Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa
File:                     ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa (raw, json)
Hash identifier:          Nxi4dqM0bPWpGPh5bwhq+nvJGpGt93HLGJdgb17YPzI=
Subject key identifier:   E9:A0:17:50:49:47:C1:CC:C9:EE:BE:1D:B5:1F:D8:6B:65:78:27:A0
Certificate issuer:       /CN=04bd1965-5757-479c-b2af-44967b5e0539
Certificate serial:       010D0C9F4328584A1B5FFB05461339D9592F1080
Authority key identifier: B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     400671
IP address blocks:        2602:fb7e::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:fb:05:46:13:39:d9:59:2f:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bd1965-5757-479c-b2af-44967b5e0539
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=e9cdb016-0088-43e6-912e-bbd3c54b329b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:24:a9:0d:79:ad:ec:ec:cd:15:90:77:fb:
                    81:fd:52:d7:87:cf:55:27:67:9c:7f:39:70:b0:5a:
                    cf:c5:cc:67:4f:34:46:72:f8:57:d7:b6:1b:1d:6e:
                    fc:bd:00:78:c4:ab:0f:1d:f0:dc:1a:03:41:58:a3:
                    7d:9a:ef:a4:72:e1:23:c6:31:cd:27:af:81:fc:86:
                    b7:42:b2:6c:09:76:09:eb:df:b1:72:33:3e:49:54:
                    82:0a:12:d3:23:73:18:ec:17:41:80:69:67:8a:d4:
                    0c:b9:b5:d6:2e:ef:c6:5d:df:a5:68:30:af:8a:b1:
                    3f:07:6e:a6:b6:d5:c5:05:45:61:37:27:a9:9f:a1:
                    5d:fe:07:15:fa:d6:d6:4c:9c:7b:fb:b4:7e:7a:14:
                    71:1c:3e:f3:68:ea:6d:83:2e:ba:ad:1c:1f:8e:6b:
                    de:99:9a:dc:2f:70:e4:3e:5a:da:1b:4b:45:bb:64:
                    08:2a:58:3e:7e:c7:71:4c:99:3d:e7:65:87:f7:3d:
                    90:37:42:7a:b5:2c:a1:95:ac:25:ed:25:08:f5:c3:
                    b9:41:17:fa:08:4e:85:ae:f8:e2:f8:f2:1a:3d:01:
                    83:ca:76:5c:06:d8:ef:4c:41:fb:39:65:33:b5:58:
                    43:00:0b:cd:13:8f:42:53:a5:45:c6:db:bf:f4:c4:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A0:17:50:49:47:C1:CC:C9:EE:BE:1D:B5:1F:D8:6B:65:78:27:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl

            X509v3 Authority Key Identifier:
                keyid:B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb7e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:44:50:c5:a9:0c:50:6d:cf:5c:b6:71:bd:18:82:d2:de:06:
         a8:18:72:69:40:a6:64:ea:f1:4c:56:50:3e:69:e7:45:ea:14:
         eb:72:5b:49:fb:62:2f:0b:c8:2d:e2:0f:bf:d1:48:1a:97:e2:
         9b:80:99:eb:2c:08:41:76:b5:1d:85:fb:ed:9c:fd:61:25:87:
         64:58:bb:15:a3:5e:1f:ae:cb:7d:a4:51:de:92:72:86:7e:c8:
         17:15:2b:2c:a8:0a:61:4a:89:4f:cf:2e:d0:48:72:17:36:b8:
         b3:55:40:c3:c3:fc:3f:89:d1:55:19:d9:23:c7:c9:09:5b:2c:
         8a:d5:05:64:60:f7:e2:6c:42:0d:8f:6a:a4:88:4d:33:13:06:
         8a:6c:91:4f:e9:03:de:6d:86:28:ff:4e:ec:e7:a8:60:b3:ac:
         98:1f:c1:ab:1c:ff:f9:12:b1:a8:0e:e9:02:fa:e4:91:80:bc:
         83:8a:d3:ca:50:96:3f:a4:fc:b5:e6:41:05:fe:1d:d4:43:2a:
         5e:f1:44:5f:6f:46:f8:c5:b1:d5:d7:78:b3:9d:74:85:48:e6:
         cb:6b:fe:f7:8e:26:7d:9a:71:6d:68:08:f8:f8:6e:78:09:4f:
         a6:bb:41:72:25:04:73:38:a9:8c:72:9a:6e:ee:be:46:23:96:
         2d:7b:4a:1e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEobX/sFRhM52VkvEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDRiZDE5NjUtNTc1Ny00NzljLWIyYWYtNDQ5NjdiNWUw
NTM5MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk
ZTljZGIwMTYtMDA4OC00M2U2LTkxMmUtYmJkM2M1NGIzMjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDMkqQ15rezszRWQd/uB/VLXh89VJ2ecfzlw
sFrPxcxnTzRGcvhX17YbHW78vQB4xKsPHfDcGgNBWKN9mu+kcuEjxjHNJ6+B/Ia3
QrJsCXYJ69+xcjM+SVSCChLTI3MY7BdBgGlnitQMubXWLu/GXd+laDCvirE/B26m
ttXFBUVhNyepn6Fd/gcV+tbWTJx7+7R+ehRxHD7zaOptgy66rRwfjmvemZrcL3Dk
PlraG0tFu2QIKlg+fsdxTJk952WH9z2QN0J6tSyhlawl7SUI9cO5QRf6CE6Frvji
+PIaPQGDynZcBtjvTEH7OWUztVhDAAvNE49CU6VFxtu/9MRFRwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOmgF1BJR8HMye6+HbUf2GtleCegMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNGJk
MTk2NS01NzU3LTQ3OWMtYjJhZi00NDk2N2I1ZTA1MzkvYWQyMWQwZTUtOWIxZS0z
ZWFiLTlhNWItYjgyOThhMmU3MWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDRiZDE5NjUtNTc1Ny00NzljLWIy
YWYtNDQ5NjdiNWUwNTM5LzA0YmQxOTY1LTU3NTctNDc5Yy1iMmFmLTQ0OTY3YjVl
MDUzOS5jcmwwHwYDVR0jBBgwFoAUtXgtVXqgUargFWS7QBUIjTRU/5kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNGJkMTk2NS01NzU3LTQ3OWMtYjJhZi00NDk2
N2I1ZTA1MzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7fgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASERQxakMUG3PXLZxvRiC0t4GqBhyaUCmZOrxTFZQPmnnReoU63Jb
SftiLwvILeIPv9FIGpfim4CZ6ywIQXa1HYX77Zz9YSWHZFi7FaNeH67LfaRR3pJy
hn7IFxUrLKgKYUqJT88u0EhyFza4s1VAw8P8P4nRVRnZI8fJCVssitUFZGD34mxC
DY9qpIhNMxMGimyRT+kD3m2GKP9O7OeoYLOsmB/Bqxz/+RKxqA7pAvrkkYC8g4rT
ylCWP6T8teZBBf4d1EMqXvFEX29G+MWx1dd4s510hUjmy2v+944mfZpxbWgI+Phu
eAlPprtBciUEczipjHKabu6+RiOWLXtKHg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:03:25 2025 by rpki-client