Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cca41c41-917a-38c3-bbbb-9eb309ce5e04.roa
File:                     cca41c41-917a-38c3-bbbb-9eb309ce5e04.roa (raw, json)
Hash identifier:          S0rH1iw4YDmj3D8nWYOhdBJ4kUS+fGMNJ9P5otQbd6c=
Subject key identifier:   AA:AF:98:05:04:CC:83:3B:8C:21:0E:58:5C:E8:B1:51:2B:D8:9F:EF
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A3A15A6C02A3B98BEAB1CD840
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cca41c41-917a-38c3-bbbb-9eb309ce5e04.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     54113
IP address blocks:        2620:11a:c025::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:a6:c0:2a:3b:98:be:ab:1c:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=6471cece-fdb9-40f7-9fcf-82ef43423ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:26:ae:92:a7:a7:7b:82:25:ca:f2:c5:78:
                    f9:bb:ec:ba:e3:85:bd:6a:f0:bc:e7:f4:d4:c8:78:
                    3c:b8:ed:76:db:2f:b6:7b:6e:f7:54:8f:1e:d7:40:
                    56:4a:dc:fd:5f:a6:cc:a3:1d:43:de:77:57:79:49:
                    d5:5e:45:d0:9c:e3:fb:54:02:e2:4c:b5:a6:b8:aa:
                    6b:df:ab:27:94:26:7e:4e:aa:73:cf:2f:14:44:bb:
                    d4:92:48:06:53:53:8d:8e:39:cc:0a:06:d0:93:b2:
                    38:da:c2:90:e3:61:e7:fc:32:bf:6f:c1:42:f1:7c:
                    b0:3a:6d:02:15:9d:c4:c7:be:9f:0d:73:0e:61:dd:
                    95:f7:37:9c:54:8d:18:37:c1:63:67:15:64:95:ba:
                    30:0c:8d:f9:db:a1:40:1b:32:cc:df:5b:68:aa:79:
                    8c:9f:2f:83:26:ff:67:a4:98:e6:1c:79:02:b8:e4:
                    36:dc:01:6d:6d:7b:20:ef:64:16:59:60:c5:90:49:
                    10:79:6e:5f:9e:ab:ef:66:57:de:78:1f:14:0b:d8:
                    d0:b8:5b:c3:ad:3f:ce:e9:ed:49:51:56:0c:ea:07:
                    04:9d:b7:75:a3:6f:17:31:ac:7e:ec:53:c4:5a:db:
                    0e:50:94:dd:c1:8c:b7:0a:a5:07:ac:95:d3:14:58:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:98:05:04:CC:83:3B:8C:21:0E:58:5C:E8:B1:51:2B:D8:9F:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cca41c41-917a-38c3-bbbb-9eb309ce5e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:89:cf:d5:11:c6:65:a4:fd:a7:b1:a6:82:a7:c0:9f:1c:67:
         27:ea:4b:85:7e:d3:51:e6:c1:f3:5e:6b:45:28:88:0c:e4:ab:
         31:07:e4:7c:ef:2c:bd:cd:4f:cc:e7:32:55:44:c6:30:39:4d:
         44:22:e3:a6:0c:9a:1a:68:68:13:49:e5:b5:1f:6c:79:e4:cf:
         9d:44:0e:88:fc:e5:45:0d:66:ea:1b:d7:e7:e2:37:c8:fe:68:
         12:b0:a2:26:45:94:73:99:d0:74:44:2b:2d:af:d2:42:a5:e7:
         fd:84:be:b9:a4:4b:63:15:4c:fd:aa:ef:61:6d:7c:50:8b:0c:
         17:f4:dd:6f:7f:79:85:4b:fe:c9:80:e6:a9:6e:7e:c7:e1:75:
         fb:41:67:1a:24:91:56:fe:df:b4:b3:9a:93:dc:27:e4:a6:9e:
         fd:58:b4:1d:5b:6e:e9:c4:e2:a0:47:a8:88:84:25:92:65:a3:
         28:3c:bc:5a:71:55:4e:4b:6c:a2:3a:1a:5a:b2:c4:b0:31:d9:
         56:b9:20:45:b0:c3:8a:c4:44:76:05:00:b7:8f:b0:63:2e:97:
         52:62:79:59:53:ef:d7:fa:53:33:cb:e7:ca:fe:dd:09:04:b5:
         dc:3b:25:55:fd:75:18:9b:6a:77:1e:d0:9c:7b:da:44:36:67:
         39:9d:16:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo6FabAKjuYvqsc2EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
NjQ3MWNlY2UtZmRiOS00MGY3LTlmY2YtODJlZjQzNDIzZmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQMmrpKnp3uCJcryxXj5u+y644W9avC85/TU
yHg8uO122y+2e273VI8e10BWStz9X6bMox1D3ndXeUnVXkXQnOP7VALiTLWmuKpr
36snlCZ+Tqpzzy8URLvUkkgGU1ONjjnMCgbQk7I42sKQ42Hn/DK/b8FC8XywOm0C
FZ3Ex76fDXMOYd2V9zecVI0YN8FjZxVklbowDI3526FAGzLM31toqnmMny+DJv9n
pJjmHHkCuOQ23AFtbXsg72QWWWDFkEkQeW5fnqvvZlfeeB8UC9jQuFvDrT/O6e1J
UVYM6gcEnbd1o28XMax+7FPEWtsOUJTdwYy3CqUHrJXTFFjX5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKqvmAUEzIM7jCEOWFzosVEr2J/vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvY2NhNDFjNDEtOTE3YS0z
OGMzLWJiYmItOWViMzA5Y2U1ZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGsAl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJCJz9URxmWk/aexpoKnwJ8cZyfqS4V+01HmwfNea0UoiAzkqzEH
5HzvLL3NT8znMlVExjA5TUQi46YMmhpoaBNJ5bUfbHnkz51EDoj85UUNZuob1+fi
N8j+aBKwoiZFlHOZ0HREKy2v0kKl5/2EvrmkS2MVTP2q72FtfFCLDBf03W9/eYVL
/smA5qlufsfhdftBZxokkVb+37SzmpPcJ+Smnv1YtB1bbunE4qBHqIiEJZJloyg8
vFpxVU5LbKI6GlqyxLAx2Va5IEWww4rERHYFALePsGMul1JieVlT79f6UzPL58r+
3QkEtdw7JVX9dRibance0Jx72kQ2ZzmdFnE=
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:20:32 2025 by rpki-client