Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/9c8f5abb-187f-3b8d-986e-1526ceeab6fb.roa
File:                     9c8f5abb-187f-3b8d-986e-1526ceeab6fb.roa (raw, json)
Hash identifier:          hbm3yXcE+b+oufpkx6O1DIvfRwt0PyLWmUuQVnkDKB4=
Subject key identifier:   81:EC:58:CB:80:E8:F3:22:32:A9:2A:DF:F6:40:FF:0B:7B:53:A9:32
Certificate issuer:       /CN=1e5e6928-fdde-43e0-9e72-10066be1a674
Certificate serial:       010D0C9F43285849DDF4DD903C9209C85E9A9600
Authority key identifier: B5:86:6C:5D:11:A3:44:AA:34:EB:42:57:0D:40:64:83:19:F8:15:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/9c8f5abb-187f-3b8d-986e-1526ceeab6fb.roa
Signing time:             Fri 16 May 2025 01:00:46 +0000
ROA not before:           Fri 16 May 2025 01:00:46 +0000
ROA not after:            Thu 14 Aug 2025 01:00:46 +0000
asID:                     18493
IP address blocks:        2602:f782::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/1e5e6928-fdde-43e0-9e72-10066be1a674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/1e5e6928-fdde-43e0-9e72-10066be1a674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:f4:dd:90:3c:92:09:c8:5e:9a:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5e6928-fdde-43e0-9e72-10066be1a674
        Validity
            Not Before: May 16 01:00:46 2025 GMT
            Not After : Aug 14 01:00:46 2025 GMT
        Subject: CN=2167fcc5-a885-4594-beb6-2a17034a74e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0b:da:62:09:5c:fd:9e:7c:5a:5c:87:e4:94:
                    9f:2e:bf:11:95:e2:f6:7b:b0:f0:52:bd:4f:49:c4:
                    8d:c8:91:20:01:46:16:9d:24:ef:7b:8c:44:36:ad:
                    a0:df:ed:8a:9b:33:cd:74:41:d2:da:38:6f:79:9e:
                    59:77:3f:10:a8:c6:b8:1b:b0:2c:5e:5d:e1:26:03:
                    93:4f:5c:89:ec:36:e8:32:87:94:9e:f8:17:6c:81:
                    eb:ea:06:05:e9:49:16:5b:85:5e:7c:62:80:f8:86:
                    78:4e:87:4c:ef:cf:70:a4:80:36:79:5c:49:0b:e2:
                    3b:81:8e:09:fc:39:f2:2e:ae:91:d7:98:d6:89:30:
                    44:47:e1:15:7d:51:0c:0e:32:2d:31:39:18:f5:f5:
                    97:f3:85:90:7c:a4:b8:12:5d:ce:5b:f7:4b:53:df:
                    cc:98:18:0e:46:ca:c3:45:d1:39:d7:ad:4f:27:4f:
                    a1:27:20:9d:23:bb:9e:8d:ed:a2:eb:3d:ae:c2:5e:
                    49:32:63:36:3f:13:80:9d:2a:c2:19:ca:a3:2b:1e:
                    f8:11:75:a5:c7:43:35:7e:86:d3:35:2b:e9:ef:3b:
                    dd:2c:60:42:d3:97:62:5f:b9:a1:dc:16:14:37:7a:
                    60:11:66:9b:61:57:49:ab:8d:20:4a:82:93:18:03:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EC:58:CB:80:E8:F3:22:32:A9:2A:DF:F6:40:FF:0B:7B:53:A9:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/9c8f5abb-187f-3b8d-986e-1526ceeab6fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/1e5e6928-fdde-43e0-9e72-10066be1a674.crl

            X509v3 Authority Key Identifier:
                keyid:B5:86:6C:5D:11:A3:44:AA:34:EB:42:57:0D:40:64:83:19:F8:15:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f782::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:a1:c4:a2:e3:b8:0f:4f:99:ce:a6:14:02:a2:fe:39:d7:
         14:fa:ef:32:6f:d6:a9:fd:c1:cb:76:44:91:c6:f9:8b:a2:af:
         18:bb:25:77:07:46:df:14:e4:62:b2:8d:dc:72:28:c8:34:ae:
         4f:e6:1c:9a:6f:34:a6:39:40:d5:73:59:4d:83:81:90:52:09:
         2a:10:6e:a3:ed:b9:2f:d4:e5:b7:09:8a:e8:60:d3:bf:9f:85:
         ba:14:e8:99:a1:ad:2e:fe:c1:41:55:df:6a:04:2d:55:e2:d8:
         c9:74:2d:71:f9:75:13:2a:cb:52:9b:77:3f:e9:5f:34:3b:7c:
         26:eb:21:1d:3d:27:1e:b8:47:d1:fc:dc:ff:17:f8:eb:7d:53:
         8a:98:8f:24:b4:ab:93:eb:c5:63:30:0d:0f:94:32:c0:7e:83:
         5f:9f:72:eb:ac:fc:89:61:70:fe:70:1a:77:75:26:d1:33:0e:
         a5:2b:fb:bf:2e:1d:94:29:b3:b1:5f:79:19:c3:f8:69:06:5e:
         ec:d6:db:28:fb:91:8c:31:80:44:37:f5:12:73:6e:f2:7e:7a:
         fc:2e:05:7e:a8:f0:18:c4:fa:5c:6b:31:bc:e2:f5:00:06:4f:
         d5:61:65:fa:6a:c5:ef:eb:c3:f4:19:2f:46:6d:f7:35:a9:63:
         8e:cd:f6:a0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnd9N2QPJIJyF6algAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU1ZTY5MjgtZmRkZS00M2UwLTllNzItMTAwNjZiZTFh
Njc0MB4XDTI1MDUxNjAxMDA0NloXDTI1MDgxNDAxMDA0NlowLzEtMCsGA1UEAxMk
MjE2N2ZjYzUtYTg4NS00NTk0LWJlYjYtMmExNzAzNGE3NGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigvaYglc/Z58WlyH5JSfLr8RleL2e7DwUr1P
ScSNyJEgAUYWnSTve4xENq2g3+2KmzPNdEHS2jhveZ5Zdz8QqMa4G7AsXl3hJgOT
T1yJ7DboMoeUnvgXbIHr6gYF6UkWW4VefGKA+IZ4TodM789wpIA2eVxJC+I7gY4J
/DnyLq6R15jWiTBER+EVfVEMDjItMTkY9fWX84WQfKS4El3OW/dLU9/MmBgORsrD
RdE5161PJ0+hJyCdI7ueje2i6z2uwl5JMmM2PxOAnSrCGcqjKx74EXWlx0M1fobT
NSvp7zvdLGBC05diX7mh3BYUN3pgEWabYVdJq40gSoKTGAO2tQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIHsWMuA6PMiMqkq3/ZA/wt7U6kyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZTVl
NjkyOC1mZGRlLTQzZTAtOWU3Mi0xMDA2NmJlMWE2NzQvOWM4ZjVhYmItMTg3Zi0z
YjhkLTk4NmUtMTUyNmNlZWFiNmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWU1ZTY5MjgtZmRkZS00M2UwLTll
NzItMTAwNjZiZTFhNjc0LzFlNWU2OTI4LWZkZGUtNDNlMC05ZTcyLTEwMDY2YmUx
YTY3NC5jcmwwHwYDVR0jBBgwFoAUtYZsXRGjRKo060JXDUBkgxn4FSIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZTVlNjkyOC1mZGRlLTQzZTAtOWU3Mi0xMDA2
NmJlMWE2NzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3ggAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHTOhxKLjuA9Pmc6mFAKi/jnXFPrvMm/Wqf3By3ZEkcb5i6KvGLsl
dwdG3xTkYrKN3HIoyDSuT+Ycmm80pjlA1XNZTYOBkFIJKhBuo+25L9TltwmK6GDT
v5+FuhTomaGtLv7BQVXfagQtVeLYyXQtcfl1EyrLUpt3P+lfNDt8JushHT0nHrhH
0fzc/xf4631TipiPJLSrk+vFYzAND5QywH6DX59y66z8iWFw/nAad3Um0TMOpSv7
vy4dlCmzsV95GcP4aQZe7NbbKPuRjDGARDf1EnNu8n56/C4FfqjwGMT6XGsxvOL1
AAZP1WFl+mrF7+vD9BkvRm33Naljjs32oA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:27 2025 by rpki-client