Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa
File:                     d5585992-e680-3e2a-90c5-f5452de158cb.roa (raw, json)
Hash identifier:          qpSfMHf9ysaln5/DPflzDcv5QlDK+LgKECiYYkP6xEc=
Subject key identifier:   38:D5:7A:63:B8:6C:7D:FC:0B:8C:60:62:7C:C0:02:86:36:22:C8:C0
Certificate issuer:       /CN=b76a56d7-e03c-4adc-a642-166acb54d72b
Certificate serial:       010D0C9F4328584A90A0B649E6ABA9074E3DE100
Authority key identifier: 67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     32277
IP address blocks:        2605:ab00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b6:49:e6:ab:a9:07:4e:3d:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76a56d7-e03c-4adc-a642-166acb54d72b
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=83927db9-2318-4683-ba2e-01d398d5c096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:f2:93:05:15:10:56:4b:e3:05:ab:a7:f2:
                    a2:9c:5c:e1:12:3b:52:a5:d0:f2:e1:87:98:42:03:
                    8c:b9:0d:02:72:63:94:a8:51:ad:0a:88:86:55:2c:
                    46:86:79:02:8e:a5:64:7f:2b:5d:ce:8a:90:7b:9b:
                    36:cd:b2:b3:45:f0:4f:de:d9:9b:3c:1f:33:f2:6e:
                    b7:25:cc:dc:8e:dd:bb:41:69:d0:2c:18:ee:06:b3:
                    0b:6c:27:3b:78:bb:53:5f:10:e3:bd:bb:e8:1a:59:
                    8b:d2:5f:aa:e5:40:7b:22:5d:02:73:8e:3b:62:28:
                    e0:29:d2:3f:de:e7:0d:04:b6:99:39:5d:6c:df:64:
                    8e:31:cf:29:0d:61:05:2f:20:c5:aa:53:82:11:30:
                    2b:2c:92:bf:c6:35:62:83:92:21:e1:27:3c:71:a2:
                    d9:8c:12:63:8a:8e:45:61:cf:51:a9:e8:e0:19:ef:
                    95:a6:9b:ac:7c:5f:e0:88:a3:8f:40:71:e4:06:1a:
                    3d:85:b1:37:69:f6:b9:eb:b4:14:bc:7f:d1:6a:58:
                    df:c0:94:95:45:ce:46:23:60:2c:8f:9a:3e:48:17:
                    82:89:0e:74:1e:51:b5:ee:6c:53:1c:c6:23:0d:44:
                    ea:e0:25:b8:99:f5:af:d2:3e:2b:2c:31:3f:08:93:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D5:7A:63:B8:6C:7D:FC:0B:8C:60:62:7C:C0:02:86:36:22:C8:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl

            X509v3 Authority Key Identifier:
                keyid:67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ab00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:92:d9:27:a4:4f:46:e2:19:b7:dd:dc:46:69:5e:61:4d:ad:
         7c:55:ed:f5:a6:b4:97:c1:6e:b9:50:0e:17:e6:e8:a2:43:2d:
         df:40:65:0d:47:75:45:3c:2e:40:f6:0c:4e:33:71:8c:a4:7d:
         3f:4f:b1:90:32:12:ea:30:1b:d5:a8:4e:f1:03:aa:58:30:6c:
         cd:ca:4f:c5:50:31:d7:fc:d9:64:d7:78:88:3b:dd:9b:a9:07:
         c7:19:71:2c:08:50:b7:52:24:05:66:69:44:87:05:76:6d:02:
         24:c6:7f:db:e8:3d:b2:d5:f4:ef:3b:b4:c4:90:a8:29:cb:d6:
         a2:be:6c:73:87:90:b7:d4:fd:99:b1:ba:a7:1c:c9:d9:06:ff:
         3b:ad:8d:a1:2d:8f:62:ef:05:41:23:15:25:fa:e1:c7:f8:a5:
         83:66:81:90:65:41:c5:15:b0:d4:6e:38:56:8b:14:9a:bc:ea:
         24:d2:c4:d6:ee:24:38:d0:95:c4:50:6e:1a:d7:70:74:e2:52:
         21:f0:a6:4d:6b:96:0e:bc:5b:89:c1:d3:69:34:87:c4:da:03:
         f2:c2:d3:2f:f5:72:4c:41:6a:40:d3:2a:ee:74:78:be:47:f0:
         6d:04:15:76:74:d6:67:3b:98:89:d9:f9:f6:23:ae:88:b1:e2:
         e7:25:60:12
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqQoLZJ5qupB0494QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2YTU2ZDctZTAzYy00YWRjLWE2NDItMTY2YWNiNTRk
NzJiMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
ODM5MjdkYjktMjMxOC00NjgzLWJhMmUtMDFkMzk4ZDVjMDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03bykwUVEFZL4wWrp/KinFzhEjtSpdDy4YeY
QgOMuQ0CcmOUqFGtCoiGVSxGhnkCjqVkfytdzoqQe5s2zbKzRfBP3tmbPB8z8m63
Jczcjt27QWnQLBjuBrMLbCc7eLtTXxDjvbvoGlmL0l+q5UB7Il0Cc447YijgKdI/
3ucNBLaZOV1s32SOMc8pDWEFLyDFqlOCETArLJK/xjVig5Ih4Sc8caLZjBJjio5F
Yc9RqejgGe+VppusfF/giKOPQHHkBho9hbE3afa567QUvH/RaljfwJSVRc5GI2As
j5o+SBeCiQ50HlG17mxTHMYjDUTq4CW4mfWv0j4rLDE/CJMj8QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDjVemO4bH38C4xgYnzAAoY2IsjAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzZh
NTZkNy1lMDNjLTRhZGMtYTY0Mi0xNjZhY2I1NGQ3MmIvZDU1ODU5OTItZTY4MC0z
ZTJhLTkwYzUtZjU0NTJkZTE1OGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjc2YTU2ZDctZTAzYy00YWRjLWE2
NDItMTY2YWNiNTRkNzJiL2I3NmE1NmQ3LWUwM2MtNGFkYy1hNjQyLTE2NmFjYjU0
ZDcyYi5jcmwwHwYDVR0jBBgwFoAUZ2s+IQIFKGkxD9bQHKbhPruP6MswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzZhNTZkNy1lMDNjLTRhZGMtYTY0Mi0xNjZh
Y2I1NGQ3MmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWrADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCYktknpE9G4hm33dxGaV5hTa18Ve31prSXwW65UA4X5uiiQy3fQGUN
R3VFPC5A9gxOM3GMpH0/T7GQMhLqMBvVqE7xA6pYMGzNyk/FUDHX/Nlk13iIO92b
qQfHGXEsCFC3UiQFZmlEhwV2bQIkxn/b6D2y1fTvO7TEkKgpy9aivmxzh5C31P2Z
sbqnHMnZBv87rY2hLY9i7wVBIxUl+uHH+KWDZoGQZUHFFbDUbjhWixSavOok0sTW
7iQ40JXEUG4a13B04lIh8KZNa5YOvFuJwdNpNIfE2gPywtMv9XJMQWpA0yrudHi+
R/BtBBV2dNZnO5iJ2fn2I66IseLnJWAS
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:47 2025 by rpki-client