Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
File:                     24b668fc-a509-3a42-8684-d6b7501ff35b.roa (raw, json)
Hash identifier:          KcDVjEnEMJyPDz9DIMVL3ISbevoNETrfTxhQiCZ1HXA=
Subject key identifier:   0F:BF:DB:10:05:1C:44:CA:D4:4A:CC:2B:7A:F0:98:8A:24:09:FF:82
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328584AC87654562EECA33DFBBCD000
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     398646
IP address blocks:        2602:fe6b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:54:56:2e:ec:a3:3d:fb:bc:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=c2f1993b-8390-463e-9157-3ab7e3949510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:57:b7:33:44:0f:4f:5d:f8:d1:32:d8:28:
                    4d:d5:4a:1a:3c:d4:85:35:db:4c:eb:80:c6:5b:68:
                    ad:18:6c:e1:71:5d:68:81:86:a7:96:e1:c5:62:83:
                    fe:a7:f0:16:56:cd:66:aa:e0:58:e8:32:ef:c0:4e:
                    fe:fc:77:3c:a4:3f:ca:40:14:40:9e:11:73:53:24:
                    19:ba:63:e2:01:07:0d:4e:4a:0a:e3:c1:85:a3:f7:
                    32:bb:a9:d4:73:ca:68:78:75:dc:6f:b8:0e:3b:de:
                    5c:2d:4b:cd:50:79:4a:12:25:97:1d:de:49:4f:78:
                    fe:d9:de:ba:9a:1b:b0:68:b5:34:e8:3d:af:13:8a:
                    b9:80:d0:55:a4:b9:65:1e:79:73:d3:c7:6b:da:68:
                    9e:0f:bd:c1:f8:a2:c0:2b:53:e5:f5:90:c6:1f:df:
                    77:22:2c:b2:32:57:13:7d:75:c7:61:b1:d3:b5:47:
                    c4:a7:c7:a7:ff:8c:a0:b3:be:82:dc:7a:22:06:75:
                    c1:54:d3:d9:c0:0f:ab:e4:4b:b0:e1:43:d3:6d:a9:
                    95:21:36:7c:14:65:02:44:13:95:42:cf:3a:ea:be:
                    2a:b6:8f:dd:e9:0e:cb:a7:99:f3:ea:3a:cc:6a:75:
                    ac:c7:c5:24:0e:98:a7:d7:74:c8:1f:be:1d:20:49:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BF:DB:10:05:1C:44:CA:D4:4A:CC:2B:7A:F0:98:8A:24:09:FF:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:79:dd:5c:e3:ee:c8:26:f3:68:69:42:8d:04:d7:e5:60:39:
         66:f9:eb:d5:a3:ef:9e:ff:6d:22:5c:75:07:3d:9f:f1:ca:94:
         3e:61:29:05:3b:b6:a1:87:61:9d:f7:9c:eb:b6:1f:16:53:0d:
         10:50:50:f0:78:d0:dd:7c:58:fd:15:4d:55:0b:88:4c:ff:86:
         d3:ae:e3:86:83:1d:25:e1:0d:70:bd:49:fa:2f:38:55:c9:71:
         b3:e5:2c:93:5f:8f:b7:9f:4e:a3:98:b4:27:66:8d:f2:95:aa:
         c5:fd:17:e9:ac:81:fe:1c:c9:ce:60:32:f6:13:f2:27:17:63:
         e6:81:cd:40:65:49:18:56:e6:5e:85:3c:62:d8:b2:d3:52:c2:
         42:11:04:1f:f8:1c:34:48:d4:ea:fc:33:76:a1:7a:f6:e9:42:
         30:4e:49:ca:16:03:1c:97:83:72:51:d4:7c:5c:c1:aa:d5:7b:
         aa:81:21:22:01:38:2b:9f:bf:4c:7d:d8:ff:d6:07:dc:1d:a8:
         58:83:4d:28:60:b6:7b:d8:be:6d:eb:ba:49:83:06:09:42:d2:
         cb:ac:c1:67:f8:86:6d:95:ed:3b:7e:26:f6:a4:13:2f:2a:24:
         be:16:84:13:e7:21:c0:fa:a4:ad:de:49:ee:7e:67:8a:c2:fd:
         19:98:d3:f4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErIdlRWLuyjPfu80AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0ZWRhNDItMWI4OS00MTI0LThhMDYtNjMzODEyNzgz
NzVkMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
YzJmMTk5M2ItODM5MC00NjNlLTkxNTctM2FiN2UzOTQ5NTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMBXtzNED09d+NEy2ChN1UoaPNSFNdtM64DG
W2itGGzhcV1ogYanluHFYoP+p/AWVs1mquBY6DLvwE7+/Hc8pD/KQBRAnhFzUyQZ
umPiAQcNTkoK48GFo/cyu6nUc8poeHXcb7gOO95cLUvNUHlKEiWXHd5JT3j+2d66
mhuwaLU06D2vE4q5gNBVpLllHnlz08dr2mieD73B+KLAK1Pl9ZDGH993IiyyMlcT
fXXHYbHTtUfEp8en/4ygs76C3HoiBnXBVNPZwA+r5Euw4UPTbamVITZ8FGUCRBOV
Qs866r4qto/d6Q7Lp5nz6jrManWsx8UkDpin13TIH74dIEk26QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA+/2xAFHETK1ErMK3rwmIokCf+CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZTRl
ZGE0Mi0xYjg5LTQxMjQtOGEwNi02MzM4MTI3ODM3NWQvMjRiNjY4ZmMtYTUwOS0z
YTQyLTg2ODQtZDZiNzUwMWZmMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2U0ZWRhNDItMWI4OS00MTI0LThh
MDYtNjMzODEyNzgzNzVkLzdlNGVkYTQyLTFiODktNDEyNC04YTA2LTYzMzgxMjc4
Mzc1ZC5jcmwwHwYDVR0jBBgwFoAUik9e9/o52EdQMpAXHOPDy+bTsGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZTRlZGE0Mi0xYjg5LTQxMjQtOGEwNi02MzM4
MTI3ODM3NWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL+azBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA4ed1c4+7IJvNoaUKNBNflYDlm+evVo++e/20iXHUHPZ/xypQ+YSkF
O7ahh2Gd95zrth8WUw0QUFDweNDdfFj9FU1VC4hM/4bTruOGgx0l4Q1wvUn6LzhV
yXGz5SyTX4+3n06jmLQnZo3ylarF/RfprIH+HMnOYDL2E/InF2Pmgc1AZUkYVuZe
hTxi2LLTUsJCEQQf+Bw0SNTq/DN2oXr26UIwTknKFgMcl4NyUdR8XMGq1XuqgSEi
ATgrn79Mfdj/1gfcHahYg00oYLZ72L5t67pJgwYJQtLLrMFn+IZtle07fib2pBMv
KiS+FoQT5yHA+qSt3knufmeKwv0ZmNP0
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:27 2025 by rpki-client