Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/86b32756-83c7-3b72-aef8-e77bc9f00517.roa
File:                     86b32756-83c7-3b72-aef8-e77bc9f00517.roa (raw, json)
Hash identifier:          WOMqREtXt4y3lVuMNk6NvunXDQh0InlOtlclUsUh3Q0=
Subject key identifier:   07:09:8B:E8:4E:A6:79:1F:55:22:6A:C3:FA:12:D2:EF:A2:C5:AA:C5
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584A1F90230B0B7FC1B0EF2A8A20
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/86b32756-83c7-3b72-aef8-e77bc9f00517.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     398549
IP address blocks:        2605:dd40:2f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:23:0b:0b:7f:c1:b0:ef:2a:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=a0187b4f-276d-4235-a400-8f390abbdcab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f3:69:29:26:92:36:dd:bc:f4:98:9f:4a:7a:
                    87:e1:07:f6:4a:ad:df:30:6a:5e:fe:83:19:7c:7f:
                    b5:93:67:ce:70:97:df:e9:0b:5e:1f:ee:9d:cc:58:
                    61:26:4d:7e:00:9e:84:5b:a1:d7:06:f8:3f:44:02:
                    a3:be:bf:a7:69:96:0d:c8:75:ca:5a:07:8b:bc:b3:
                    69:ae:86:b8:7b:84:ad:b1:fc:17:06:01:35:2f:74:
                    47:de:09:4c:b5:f5:b6:e5:7c:28:8c:10:28:35:0c:
                    ae:b1:45:af:5a:9e:25:94:64:13:88:ae:38:01:5d:
                    7b:77:ee:4c:ee:0d:63:f7:ef:9d:b3:15:00:02:74:
                    20:de:4b:ac:c5:fa:b3:00:67:31:7a:b3:40:8d:64:
                    95:b5:57:39:b1:49:68:ad:b5:70:96:00:34:f5:47:
                    51:bc:0e:e9:a1:f1:fe:7c:9f:c2:c9:1a:21:bd:2b:
                    ee:56:22:a6:5a:10:01:de:23:8b:21:ea:91:e8:4f:
                    2f:e1:c1:ca:53:97:9c:a8:12:4a:2f:c5:3c:08:37:
                    d9:05:29:30:f8:bc:86:cc:61:00:d0:01:66:c6:da:
                    e5:56:2a:a7:4e:e6:d9:6a:bd:e5:01:55:8d:b0:f7:
                    58:6f:fd:db:1d:0c:94:39:d0:de:71:8b:71:e4:51:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:09:8B:E8:4E:A6:79:1F:55:22:6A:C3:FA:12:D2:EF:A2:C5:AA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/86b32756-83c7-3b72-aef8-e77bc9f00517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:2f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:3d:75:e0:26:92:98:4d:6b:38:13:ce:1c:78:12:4b:1b:
         f9:95:2e:8d:bf:7e:4e:72:65:1c:b7:f4:6c:29:63:6a:0a:cb:
         2b:22:5f:26:af:68:ec:35:aa:8f:18:30:b4:cb:14:5d:8b:e3:
         ea:68:36:11:7d:dd:51:8d:2b:86:73:fe:45:8b:77:0b:2f:9a:
         4b:da:f4:8c:79:6a:38:e8:52:fd:52:95:7c:78:56:c6:da:5f:
         0d:82:7e:ad:5a:25:d9:08:7b:ba:86:71:db:7b:49:c9:65:b2:
         ed:8f:6d:c8:61:1c:ab:f0:60:16:78:80:f5:a2:bb:8c:93:48:
         83:8f:bc:0a:9d:9a:7b:db:59:98:d2:38:43:fe:3e:75:dc:8c:
         7c:50:af:1b:73:12:3f:a9:a6:87:3f:bb:fd:36:38:c6:88:6d:
         ec:a9:d9:e7:bb:12:6b:7b:3b:29:3d:da:8a:0c:ba:f1:cd:a4:
         99:93:36:b9:c7:b2:1c:61:98:02:1e:a5:ed:3f:76:9e:ff:b3:
         e2:01:54:b5:0f:12:06:33:51:04:55:bf:69:4a:6b:57:ea:b3:
         00:87:34:2e:3f:58:5b:77:4e:7a:ec:06:08:a9:8e:65:44:04:
         7d:2d:0f:9d:86:6c:7f:75:85:49:1a:82:4b:8f:26:0a:57:d6:
         a0:ba:99:2a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEofkCMLC3/BsO8qiiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
YTAxODdiNGYtMjc2ZC00MjM1LWE0MDAtOGYzOTBhYmJkY2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPNpKSaSNt289JifSnqH4Qf2Sq3fMGpe/oMZ
fH+1k2fOcJff6QteH+6dzFhhJk1+AJ6EW6HXBvg/RAKjvr+naZYNyHXKWgeLvLNp
roa4e4StsfwXBgE1L3RH3glMtfW25XwojBAoNQyusUWvWp4llGQTiK44AV17d+5M
7g1j9++dsxUAAnQg3kusxfqzAGcxerNAjWSVtVc5sUlorbVwlgA09UdRvA7pofH+
fJ/CyRohvSvuViKmWhAB3iOLIeqR6E8v4cHKU5ecqBJKL8U8CDfZBSkw+LyGzGEA
0AFmxtrlViqnTubZar3lAVWNsPdYb/3bHQyUOdDecYtx5FEX+wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAcJi+hOpnkfVSJqw/oS0u+ixarFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvODZiMzI3NTYtODNjNy0z
YjcyLWFlZjgtZTc3YmM5ZjAwNTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgXdQC8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAatI9deAmkphNazgTzhx4Eksb+ZUujb9+TnJlHLf0bCljagrLKyJf
Jq9o7DWqjxgwtMsUXYvj6mg2EX3dUY0rhnP+RYt3Cy+aS9r0jHlqOOhS/VKVfHhW
xtpfDYJ+rVol2Qh7uoZx23tJyWWy7Y9tyGEcq/BgFniA9aK7jJNIg4+8Cp2ae9tZ
mNI4Q/4+ddyMfFCvG3MSP6mmhz+7/TY4xoht7KnZ57sSa3s7KT3aigy68c2kmZM2
uceyHGGYAh6l7T92nv+z4gFUtQ8SBjNRBFW/aUprV+qzAIc0Lj9YW3dOeuwGCKmO
ZUQEfS0PnYZsf3WFSRqCS48mClfWoLqZKg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:09:40 2025 by rpki-client