Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/84c608c5-ec08-3ffa-a8b6-111b04e19418.roa
File:                     84c608c5-ec08-3ffa-a8b6-111b04e19418.roa (raw, json)
Hash identifier:          ZcP1kR7yswIJZReG46YbRSp9wjET7HSZMAiXCZrd34c=
Subject key identifier:   89:18:3D:BD:4B:0E:9F:11:8D:F5:18:93:C5:CE:3B:67:47:1C:FB:1C
Certificate issuer:       /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial:       010D0C9F4328584AB7B62288C57FED6093CAA080
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/84c608c5-ec08-3ffa-a8b6-111b04e19418.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     198949
IP address blocks:        2605:9a00::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:22:88:c5:7f:ed:60:93:ca:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=665fa7cc-6c85-45f7-9852-7071cf16c909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:eb:6d:a9:52:e9:5c:76:65:8d:46:5d:25:c9:
                    14:b6:43:97:18:be:ae:8a:89:fa:b9:af:0b:4e:9b:
                    b2:4c:32:38:7a:87:4b:cd:e6:7a:57:59:fc:28:b7:
                    d7:51:72:94:1a:96:db:27:72:9e:5a:05:a7:59:7d:
                    e3:4e:16:07:68:99:1b:82:a3:16:df:bd:a3:38:e5:
                    b5:08:ff:da:6b:3b:b1:08:9d:54:4f:c4:80:a2:ab:
                    fb:c1:3e:46:af:c6:bc:b1:8e:35:94:2e:c3:22:a5:
                    0c:c6:94:8b:a5:8a:c4:2c:f0:b7:0d:60:20:4b:1e:
                    0f:bf:bc:9e:9e:0c:e0:6e:64:02:9e:99:8c:4a:48:
                    ad:f9:8d:9c:00:23:79:d7:b0:2d:22:5a:3d:3a:ab:
                    af:30:08:8c:40:37:3d:02:b9:12:e5:d8:a2:0e:bc:
                    89:7a:be:e1:f1:2c:42:77:67:89:c7:53:ff:8c:96:
                    93:03:bf:c2:48:74:f9:5f:60:97:9d:6b:82:67:8b:
                    09:84:0a:90:06:55:f9:f8:2a:77:bc:fd:01:a0:1b:
                    58:c0:0d:39:64:06:0d:68:03:a5:d6:8d:e8:79:0f:
                    c3:48:18:01:38:c4:81:c5:a8:3b:78:7d:80:5b:41:
                    03:f7:13:93:24:6f:a4:61:c9:35:2c:93:50:14:c8:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:18:3D:BD:4B:0E:9F:11:8D:F5:18:93:C5:CE:3B:67:47:1C:FB:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/84c608c5-ec08-3ffa-a8b6-111b04e19418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:27:01:0a:72:f5:d3:5d:75:b2:45:28:b4:b7:5e:59:2e:
         49:02:f3:e6:95:9f:4b:d9:b4:be:04:42:c5:de:35:cc:2f:8c:
         c6:ab:ce:2c:07:2c:70:39:0f:06:6a:ed:f9:88:d1:07:84:78:
         d6:a4:ed:f5:ee:08:ac:a3:d1:55:9b:01:0f:9a:c4:8d:a5:29:
         be:16:7a:8a:73:20:82:90:00:32:21:59:c9:e6:fd:93:33:b2:
         7c:ed:ce:a5:83:c7:61:65:52:22:74:36:7b:00:42:81:b6:d7:
         8d:5b:cf:b6:7c:df:0c:e6:54:29:c3:01:64:4a:b7:62:d2:c1:
         1f:7b:af:d7:df:ba:27:4c:cc:02:fa:ca:99:1e:9d:d1:9a:be:
         48:3a:c8:8f:56:c2:be:3b:dc:1e:8d:23:cd:17:ec:7c:b3:c6:
         5b:79:ac:c1:d5:79:da:09:d9:4a:85:20:2c:b5:9d:04:a9:12:
         dc:6d:99:3f:03:16:e2:60:78:94:b8:36:f1:ae:27:0f:0f:b8:
         17:0e:29:95:fc:d2:cd:df:c0:4c:14:af:af:d9:da:4e:f4:0c:
         f3:47:5e:ea:7c:72:f2:2a:0e:19:e3:0a:38:7a:6c:30:9c:48:
         f6:5e:e4:e4:09:6f:c5:19:c7:c9:94:87:c0:cd:df:b7:34:11:
         d1:4e:b2:e6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tiKIxX/tYJPKoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi
MzMzMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk
NjY1ZmE3Y2MtNmM4NS00NWY3LTk4NTItNzA3MWNmMTZjOTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOttqVLpXHZljUZdJckUtkOXGL6uion6ua8L
TpuyTDI4eodLzeZ6V1n8KLfXUXKUGpbbJ3KeWgWnWX3jThYHaJkbgqMW372jOOW1
CP/aazuxCJ1UT8SAoqv7wT5Gr8a8sY41lC7DIqUMxpSLpYrELPC3DWAgSx4Pv7ye
ngzgbmQCnpmMSkit+Y2cACN517AtIlo9OquvMAiMQDc9ArkS5diiDryJer7h8SxC
d2eJx1P/jJaTA7/CSHT5X2CXnWuCZ4sJhAqQBlX5+Cp3vP0BoBtYwA05ZAYNaAOl
1o3oeQ/DSBgBOMSBxag7eH2AW0ED9xOTJG+kYck1LJNQFMj/PQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIkYPb1LDp8RjfUYk8XOO2dHHPscMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy
MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvODRjNjA4YzUtZWMwOC0z
ZmZhLWE4YjYtMTExYjA0ZTE5NDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw
ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz
YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl
MDkwM2IzMzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWaAAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHSaJwEKcvXTXXWyRSi0t15ZLkkC8+aVn0vZtL4EQsXeNcwvjMar
ziwHLHA5DwZq7fmI0QeEeNak7fXuCKyj0VWbAQ+axI2lKb4WeopzIIKQADIhWcnm
/ZMzsnztzqWDx2FlUiJ0NnsAQoG2141bz7Z83wzmVCnDAWRKt2LSwR97r9ffuidM
zAL6ypkendGavkg6yI9Wwr473B6NI80X7Hyzxlt5rMHVedoJ2UqFICy1nQSpEtxt
mT8DFuJgeJS4NvGuJw8PuBcOKZX80s3fwEwUr6/Z2k70DPNHXup8cvIqDhnjCjh6
bDCcSPZe5OQJb8UZx8mUh8DN37c0EdFOsuY=
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:58:05 2025 by rpki-client