Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d456eb66-2987-33ac-9cf9-b08d3fba6b08.roa
File:                     d456eb66-2987-33ac-9cf9-b08d3fba6b08.roa (raw, json)
Hash identifier:          7FY3zcuUnt49f4BHULvcvV0UuK4kqeecLKeKDZ2yLaQ=
Subject key identifier:   C3:0C:66:40:B7:78:4A:12:1A:18:D2:D1:AB:D2:2B:75:E0:43:68:57
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BF419E44E8E37173498C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d456eb66-2987-33ac-9cf9-b08d3fba6b08.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     1734
IP address blocks:        2001:470:167::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:f4:19:e4:4e:8e:37:17:34:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=70cfe9b0-f289-4275-b166-8eb8cbdef3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fd:d3:9d:c0:50:80:07:fc:e1:d6:75:36:d3:
                    2c:39:70:93:08:61:2a:57:58:2e:1f:f9:14:0a:c0:
                    b6:c7:44:52:76:ea:1b:6f:99:dd:f8:6b:fb:75:bb:
                    f4:23:71:87:88:c7:cf:89:7a:39:a3:3d:e8:66:b7:
                    38:67:0b:32:7b:76:49:bb:a1:24:a2:53:92:99:64:
                    7a:88:7a:fd:ae:06:9d:5b:2d:d3:f5:92:2e:93:7a:
                    6e:22:8a:5d:bc:5d:3a:1f:58:20:0f:cd:db:3d:75:
                    62:47:6e:c3:e6:94:47:24:cf:f1:b5:af:5e:2d:1b:
                    88:bc:4c:d9:84:3b:9b:91:71:1f:c0:d5:56:10:06:
                    c7:0a:b8:4f:8f:d3:79:0e:a9:2c:ee:29:f2:87:66:
                    20:47:59:4c:28:6e:a4:80:5e:bb:0d:56:06:b4:3e:
                    5d:41:fb:1b:22:89:a7:eb:74:9d:e4:0f:7c:cf:91:
                    e8:ad:a6:3a:26:89:77:ea:80:96:97:a0:cf:d7:9c:
                    82:cf:9f:68:6b:a3:48:0a:32:7e:cd:00:b5:b9:e9:
                    c8:1e:00:59:6e:48:21:0d:4d:a3:c3:53:d2:1a:1e:
                    d3:f1:f7:e2:87:38:bf:a4:cb:a5:26:92:e0:cb:72:
                    06:d3:fe:5f:63:60:22:ec:96:fa:67:bb:86:3b:57:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0C:66:40:B7:78:4A:12:1A:18:D2:D1:AB:D2:2B:75:E0:43:68:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d456eb66-2987-33ac-9cf9-b08d3fba6b08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:167::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b9:ad:f6:83:e7:bd:6c:52:d9:ff:8c:8a:43:d5:ab:e7:ca:
         8e:f8:40:1c:74:c6:c7:a3:46:bd:c6:9f:49:45:dd:1a:51:1d:
         7b:38:f5:98:09:95:3d:ee:3a:75:ae:3b:6e:49:b0:ef:ba:8e:
         eb:5c:d6:21:c0:e3:87:bc:2b:57:b7:11:b0:d1:ca:44:90:4d:
         18:27:0d:00:d6:b8:ad:43:f3:16:6c:64:30:ad:54:8c:de:3f:
         10:82:3e:a3:1b:90:1f:e1:bf:5f:98:29:71:33:9b:df:16:22:
         ac:aa:3c:57:03:24:78:cc:44:fb:eb:e6:af:73:16:a2:81:83:
         48:0a:67:75:01:89:f9:46:4a:de:48:7f:c0:c5:d7:7b:29:4c:
         c4:50:ab:95:82:bb:1b:3b:7d:f7:c5:23:83:14:bb:5a:74:42:
         9d:99:a4:50:e3:98:53:0d:46:5e:c0:2e:ff:96:7a:1a:88:88:
         32:93:f6:3f:a5:60:2f:0c:c7:a6:98:f7:cd:db:53:e9:00:da:
         84:0f:f6:7a:d4:a2:ad:44:1f:7d:17:d0:dc:ef:41:44:71:8f:
         4b:13:f6:20:37:9b:eb:6a:06:1c:62:29:d1:6e:29:b2:4d:e0:
         60:51:43:be:07:15:35:24:5e:16:a6:2c:27:1c:0c:db:98:15:
         27:2e:92:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G/QZ5E6ONxc0mMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
NzBjZmU5YjAtZjI4OS00Mjc1LWIxNjYtOGViOGNiZGVmM2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/3TncBQgAf84dZ1NtMsOXCTCGEqV1guH/kU
CsC2x0RSduobb5nd+Gv7dbv0I3GHiMfPiXo5oz3oZrc4Zwsye3ZJu6EkolOSmWR6
iHr9rgadWy3T9ZIuk3puIopdvF06H1ggD83bPXViR27D5pRHJM/xta9eLRuIvEzZ
hDubkXEfwNVWEAbHCrhPj9N5Dqks7inyh2YgR1lMKG6kgF67DVYGtD5dQfsbIomn
63Sd5A98z5HoraY6Jol36oCWl6DP15yCz59oa6NICjJ+zQC1uenIHgBZbkghDU2j
w1PSGh7T8ffihzi/pMulJpLgy3IG0/5fY2Ai7Jb6Z7uGO1dJtQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMMMZkC3eEoSGhjS0avSK3XgQ2hXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDQ1NmViNjYtMjk4Ny0z
M2FjLTljZjktYjA4ZDNmYmE2YjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGy5rfaD571sUtn/jIpD1avnyo74QBx0xsejRr3Gn0lF3RpRHXs4
9ZgJlT3uOnWuO25JsO+6jutc1iHA44e8K1e3EbDRykSQTRgnDQDWuK1D8xZsZDCt
VIzePxCCPqMbkB/hv1+YKXEzm98WIqyqPFcDJHjMRPvr5q9zFqKBg0gKZ3UBiflG
St5If8DF13spTMRQq5WCuxs7fffFI4MUu1p0Qp2ZpFDjmFMNRl7ALv+WehqIiDKT
9j+lYC8Mx6aY983bU+kA2oQP9nrUoq1EH30X0NzvQURxj0sT9iA3m+tqBhxiKdFu
KbJN4GBRQ74HFTUkXhamLCccDNuYFScukmI=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:14 2025 by rpki-client