Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7bf5759-3e86-30fe-aa5b-842f953c444a.roa
File:                     e7bf5759-3e86-30fe-aa5b-842f953c444a.roa (raw, json)
Hash identifier:          oiyB9/Hme8RADMuZwER9/T33vjJP+1+hGY91w225Wjw=
Subject key identifier:   5C:EE:63:3D:D6:14:34:EC:DD:9F:E0:26:93:8B:0C:A8:5B:C5:7A:60
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962FCB78C2DAA46611AC80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7bf5759-3e86-30fe-aa5b-842f953c444a.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8312::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2f:cb:78:c2:da:a4:66:11:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=c35909dc-586d-4bfd-8ecb-203b130501e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:3d:89:fe:ba:a8:df:d6:6a:95:df:12:34:
                    f8:37:51:dc:9d:f3:07:64:aa:84:0c:b7:e4:57:d1:
                    df:48:cc:35:23:f6:bc:8c:95:7d:55:8b:cf:e1:a2:
                    d8:f9:21:13:35:b1:a0:ea:0c:e1:17:50:05:6a:db:
                    1f:86:d8:ac:cb:c1:78:ce:3a:7d:cd:7a:51:ed:ec:
                    be:df:4a:6b:21:52:ce:dc:5d:29:73:3a:67:76:6c:
                    2d:51:eb:78:ef:29:95:fa:2b:8d:01:b4:d4:da:c3:
                    e2:03:5b:f8:15:23:94:92:15:bd:29:21:1a:da:4a:
                    6f:e9:0b:44:29:eb:72:dc:ce:1f:f4:1b:10:47:02:
                    80:03:47:a2:16:ef:de:bd:24:34:c1:27:f4:03:e0:
                    24:57:28:d4:1e:63:60:05:88:66:84:6f:88:b3:46:
                    62:a0:e7:21:35:18:52:e2:aa:55:09:a8:fc:48:9f:
                    53:25:b2:ed:08:2f:35:f3:9c:5d:fb:a8:7a:10:37:
                    3c:31:de:00:b1:dd:8f:2f:4b:cf:97:95:dd:01:7f:
                    f6:06:18:16:ef:d0:39:47:b0:5c:66:cd:9a:97:87:
                    e0:0d:00:ef:fc:c9:af:a0:6d:1f:65:47:4c:53:67:
                    0c:d1:49:d1:bc:7d:50:e0:93:5d:46:14:f7:45:ee:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EE:63:3D:D6:14:34:EC:DD:9F:E0:26:93:8B:0C:A8:5B:C5:7A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7bf5759-3e86-30fe-aa5b-842f953c444a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8312::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:82:58:11:a2:90:33:fe:69:e5:b6:8c:09:55:b3:de:2c:6f:
         60:82:b4:0a:04:b5:02:8c:3e:a4:f1:15:f5:a1:4a:cc:5c:3e:
         d5:1f:20:66:10:19:3f:fb:d3:99:5e:b9:50:24:e8:5c:f8:99:
         27:92:28:04:fb:a9:0c:19:7f:09:f1:5c:1a:7e:39:79:1d:9d:
         59:35:69:d4:4a:5b:13:6e:1d:ff:9d:52:36:bd:a0:7a:62:f4:
         52:1f:55:a4:cb:70:bd:08:b5:28:06:47:9c:13:10:13:cb:77:
         a9:8e:ab:1e:91:d9:f0:14:4e:cf:5d:6e:02:57:92:fa:43:e5:
         f2:70:cd:d9:f6:06:3f:88:d1:06:1d:fa:c7:b9:6e:82:d9:57:
         83:48:a6:4a:b8:89:f8:f8:6e:de:8c:34:fc:2d:be:c9:1e:b5:
         fc:36:37:03:c7:b9:86:1c:f8:bc:7e:90:14:65:a5:f4:94:fd:
         4e:2b:ae:55:29:6c:03:4d:1d:3c:80:ae:23:93:ca:c9:c2:ab:
         df:b5:5b:db:0c:d1:f8:78:6e:60:68:88:83:7c:10:8e:3f:14:
         46:c6:21:51:a3:f8:dc:f9:5e:e7:13:e3:82:65:f5:87:0e:dc:
         1c:f2:83:40:65:fa:0f:42:6c:7c:fd:5a:5b:f1:de:7d:34:7e:
         2f:59:23:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqeli/LeMLapGYRrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
YzM1OTA5ZGMtNTg2ZC00YmZkLThlY2ItMjAzYjEzMDUwMWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJA9if66qN/WapXfEjT4N1HcnfMHZKqEDLfk
V9HfSMw1I/a8jJV9VYvP4aLY+SETNbGg6gzhF1AFatsfhtisy8F4zjp9zXpR7ey+
30prIVLO3F0pczpndmwtUet47ymV+iuNAbTU2sPiA1v4FSOUkhW9KSEa2kpv6QtE
Kety3M4f9BsQRwKAA0eiFu/evSQ0wSf0A+AkVyjUHmNgBYhmhG+Is0ZioOchNRhS
4qpVCaj8SJ9TJbLtCC8185xd+6h6EDc8Md4Asd2PL0vPl5XdAX/2BhgW79A5R7Bc
Zs2al4fgDQDv/MmvoG0fZUdMU2cM0UnRvH1Q4JNdRhT3Re4zYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFzuYz3WFDTs3Z/gJpOLDKhbxXpgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTdiZjU3NTktM2U4Ni0z
MGZlLWFhNWItODQyZjk1M2M0NDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYMS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAuCWBGikDP+aeW2jAlVs94sb2CCtAoEtQKMPqTxFfWhSsxcPtUf
IGYQGT/705leuVAk6Fz4mSeSKAT7qQwZfwnxXBp+OXkdnVk1adRKWxNuHf+dUja9
oHpi9FIfVaTLcL0ItSgGR5wTEBPLd6mOqx6R2fAUTs9dbgJXkvpD5fJwzdn2Bj+I
0QYd+se5boLZV4NIpkq4ifj4bt6MNPwtvsketfw2NwPHuYYc+Lx+kBRlpfSU/U4r
rlUpbANNHTyAriOTysnCq9+1W9sM0fh4bmBoiIN8EI4/FEbGIVGj+Nz5XucT44Jl
9YcO3Bzyg0Bl+g9CbHz9Wlvx3n00fi9ZIyM=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:26 2025 by rpki-client