Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa
File:                     6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa (raw, json)
Hash identifier:          TAwLMgOjq7YoSnIPw7XZl9xwQxuw9DmgqfRHwQ3SSVk=
Subject key identifier:   DD:D2:9B:1D:83:33:26:85:A8:B7:CE:1E:1A:CA:5E:AD:93:6C:F1:DD
Certificate issuer:       /CN=62f9290e-905b-4384-a03f-fbec24a43858
Certificate serial:       010D0C9F4328584A7D15FBF4D27354EA15E93700
Authority key identifier: DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     683
IP address blocks:        2620:0:dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:fb:f4:d2:73:54:ea:15:e9:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f9290e-905b-4384-a03f-fbec24a43858
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=c3370025-2be0-4a87-a464-794a81e8cccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:fc:c9:70:1d:85:fa:fc:84:ff:14:5c:00:
                    5b:8b:24:23:d2:fe:bc:f9:c9:c4:35:ff:57:5b:f9:
                    7f:f3:67:cc:04:2a:ec:bb:d2:74:e2:25:ed:3c:08:
                    8d:e9:47:27:e2:87:31:7a:41:16:eb:f7:14:7d:83:
                    6a:95:a1:bb:6b:48:02:6e:75:ca:33:79:af:4f:60:
                    e4:8f:8b:d7:32:69:cf:39:e1:0c:2f:bb:66:29:a1:
                    af:67:7c:22:da:de:4e:ad:23:de:f2:f6:0c:36:49:
                    ff:12:69:70:fe:12:c8:62:d8:3c:b3:f6:c5:10:c6:
                    0b:d7:27:3b:1d:dc:55:6c:9e:82:65:41:87:5a:75:
                    e9:6c:56:15:f8:30:7c:49:d9:82:d9:14:f8:43:23:
                    96:3c:8f:4a:ea:c8:6c:d3:63:86:9c:e1:e3:40:59:
                    c8:8f:41:00:6f:57:a4:eb:7c:40:2f:43:57:09:b2:
                    5a:74:36:ab:ba:14:80:f4:54:dd:99:6a:35:a5:cf:
                    77:40:bd:08:6d:97:de:d0:ea:e6:bc:d0:d1:62:b8:
                    6a:70:57:2f:82:e8:6f:a5:08:f7:26:31:4c:ce:6f:
                    f1:ac:47:88:72:85:f7:17:c4:ee:ae:3d:92:ca:65:
                    e9:3f:c5:86:53:25:f0:aa:b2:20:1a:38:ab:a6:a5:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D2:9B:1D:83:33:26:85:A8:B7:CE:1E:1A:CA:5E:AD:93:6C:F1:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/6ebe9dfd-2c14-3c2b-9f43-1cd4f268b11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl

            X509v3 Authority Key Identifier:
                keyid:DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:dc0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7e:f7:74:5b:d3:e5:7e:6c:a8:8d:c6:fa:97:84:17:10:95:
         9b:86:a5:cf:fa:15:9a:7d:4e:1b:5f:1d:fc:2a:96:b8:42:36:
         2a:cf:24:0e:32:b0:b9:77:4e:fe:3e:2e:4e:b7:1d:6a:7b:2b:
         b6:8f:eb:98:e7:56:1e:f7:9c:af:c5:3e:bd:ec:1b:fa:38:f9:
         d2:33:15:2e:b2:72:33:18:ed:7d:36:0c:04:c2:8a:f2:d6:88:
         fd:45:3d:1d:98:f2:89:00:99:3c:62:09:dc:33:8b:2a:ee:2b:
         5f:11:18:9e:c9:f4:52:49:dc:2c:bd:12:b8:ae:49:24:b7:d3:
         16:cd:3c:96:cc:f8:0a:cd:92:0a:c8:94:07:cd:16:46:06:c0:
         0b:a3:23:d5:8b:95:8e:3b:51:1f:ed:03:80:89:83:97:d7:f8:
         01:b0:63:63:61:ed:ee:15:1b:d7:a0:a0:ee:92:61:a7:d5:94:
         9b:f8:dd:55:7e:ff:51:06:b3:d0:0e:f9:78:90:30:f7:8e:fc:
         e8:16:ce:07:4b:36:88:c4:79:f6:95:4d:fa:ea:17:4b:6c:d4:
         d8:04:0c:9d:c3:05:99:7e:e1:d7:40:22:5e:20:0d:47:ef:0c:
         ed:dc:05:15:4d:58:2b:ae:77:f3:f5:04:0d:c1:68:63:2a:9e:
         e9:4d:f4:cb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp9Ffv00nNU6hXpNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjJmOTI5MGUtOTA1Yi00Mzg0LWEwM2YtZmJlYzI0YTQz
ODU4MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
YzMzNzAwMjUtMmJlMC00YTg3LWE0NjQtNzk0YTgxZThjY2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxb8yXAdhfr8hP8UXABbiyQj0v68+cnENf9X
W/l/82fMBCrsu9J04iXtPAiN6Ucn4ocxekEW6/cUfYNqlaG7a0gCbnXKM3mvT2Dk
j4vXMmnPOeEML7tmKaGvZ3wi2t5OrSPe8vYMNkn/Emlw/hLIYtg8s/bFEMYL1yc7
HdxVbJ6CZUGHWnXpbFYV+DB8SdmC2RT4QyOWPI9K6shs02OGnOHjQFnIj0EAb1ek
63xAL0NXCbJadDaruhSA9FTdmWo1pc93QL0IbZfe0OrmvNDRYrhqcFcvguhvpQj3
JjFMzm/xrEeIcoX3F8Turj2SymXpP8WGUyXwqrIgGjirpqWjLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN3Smx2DMyaFqLfOHhrKXq2TbPHdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MmY5
MjkwZS05MDViLTQzODQtYTAzZi1mYmVjMjRhNDM4NTgvNmViZTlkZmQtMmMxNC0z
YzJiLTlmNDMtMWNkNGYyNjhiMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjJmOTI5MGUtOTA1Yi00Mzg0LWEw
M2YtZmJlYzI0YTQzODU4LzYyZjkyOTBlLTkwNWItNDM4NC1hMDNmLWZiZWMyNGE0
Mzg1OC5jcmwwHwYDVR0jBBgwFoAU3KRHHf5OfHHIQDtzYK8GU+EkT98wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82MmY5MjkwZS05MDViLTQzODQtYTAzZi1mYmVj
MjRhNDM4NTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAA3A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAx+93Rb0+V+bKiNxvqXhBcQlZuGpc/6FZp9ThtfHfwqlrhCNirP
JA4ysLl3Tv4+Lk63HWp7K7aP65jnVh73nK/FPr3sG/o4+dIzFS6ycjMY7X02DATC
ivLWiP1FPR2Y8okAmTxiCdwziyruK18RGJ7J9FJJ3Cy9EriuSSS30xbNPJbM+ArN
kgrIlAfNFkYGwAujI9WLlY47UR/tA4CJg5fX+AGwY2Nh7e4VG9egoO6SYafVlJv4
3VV+/1EGs9AO+XiQMPeO/OgWzgdLNojEefaVTfrqF0ts1NgEDJ3DBZl+4ddAIl4g
DUfvDO3cBRVNWCuud/P1BA3BaGMqnulN9Ms=
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:52:42 2025 by rpki-client