Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/df598e26-10ec-3155-9d2d-35a5a76f7e84.roa
File:                     df598e26-10ec-3155-9d2d-35a5a76f7e84.roa (raw, json)
Hash identifier:          i/SWJ2m2avTa7MAaR8yCrAr38JTmGyh2XwKj4ZV+AVs=
Subject key identifier:   D3:A2:DD:67:7C:C5:CF:C0:D5:52:E1:79:90:79:12:66:7C:72:34:17
Certificate issuer:       /CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
Certificate serial:       010D0C9F4328584AB650F1FC63461E30D020AC40
Authority key identifier: 51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/df598e26-10ec-3155-9d2d-35a5a76f7e84.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     3152
IP address blocks:        2620:6a::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f1:fc:63:46:1e:30:d0:20:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=ab720204-1c06-4b47-99e7-fa03aa779945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7e:aa:1f:20:d7:09:9a:12:e1:3e:c9:66:80:
                    1c:3b:e7:43:7c:19:3f:cf:90:7f:05:f7:cc:cf:8f:
                    f2:ee:a3:20:9f:54:2e:31:e7:1e:d5:06:aa:ec:26:
                    a8:d1:f4:67:6b:14:5e:9a:6c:2b:ec:ef:97:49:df:
                    fb:75:25:57:16:95:f3:f2:36:91:37:78:4c:80:80:
                    18:ed:99:02:da:85:4d:72:14:de:cc:aa:8a:2c:82:
                    d8:d1:2f:f8:a2:6e:bd:f1:de:6d:e3:2f:a8:9c:b5:
                    c7:bd:23:0c:55:27:b8:34:8f:86:db:27:69:8d:42:
                    ac:43:4b:4f:41:15:e7:59:a8:38:40:c9:00:12:ed:
                    71:80:8c:b2:f6:aa:fd:bb:78:ab:91:e5:40:73:13:
                    7c:c7:63:63:6e:df:a3:6b:ea:7c:99:f0:21:7c:ca:
                    2f:64:5a:cd:14:6b:e4:e7:1e:61:c3:60:62:d9:62:
                    83:81:21:98:3e:f9:ab:4b:68:f5:46:11:4f:fc:30:
                    17:62:5a:30:b3:6c:7c:ae:b0:57:54:83:0a:19:fa:
                    db:a4:e8:fc:8b:ee:85:2b:b1:dd:5f:41:e4:68:81:
                    a3:cb:53:db:a6:44:61:dd:74:64:59:2a:14:b2:70:
                    6c:cf:79:6a:79:4a:02:3f:85:db:aa:2c:fa:45:53:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A2:DD:67:7C:C5:CF:C0:D5:52:E1:79:90:79:12:66:7C:72:34:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/df598e26-10ec-3155-9d2d-35a5a76f7e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl

            X509v3 Authority Key Identifier:
                keyid:51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6a::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:aa:8a:27:12:51:6a:86:51:13:cb:25:9d:16:47:23:6f:b9:
         5e:23:c9:ca:2f:62:de:60:fd:ae:68:16:52:c7:b3:e6:93:b7:
         49:47:44:95:df:29:32:c8:be:0b:1c:50:f2:5d:88:45:1e:ec:
         69:f3:8d:a8:d3:10:bb:9a:be:40:64:98:e8:9e:bf:c7:7e:cd:
         42:c8:c8:f7:1d:a7:3f:00:34:83:c3:cf:99:27:da:d5:f1:28:
         dc:f5:84:10:8d:26:d4:07:b0:9e:78:9e:9a:0c:76:69:c9:79:
         b5:5d:a2:d8:57:05:82:10:a3:62:d0:86:0c:f8:de:fc:36:d5:
         4f:bb:9e:dc:10:e9:5a:10:1d:1d:33:61:0c:fd:03:70:fa:96:
         dd:37:1b:bf:b2:43:7d:8c:59:b7:54:d8:5c:17:94:c3:07:7d:
         88:01:98:0e:e4:54:96:b9:9a:bb:e6:a5:13:15:1a:35:0b:fd:
         de:30:74:eb:44:89:f4:88:99:d9:97:09:78:e2:cc:0b:82:d1:
         69:e5:bd:6b:0f:b2:3a:bb:64:07:f1:52:e8:0d:ce:99:65:a2:
         4a:4f:df:b7:e6:3f:c4:e3:7d:90:83:19:35:c6:19:f5:53:88:
         7f:3e:d5:5e:ac:3d:db:32:f8:d1:fc:64:d1:94:59:99:d3:35:
         2b:f8:2f:22
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq2UPH8Y0YeMNAgrEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM1MmFiMDQtYzEzYy00ZGRkLWEzZGYtZmNiYmJiNzk1
MTA0MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
YWI3MjAyMDQtMWMwNi00YjQ3LTk5ZTctZmEwM2FhNzc5OTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX6qHyDXCZoS4T7JZoAcO+dDfBk/z5B/BffM
z4/y7qMgn1QuMece1Qaq7Cao0fRnaxRemmwr7O+XSd/7dSVXFpXz8jaRN3hMgIAY
7ZkC2oVNchTezKqKLILY0S/4om698d5t4y+onLXHvSMMVSe4NI+G2ydpjUKsQ0tP
QRXnWag4QMkAEu1xgIyy9qr9u3irkeVAcxN8x2Njbt+ja+p8mfAhfMovZFrNFGvk
5x5hw2Bi2WKDgSGYPvmrS2j1RhFP/DAXYlows2x8rrBXVIMKGfrbpOj8i+6FK7Hd
X0HkaIGjy1PbpkRh3XRkWSoUsnBsz3lqeUoCP4Xbqiz6RVO+xwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNOi3Wd8xc/A1VLheZB5EmZ8cjQXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzUy
YWIwNC1jMTNjLTRkZGQtYTNkZi1mY2JiYmI3OTUxMDQvZGY1OThlMjYtMTBlYy0z
MTU1LTlkMmQtMzVhNWE3NmY3ZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGM1MmFiMDQtYzEzYy00ZGRkLWEz
ZGYtZmNiYmJiNzk1MTA0LzRjNTJhYjA0LWMxM2MtNGRkZC1hM2RmLWZjYmJiYjc5
NTEwNC5jcmwwHwYDVR0jBBgwFoAUUZZWQF/nRRYYEI+bdmSgakRpOrQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzUyYWIwNC1jMTNjLTRkZGQtYTNkZi1mY2Ji
YmI3OTUxMDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAagAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHeqiicSUWqGURPLJZ0WRyNvuV4jycovYt5g/a5oFlLHs+aTt0lH
RJXfKTLIvgscUPJdiEUe7GnzjajTELuavkBkmOiev8d+zULIyPcdpz8ANIPDz5kn
2tXxKNz1hBCNJtQHsJ54npoMdmnJebVdothXBYIQo2LQhgz43vw21U+7ntwQ6VoQ
HR0zYQz9A3D6lt03G7+yQ32MWbdU2FwXlMMHfYgBmA7kVJa5mrvmpRMVGjUL/d4w
dOtEifSImdmXCXjizAuC0WnlvWsPsjq7ZAfxUugNzpllokpP37fmP8TjfZCDGTXG
GfVTiH8+1V6sPdsy+NH8ZNGUWZnTNSv4LyI=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:11:54 2025 by rpki-client