Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa
File:                     1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa (raw, json)
Hash identifier:          wKQBVIopO0P32eGiKgrZHJh8Vjhstct+Wd811NMo+60=
Subject key identifier:   C7:F5:32:1A:B5:36:B6:13:74:97:7C:05:EE:13:08:70:20:9B:E2:DA
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F4328584AAB26710130D8BDDBC75DF280
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        2604:ba80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:71:01:30:d8:bd:db:c7:5d:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=0aa3d748-065b-481b-8dc4-80212ec09fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:18:9b:ea:e9:43:b8:34:f1:20:e4:42:4a:
                    e6:5a:cc:e4:74:dd:fa:1c:07:47:da:0d:6c:b4:3d:
                    03:18:f9:df:7e:13:d0:c0:9a:40:d0:eb:99:0e:27:
                    21:bc:b3:de:39:7c:d3:f6:d5:c2:f5:3d:fd:76:9c:
                    d8:22:ad:47:2d:95:2e:14:e2:4d:f3:8d:17:e0:38:
                    03:11:07:b0:96:17:c9:e5:6a:b6:30:d8:3c:9e:3f:
                    a0:65:71:17:a3:72:e7:04:24:91:a5:b4:35:db:63:
                    16:95:5b:63:5e:46:13:3f:d9:80:dd:3c:1d:db:61:
                    d0:f4:d9:40:01:03:17:17:c5:76:87:42:2b:ac:01:
                    c8:81:70:62:2f:e5:a5:67:0d:80:44:2d:85:a6:cc:
                    eb:f4:fc:60:09:93:f2:5a:c0:db:b5:13:ec:ff:c2:
                    24:8e:1c:05:c4:60:81:9c:f6:86:9d:92:06:33:ef:
                    14:b2:83:7b:5c:fd:82:53:1f:e5:57:66:97:58:4a:
                    3d:2c:ab:5a:8d:c5:96:37:4f:0a:d7:2a:7d:85:a8:
                    0d:dc:41:4c:0b:a2:a4:5e:06:b6:88:11:ab:68:b0:
                    23:2f:56:84:d7:cd:79:d0:26:6a:ac:3b:2b:1d:7e:
                    5a:ee:f6:c5:a7:73:96:5f:05:0a:58:01:bf:71:a8:
                    3d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F5:32:1A:B5:36:B6:13:74:97:7C:05:EE:13:08:70:20:9B:E2:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ba80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8f:b8:29:5e:18:b6:2d:cb:4f:8c:45:b8:38:42:42:eb:3c:
         7b:cf:df:fe:ed:14:e2:0a:60:92:ef:97:1f:35:a1:73:be:4b:
         84:c9:47:35:cb:34:1d:20:90:2d:96:38:0a:fc:d2:e4:83:06:
         65:74:be:91:8f:c4:4e:15:c1:9e:f7:dd:eb:58:4c:89:81:79:
         22:82:18:3e:e5:db:09:8c:57:91:59:7f:32:c7:09:00:7d:d2:
         2f:63:40:40:17:6d:26:ed:60:e4:70:f3:72:be:61:d2:77:ab:
         ef:a5:34:9c:c7:0d:eb:7c:f4:79:a0:9d:5b:f9:69:99:d7:70:
         69:c0:9e:38:fe:7d:cf:50:fe:e9:72:7d:65:fe:6e:b3:e4:f7:
         00:63:bf:0d:fe:ef:4f:1a:14:9d:22:19:1b:e9:10:56:d0:21:
         6f:04:d5:97:7f:a8:75:21:14:e9:83:e5:85:52:de:a5:57:27:
         06:58:70:0a:00:0e:cf:e0:cd:3f:ea:61:1e:f6:12:40:22:6e:
         f1:b3:4f:9c:93:52:39:73:84:5b:6b:c3:e8:ab:67:90:00:bc:
         90:09:d6:c1:b5:28:c4:c8:e3:14:4d:61:07:04:38:76:a4:e1:
         34:16:b8:31:15:8e:28:0e:d6:ed:12:71:26:a1:fa:cc:3c:76:
         21:5c:f4:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqrJnEBMNi928dd8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2
ZDcyMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MGFhM2Q3NDgtMDY1Yi00ODFiLThkYzQtODAyMTJlYzA5ZmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eEYm+rpQ7g08SDkQkrmWszkdN36HAdH2g1s
tD0DGPnffhPQwJpA0OuZDichvLPeOXzT9tXC9T39dpzYIq1HLZUuFOJN840X4DgD
EQewlhfJ5Wq2MNg8nj+gZXEXo3LnBCSRpbQ122MWlVtjXkYTP9mA3Twd22HQ9NlA
AQMXF8V2h0IrrAHIgXBiL+WlZw2ARC2Fpszr9PxgCZPyWsDbtRPs/8IkjhwFxGCB
nPaGnZIGM+8UsoN7XP2CUx/lV2aXWEo9LKtajcWWN08K1yp9hagN3EFMC6KkXga2
iBGraLAjL1aE18150CZqrDsrHX5a7vbFp3OWXwUKWAG/cag9UQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMf1Mhq1NrYTdJd8Be4TCHAgm+LaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5
MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvMWRiYjQzYWYtOTIwNi0z
YzFkLWIyOTItZjhkMjhjMWQ0ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz
MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw
NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5
MWE1MDZkNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgS6gAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHKPuCleGLYty0+MRbg4QkLrPHvP3/7tFOIKYJLvlx81oXO+S4TJ
RzXLNB0gkC2WOAr80uSDBmV0vpGPxE4VwZ733etYTImBeSKCGD7l2wmMV5FZfzLH
CQB90i9jQEAXbSbtYORw83K+YdJ3q++lNJzHDet89HmgnVv5aZnXcGnAnjj+fc9Q
/ulyfWX+brPk9wBjvw3+708aFJ0iGRvpEFbQIW8E1Zd/qHUhFOmD5YVS3qVXJwZY
cAoADs/gzT/qYR72EkAibvGzT5yTUjlzhFtrw+irZ5AAvJAJ1sG1KMTI4xRNYQcE
OHak4TQWuDEVjigO1u0ScSah+sw8diFc9Hk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:30:07 2025 by rpki-client