Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e32abc06-d404-3727-92cf-8df4279ef99a.roa
File:                     e32abc06-d404-3727-92cf-8df4279ef99a.roa (raw, json)
Hash identifier:          k5kc/mLaOT2QF3m0GgWOAqSav2VK/ub0mdYkaTUKHZs=
Subject key identifier:   B9:B1:0A:F3:8C:A7:08:75:23:BA:F5:70:5D:E3:4D:FE:E5:97:30:77
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962DB6962C65C15A768800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e32abc06-d404-3727-92cf-8df4279ef99a.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:80ef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2d:b6:96:2c:65:c1:5a:76:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=de82f638-dada-44af-9091-4badc48f6e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:49:4c:8b:c3:e0:91:62:7e:21:84:92:67:
                    92:3b:61:bb:2f:3d:c2:07:b7:e1:e9:18:e9:56:2e:
                    d3:4b:db:57:55:22:11:05:bc:0e:2d:50:0f:9d:50:
                    f6:86:91:2b:e7:03:76:05:9e:dd:0f:1e:eb:e8:05:
                    70:09:fe:37:cb:61:47:38:0d:f1:b5:09:44:5b:07:
                    8c:b5:1e:c4:17:43:98:57:0a:f0:ff:dd:cc:f4:51:
                    26:ae:ca:6a:71:c5:34:63:eb:96:bc:48:38:f3:2f:
                    b9:29:80:36:77:4a:36:6f:46:32:c0:1a:f5:fc:43:
                    ef:6d:5c:87:a5:38:d1:ec:f0:fb:67:72:95:96:10:
                    d4:81:5c:2e:33:ec:ea:0f:fb:63:e3:6e:b3:49:9c:
                    8a:26:1e:26:15:95:23:39:93:1d:53:ad:55:53:db:
                    99:85:b2:75:e8:6f:70:43:bf:7a:c7:88:d2:c2:6b:
                    0f:69:5a:b2:66:07:be:34:6d:e8:48:a1:22:30:72:
                    ea:41:66:0e:1c:a1:1a:0a:8d:65:2c:ad:b8:28:f7:
                    c0:84:9b:40:59:8c:8f:9b:ac:af:b1:d1:ba:98:21:
                    3e:16:4d:3c:fc:e5:06:a8:31:af:b0:b6:bf:89:ba:
                    2e:a2:48:a6:a0:56:0b:b0:0e:d0:87:be:a1:09:f2:
                    71:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B1:0A:F3:8C:A7:08:75:23:BA:F5:70:5D:E3:4D:FE:E5:97:30:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e32abc06-d404-3727-92cf-8df4279ef99a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1f:f3:33:5e:7f:c4:72:98:c4:48:e5:75:a7:81:ce:49:fe:
         87:c2:68:9f:89:1e:f1:16:b4:d0:ed:47:d4:69:e1:fe:81:06:
         a6:d9:d0:99:0e:97:ba:2b:a5:4c:47:c2:69:a9:2c:32:7e:67:
         6d:f4:89:7f:52:b0:b1:fc:09:21:61:93:b5:c7:d5:bd:b1:14:
         28:e6:92:dc:d8:68:aa:29:32:2e:d4:dd:fe:8e:dd:2d:6c:e5:
         15:ce:45:3d:9e:b4:ee:ca:44:c9:bf:a2:c1:04:7d:59:20:b2:
         c5:3a:71:71:ad:6f:9c:dd:ac:7e:a8:b2:9b:da:7b:81:78:01:
         e2:a4:88:76:d2:17:bb:55:8e:c4:04:06:2f:f1:fa:3c:90:ce:
         6d:b1:39:47:b3:aa:9e:74:57:57:8d:a5:37:cc:07:5e:8d:9c:
         e3:48:36:06:3d:54:b2:57:4f:bb:56:3a:88:80:c9:96:ce:83:
         ab:89:e5:ae:7e:ab:92:da:66:a1:91:b6:17:24:dd:d6:16:cc:
         f9:c1:ae:09:72:b2:df:30:33:d4:59:03:aa:1b:a6:ba:50:91:
         e9:ac:24:3e:1b:ad:2e:ba:8e:16:96:e6:db:89:1d:45:38:ae:
         70:14:da:96:4a:55:64:d6:cf:cc:fa:1b:9e:3f:76:fd:8c:14:
         6d:0a:72:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqeli22lixlwVp2iAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
ZGU4MmY2MzgtZGFkYS00NGFmLTkwOTEtNGJhZGM0OGY2ZTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2tJTIvD4JFifiGEkmeSO2G7Lz3CB7fh6Rjp
Vi7TS9tXVSIRBbwOLVAPnVD2hpEr5wN2BZ7dDx7r6AVwCf43y2FHOA3xtQlEWweM
tR7EF0OYVwrw/93M9FEmrspqccU0Y+uWvEg48y+5KYA2d0o2b0YywBr1/EPvbVyH
pTjR7PD7Z3KVlhDUgVwuM+zqD/tj426zSZyKJh4mFZUjOZMdU61VU9uZhbJ16G9w
Q796x4jSwmsPaVqyZge+NG3oSKEiMHLqQWYOHKEaCo1lLK24KPfAhJtAWYyPm6yv
sdG6mCE+Fk08/OUGqDGvsLa/ibouokimoFYLsA7Qh76hCfJxCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLmxCvOMpwh1I7r1cF3jTf7llzB3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTMyYWJjMDYtZDQwNC0z
NzI3LTkyY2YtOGRmNDI3OWVmOTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYDv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEMf8zNef8RymMRI5XWngc5J/ofCaJ+JHvEWtNDtR9Rp4f6BBqbZ
0JkOl7orpUxHwmmpLDJ+Z230iX9SsLH8CSFhk7XH1b2xFCjmktzYaKopMi7U3f6O
3S1s5RXORT2etO7KRMm/osEEfVkgssU6cXGtb5zdrH6ospvae4F4AeKkiHbSF7tV
jsQEBi/x+jyQzm2xOUezqp50V1eNpTfMB16NnONINgY9VLJXT7tWOoiAyZbOg6uJ
5a5+q5LaZqGRthck3dYWzPnBrglyst8wM9RZA6obprpQkemsJD4brS66jhaW5tuJ
HUU4rnAU2pZKVWTWz8z6G54/dv2MFG0Kct4=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:15:07 2025 by rpki-client