Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa
File:                     7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa (raw, json)
Hash identifier:          A5oy8zLClvN/kqOlLfcGcXmuexzxX+ZL7XRG/c8rBj0=
Subject key identifier:   CE:A2:C3:A0:45:49:69:F1:70:72:03:00:FE:DF:AE:04:25:A7:1B:2F
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328584ABD4B8CCFE98937D59035DDA0
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     397894
IP address blocks:        2607:f4a8:200d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:8c:cf:e9:89:37:d5:90:35:dd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=dd7bc5e5-9dfd-44b6-aafa-e3f9af0c7eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:df:71:58:53:84:f3:b1:c0:04:39:8f:56:a2:
                    83:a3:20:13:7d:91:c7:8f:d5:7e:b0:53:a3:8b:b0:
                    ab:ee:79:47:d6:ec:29:69:70:77:90:c1:f3:68:35:
                    86:f4:9f:95:c4:a3:09:cf:e9:6e:4b:67:13:e1:be:
                    cd:42:52:ec:52:b3:f8:a1:2e:43:ec:5e:d7:62:71:
                    a2:9b:7d:11:dd:a7:22:53:98:ad:70:da:60:8d:c6:
                    14:ba:9d:17:01:8e:ef:d0:36:de:d4:51:9a:28:d9:
                    45:63:f2:15:73:d7:12:60:e8:4f:64:3f:54:11:9c:
                    5e:83:52:c8:77:d0:69:2e:c1:34:52:a4:6b:d8:0d:
                    0f:d4:50:ce:d2:cb:8e:32:0b:6e:6c:ef:f4:b0:0c:
                    e5:66:19:55:75:b6:7f:26:64:23:02:ed:37:cc:e4:
                    f8:64:6c:1d:ae:1d:43:ad:fd:46:db:52:1a:04:3d:
                    a3:ab:40:54:f4:69:ca:92:66:f4:e3:d7:5f:cf:de:
                    fd:3e:45:9d:9c:69:f2:2e:8e:ec:65:e9:56:99:39:
                    66:df:3d:7b:ba:2c:20:5f:46:01:54:bd:7a:8e:e3:
                    76:82:a6:84:cc:b7:aa:54:55:17:57:1a:2a:c0:f6:
                    33:71:0f:fc:90:8f:e3:3a:3f:69:13:46:f5:44:2f:
                    4b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A2:C3:A0:45:49:69:F1:70:72:03:00:FE:DF:AE:04:25:A7:1B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/7a0fcab6-dbfa-3ba7-afc6-ad4565bc2627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4a8:200d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ba:24:05:b6:b6:4a:56:1f:4e:99:04:66:85:ce:34:c6:00:
         ea:a0:b0:e3:2c:cc:1b:37:76:7c:3b:eb:09:7a:ea:f0:f6:28:
         46:30:f8:ad:ba:f8:8e:cc:5a:81:4a:65:7f:fe:1b:cc:aa:db:
         14:ba:ed:c2:d1:7a:8d:e3:5d:76:c3:2e:98:8a:a1:d8:a3:a8:
         0f:14:a0:0b:55:3a:4a:fe:48:cb:03:fb:e9:2c:4f:cb:21:f3:
         ba:93:08:db:1c:d1:25:08:1d:03:2e:77:5b:b6:2f:11:4d:5c:
         e6:6a:a1:db:2e:8b:d2:40:b7:ef:5a:94:2b:7c:29:15:74:1e:
         21:60:43:d6:d5:9e:82:fb:7a:e8:40:1d:f4:c6:de:54:51:bd:
         fd:76:1f:23:7e:fc:83:ff:3a:35:d3:b8:bb:41:14:17:11:1c:
         e8:05:a6:1e:2c:24:ca:75:c4:44:0e:ff:4b:02:b7:b3:62:4f:
         de:9e:31:39:bf:00:7e:b4:c2:66:7a:f2:e1:c4:3b:6c:8e:5e:
         0d:ca:9a:d4:74:98:6b:78:86:e6:2f:8a:b5:e2:7e:7b:4c:44:
         77:43:92:e0:45:a0:b9:8d:7d:c7:0c:8b:b6:be:de:d7:3e:fe:
         ce:d9:cf:56:db:a5:02:ff:8d:55:1d:68:e0:7f:c5:82:a0:dc:
         06:00:61:69
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S4zP6Yk31ZA13aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5
NGExMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZGQ3YmM1ZTUtOWRmZC00NGI2LWFhZmEtZTNmOWFmMGM3ZWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd9xWFOE87HABDmPVqKDoyATfZHHj9V+sFOj
i7Cr7nlH1uwpaXB3kMHzaDWG9J+VxKMJz+luS2cT4b7NQlLsUrP4oS5D7F7XYnGi
m30R3aciU5itcNpgjcYUup0XAY7v0Dbe1FGaKNlFY/IVc9cSYOhPZD9UEZxeg1LI
d9BpLsE0UqRr2A0P1FDO0suOMgtubO/0sAzlZhlVdbZ/JmQjAu03zOT4ZGwdrh1D
rf1G21IaBD2jq0BU9GnKkmb049dfz979PkWdnGnyLo7sZelWmTlm3z17uiwgX0YB
VL16juN2gqaEzLeqVFUXVxoqwPYzcQ/8kI/jOj9pE0b1RC9LrQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM6iw6BFSWnxcHIDAP7frgQlpxsvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy
YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvN2EwZmNhYjYtZGJmYS0z
YmE3LWFmYzYtYWQ0NTY1YmMyNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5
N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh
OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw
YjZkYTk0YTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf0qCAN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFW6JAW2tkpWH06ZBGaFzjTGAOqgsOMszBs3dnw76wl66vD2KEYw
+K26+I7MWoFKZX/+G8yq2xS67cLReo3jXXbDLpiKodijqA8UoAtVOkr+SMsD++ks
T8sh87qTCNsc0SUIHQMud1u2LxFNXOZqodsui9JAt+9alCt8KRV0HiFgQ9bVnoL7
euhAHfTG3lRRvf12HyN+/IP/OjXTuLtBFBcRHOgFph4sJMp1xEQO/0sCt7NiT96e
MTm/AH60wmZ68uHEO2yOXg3KmtR0mGt4huYvirXifntMRHdDkuBFoLmNfccMi7a+
3tc+/s7Zz1bbpQL/jVUdaOB/xYKg3AYAYWk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:11:11 2025 by rpki-client