Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/f0bc271e-f7ef-344d-b87e-36104fd49265.roa
File:                     f0bc271e-f7ef-344d-b87e-36104fd49265.roa (raw, json)
Hash identifier:          l1dDcGI69wqsrZ2VFa/BoklUwCo+E1Ugw8dmibJBdxo=
Subject key identifier:   77:71:01:93:F1:11:8E:EA:E3:12:86:5E:89:CB:12:C1:B6:12:D9:8E
Certificate issuer:       /CN=957264f8-0474-43d0-9a3b-5f53ce28790d
Certificate serial:       010D0C9F4328584AB650E4C0D13805596BA39080
Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/f0bc271e-f7ef-344d-b87e-36104fd49265.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     15344
IP address blocks:        2600:7c00::/28 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e4:c0:d1:38:05:59:6b:a3:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=bad19b8f-42cf-4e56-ae6a-aa4899e8d0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:ed:2e:82:53:88:80:80:29:b5:f4:b1:8d:
                    8a:25:61:e5:28:9a:6d:1f:f5:40:0e:2f:a1:20:72:
                    46:fb:60:85:92:2c:43:59:f0:33:c6:ce:4d:a7:78:
                    5a:8e:22:bb:42:a5:7b:2c:b8:72:40:50:4b:a6:44:
                    03:81:a6:31:2d:2e:65:cf:f6:73:36:64:e0:64:2e:
                    3a:21:8e:56:d3:9a:b4:e1:e9:c2:3e:64:04:9f:7c:
                    5e:ed:96:c1:77:b4:ad:be:7f:5c:53:e7:78:76:db:
                    c4:14:24:f7:7e:a0:4e:33:f5:93:f2:54:4d:f6:5d:
                    6c:7e:92:7d:16:af:e3:09:5a:08:2a:87:5c:c9:f3:
                    ef:b5:76:a8:fc:75:2c:e2:37:f0:ea:07:8a:9b:99:
                    99:dc:4a:93:46:19:d9:83:bb:c8:fb:4e:7a:70:75:
                    f1:16:05:76:2d:39:bc:ac:4c:c9:a4:64:ac:d6:cc:
                    03:32:47:c0:14:ef:94:81:e5:a8:16:00:2a:da:a3:
                    a6:db:1d:bf:46:34:6c:6c:d4:8d:87:db:d6:1d:56:
                    c9:73:80:72:31:1d:86:67:29:65:af:4b:dd:8f:75:
                    88:e9:a1:69:ef:c4:3f:2d:60:26:f4:18:9b:42:d2:
                    62:e7:da:e9:2d:28:5f:05:66:94:4d:11:48:8c:e7:
                    ed:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:71:01:93:F1:11:8E:EA:E3:12:86:5E:89:CB:12:C1:B6:12:D9:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/f0bc271e-f7ef-344d-b87e-36104fd49265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:7c00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a0:74:5a:20:6b:5c:b6:1d:ca:5f:56:b7:c1:f6:f4:f5:2c:
         cb:af:7a:5a:4d:d3:12:98:19:da:5e:ea:a2:06:c9:79:77:c4:
         15:a3:51:78:1d:bd:e6:c5:85:0f:76:e1:be:8e:65:ca:2f:b6:
         b8:97:f8:b6:21:12:20:90:d7:21:ef:ed:6a:a9:63:4a:a3:d5:
         1b:eb:4e:1f:57:20:e9:c7:34:13:24:fb:2b:e4:84:a6:0a:25:
         06:27:fe:a3:0d:e8:b4:69:d7:a4:b8:b3:86:18:2e:0f:21:d6:
         f5:a5:ac:71:ac:b4:77:1e:a7:99:f5:67:ea:6d:d0:bc:90:94:
         e8:24:5f:19:9b:83:e0:94:00:2d:c5:02:24:de:31:c8:b3:d5:
         45:b3:bd:bc:10:da:89:2a:bb:e0:b0:26:3e:48:9b:7a:fc:d5:
         f2:37:db:aa:be:21:64:f6:01:d7:7b:e8:4d:0d:d0:1a:09:e9:
         fb:09:5c:60:cb:e5:7b:7e:c9:6c:00:f2:cf:88:ff:44:68:7d:
         a3:76:ee:a5:01:22:34:95:ca:7c:0c:29:24:8d:3a:e2:2a:9e:
         e7:1d:2b:27:e8:6e:41:fd:c8:3c:85:fa:73:c4:81:5e:59:cc:
         31:b6:f7:1c:9b:c8:b3:eb:6d:f4:4e:b7:87:01:c4:22:3b:d1:
         a3:b8:f3:a9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEq2UOTA0TgFWWujkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU3MjY0ZjgtMDQ3NC00M2QwLTlhM2ItNWY1M2NlMjg3
OTBkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
YmFkMTliOGYtNDJjZi00ZTU2LWFlNmEtYWE0ODk5ZThkMGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8ntLoJTiICAKbX0sY2KJWHlKJptH/VADi+h
IHJG+2CFkixDWfAzxs5Np3hajiK7QqV7LLhyQFBLpkQDgaYxLS5lz/ZzNmTgZC46
IY5W05q04enCPmQEn3xe7ZbBd7Stvn9cU+d4dtvEFCT3fqBOM/WT8lRN9l1sfpJ9
Fq/jCVoIKodcyfPvtXao/HUs4jfw6geKm5mZ3EqTRhnZg7vI+056cHXxFgV2LTm8
rEzJpGSs1swDMkfAFO+UgeWoFgAq2qOm2x2/RjRsbNSNh9vWHVbJc4ByMR2GZyll
r0vdj3WI6aFp78Q/LWAm9BibQtJi59rpLShfBWaUTRFIjOfttwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHdxAZPxEY7q4xKGXonLEsG2EtmOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NTcy
NjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUzY2UyODc5MGQvZjBiYzI3MWUtZjdlZi0z
NDRkLWI4N2UtMzYxMDRmZDQ5MjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTU3MjY0ZjgtMDQ3NC00M2QwLTlh
M2ItNWY1M2NlMjg3OTBkLzk1NzI2NGY4LTA0NzQtNDNkMC05YTNiLTVmNTNjZTI4
NzkwZC5jcmwwHwYDVR0jBBgwFoAUjp0RFmde0khG8GrYVAdVgPAWzC8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85NTcyNjRmOC0wNDc0LTQzZDAtOWEzYi01ZjUz
Y2UyODc5MGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgB8ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBdoHRaIGtcth3KX1a3wfb09SzLr3paTdMSmBnaXuqiBsl5d8QVo1F4
Hb3mxYUPduG+jmXKL7a4l/i2IRIgkNch7+1qqWNKo9Ub604fVyDpxzQTJPsr5ISm
CiUGJ/6jDei0adekuLOGGC4PIdb1paxxrLR3HqeZ9WfqbdC8kJToJF8Zm4PglAAt
xQIk3jHIs9VFs728ENqJKrvgsCY+SJt6/NXyN9uqviFk9gHXe+hNDdAaCen7CVxg
y+V7fslsAPLPiP9EaH2jdu6lASI0lcp8DCkkjTriKp7nHSsn6G5B/cg8hfpzxIFe
Wcwxtvccm8iz6230TreHAcQiO9GjuPOp
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:06:37 2025 by rpki-client