Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa
File:                     8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa (raw, json)
Hash identifier:          SbtGD2DFw71xh+NSj+SPdccFZotAvEWw4SAQOHYBm/8=
Subject key identifier:   04:5B:C6:2D:D3:28:A7:FC:9E:67:69:FA:4A:CF:CC:14:3D:A0:94:E6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB723241A0C0348CFD900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     15290
IP address blocks:        2607:ca00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b7:23:24:1a:0c:03:48:cf:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=2b40e7e4-a64f-4d2b-a363-20a7dfc2a152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:b3:b9:be:b5:5e:e9:b6:3b:18:41:a8:ab:
                    58:25:ee:f4:f2:c9:27:7d:40:54:b9:cb:46:78:7b:
                    02:91:7c:8a:e9:cc:62:b9:a6:f2:2c:5d:31:8f:5c:
                    e6:50:34:84:32:6d:8b:ad:89:43:e6:e9:e5:c4:0a:
                    6d:81:7e:32:c5:8f:0d:08:27:b1:db:b6:31:7a:2d:
                    c4:c6:9e:a6:9c:2f:f4:47:bc:01:d8:6d:23:3d:01:
                    59:aa:46:b2:a1:64:04:5d:54:36:ca:69:cf:ad:ef:
                    e2:9e:68:0e:3b:04:7c:32:ee:9b:eb:20:89:e4:a1:
                    ad:b8:ca:94:18:de:5b:4f:fe:75:ac:72:2a:5a:5b:
                    2d:db:a4:23:b0:1a:8f:0e:59:b6:4a:ce:f9:36:37:
                    7a:80:8f:6d:ca:d8:dc:e7:b0:2e:37:c3:0d:9d:4c:
                    d9:16:0b:46:3f:0f:78:f0:88:0d:f0:a3:42:5a:0e:
                    bf:d4:3a:0e:2e:b4:23:12:37:1a:0c:67:42:51:1c:
                    b5:48:05:b8:a3:eb:f3:3a:4e:e9:5d:cf:35:a3:2a:
                    d5:2f:61:d6:87:a6:b2:a0:db:93:45:53:d6:b1:8b:
                    ff:17:03:9f:42:27:33:c3:3f:67:e6:de:48:3c:7a:
                    ec:9b:d6:75:9b:0b:a0:85:86:74:b9:eb:16:98:e9:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5B:C6:2D:D3:28:A7:FC:9E:67:69:FA:4A:CF:CC:14:3D:A0:94:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ca00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b8:9e:de:5d:81:aa:55:59:bc:9b:56:77:02:af:74:b1:5f:
         1d:d9:a3:4f:81:e1:c7:34:ee:23:52:2a:95:d7:f9:00:ff:02:
         2c:87:4d:51:1d:7a:3e:24:d1:b2:e8:a5:75:b5:e4:97:f8:e4:
         3b:b8:15:5c:e4:db:f9:72:eb:98:a4:26:f8:34:cc:f9:7d:b7:
         06:ee:29:db:50:c5:59:36:67:dc:63:5c:21:6a:fc:34:d1:c6:
         4e:27:55:ce:c8:16:69:23:02:2a:ed:d5:7c:49:f3:56:f1:8d:
         a8:da:8e:89:61:40:f6:b7:02:f9:4d:78:2e:2f:42:17:c7:0f:
         91:25:e2:a2:09:36:f7:69:65:f3:28:8b:e1:79:f3:cb:52:f8:
         e6:5c:61:49:b1:4b:15:bd:e5:4c:56:6b:b9:40:a9:49:fe:35:
         7f:b2:0a:61:46:c1:6b:81:67:fc:90:20:a2:13:6a:54:17:0c:
         6a:ee:09:e2:fa:17:1d:4c:7b:19:b9:7d:71:12:fb:6d:3a:57:
         63:66:cd:c7:cd:85:14:e9:c6:b7:78:80:5f:0c:c2:6d:1f:ea:
         6f:fe:a3:fa:b7:27:c9:c8:c5:b9:7c:d7:1b:06:30:b1:29:3a:
         0c:85:05:c3:02:7d:cd:00:b4:28:ab:95:b3:c4:9b:b6:71:6b:
         06:88:0b:07
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2rcjJBoMA0jP2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MmI0MGU3ZTQtYTY0Zi00ZDJiLWEzNjMtMjBhN2RmYzJhMTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QWzub61Xum2OxhBqKtYJe708sknfUBUuctG
eHsCkXyK6cxiuabyLF0xj1zmUDSEMm2LrYlD5unlxAptgX4yxY8NCCex27Yxei3E
xp6mnC/0R7wB2G0jPQFZqkayoWQEXVQ2ymnPre/inmgOOwR8Mu6b6yCJ5KGtuMqU
GN5bT/51rHIqWlst26QjsBqPDlm2Ss75Njd6gI9tytjc57AuN8MNnUzZFgtGPw94
8IgN8KNCWg6/1DoOLrQjEjcaDGdCURy1SAW4o+vzOk7pXc81oyrVL2HWh6ayoNuT
RVPWsYv/FwOfQiczwz9n5t5IPHrsm9Z1mwughYZ0uesWmOkX0QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFARbxi3TKKf8nmdp+krPzBQ9oJTmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGYwNDU2ZjMtMzE3Ni0z
MGFlLWEzZjUtNWQ0NmQ5MTQzZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfKADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCauJ7eXYGqVVm8m1Z3Aq90sV8d2aNPgeHHNO4jUiqV1/kA/wIsh01R
HXo+JNGy6KV1teSX+OQ7uBVc5Nv5cuuYpCb4NMz5fbcG7inbUMVZNmfcY1whavw0
0cZOJ1XOyBZpIwIq7dV8SfNW8Y2o2o6JYUD2twL5TXguL0IXxw+RJeKiCTb3aWXz
KIvhefPLUvjmXGFJsUsVveVMVmu5QKlJ/jV/sgphRsFrgWf8kCCiE2pUFwxq7gni
+hcdTHsZuX1xEvttOldjZs3HzYUU6ca3eIBfDMJtH+pv/qP6tyfJyMW5fNcbBjCx
KToMhQXDAn3NALQoq5WzxJu2cWsGiAsH
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:05:05 2025 by rpki-client