Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea20cdf8-eabc-3f1b-be95-4c8b2323a81d.roa
File:                     ea20cdf8-eabc-3f1b-be95-4c8b2323a81d.roa (raw, json)
Hash identifier:          yAw/RIOZJlm/kptas0DFHJ6TrmGY+1oFbow2r+mDTlk=
Subject key identifier:   6F:D8:B6:BF:0E:B8:BB:1C:57:73:A3:64:C7:AC:81:BE:34:20:7A:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF27FD04AC108B8ED8D88
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea20cdf8-eabc-3f1b-be95-4c8b2323a81d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2001:4888:8019::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f2:7f:d0:4a:c1:08:b8:ed:8d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=6bae2050-2cf2-4a3c-846b-333184c424d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:49:04:7a:cb:b8:59:34:72:27:ba:a9:d5:
                    20:0d:73:78:ec:ac:3b:55:41:ad:c1:5b:98:f9:3f:
                    85:c7:1b:80:7c:9e:d7:43:af:14:28:9d:81:d1:c6:
                    6f:52:39:e3:d8:76:cc:f7:63:3a:b7:88:97:ae:4b:
                    9f:3b:b8:fd:50:ea:4d:4b:bc:02:17:22:5c:86:b1:
                    60:47:b3:18:8e:66:11:05:34:be:8f:f4:04:c2:3d:
                    d8:23:e5:e6:c0:8e:29:76:49:b4:c8:30:86:cd:2c:
                    05:ec:75:74:b0:ab:6d:77:c1:e0:f9:c2:98:07:17:
                    aa:1b:f0:8d:e3:b9:a0:27:74:15:d2:71:1d:b4:2f:
                    86:eb:e9:26:1d:73:bf:aa:ad:2e:b0:c3:9e:cf:05:
                    55:42:10:c8:ef:dc:27:40:b6:7c:99:94:88:78:ae:
                    4c:33:d5:42:23:a7:53:82:bb:51:97:3b:27:71:09:
                    e0:63:f6:0b:43:ab:3b:a9:ad:b5:35:cd:f1:4c:56:
                    36:97:16:67:bd:33:2c:79:36:99:3d:c9:c1:1e:a1:
                    c9:8e:12:2c:3d:04:3d:85:ef:87:80:c1:e6:4b:7c:
                    d1:5b:f6:6d:13:ef:b9:54:b2:2d:54:51:0c:6f:73:
                    85:41:ce:e0:40:0d:c6:25:b6:b1:66:ef:34:20:79:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D8:B6:BF:0E:B8:BB:1C:57:73:A3:64:C7:AC:81:BE:34:20:7A:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea20cdf8-eabc-3f1b-be95-4c8b2323a81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8019::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:06:34:b1:48:3d:36:a3:29:e2:9b:62:96:3e:29:ed:9f:7e:
         46:6d:34:14:9c:8c:54:86:93:eb:18:95:87:9a:86:f3:f7:7e:
         56:57:f0:c2:b7:a6:0f:b7:ef:4b:d8:b9:6a:27:8a:d4:02:0f:
         93:e5:ee:4b:77:46:b8:56:8e:09:bf:4a:88:8e:c3:eb:e6:f7:
         61:b7:49:e8:6e:12:da:98:f7:24:d7:a6:d2:5f:45:8d:89:c9:
         c6:6e:ea:1d:25:67:8b:3f:74:e5:97:9a:af:01:97:b6:1a:4e:
         ab:87:49:6a:ac:6e:a4:df:31:e9:39:6e:50:75:65:93:a6:9d:
         cd:58:35:67:62:0f:7f:b2:dd:fd:8c:d9:d6:4d:f2:b7:dc:08:
         7f:ee:7d:c8:0a:69:72:f6:65:16:84:72:3d:c4:1e:45:03:6c:
         e6:9a:7f:a6:d8:ca:a6:ba:4a:68:29:57:fd:a2:b5:08:a5:43:
         7c:6e:fa:f7:82:d9:8d:aa:96:35:ab:0a:76:86:36:0a:92:56:
         e3:83:ba:13:e5:34:6a:3f:44:20:b9:7b:0d:bd:b1:58:c9:eb:
         c6:26:ee:15:a7:4a:80:7c:5e:95:b4:68:58:1e:89:05:6a:87:
         f9:fc:d1:19:b9:40:92:d5:e2:4f:ce:f9:9f:32:9a:51:8f:98:
         80:8a:bb:a8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoA2vJ/0ErBCLjtjYgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NmJhZTIwNTAtMmNmMi00YTNjLTg0NmItMzMzMTg0YzQyNGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKhJBHrLuFk0cie6qdUgDXN47Kw7VUGtwVuY
+T+FxxuAfJ7XQ68UKJ2B0cZvUjnj2HbM92M6t4iXrkufO7j9UOpNS7wCFyJchrFg
R7MYjmYRBTS+j/QEwj3YI+XmwI4pdkm0yDCGzSwF7HV0sKttd8Hg+cKYBxeqG/CN
47mgJ3QV0nEdtC+G6+kmHXO/qq0usMOezwVVQhDI79wnQLZ8mZSIeK5MM9VCI6dT
grtRlzsncQngY/YLQ6s7qa21Nc3xTFY2lxZnvTMseTaZPcnBHqHJjhIsPQQ9he+H
gMHmS3zRW/ZtE++5VLItVFEMb3OFQc7gQA3GJbaxZu80IHkfVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG/Ytr8OuLscV3OjZMesgb40IHreMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWEyMGNkZjgtZWFiYy0z
ZjFiLWJlOTUtNGM4YjIzMjNhODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIAZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIIGNLFIPTajKeKbYpY+Ke2ffkZtNBScjFSGk+sYlYeahvP3flZX
8MK3pg+370vYuWonitQCD5Pl7kt3RrhWjgm/SoiOw+vm92G3SehuEtqY9yTXptJf
RY2JycZu6h0lZ4s/dOWXmq8Bl7YaTquHSWqsbqTfMek5blB1ZZOmnc1YNWdiD3+y
3f2M2dZN8rfcCH/ufcgKaXL2ZRaEcj3EHkUDbOaaf6bYyqa6SmgpV/2itQilQ3xu
+veC2Y2qljWrCnaGNgqSVuODuhPlNGo/RCC5ew29sVjJ68Ym7hWnSoB8XpW0aFge
iQVqh/n80Rm5QJLV4k/O+Z8ymlGPmICKu6g=
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:48 2025 by rpki-client