Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa
File:                     23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa (raw, json)
Hash identifier:          Bn3h3RV82sTgy/L8lq6F8/GP8aVssbZ4aSoIZWLQ5UY=
Subject key identifier:   01:3F:09:FD:BA:7A:EB:EE:5D:9E:5E:E2:03:63:0B:03:70:2D:14:17
Certificate issuer:       /CN=f7b341cf-abc9-42c3-a0bb-31f569a1ae02
Certificate serial:       010D0C9F4328584AC01649E1AC2A1708BF966D40
Authority key identifier: 1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     14532
IP address blocks:        2607:abc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:49:e1:ac:2a:17:08:bf:96:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b341cf-abc9-42c3-a0bb-31f569a1ae02
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=facac8b6-a05f-4f7c-bcc1-0e9fcb9c968c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d9:4d:e4:61:8f:68:35:16:8d:b0:f3:3f:46:
                    7e:af:59:ad:38:94:db:5b:df:16:f2:92:1d:db:9d:
                    1f:b9:df:ce:ef:21:8a:d4:1a:d9:b5:9e:b0:f0:4b:
                    ff:3e:bd:2d:a9:12:18:a4:48:9e:15:64:ac:ea:89:
                    f6:e8:8f:08:bf:58:9b:44:df:8e:3f:20:51:dc:6a:
                    b6:0c:1f:75:f3:c6:5d:77:54:c9:bc:4b:e3:37:37:
                    e4:21:cc:1e:9e:6d:97:74:b1:2e:12:3c:41:dc:13:
                    fb:57:e1:11:1b:69:27:fe:d7:a0:04:53:f7:c3:16:
                    9f:12:a3:77:36:59:53:c4:07:6a:13:e2:97:9d:b3:
                    68:bb:69:c2:29:ae:7d:a0:00:03:2b:e3:07:51:b9:
                    32:d6:b3:d8:4b:6a:3d:9a:64:17:d4:ba:f9:d8:ef:
                    d6:5e:80:f2:53:25:f7:ac:e5:08:6f:1a:69:ff:f7:
                    11:18:a9:43:ed:28:f8:02:52:db:51:82:16:e7:7b:
                    42:f5:b0:23:7c:c7:c8:53:20:f7:fe:1e:d1:56:1f:
                    48:a0:b6:87:67:67:5c:19:51:ac:1b:c4:aa:94:c9:
                    45:f6:4d:a3:ba:79:3c:a6:d7:e9:6d:64:1f:8e:e6:
                    9c:a0:23:e0:5f:25:8e:43:bd:18:a3:0d:6e:57:67:
                    3e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3F:09:FD:BA:7A:EB:EE:5D:9E:5E:E2:03:63:0B:03:70:2D:14:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/23ce2350-f7e2-38cd-a579-e1e03ed380c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.crl

            X509v3 Authority Key Identifier:
                keyid:1C:C0:E5:FB:79:04:3F:EA:4D:3D:1F:AA:35:AC:85:4A:99:A6:D4:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7b341cf-abc9-42c3-a0bb-31f569a1ae02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:abc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c1:74:94:45:fc:aa:6e:64:03:e0:0d:f6:36:2c:d9:0b:73:
         6d:d2:a2:c7:47:e3:30:3d:6f:f3:bb:9c:d1:c5:b8:40:c0:5a:
         dc:b8:f3:ab:a1:39:5b:e4:af:d6:25:7f:ca:05:e6:15:e6:ee:
         14:fa:89:f2:b0:a9:a2:63:28:61:a7:64:95:57:74:7d:a2:f6:
         c8:03:08:db:88:ad:dd:1b:dd:ed:f3:78:b8:08:e9:2d:c8:bb:
         ee:11:02:a4:22:87:06:78:49:fc:df:41:b9:ab:be:bf:61:29:
         7f:27:c1:eb:27:ad:79:f7:db:48:b3:1c:85:f5:7a:5f:36:c4:
         a5:ec:43:a3:33:07:d9:a4:51:78:72:64:28:64:b8:8e:e4:ec:
         cb:3b:4b:3f:4d:12:0f:45:60:4f:de:e4:4b:22:96:c8:69:b3:
         59:20:fe:d5:2e:0f:27:eb:7f:55:17:af:f9:e0:27:55:e9:bb:
         7a:97:15:e6:2c:15:34:1f:c0:75:d9:b2:f3:21:c7:3c:d6:e5:
         7f:20:35:f4:00:a2:58:94:d3:ff:f8:31:34:e6:b1:4d:6f:3f:
         b3:82:d1:df:f3:5a:76:bb:97:49:1b:5f:ab:c5:45:f4:d1:82:
         d2:d7:d4:2f:c8:7f:04:7a:90:3c:e3:62:a4:d5:86:09:6c:95:
         ea:37:f0:a6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErAFknhrCoXCL+WbUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdiMzQxY2YtYWJjOS00MmMzLWEwYmItMzFmNTY5YTFh
ZTAyMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZmFjYWM4YjYtYTA1Zi00ZjdjLWJjYzEtMGU5ZmNiOWM5NjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltlN5GGPaDUWjbDzP0Z+r1mtOJTbW98W8pId
250fud/O7yGK1BrZtZ6w8Ev/Pr0tqRIYpEieFWSs6on26I8Iv1ibRN+OPyBR3Gq2
DB9188Zdd1TJvEvjNzfkIcwenm2XdLEuEjxB3BP7V+ERG2kn/tegBFP3wxafEqN3
NllTxAdqE+KXnbNou2nCKa59oAADK+MHUbky1rPYS2o9mmQX1Lr52O/WXoDyUyX3
rOUIbxpp//cRGKlD7Sj4AlLbUYIW53tC9bAjfMfIUyD3/h7RVh9IoLaHZ2dcGVGs
G8SqlMlF9k2junk8ptfpbWQfjuacoCPgXyWOQ70Yow1uV2c+bQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAE/Cf26euvuXZ5e4gNjCwNwLRQXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mN2Iz
NDFjZi1hYmM5LTQyYzMtYTBiYi0zMWY1NjlhMWFlMDIvMjNjZTIzNTAtZjdlMi0z
OGNkLWE1NzktZTFlMDNlZDM4MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjdiMzQxY2YtYWJjOS00MmMzLWEw
YmItMzFmNTY5YTFhZTAyL2Y3YjM0MWNmLWFiYzktNDJjMy1hMGJiLTMxZjU2OWEx
YWUwMi5jcmwwHwYDVR0jBBgwFoAUHMDl+3kEP+pNPR+qNayFSpmm1K0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mN2IzNDFjZi1hYmM5LTQyYzMtYTBiYi0zMWY1
NjlhMWFlMDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgerwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAZwXSURfyqbmQD4A32NizZC3Nt0qLHR+MwPW/zu5zRxbhAwFrcuPOr
oTlb5K/WJX/KBeYV5u4U+onysKmiYyhhp2SVV3R9ovbIAwjbiK3dG93t83i4COkt
yLvuEQKkIocGeEn830G5q76/YSl/J8HrJ61599tIsxyF9XpfNsSl7EOjMwfZpFF4
cmQoZLiO5OzLO0s/TRIPRWBP3uRLIpbIabNZIP7VLg8n639VF6/54CdV6bt6lxXm
LBU0H8B12bLzIcc81uV/IDX0AKJYlNP/+DE05rFNbz+zgtHf81p2u5dJG1+rxUX0
0YLS19QvyH8EepA842Kk1YYJbJXqN/Cm
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:10:57 2025 by rpki-client