec94e13fbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:02:64:55:33:07:e7:0f:b2:b6:e2:36:9e:21:
                    9c:9b:0f:bc:53:8b:e1:13:53:b0:0a:7e:a5:b2:36:
                    15:08:27:4f:58:22:e1:24:7d:29:be:07:da:de:9c:
                    a5:e6:22:88:15:39:b6:8a:96:99:de:8f:3e:2f:50:
                    fe:01:02:ca:73:08:d3:94:c6:20:e7:c8:00:bd:ae:
                    5a:85:1b:4f:52:90:d4:e4:46:20:ce:15:6f:8d:6e:
                    f6:60:05:37:d9:bd:71:cd:02:8d:a6:4c:94:0c:d5:
                    1c:17:e7:60:25:78:44:1b:aa:6c:79:7f:5e:5d:ad:
                    0b:7b:ba:68:eb:98:fe:e5:fc:9c:28:dc:d2:73:24:
                    66:38:41:4d:df:96:f1:90:7d:31:92:98:dc:dd:8e:
                    0f:8a:bb:69:02:ed:6c:4a:33:d7:f2:78:39:23:9d:
                    71:9f:35:d2:1b:05:00:ee:fd:f9:49:a8:13:4f:bc:
                    94:89:a7:4a:5e:b5:93:57:04:62:60:37:5c:4b:34:
                    6f:40:11:7d:f0:16:ff:55:41:db:49:c7:12:ce:88:
                    1a:f5:66:8c:6e:39:c0:a0:3c:6b:6d:92:f7:6e:6d:
                    84:7b:f1:e9:a1:ac:4d:34:a3:3d:c3:a3:44:61:8f:
                    fa:d5:fa:06:8c:cb:06:0c:ac:0f:4e:30:53:0a:39:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A1:BC:96:7B:F8:52:5C:E1:F7:24:F4:05:AA:72:CF:67:6A:99:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/6f88b126-a16c-3df0-bdd4-74340943109e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl

            X509v3 Authority Key Identifier:
                keyid:58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:68:6d:74:96:6a:2e:6e:fb:1f:db:5d:d4:f3:90:0a:84:d7:
         99:eb:c6:dc:19:f4:3c:bf:48:32:a6:bb:20:19:43:85:8c:d8:
         51:34:c7:5c:8c:23:a3:e6:49:1d:4b:a0:2b:59:26:7a:15:63:
         cf:4f:30:78:92:8f:9a:dc:34:28:04:10:15:36:23:af:81:cc:
         dc:ac:8f:df:26:5b:39:03:b9:57:d9:6f:63:d7:7b:03:d5:e2:
         b5:6a:de:6c:d1:54:cf:57:26:c1:6b:1b:d5:21:dd:40:e5:07:
         6c:7d:0b:58:38:23:ff:3d:c8:ec:b0:43:8c:b7:a0:41:d9:dd:
         00:09:8a:82:2b:52:f5:6e:68:d8:4e:51:c8:73:5c:80:31:45:
         57:da:7a:7f:7b:e7:55:b4:6a:02:f3:bd:16:89:cf:ed:c6:24:
         02:aa:16:0f:8e:26:c9:51:75:36:d8:ba:45:74:99:f0:cb:9d:
         0f:e0:78:1e:1e:d1:63:02:50:fb:9d:66:43:a5:40:27:fb:e9:
         6f:cc:80:51:a4:46:61:b1:85:ca:25:ab:8e:0f:dc:cd:24:de:
         01:eb:85:d8:fd:dc:72:b1:08:f9:9d:c5:3f:85:a4:c7:09:47:
         82:2b:6f:ea:dd:96:8b:20:34:c0:e7:79:97:53:d6:35:23:f7:
         25:38:f0:36
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqQoLSU9OZQNtHfbOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhlNDc4ODEtNWM2NC00ZmMwLWJmMDMtNWEzOWQwODI3
YmMzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
ZWM1NTRlYjEtYTgwNS00M2I2LTk1NTgtYWVjOTRlMTNmYmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQJkVTMH5w+ytuI2niGcmw+8U4vhE1OwCn6l
sjYVCCdPWCLhJH0pvgfa3pyl5iKIFTm2ipaZ3o8+L1D+AQLKcwjTlMYg58gAva5a
hRtPUpDU5EYgzhVvjW72YAU32b1xzQKNpkyUDNUcF+dgJXhEG6pseX9eXa0Le7po
65j+5fycKNzScyRmOEFN35bxkH0xkpjc3Y4PirtpAu1sSjPX8ng5I51xnzXSGwUA
7v35SagTT7yUiadKXrWTVwRiYDdcSzRvQBF98Bb/VUHbSccSzoga9WaMbjnAoDxr
bZL3bm2Ee/HpoaxNNKM9w6NEYY/61foGjMsGDKwPTjBTCjnKvQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFqhvJZ7+FJc4fck9AWqcs9naplNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80OGU0
Nzg4MS01YzY0LTRmYzAtYmYwMy01YTM5ZDA4MjdiYzMvNmY4OGIxMjYtYTE2Yy0z
ZGYwLWJkZDQtNzQzNDA5NDMxMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDhlNDc4ODEtNWM2NC00ZmMwLWJm
MDMtNWEzOWQwODI3YmMzLzQ4ZTQ3ODgxLTVjNjQtNGZjMC1iZjAzLTVhMzlkMDgy
N2JjMy5jcmwwHwYDVR0jBBgwFoAUWOJ2ljppqKVnq6q+5Yl0Q4TG80YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80OGU0Nzg4MS01YzY0LTRmYzAtYmYwMy01YTM5
ZDA4MjdiYzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdTQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYaG10lmoubvsf213U85AKhNeZ68bcGfQ8v0gyprsgGUOFjNhRNMdc
jCOj5kkdS6ArWSZ6FWPPTzB4ko+a3DQoBBAVNiOvgczcrI/fJls5A7lX2W9j13sD
1eK1at5s0VTPVybBaxvVId1A5QdsfQtYOCP/PcjssEOMt6BB2d0ACYqCK1L1bmjY
TlHIc1yAMUVX2np/e+dVtGoC870Wic/txiQCqhYPjibJUXU22LpFdJnwy50P4Hge
HtFjAlD7nWZDpUAn++lvzIBRpEZhsYXKJauOD9zNJN4B64XY/dxysQj5ncU/haTH
CUeCK2/q3ZaLIDTA53mXU9Y1I/clOPA2
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:20:33 2025 by rpki-client