Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/bf849cbd-eb7d-3ee3-bbed-3fa51438f244.roa
File:                     bf849cbd-eb7d-3ee3-bbed-3fa51438f244.roa (raw, json)
Hash identifier:          lXbowgmb1hhOelDp2Zef508hG6cKvfl/1odle5Y9e2I=
Subject key identifier:   9F:66:14:D1:D3:EF:F0:36:FD:F1:7F:08:6E:3F:41:42:02:FB:F0:37
Certificate issuer:       /CN=7115dbdf-c5dc-4cad-b25b-497eb629bafa
Certificate serial:       010D0C9F4328584A89A60A6B94EA7B5E64381000
Authority key identifier: 21:07:61:A4:9A:C1:D5:7D:06:C6:97:91:39:CA:63:6C:9B:C7:83:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/bf849cbd-eb7d-3ee3-bbed-3fa51438f244.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     33218
IP address blocks:        2606:4780::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/7115dbdf-c5dc-4cad-b25b-497eb629bafa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/7115dbdf-c5dc-4cad-b25b-497eb629bafa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:0a:6b:94:ea:7b:5e:64:38:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7115dbdf-c5dc-4cad-b25b-497eb629bafa
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=e8ba0100-bbe6-452f-a66b-b04d1339220c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:10:89:fd:d4:5c:7a:16:12:bb:aa:01:f2:
                    d5:e6:62:56:f0:c4:73:4f:6b:fc:dd:49:f4:c7:a2:
                    9b:0b:c5:6e:74:d2:b3:a7:a4:ef:c6:d2:a1:9a:e4:
                    68:be:de:eb:12:7b:c7:99:dd:22:7e:f8:9c:0e:71:
                    2d:75:ac:7f:b7:3c:c5:2e:00:54:7d:80:4f:cb:33:
                    42:a3:e4:30:cc:e2:f6:33:6f:66:a3:a5:a9:0e:ad:
                    73:40:1d:41:88:6e:2a:84:7b:ae:9f:f9:3f:72:c8:
                    05:a7:d3:95:89:92:3f:3a:de:04:1e:d2:c7:1e:5b:
                    89:59:05:49:27:6b:8d:90:3f:37:31:e9:07:e3:32:
                    07:c5:db:2c:e6:41:9a:85:1c:87:92:1b:0c:fb:ba:
                    d6:14:bb:c1:7e:d8:4f:bb:81:1e:68:e0:b8:ea:8e:
                    03:6a:c8:d9:18:3e:79:22:fd:51:60:bc:1d:c8:84:
                    74:80:2f:36:fa:e4:31:aa:5c:0f:f0:a6:48:d7:b3:
                    e1:59:e5:a1:59:4f:ad:89:44:c1:55:74:a1:c4:55:
                    a3:03:a5:33:44:b4:e6:d7:fd:ee:d9:73:9c:4a:fe:
                    1b:9a:d5:50:c5:91:11:6c:47:1c:bd:5d:93:02:ab:
                    a5:2e:ab:b2:d9:33:e4:26:9b:56:b9:85:4c:95:69:
                    22:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:66:14:D1:D3:EF:F0:36:FD:F1:7F:08:6E:3F:41:42:02:FB:F0:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/bf849cbd-eb7d-3ee3-bbed-3fa51438f244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/7115dbdf-c5dc-4cad-b25b-497eb629bafa.crl

            X509v3 Authority Key Identifier:
                keyid:21:07:61:A4:9A:C1:D5:7D:06:C6:97:91:39:CA:63:6C:9B:C7:83:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:b5:10:32:57:12:aa:dd:2b:b2:49:94:07:3d:6b:9a:33:
         f4:fa:b8:7a:ac:8a:13:d4:64:a2:02:97:af:f8:6a:1b:32:99:
         86:df:60:e9:a8:9d:6a:ac:8a:0a:74:41:47:c5:64:c6:10:e9:
         19:41:53:6c:87:cb:27:d3:98:bf:a7:39:2e:3f:86:6d:21:39:
         58:c4:01:8f:2a:d7:35:2f:89:77:e9:a6:ad:f8:0c:81:c8:a5:
         03:56:0a:f0:04:79:c0:9f:9e:09:ab:22:d7:4b:ea:fe:fa:14:
         a4:e8:28:88:38:84:46:5b:e2:be:5a:75:fc:5d:3b:98:80:88:
         2e:f2:1c:80:81:a2:ad:ca:5c:fb:fd:05:e8:30:14:22:2e:af:
         a0:2e:ed:28:c7:39:a0:7c:ff:cc:49:80:e1:40:21:67:7d:64:
         5f:a2:52:12:df:fc:df:0e:93:88:d3:c7:c0:c3:7a:cb:6e:a0:
         f5:ce:62:12:14:b7:d7:c9:b8:1d:30:71:b0:af:0e:cc:0c:67:
         eb:65:c5:7d:0c:b3:44:cc:3f:42:e0:b1:06:95:cc:21:6c:f4:
         0f:38:cb:06:0d:83:f4:aa:e3:2f:62:c0:91:59:b1:63:52:2d:
         77:d4:ed:00:1b:07:5a:73:22:be:df:19:29:fe:c7:95:92:37:
         cb:35:91:48
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqJpgprlOp7XmQ4EAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzExNWRiZGYtYzVkYy00Y2FkLWIyNWItNDk3ZWI2Mjli
YWZhMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
ZThiYTAxMDAtYmJlNi00NTJmLWE2NmItYjA0ZDEzMzkyMjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFgQif3UXHoWEruqAfLV5mJW8MRzT2v83Un0
x6KbC8VudNKzp6TvxtKhmuRovt7rEnvHmd0ifvicDnEtdax/tzzFLgBUfYBPyzNC
o+QwzOL2M29mo6WpDq1zQB1BiG4qhHuun/k/csgFp9OViZI/Ot4EHtLHHluJWQVJ
J2uNkD83MekH4zIHxdss5kGahRyHkhsM+7rWFLvBfthPu4EeaOC46o4DasjZGD55
Iv1RYLwdyIR0gC82+uQxqlwP8KZI17PhWeWhWU+tiUTBVXShxFWjA6UzRLTm1/3u
2XOcSv4bmtVQxZERbEccvV2TAqulLquy2TPkJptWuYVMlWkiwQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ9mFNHT7/A2/fF/CG4/QUIC+/A3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MTE1
ZGJkZi1jNWRjLTRjYWQtYjI1Yi00OTdlYjYyOWJhZmEvYmY4NDljYmQtZWI3ZC0z
ZWUzLWJiZWQtM2ZhNTE0MzhmMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzExNWRiZGYtYzVkYy00Y2FkLWIy
NWItNDk3ZWI2MjliYWZhLzcxMTVkYmRmLWM1ZGMtNGNhZC1iMjViLTQ5N2ViNjI5
YmFmYS5jcmwwHwYDVR0jBBgwFoAUIQdhpJrB1X0GxpeROcpjbJvHg8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MTE1ZGJkZi1jNWRjLTRjYWQtYjI1Yi00OTdl
YjYyOWJhZmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZHgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAC7bUQMlcSqt0rskmUBz1rmjP0+rh6rIoT1GSiApev+GobMpmG32Dp
qJ1qrIoKdEFHxWTGEOkZQVNsh8sn05i/pzkuP4ZtITlYxAGPKtc1L4l36aat+AyB
yKUDVgrwBHnAn54JqyLXS+r++hSk6CiIOIRGW+K+WnX8XTuYgIgu8hyAgaKtylz7
/QXoMBQiLq+gLu0oxzmgfP/MSYDhQCFnfWRfolIS3/zfDpOI08fAw3rLbqD1zmIS
FLfXybgdMHGwrw7MDGfrZcV9DLNEzD9C4LEGlcwhbPQPOMsGDYP0quMvYsCRWbFj
Ui131O0AGwdacyK+3xkp/seVkjfLNZFI
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:53:51 2025 by rpki-client