Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa
File:                     7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa (raw, json)
Hash identifier:          x+lMLYXlYUEjuzNRXoRkBWf2xx6rBH5GXUhcycQObzA=
Subject key identifier:   3B:DF:E5:67:87:63:DC:F6:8A:86:CC:4C:54:2F:84:3F:8F:18:DB:B8
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584A331AE20137F0BE84A869D440
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     32298
IP address blocks:        2606:d640:ef00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e2:01:37:f0:be:84:a8:69:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=143061fa-47cc-40a8-b098-86133f5f30df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:44:09:86:00:34:67:50:f8:62:d4:f2:55:
                    ee:63:25:24:62:42:a6:10:6d:6e:e7:64:b9:17:df:
                    75:a1:fd:ad:69:bb:da:53:fc:94:d8:c5:c2:55:c7:
                    ea:9b:c6:84:40:d6:55:e5:7e:94:e3:de:c6:27:05:
                    cb:16:ae:13:70:bd:ce:ce:b3:44:0d:01:7c:a3:7e:
                    f1:ad:af:e1:56:55:94:a3:08:af:9a:05:44:43:24:
                    91:d1:c3:e6:35:8e:65:5d:12:d7:98:e7:24:91:23:
                    ce:24:c7:2a:6f:32:09:2a:89:bb:d4:a1:08:2a:0f:
                    47:6f:56:9d:76:1c:a6:33:6f:af:52:ef:0a:dc:2c:
                    fb:a1:a4:67:1d:f2:a8:67:7b:6e:08:44:9c:12:28:
                    15:91:6b:a2:1e:8c:39:62:7a:ab:3d:79:c8:b3:d9:
                    40:4c:ae:3c:7f:25:c7:25:09:f8:5d:bb:c2:7f:b6:
                    06:d8:9c:9d:8d:8d:25:73:d7:e6:96:8f:7e:60:f8:
                    23:13:d1:bc:b2:32:2c:cd:6d:c1:c3:0f:c3:0d:b2:
                    38:e3:a4:41:f0:84:fc:24:aa:70:e4:ae:c7:f0:74:
                    2e:1c:42:e7:dc:a7:86:ca:aa:84:bd:b1:2c:d3:73:
                    b2:8c:6a:3b:e5:25:49:49:0e:4e:b0:e4:54:49:56:
                    2c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DF:E5:67:87:63:DC:F6:8A:86:CC:4C:54:2F:84:3F:8F:18:DB:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/7713b4bd-1cce-3b2f-8751-04b76dd3704a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:ef00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:65:dc:03:b1:77:04:a7:43:bd:0d:ea:9e:68:fe:54:33:64:
         0b:ba:21:42:99:30:98:7d:29:2a:41:0c:8d:16:75:88:56:12:
         74:3f:c5:18:88:b1:f2:aa:e1:1d:d3:52:37:0a:6a:56:ed:6d:
         86:42:5e:fb:60:35:8d:16:2a:a2:1b:52:6e:72:a0:53:36:b2:
         4e:b4:c0:e8:5a:9b:fe:97:70:db:1d:60:39:ad:8b:a6:0d:68:
         41:a7:7f:6d:6e:23:1c:fe:1b:e1:f5:c3:df:b2:82:62:b6:c4:
         76:8b:09:8b:3a:b2:c0:7d:7a:0e:94:51:07:2f:56:7b:af:09:
         2c:60:11:71:b3:cc:3a:f8:a3:ae:02:21:d1:a8:d5:9d:86:0f:
         c1:f5:f3:bc:d8:89:3c:45:e4:d1:a7:72:ba:bb:2f:60:f8:a2:
         13:cb:23:7b:ee:89:43:61:f7:2b:37:fb:4b:3d:39:22:f5:2c:
         19:2a:94:d2:18:9e:db:45:ff:8a:ac:2a:5b:1e:70:db:64:af:
         05:49:6b:e5:64:0b:78:70:aa:24:b6:1c:89:ad:2f:46:a3:d5:
         64:34:8b:31:fc:d0:71:0a:08:46:c1:ee:01:39:41:41:c2:4a:
         08:19:ba:2c:c8:44:e8:cc:ac:4d:20:ab:73:90:1d:4b:90:0e:
         ef:df:30:96
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEozGuIBN/C+hKhp1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk
YTM1MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
MTQzMDYxZmEtNDdjYy00MGE4LWIwOTgtODYxMzNmNWYzMGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyhECYYANGdQ+GLU8lXuYyUkYkKmEG1u52S5
F991of2tabvaU/yU2MXCVcfqm8aEQNZV5X6U497GJwXLFq4TcL3OzrNEDQF8o37x
ra/hVlWUowivmgVEQySR0cPmNY5lXRLXmOckkSPOJMcqbzIJKom71KEIKg9Hb1ad
dhymM2+vUu8K3Cz7oaRnHfKoZ3tuCEScEigVkWuiHow5YnqrPXnIs9lATK48fyXH
JQn4XbvCf7YG2JydjY0lc9fmlo9+YPgjE9G8sjIszW3Bww/DDbI446RB8IT8JKpw
5K7H8HQuHELn3KeGyqqEvbEs03OyjGo75SVJSQ5OsORUSVYs1QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDvf5WeHY9z2iobMTFQvhD+PGNu4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5
YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvNzcxM2I0YmQtMWNjZS0z
YjJmLTg3NTEtMDRiNzZkZDM3MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi
ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj
ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1
NGZkY2RhMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgbWQO8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAX2XcA7F3BKdDvQ3qnmj+VDNkC7ohQpkwmH0pKkEMjRZ1iFYSdD/F
GIix8qrhHdNSNwpqVu1thkJe+2A1jRYqohtSbnKgUzayTrTA6Fqb/pdw2x1gOa2L
pg1oQad/bW4jHP4b4fXD37KCYrbEdosJizqywH16DpRRBy9We68JLGARcbPMOvij
rgIh0ajVnYYPwfXzvNiJPEXk0adyursvYPiiE8sje+6JQ2H3Kzf7Sz05IvUsGSqU
0hie20X/iqwqWx5w22SvBUlr5WQLeHCqJLYcia0vRqPVZDSLMfzQcQoIRsHuATlB
QcJKCBm6LMhE6MysTSCrc5AdS5AO798wlg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:26:12 2025 by rpki-client