Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/1f31816f-660e-37d8-a95b-1c37676acb78.roa
File:                     1f31816f-660e-37d8-a95b-1c37676acb78.roa (raw, json)
Hash identifier:          EzGphX8HUndppLDP4uYqu0AI+uwCfpCr38AXPucVfLI=
Subject key identifier:   19:A2:2D:69:6C:32:A5:60:31:A6:49:4A:FF:35:BF:07:87:B4:BB:23
Certificate issuer:       /CN=7c7d2d2d-ac35-4ded-839a-18fb60af38c6
Certificate serial:       010D0C9F43285849CE9A5007520813CCCFB2DD00
Authority key identifier: EC:20:D8:C9:F9:D9:2A:AD:30:5A:7E:63:27:89:13:DD:A6:AF:2D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/1f31816f-660e-37d8-a95b-1c37676acb78.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     395262
IP address blocks:        2620:0:7f00::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:50:07:52:08:13:cc:cf:b2:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7d2d2d-ac35-4ded-839a-18fb60af38c6
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=47dcbf57-3f1a-4660-aeec-e334ddf3a204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:b1:b5:b7:54:d5:82:91:2f:c4:a8:fd:f2:
                    c8:43:2e:0a:1d:49:29:17:40:2f:04:6e:91:4d:5c:
                    68:b8:19:a1:d1:14:b2:55:b3:d2:78:93:00:d4:9d:
                    84:15:12:cc:81:a3:1e:6e:9f:b2:35:88:40:a9:79:
                    ba:3f:c7:64:d2:83:70:72:89:4c:32:6f:64:2c:28:
                    8e:7c:83:22:39:d3:a3:a3:c6:a2:c8:95:f4:57:b8:
                    79:93:e2:8b:56:78:6a:86:48:f6:da:33:23:22:7f:
                    a7:d1:23:d1:4c:6e:27:a5:b3:03:7c:4b:49:62:74:
                    4f:d9:b5:fe:2f:13:d8:fc:08:3f:fd:01:13:78:50:
                    23:d7:40:59:e0:fa:40:55:1c:fe:5e:b7:ed:58:d4:
                    02:56:f8:fa:12:7a:a0:01:63:b3:b8:f7:4a:81:d2:
                    29:23:ba:30:49:09:c0:c8:a4:91:2a:9e:ea:ed:a6:
                    82:a8:6d:3a:40:15:e7:a1:14:27:db:7b:73:66:e8:
                    a0:d8:17:4e:3a:d3:57:48:b5:80:07:8e:84:88:53:
                    52:07:b5:de:66:ff:b2:ec:b6:a9:bc:b4:3d:f5:42:
                    1e:56:90:08:21:3b:a7:f7:90:8b:10:44:a0:90:bb:
                    d9:89:ca:5b:8b:41:46:f1:f2:92:3e:5a:83:34:67:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A2:2D:69:6C:32:A5:60:31:A6:49:4A:FF:35:BF:07:87:B4:BB:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/1f31816f-660e-37d8-a95b-1c37676acb78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.crl

            X509v3 Authority Key Identifier:
                keyid:EC:20:D8:C9:F9:D9:2A:AD:30:5A:7E:63:27:89:13:DD:A6:AF:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:7f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:a7:8b:28:d2:cb:6c:e1:c2:01:e6:40:ec:d7:a1:01:85:14:
         b0:10:62:db:cd:bb:8c:77:83:7f:9b:d7:4c:1b:50:e8:b7:2b:
         68:35:f8:03:8f:dd:0a:c9:84:99:55:0e:a7:fc:50:65:7e:0a:
         27:df:a9:85:94:e6:21:de:0a:f0:cb:b0:99:c1:98:1b:d2:b7:
         9e:6e:2c:b9:f5:ff:80:30:81:b0:25:c2:11:1e:90:c0:3a:03:
         a3:9a:f4:35:eb:83:e4:3c:c4:c8:b0:66:d4:44:a5:5a:ac:2f:
         80:73:55:46:9a:6b:31:ac:dd:c8:d1:5f:f8:ae:2c:eb:77:18:
         04:57:e7:cf:9f:6a:f4:d2:cd:bf:e4:d4:81:4d:2a:ae:a7:28:
         dc:96:24:83:0a:18:68:65:f0:c0:da:ad:33:58:82:d0:d3:46:
         a0:3d:e4:e1:9b:25:c1:0b:ae:7e:c2:da:05:73:83:e2:10:a7:
         fe:b8:c2:d7:43:34:91:5d:40:dd:84:5b:f0:2c:79:b9:45:51:
         ef:9a:8f:67:7a:ab:aa:ed:0d:d0:d1:0b:42:65:c5:73:c5:e3:
         22:4f:5c:90:95:cc:75:7d:0b:8f:a2:5b:51:6a:f2:36:db:11:
         fa:52:dd:9e:07:b7:9c:8d:8e:db:cd:8a:00:33:7c:e0:2d:55:
         ea:21:d6:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnOmlAHUggTzM+y3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2M3ZDJkMmQtYWMzNS00ZGVkLTgzOWEtMThmYjYwYWYz
OGM2MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
NDdkY2JmNTctM2YxYS00NjYwLWFlZWMtZTMzNGRkZjNhMjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL2xtbdU1YKRL8So/fLIQy4KHUkpF0AvBG6R
TVxouBmh0RSyVbPSeJMA1J2EFRLMgaMebp+yNYhAqXm6P8dk0oNwcolMMm9kLCiO
fIMiOdOjo8aiyJX0V7h5k+KLVnhqhkj22jMjIn+n0SPRTG4npbMDfEtJYnRP2bX+
LxPY/Ag//QETeFAj10BZ4PpAVRz+XrftWNQCVvj6EnqgAWOzuPdKgdIpI7owSQnA
yKSRKp7q7aaCqG06QBXnoRQn23tzZuig2BdOOtNXSLWAB46EiFNSB7XeZv+y7Lap
vLQ99UIeVpAIITun95CLEESgkLvZicpbi0FG8fKSPlqDNGcjWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBmiLWlsMqVgMaZJSv81vweHtLsjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yzdk
MmQyZC1hYzM1LTRkZWQtODM5YS0xOGZiNjBhZjM4YzYvMWYzMTgxNmYtNjYwZS0z
N2Q4LWE5NWItMWMzNzY3NmFjYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2M3ZDJkMmQtYWMzNS00ZGVkLTgz
OWEtMThmYjYwYWYzOGM2LzdjN2QyZDJkLWFjMzUtNGRlZC04MzlhLTE4ZmI2MGFm
MzhjNi5jcmwwHwYDVR0jBBgwFoAU7CDYyfnZKq0wWn5jJ4kT3aavLbUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YzdkMmQyZC1hYzM1LTRkZWQtODM5YS0xOGZi
NjBhZjM4YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAH8A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMeniyjSy2zhwgHmQOzXoQGFFLAQYtvNu4x3g3+b10wbUOi3K2g1
+AOP3QrJhJlVDqf8UGV+CiffqYWU5iHeCvDLsJnBmBvSt55uLLn1/4AwgbAlwhEe
kMA6A6Oa9DXrg+Q8xMiwZtREpVqsL4BzVUaaazGs3cjRX/iuLOt3GARX58+favTS
zb/k1IFNKq6nKNyWJIMKGGhl8MDarTNYgtDTRqA95OGbJcELrn7C2gVzg+IQp/64
wtdDNJFdQN2EW/AseblFUe+aj2d6q6rtDdDRC0JlxXPF4yJPXJCVzHV9C4+iW1Fq
8jbbEfpS3Z4Ht5yNjtvNigAzfOAtVeoh1mI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:16 2025 by rpki-client