Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/780dc63e-2eb2-30cf-ae3f-fc79bc3f7173.roa
File:                     780dc63e-2eb2-30cf-ae3f-fc79bc3f7173.roa (raw, json)
Hash identifier:          Zev9mXnlgblJMu4Ydkbx1qjuAVFtR0y3EMB5cWZhkRE=
Subject key identifier:   18:E7:71:88:7C:FC:5B:5F:EB:98:DA:24:51:D2:00:DF:82:F8:96:6B
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F4328584A3A1590C52259B80A10D5D048
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/780dc63e-2eb2-30cf-ae3f-fc79bc3f7173.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     203888
IP address blocks:        2602:f9df:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:90:c5:22:59:b8:0a:10:d5:d0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=594c2ce2-ccbe-4930-9d45-a29eb34f8afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:1c:06:1b:1a:24:9a:4e:8a:77:6e:96:1e:
                    97:53:92:43:2c:ea:1d:07:40:33:b9:44:71:ea:70:
                    05:6c:1f:06:69:40:c8:4c:79:f2:10:50:9f:72:58:
                    88:5a:ad:cf:0a:c7:2d:cd:94:b6:5e:4e:65:d7:e1:
                    21:b2:54:c1:27:04:f4:30:53:d0:6c:99:bd:6f:e3:
                    47:a3:c5:78:ab:b2:d9:6b:63:24:c1:51:68:9b:b3:
                    f1:17:7b:c5:91:3f:23:3a:4d:86:87:cd:fc:e2:63:
                    27:83:3f:80:b1:4d:cd:94:ac:d3:73:a0:3a:bb:8d:
                    d5:4b:f7:ec:4a:59:fa:c0:eb:91:91:b3:dd:b1:0e:
                    1f:60:b1:91:b9:cd:8e:94:67:d8:b0:b0:b3:54:12:
                    8a:14:24:f2:8a:28:e3:b5:2c:39:7b:41:0b:0f:78:
                    6d:a7:92:b4:b4:0a:c3:59:e6:12:f2:14:ca:49:06:
                    22:e7:9a:ef:10:2c:c6:dc:eb:cb:c9:4f:b9:d8:2c:
                    b1:4a:7d:fa:96:bf:16:45:b0:1a:29:7e:06:67:b5:
                    97:ae:0e:d3:ea:35:8b:f2:6c:2a:10:a7:6d:00:cc:
                    55:4c:14:70:97:25:1f:db:90:bc:07:21:fb:6b:10:
                    56:8b:e0:52:2d:31:53:54:8c:b5:22:1e:d4:fa:d9:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:71:88:7C:FC:5B:5F:EB:98:DA:24:51:D2:00:DF:82:F8:96:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/780dc63e-2eb2-30cf-ae3f-fc79bc3f7173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:95:59:02:c7:56:95:ca:eb:c8:d3:f2:10:3a:8a:c9:f2:78:
         b8:db:c6:6c:0a:09:c8:e3:70:12:ce:89:20:1e:80:a2:de:3f:
         89:5d:d2:6c:32:4d:73:bf:1d:5f:cf:37:17:1d:89:ac:41:63:
         48:f6:2a:9c:23:56:6f:1a:47:6e:20:9e:7f:0e:15:0c:eb:e4:
         b9:3b:9b:6c:fc:c3:73:26:26:ec:0f:c0:0f:cf:46:75:3a:22:
         b5:31:a5:db:d3:34:da:5c:86:ed:57:25:16:fb:51:6d:a0:f2:
         b5:f0:38:f3:1e:46:1b:54:c2:ca:6d:d5:5a:7d:a8:d4:36:80:
         75:cc:e5:97:13:6f:16:b5:2c:22:a6:2f:29:89:0f:24:18:64:
         85:ad:98:f2:b2:c9:14:68:bf:fc:76:a0:be:e5:6a:98:25:35:
         ad:e0:58:a7:ad:82:94:c9:32:1f:3c:96:dd:02:33:dd:af:d6:
         4b:4a:7f:07:78:f6:af:3c:a8:fb:0f:a2:e5:d1:ab:21:c4:66:
         3f:32:9d:67:86:17:41:75:b4:53:1a:f7:d5:7a:46:19:ac:d4:
         a1:df:a7:c1:51:f1:91:01:5b:db:87:bd:2f:d7:69:72:89:d0:
         c4:f1:19:33:44:66:49:43:6b:bf:25:ea:f5:d0:5e:1c:ff:08:
         66:a6:84:d4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo6FZDFIlm4ChDV0EgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4
ZWJlMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
NTk0YzJjZTItY2NiZS00OTMwLTlkNDUtYTI5ZWIzNGY4YWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wkcBhsaJJpOindulh6XU5JDLOodB0AzuURx
6nAFbB8GaUDITHnyEFCfcliIWq3PCsctzZS2Xk5l1+EhslTBJwT0MFPQbJm9b+NH
o8V4q7LZa2MkwVFom7PxF3vFkT8jOk2Gh8384mMngz+AsU3NlKzTc6A6u43VS/fs
Sln6wOuRkbPdsQ4fYLGRuc2OlGfYsLCzVBKKFCTyiijjtSw5e0ELD3htp5K0tArD
WeYS8hTKSQYi55rvECzG3OvLyU+52CyxSn36lr8WRbAaKX4GZ7WXrg7T6jWL8mwq
EKdtAMxVTBRwlyUf25C8ByH7axBWi+BSLTFTVIy1Ih7U+tnSZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBjncYh8/Ftf65jaJFHSAN+C+JZrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl
YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvNzgwZGM2M2UtMmViMi0z
MGNmLWFlM2YtZmM3OWJjM2Y3MTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj
MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4
OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh
ZWQ5ODhlYmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL53wAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIaVWQLHVpXK68jT8hA6isnyeLjbxmwKCcjjcBLOiSAegKLeP4ld
0mwyTXO/HV/PNxcdiaxBY0j2KpwjVm8aR24gnn8OFQzr5Lk7m2z8w3MmJuwPwA/P
RnU6IrUxpdvTNNpchu1XJRb7UW2g8rXwOPMeRhtUwspt1Vp9qNQ2gHXM5ZcTbxa1
LCKmLymJDyQYZIWtmPKyyRRov/x2oL7lapglNa3gWKetgpTJMh88lt0CM92v1ktK
fwd49q88qPsPouXRqyHEZj8ynWeGF0F1tFMa99V6Rhms1KHfp8FR8ZEBW9uHvS/X
aXKJ0MTxGTNEZklDa78l6vXQXhz/CGamhNQ=
-----END CERTIFICATE-----
Generated at Wed Jun 18 12:25:45 2025 by rpki-client