Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c7d8d703-0066-3e22-871d-284f685cfab2.roa
File:                     c7d8d703-0066-3e22-871d-284f685cfab2.roa (raw, json)
Hash identifier:          +Q+T/NpLH+1ayfh+OIU56lko7EOw5YBC5Ct7Jan5yK0=
Subject key identifier:   0C:7D:1F:CC:D7:08:F9:BB:70:1A:99:83:F9:9B:30:94:2B:D7:DC:DC
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285849ED4FCC7325BF58EA49203300
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c7d8d703-0066-3e22-871d-284f685cfab2.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     11572
IP address blocks:        2607:6003:2305::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:cc:73:25:bf:58:ea:49:20:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=117f415c-106b-46ef-a215-2fd019065583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:4f:f3:fc:f6:42:72:ea:09:0a:06:99:4f:
                    b9:6f:13:e0:1a:de:0c:42:b4:b4:15:85:8b:29:77:
                    23:de:25:47:9a:1c:63:9e:7a:a5:ec:eb:ee:0e:09:
                    c1:6e:50:47:ba:82:e0:3e:de:d2:f2:57:5b:d9:1b:
                    68:c1:f5:ee:b1:68:c0:42:09:ca:9d:3b:ad:86:f2:
                    70:c2:50:e7:fc:cb:b4:53:e0:88:91:41:38:cb:65:
                    fd:81:b5:17:0a:f4:98:30:66:d2:31:19:29:88:04:
                    34:3f:2b:9e:67:44:9f:72:df:45:be:93:d2:65:4b:
                    4c:52:e0:80:1f:55:1c:0b:de:5a:91:e4:ab:44:54:
                    95:b7:a3:dd:07:ed:35:d7:d3:de:09:87:6c:be:53:
                    ed:4e:07:20:ae:9e:79:24:e9:1c:f4:87:eb:f6:80:
                    db:9e:9c:17:dd:ac:64:9a:95:07:d5:9b:14:99:7a:
                    cb:a5:7b:bf:b6:49:6a:cc:99:f9:34:42:fd:9d:47:
                    8c:9c:23:d4:7d:a1:4c:70:af:d2:8a:e0:02:3a:4d:
                    87:12:c1:3a:09:89:ae:c0:f9:a7:cb:83:d0:93:c9:
                    7f:5d:f0:97:7a:8c:35:f5:00:1c:a9:5c:e5:1c:38:
                    ff:16:18:31:27:b4:e9:16:08:79:05:fa:ca:6d:95:
                    64:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7D:1F:CC:D7:08:F9:BB:70:1A:99:83:F9:9B:30:94:2B:D7:DC:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c7d8d703-0066-3e22-871d-284f685cfab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6003:2305::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ac:a9:a6:32:48:a9:3e:4c:2a:fc:4d:82:8b:ba:23:f9:93:
         71:31:37:44:cf:aa:50:29:e2:97:25:1c:52:fb:b9:22:d6:aa:
         9d:d7:64:5e:cb:c3:e4:be:6a:e9:13:ad:0d:dd:f2:c7:59:ac:
         c0:27:19:11:7a:4b:cb:a5:58:95:3e:a7:41:57:2c:72:d8:92:
         ea:7d:3c:67:94:49:f3:06:d1:d3:1e:be:42:b7:a0:c7:f9:8d:
         0c:3b:10:c8:83:06:2c:f5:6b:9a:83:06:fb:8e:35:19:78:5a:
         39:34:04:8d:cb:30:ad:d6:a4:a5:e7:13:ba:a6:bd:58:ba:9a:
         1b:75:ea:bb:03:69:ff:7d:5d:b0:11:5e:87:08:6a:4b:36:7c:
         b9:20:dd:f8:e6:53:43:1c:81:81:3d:0b:25:03:db:12:cb:03:
         f3:55:38:dc:ed:51:46:c5:8e:b8:bf:d9:eb:72:84:80:15:f7:
         9c:c5:57:cf:86:04:4f:c6:45:6f:51:5e:e6:ab:25:e4:32:51:
         c9:19:7d:f7:14:ad:30:3e:18:22:66:94:c0:f7:fc:00:3e:c1:
         03:30:57:f5:f3:eb:99:e9:0e:30:d4:5c:80:45:30:5e:de:f2:
         49:d1:f4:53:98:a3:af:f6:ba:1a:25:7e:aa:e3:15:da:c8:d5:
         09:cb:4d:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEntT8xzJb9Y6kkgMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk
MTE3ZjQxNWMtMTA2Yi00NmVmLWEyMTUtMmZkMDE5MDY1NTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJpP8/z2QnLqCQoGmU+5bxPgGt4MQrS0FYWL
KXcj3iVHmhxjnnql7OvuDgnBblBHuoLgPt7S8ldb2RtowfXusWjAQgnKnTuthvJw
wlDn/Mu0U+CIkUE4y2X9gbUXCvSYMGbSMRkpiAQ0PyueZ0Sfct9FvpPSZUtMUuCA
H1UcC95akeSrRFSVt6PdB+0119PeCYdsvlPtTgcgrp55JOkc9Ifr9oDbnpwX3axk
mpUH1ZsUmXrLpXu/tklqzJn5NEL9nUeMnCPUfaFMcK/SiuACOk2HEsE6CYmuwPmn
y4PQk8l/XfCXeow19QAcqVzlHDj/FhgxJ7TpFgh5BfrKbZVk5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAx9H8zXCPm7cBqZg/mbMJQr19zcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYzdkOGQ3MDMtMDA2Ni0z
ZTIyLTg3MWQtMjg0ZjY4NWNmYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdgAyMF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD2sqaYySKk+TCr8TYKLuiP5k3ExN0TPqlAp4pclHFL7uSLWqp3X
ZF7Lw+S+aukTrQ3d8sdZrMAnGRF6S8ulWJU+p0FXLHLYkup9PGeUSfMG0dMevkK3
oMf5jQw7EMiDBiz1a5qDBvuONRl4Wjk0BI3LMK3WpKXnE7qmvVi6mht16rsDaf99
XbARXocIaks2fLkg3fjmU0McgYE9CyUD2xLLA/NVONztUUbFjri/2etyhIAV95zF
V8+GBE/GRW9RXuarJeQyUckZffcUrTA+GCJmlMD3/AA+wQMwV/Xz65npDjDUXIBF
MF7e8knR9FOYo6/2uholfqrjFdrI1QnLTXE=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:05 2025 by rpki-client