Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/85fceade-ffa8-3230-85fb-d78216f9e954.roa
File:                     85fceade-ffa8-3230-85fb-d78216f9e954.roa (raw, json)
Hash identifier:          FmePwNe8Vl/68/jTPxRLgZU6nXR2wA6NiNPdVeSUBgA=
Subject key identifier:   EA:0E:07:B5:0E:52:89:09:28:BF:EA:51:FD:D2:BF:BA:0C:36:2E:9C
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584A2D7B03BE83016906564AF1C0
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/85fceade-ffa8-3230-85fb-d78216f9e954.roa
Signing time:             Fri 13 Jun 2025 12:40:00 +0000
ROA not before:           Fri 13 Jun 2025 12:40:00 +0000
ROA not after:            Thu 11 Sep 2025 12:40:00 +0000
asID:                     271
IP address blocks:        2607:f8f0:1600::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:7b:03:be:83:01:69:06:56:4a:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jun 13 12:40:00 2025 GMT
            Not After : Sep 11 12:40:00 2025 GMT
        Subject: CN=1004f61d-2367-4d7f-b68b-1acc133de578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ce:e9:2c:8a:b9:36:76:0d:f9:6a:28:fb:91:
                    86:0e:0b:17:f9:e9:2d:17:dc:0b:9e:53:c3:60:89:
                    43:d5:2f:80:e9:9f:b2:5a:13:90:a1:a8:7d:89:a2:
                    c4:fe:7f:0b:68:e8:61:57:75:6c:67:bd:ab:cd:5c:
                    b7:96:0e:98:51:8a:28:c7:4e:6f:a1:f9:dc:91:e9:
                    cc:fc:31:18:c2:40:14:96:55:43:c7:76:ca:c5:85:
                    d0:7f:62:e0:6e:99:76:ac:b3:0a:e3:aa:96:04:9b:
                    20:98:ab:a5:ba:0c:30:bc:bc:62:4d:36:2f:e5:3c:
                    9f:4c:46:9a:6f:ea:54:83:dc:c3:b4:c0:91:c7:f1:
                    54:b3:a5:31:fd:07:ba:ee:1d:83:03:49:13:11:23:
                    dc:74:ae:42:8f:bc:a5:ef:1a:f4:fa:15:f5:34:ba:
                    d5:ae:e3:cb:d3:50:8e:59:c9:79:a5:e2:1e:72:64:
                    a7:90:44:ab:4f:cd:f2:8c:a8:7f:62:35:ee:12:35:
                    35:14:32:f9:4e:86:b9:b3:23:fc:e9:47:35:e0:0a:
                    a1:0f:56:e7:d9:e1:12:16:72:a0:6e:56:a4:1e:32:
                    de:63:cd:fa:2a:6b:1f:6a:03:b5:19:ce:b7:03:ce:
                    26:f9:81:24:89:96:42:07:d6:f8:ac:ce:0c:25:53:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0E:07:B5:0E:52:89:09:28:BF:EA:51:FD:D2:BF:BA:0C:36:2E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/85fceade-ffa8-3230-85fb-d78216f9e954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:1600::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3b:18:c5:5b:3f:d1:06:3a:5a:7a:5c:c2:f3:da:f2:f6:5d:
         83:30:98:f2:fb:a3:9f:5f:70:d2:e8:df:86:c6:cf:b9:9d:61:
         42:55:f1:66:54:aa:74:85:54:67:e8:00:6c:f2:60:f5:76:ce:
         ed:6c:ef:1b:a6:b1:4f:51:f0:75:cc:d9:cf:34:66:49:64:14:
         85:7e:7e:29:68:e9:94:10:02:15:63:3f:da:6d:5f:4a:dd:8a:
         c6:42:c0:97:34:c6:a7:6e:e8:c8:bd:39:a9:21:cc:f3:13:73:
         a3:7b:4a:f1:11:89:76:8f:44:26:f5:63:3c:a7:40:6c:a7:c0:
         ab:ca:1f:b3:22:05:d2:5f:b7:cb:72:aa:3c:b1:55:f8:f8:6f:
         52:b7:ab:09:b8:55:fa:39:7e:07:a7:24:ea:e8:7c:9e:77:00:
         21:26:a8:d8:0c:3c:f0:75:f5:6d:c4:de:f7:fe:68:6a:26:58:
         97:2a:4c:41:54:93:64:c1:25:7a:ca:9d:0d:fc:30:9c:94:75:
         97:02:ce:94:15:6d:f2:f7:f1:db:e2:71:b7:34:6b:a0:4d:a1:
         f6:86:bd:40:10:24:63:69:ad:75:60:4b:fb:e2:b1:17:f4:1a:
         ff:0e:94:15:4e:c8:65:64:a8:3c:6f:96:66:88:3a:a3:1d:f7:
         7b:3e:28:bc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEotewO+gwFpBlZK8cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux
OGNmMB4XDTI1MDYxMzEyNDAwMFoXDTI1MDkxMTEyNDAwMFowLzEtMCsGA1UEAxMk
MTAwNGY2MWQtMjM2Ny00ZDdmLWI2OGItMWFjYzEzM2RlNTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc7pLIq5NnYN+Woo+5GGDgsX+ektF9wLnlPD
YIlD1S+A6Z+yWhOQoah9iaLE/n8LaOhhV3VsZ72rzVy3lg6YUYoox05vofnckenM
/DEYwkAUllVDx3bKxYXQf2Lgbpl2rLMK46qWBJsgmKulugwwvLxiTTYv5TyfTEaa
b+pUg9zDtMCRx/FUs6Ux/Qe67h2DA0kTESPcdK5Cj7yl7xr0+hX1NLrVruPL01CO
Wcl5peIecmSnkESrT83yjKh/YjXuEjU1FDL5Toa5syP86Uc14AqhD1bn2eESFnKg
blakHjLeY836KmsfagO1Gc63A84m+YEkiZZCB9b4rM4MJVNpaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOoOB7UOUokJKL/qUf3Sv7oMNi6cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi
NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvODVmY2VhZGUtZmZhOC0z
MjMwLTg1ZmItZDc4MjE2ZjllOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5
MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl
MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli
NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgf48BYA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAU7GMVbP9EGOlp6XMLz2vL2XYMwmPL7o59fcNLo34bGz7mdYUJV
8WZUqnSFVGfoAGzyYPV2zu1s7xumsU9R8HXM2c80ZklkFIV+filo6ZQQAhVjP9pt
X0rdisZCwJc0xqdu6Mi9OakhzPMTc6N7SvERiXaPRCb1YzynQGynwKvKH7MiBdJf
t8tyqjyxVfj4b1K3qwm4Vfo5fgenJOrofJ53ACEmqNgMPPB19W3E3vf+aGomWJcq
TEFUk2TBJXrKnQ38MJyUdZcCzpQVbfL38dvicbc0a6BNofaGvUAQJGNprXVgS/vi
sRf0Gv8OlBVOyGVkqDxvlmaIOqMd93s+KLw=
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:30 2025 by rpki-client