Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/f5885fc8-8d31-37ed-86d6-5bbfddb2dd03.roa
File:                     f5885fc8-8d31-37ed-86d6-5bbfddb2dd03.roa (raw, json)
Hash identifier:          31RzuTcg3rkW+UTEBRJxrurUpu/3yvYtX3Yqxz/GR7g=
Subject key identifier:   01:B6:0F:BC:81:A9:11:8D:4E:D3:C0:8C:13:23:55:26:0C:86:8F:0F
Certificate issuer:       /CN=e612cbeb-7456-41ce-9bf5-c9634fa1254c
Certificate serial:       010D0C9F4328584AC0162A8A91CF9ABE414BCAA0
Authority key identifier: 07:DC:BE:66:27:FF:A0:9C:DF:F5:4B:EC:6A:CC:5A:F4:41:EB:AB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/f5885fc8-8d31-37ed-86d6-5bbfddb2dd03.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     27027
IP address blocks:        2607:8280::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:2a:8a:91:cf:9a:be:41:4b:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e612cbeb-7456-41ce-9bf5-c9634fa1254c
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=45a6f306-8234-4db3-be9b-1153015fe3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:00:5a:7d:41:c5:c0:68:b7:e6:bd:31:55:f0:
                    a8:d8:b6:36:7a:ae:cf:e8:17:9c:bc:66:4c:4f:68:
                    5a:d0:4b:ff:b5:18:b9:24:94:56:c8:a4:68:6a:28:
                    2e:e5:b5:2f:92:e4:bf:ee:12:aa:13:1f:a7:6b:0c:
                    c5:bf:00:10:29:b7:cc:08:22:87:1a:19:85:35:89:
                    fa:93:58:c6:5c:3b:6a:27:ff:dc:a4:c8:5d:67:81:
                    ca:59:8b:99:c1:ee:39:b8:09:66:f4:26:b1:86:06:
                    4a:97:d3:f4:70:c6:76:ea:06:e3:08:30:bf:b5:80:
                    ff:c1:91:da:b3:70:a9:e5:0e:40:3c:db:2d:c7:06:
                    aa:d8:ab:b6:91:b2:e7:e4:ae:b0:a4:e6:de:d2:f9:
                    94:40:88:9a:8b:8d:6f:51:4c:0d:58:b0:7e:84:37:
                    30:4c:ae:ec:83:7a:d0:68:5f:8c:f6:78:19:1d:83:
                    52:65:8e:20:d0:c8:06:6f:39:f9:5a:97:eb:b5:63:
                    98:97:52:82:df:fb:69:9b:83:ae:6c:d6:65:19:de:
                    4d:e8:8a:68:a7:98:b2:f1:22:ed:51:89:fb:80:b4:
                    00:95:58:13:91:a6:d2:dc:da:a1:0e:b7:d1:00:2c:
                    b2:e5:fc:1a:93:42:2d:d6:38:46:1e:d9:82:cd:cf:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B6:0F:BC:81:A9:11:8D:4E:D3:C0:8C:13:23:55:26:0C:86:8F:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/f5885fc8-8d31-37ed-86d6-5bbfddb2dd03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.crl

            X509v3 Authority Key Identifier:
                keyid:07:DC:BE:66:27:FF:A0:9C:DF:F5:4B:EC:6A:CC:5A:F4:41:EB:AB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f9:22:82:41:a8:7e:57:44:ef:50:8e:08:79:12:59:c4:4e:
         9c:bf:d0:0e:0c:6d:3b:dc:a2:23:ee:8b:80:20:72:b7:5c:7b:
         2d:ee:ae:1d:21:e5:36:fa:f4:97:87:27:c8:a2:3b:39:d1:5c:
         fb:b8:54:3e:3d:85:28:7d:d2:e9:96:51:7e:2a:30:69:aa:e4:
         09:59:6d:d4:9f:21:7e:bc:b2:ab:ba:f2:7e:ec:93:55:3d:36:
         9e:cf:ce:80:66:6e:ec:42:60:ff:16:64:73:01:59:61:d5:30:
         fe:5f:32:7b:90:32:f2:4e:b4:5b:e2:ad:95:ab:37:97:bc:d2:
         31:8f:d6:d4:ab:19:28:82:69:52:4f:c5:c9:72:6f:75:bf:56:
         77:1f:88:91:fa:0c:d2:38:aa:14:9b:5a:3e:42:e8:26:50:e0:
         3d:4b:7d:57:49:1e:21:c0:de:e4:81:ad:5e:e1:f2:a9:0d:a0:
         2e:f5:05:e7:3b:bc:3c:aa:cf:c3:0c:08:f5:fc:8f:5c:49:09:
         fb:ab:bb:6a:68:17:48:95:28:25:ac:7e:9d:eb:ad:2a:03:33:
         4e:9c:01:6e:ef:be:55:32:be:7f:46:cc:30:5c:92:79:f5:94:
         1e:6f:65:fd:a5:63:0e:15:79:4c:01:c2:08:92:a3:2a:66:b0:
         51:97:fd:aa
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErAFiqKkc+avkFLyqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYxMmNiZWItNzQ1Ni00MWNlLTliZjUtYzk2MzRmYTEy
NTRjMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
NDVhNmYzMDYtODIzNC00ZGIzLWJlOWItMTE1MzAxNWZlM2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ABafUHFwGi35r0xVfCo2LY2eq7P6BecvGZM
T2ha0Ev/tRi5JJRWyKRoaigu5bUvkuS/7hKqEx+nawzFvwAQKbfMCCKHGhmFNYn6
k1jGXDtqJ//cpMhdZ4HKWYuZwe45uAlm9CaxhgZKl9P0cMZ26gbjCDC/tYD/wZHa
s3Cp5Q5APNstxwaq2Ku2kbLn5K6wpObe0vmUQIiai41vUUwNWLB+hDcwTK7sg3rQ
aF+M9ngZHYNSZY4g0MgGbzn5WpfrtWOYl1KC3/tpm4OubNZlGd5N6Ipop5iy8SLt
UYn7gLQAlVgTkabS3NqhDrfRACyy5fwak0It1jhGHtmCzc9W6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAG2D7yBqRGNTtPAjBMjVSYMho8PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lNjEy
Y2JlYi03NDU2LTQxY2UtOWJmNS1jOTYzNGZhMTI1NGMvZjU4ODVmYzgtOGQzMS0z
N2VkLTg2ZDYtNWJiZmRkYjJkZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTYxMmNiZWItNzQ1Ni00MWNlLTli
ZjUtYzk2MzRmYTEyNTRjL2U2MTJjYmViLTc0NTYtNDFjZS05YmY1LWM5NjM0ZmEx
MjU0Yy5jcmwwHwYDVR0jBBgwFoAUB9y+Zif/oJzf9Uvsasxa9EHrq0MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lNjEyY2JlYi03NDU2LTQxY2UtOWJmNS1jOTYz
NGZhMTI1NGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeCgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAd+SKCQah+V0TvUI4IeRJZxE6cv9AODG073KIj7ouAIHK3XHst7q4d
IeU2+vSXhyfIojs50Vz7uFQ+PYUofdLpllF+KjBpquQJWW3UnyF+vLKruvJ+7JNV
PTaez86AZm7sQmD/FmRzAVlh1TD+XzJ7kDLyTrRb4q2VqzeXvNIxj9bUqxkogmlS
T8XJcm91v1Z3H4iR+gzSOKoUm1o+QugmUOA9S31XSR4hwN7kga1e4fKpDaAu9QXn
O7w8qs/DDAj1/I9cSQn7q7tqaBdIlSglrH6d660qAzNOnAFu775VMr5/RswwXJJ5
9ZQeb2X9pWMOFXlMAcIIkqMqZrBRl/2q
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:48 2025 by rpki-client