Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34aad63d-e3f8-3dfe-bc16-7910f6094086.roa
File:                     34aad63d-e3f8-3dfe-bc16-7910f6094086.roa (raw, json)
Hash identifier:          uEp/6kNN38Nz2XobgQQH9pPMGZJIp+A/7AYO4szIFiE=
Subject key identifier:   05:88:0C:22:E5:CF:19:72:C5:4F:39:2F:53:F2:0C:4F:12:92:24:47
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BF554DF938A5C47008940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34aad63d-e3f8-3dfe-bc16-7910f6094086.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     26042
IP address blocks:        2001:470:1ac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:f5:54:df:93:8a:5c:47:00:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=9d022b76-68c5-4e7a-86fc-9f9518c83965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:54:03:9f:21:4f:85:07:c1:35:f2:6d:ff:
                    8a:3a:6d:16:e0:d4:04:97:d4:ef:3a:bf:80:20:ec:
                    9a:cc:be:c7:01:fc:e6:6d:2a:7a:4a:77:e1:e6:52:
                    86:b6:45:12:c7:57:25:80:bf:d8:8c:a7:8a:34:76:
                    7a:1c:3d:64:ca:4a:78:a2:e2:c9:fa:cc:c7:dd:e2:
                    42:2a:68:36:db:91:19:1c:6d:d5:21:6b:9d:c8:e6:
                    79:08:16:de:14:93:30:ae:17:9b:95:5a:66:7b:9e:
                    2e:86:8f:4a:0e:09:e3:50:ea:29:0b:bf:84:2d:ae:
                    09:19:d3:5c:a4:32:83:a5:9a:71:1d:a6:ff:b6:8c:
                    0a:59:9d:6b:41:94:d2:4d:70:1e:2c:82:1d:06:af:
                    c3:7e:8b:0a:2a:5c:7c:b1:66:01:16:2b:8d:d4:c1:
                    92:89:06:1f:77:66:80:1c:c3:ce:9b:a7:76:6e:02:
                    ff:5c:c4:f4:12:ca:6f:97:1b:56:8e:b4:0c:2a:d5:
                    3a:9d:c4:b9:9c:e6:10:d9:6c:48:1f:9f:bf:3c:5a:
                    65:ce:d5:84:cb:58:88:fc:15:47:5c:df:34:4d:00:
                    a2:96:62:08:af:0e:17:08:a0:c8:6c:bf:87:de:7b:
                    a7:4d:75:38:a1:50:a4:f0:6d:38:f7:f2:1f:4a:0a:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:88:0C:22:E5:CF:19:72:C5:4F:39:2F:53:F2:0C:4F:12:92:24:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34aad63d-e3f8-3dfe-bc16-7910f6094086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1ac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:82:24:e1:6c:9c:02:78:e2:c3:19:7e:01:1e:c6:b7:2a:17:
         8d:cb:25:e7:96:25:2d:55:78:a3:c5:f7:3e:da:31:cd:d9:2b:
         64:31:cd:53:5c:04:b4:19:d2:e4:4b:da:b5:2c:2b:97:e3:89:
         0d:e9:7c:a8:fe:fe:9d:9a:0d:b8:94:62:74:50:a4:76:58:16:
         9b:52:d6:29:40:c2:4d:a7:60:b9:52:54:f9:9f:84:ef:ef:c7:
         7b:3c:cd:71:17:00:6f:f9:37:cf:69:e5:b0:8d:b9:30:8d:cc:
         9a:d6:a0:14:7e:1e:7d:5b:78:19:43:54:55:84:e5:05:8a:84:
         35:f3:33:8f:c0:77:27:25:55:b8:c9:d8:25:f2:a3:0e:69:a6:
         a2:06:f3:85:16:78:48:3e:4f:d1:95:d5:c8:72:ad:e1:eb:05:
         64:05:b0:1f:19:68:ac:cc:98:98:7d:a8:70:05:d4:58:68:a3:
         e9:90:30:42:61:8c:9c:70:54:12:33:a0:46:36:83:c9:22:b1:
         1f:45:45:f3:b5:0c:82:15:b5:eb:50:53:1e:12:86:40:99:47:
         29:58:db:69:6f:28:58:1a:1d:93:57:78:71:06:78:80:05:c7:
         a7:29:ef:52:29:7e:70:10:a6:61:4b:82:0b:26:66:eb:cd:0d:
         3d:45:e0:e1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/VU35OKXEcAiUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
OWQwMjJiNzYtNjhjNS00ZTdhLTg2ZmMtOWY5NTE4YzgzOTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMVUA58hT4UHwTXybf+KOm0W4NQEl9TvOr+A
IOyazL7HAfzmbSp6Snfh5lKGtkUSx1clgL/YjKeKNHZ6HD1kykp4ouLJ+szH3eJC
Kmg225EZHG3VIWudyOZ5CBbeFJMwrheblVpme54uho9KDgnjUOopC7+ELa4JGdNc
pDKDpZpxHab/towKWZ1rQZTSTXAeLIIdBq/DfosKKlx8sWYBFiuN1MGSiQYfd2aA
HMPOm6d2bgL/XMT0EspvlxtWjrQMKtU6ncS5nOYQ2WxIH5+/PFplztWEy1iI/BVH
XN80TQCilmIIrw4XCKDIbL+H3nunTXU4oVCk8G049/IfSgribQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAWIDCLlzxlyxU85L1PyDE8SkiRHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzRhYWQ2M2QtZTNmOC0z
ZGZlLWJjMTYtNzkxMGY2MDk0MDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMCCJOFsnAJ44sMZfgEexrcqF43LJeeWJS1VeKPF9z7aMc3ZK2Qx
zVNcBLQZ0uRL2rUsK5fjiQ3pfKj+/p2aDbiUYnRQpHZYFptS1ilAwk2nYLlSVPmf
hO/vx3s8zXEXAG/5N89p5bCNuTCNzJrWoBR+Hn1beBlDVFWE5QWKhDXzM4/Adycl
VbjJ2CXyow5ppqIG84UWeEg+T9GV1chyreHrBWQFsB8ZaKzMmJh9qHAF1Fhoo+mQ
MEJhjJxwVBIzoEY2g8kisR9FRfO1DIIVtetQUx4ShkCZRylY22lvKFgaHZNXeHEG
eIAFx6cp71IpfnAQpmFLggsmZuvNDT1F4OE=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:48:58 2025 by rpki-client