Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82ce25f3-897a-34cf-a89d-61072f96bae7.roa
File:                     82ce25f3-897a-34cf-a89d-61072f96bae7.roa (raw, json)
Hash identifier:          /9Q5qu/K1K6jPS+4cZW/aa+q8y0jqOWZBoY0Pxlp4eI=
Subject key identifier:   45:7E:00:D9:4C:5F:C2:D1:88:94:B7:5D:8D:ED:74:58:A3:52:44:E9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB651026DD1039D4DBB3CED40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82ce25f3-897a-34cf-a89d-61072f96bae7.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     395517
IP address blocks:        2001:470:15a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:51:02:6d:d1:03:9d:4d:bb:3c:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=9cb6817f-7ec5-4715-a2db-d45744767783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:6e:9c:92:b1:3e:91:b8:53:41:7a:c7:2a:
                    f9:47:3a:4e:a4:dd:d4:d7:32:d3:6d:55:0f:40:c5:
                    98:4f:ba:62:d6:7a:67:db:4b:27:c0:60:5b:85:e1:
                    36:3d:ae:de:b6:18:ff:98:31:b8:70:44:2e:b3:e7:
                    86:bc:cb:4f:ca:76:d7:78:79:fd:b5:bc:5a:bc:00:
                    66:27:b6:49:66:e9:63:bd:de:b7:3c:85:04:cd:c1:
                    ac:79:db:70:8c:d0:e3:d4:3f:3e:bb:62:17:d0:34:
                    50:7b:9f:cb:fa:78:5d:fb:d4:8d:b5:a5:a4:92:45:
                    27:04:cd:32:5a:0d:d4:42:3b:bf:44:de:4b:3e:ac:
                    98:a5:8c:d8:25:57:35:71:52:70:8e:35:d6:7f:e6:
                    bd:2e:76:bd:33:c2:b2:92:6d:80:98:a4:ca:05:57:
                    30:13:a2:ce:24:f8:90:b6:5f:fd:18:4d:39:6f:21:
                    98:fe:09:a8:57:1e:25:3f:17:96:7e:b5:74:b9:af:
                    64:f6:85:91:45:ab:65:b4:27:2f:9e:ff:09:a1:26:
                    6c:df:27:cf:9a:46:86:2d:6a:ae:45:96:74:2d:a3:
                    ed:e8:ca:a0:d3:26:39:2c:b3:63:d0:21:c4:5c:76:
                    f4:15:d8:06:63:5a:52:eb:a9:18:62:e7:b3:a9:66:
                    e5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7E:00:D9:4C:5F:C2:D1:88:94:B7:5D:8D:ED:74:58:A3:52:44:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82ce25f3-897a-34cf-a89d-61072f96bae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:15a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:eb:67:c1:a2:bb:09:f1:06:d6:3d:20:17:bb:17:70:c8:1a:
         28:5d:fd:23:d4:cf:47:ba:08:7a:89:80:49:99:0d:cc:a2:bb:
         37:ec:e8:08:70:d0:02:4b:42:32:11:e1:4c:50:ec:5b:19:d5:
         b1:8a:1d:af:34:60:f7:12:ef:30:75:b1:93:f5:5a:d8:e9:d6:
         1c:43:46:2e:5c:25:c2:3f:8b:0b:41:09:f4:d8:ea:2b:5b:94:
         db:6f:f1:be:97:d7:aa:e9:b2:e3:6d:ab:db:a0:2a:24:1b:b8:
         90:e8:a1:cd:67:74:91:e6:83:53:e4:2f:51:3a:b8:95:9a:cc:
         dc:e0:cf:19:b3:7b:17:fb:54:15:f3:f3:a8:52:b4:7a:fc:41:
         9e:ed:33:bd:31:46:fa:55:b9:ae:44:63:77:64:da:14:77:ff:
         ae:22:ac:0c:59:31:ab:db:f1:31:ae:d6:23:ed:5a:ac:50:73:
         f4:00:6f:4f:a1:d0:13:fe:18:a2:3d:77:a7:8e:98:fa:78:7e:
         60:3d:a3:ff:cc:a2:39:fb:c5:f9:9d:76:65:b6:f3:76:4b:c5:
         f5:bb:39:db:a1:e5:8a:47:23:f6:58:05:69:88:32:f4:5a:7c:
         c8:3b:34:f5:f8:17:c0:d7:99:c0:10:35:68:c6:0a:bc:4d:c0:
         80:5f:1b:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq2UQJt0QOdTbs87UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
OWNiNjgxN2YtN2VjNS00NzE1LWEyZGItZDQ1NzQ0NzY3NzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi5unJKxPpG4U0F6xyr5RzpOpN3U1zLTbVUP
QMWYT7pi1npn20snwGBbheE2Pa7ethj/mDG4cEQus+eGvMtPynbXeHn9tbxavABm
J7ZJZuljvd63PIUEzcGsedtwjNDj1D8+u2IX0DRQe5/L+nhd+9SNtaWkkkUnBM0y
Wg3UQju/RN5LPqyYpYzYJVc1cVJwjjXWf+a9Lna9M8Kykm2AmKTKBVcwE6LOJPiQ
tl/9GE05byGY/gmoVx4lPxeWfrV0ua9k9oWRRatltCcvnv8JoSZs3yfPmkaGLWqu
RZZ0LaPt6Mqg0yY5LLNj0CHEXHb0FdgGY1pS66kYYuezqWblOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEV+ANlMX8LRiJS3XY3tdFijUkTpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODJjZTI1ZjMtODk3YS0z
NGNmLWE4OWQtNjEwNzJmOTZiYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEnrZ8GiuwnxBtY9IBe7F3DIGihd/SPUz0e6CHqJgEmZDcyiuzfs
6Ahw0AJLQjIR4UxQ7FsZ1bGKHa80YPcS7zB1sZP1Wtjp1hxDRi5cJcI/iwtBCfTY
6itblNtv8b6X16rpsuNtq9ugKiQbuJDooc1ndJHmg1PkL1E6uJWazNzgzxmzexf7
VBXz86hStHr8QZ7tM70xRvpVua5EY3dk2hR3/64irAxZMavb8TGu1iPtWqxQc/QA
b0+h0BP+GKI9d6eOmPp4fmA9o//Mojn7xfmddmW283ZLxfW7Oduh5YpHI/ZYBWmI
MvRafMg7NPX4F8DXmcAQNWjGCrxNwIBfG4s=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:26 2025 by rpki-client