Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa
File:                     2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa (raw, json)
Hash identifier:          Y2IbvdrK8zLE6lVByyMG52/eup+sUhU6ZFBxX1S7flg=
Subject key identifier:   2B:4C:C5:82:57:88:BB:42:82:74:A4:1A:38:59:1B:78:4C:BA:F6:09
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584AB91BA88768CA4393214B3500
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     14773
IP address blocks:        2620:1d5:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:a8:87:68:ca:43:93:21:4b:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=de83072a-70d6-4bd9-be00-c9ddbe07590d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f7:8d:ae:03:38:0a:59:93:7f:f1:00:87:0e:
                    0c:42:2e:8d:7f:5c:46:c7:de:13:9d:32:90:d6:30:
                    e1:a6:ad:02:f0:70:f9:23:41:18:ea:a2:d8:51:91:
                    43:6f:c8:b1:e4:4a:d3:b7:f8:1a:fe:ac:b1:44:a2:
                    81:4b:34:17:42:23:0a:81:16:e1:c4:88:59:33:de:
                    8a:34:5d:58:a2:32:e9:5d:dd:1e:5c:b5:12:1e:43:
                    ee:f2:8d:47:ea:7a:04:bd:f9:b2:93:85:ac:d8:d0:
                    da:aa:82:5d:66:bd:2b:c5:c8:9c:61:8c:26:45:7f:
                    5e:62:88:ee:ba:f3:24:3a:5b:0f:cb:50:3b:d0:8b:
                    3c:f0:21:55:f6:a2:10:15:b0:fc:f2:16:d6:62:50:
                    65:85:58:0b:8c:ec:57:fc:ba:b5:3d:2f:e6:ae:6f:
                    a2:34:32:89:24:25:71:1c:53:9b:48:bc:fe:a6:ab:
                    5e:8e:a1:33:58:fb:72:af:43:c8:e5:a1:fd:e0:4b:
                    0b:b9:8d:ae:51:f8:0f:ae:01:09:cc:32:ab:06:8d:
                    46:f5:20:98:f1:30:bd:60:35:2d:45:4d:60:99:41:
                    06:17:f9:81:9c:79:bd:aa:43:5f:94:f2:23:78:41:
                    f6:0b:ca:a9:40:1e:a8:4b:db:03:c9:95:9b:37:a0:
                    14:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4C:C5:82:57:88:BB:42:82:74:A4:1A:38:59:1B:78:4C:BA:F6:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:cb:b6:c2:b4:c0:23:8c:ba:5f:85:9e:41:16:c6:bf:cb:
         23:25:39:5d:f3:d2:c1:71:b7:f7:3e:5e:6c:41:d2:d3:1b:da:
         c6:b9:d3:a7:c5:c8:d1:21:cc:ec:1c:c9:87:90:4b:73:62:f9:
         c9:cb:39:a2:f3:64:ae:a7:da:1f:7e:d5:9e:c1:3e:93:f0:3e:
         a8:ef:7b:1d:da:b4:0f:ec:ac:2c:16:e1:23:0f:a6:ac:29:92:
         13:d7:da:36:a3:53:6c:75:fe:95:10:b9:3b:8f:00:f8:34:32:
         34:c8:0e:46:bc:83:2e:3d:67:37:06:16:1c:80:f2:6a:f0:db:
         d2:df:8e:ef:74:7d:7e:be:83:f8:4c:12:d2:83:74:a1:40:ba:
         88:e3:ef:9d:6a:64:85:e2:fe:f8:55:91:13:52:be:cd:79:66:
         73:ab:c8:22:f5:4e:07:55:01:f2:97:d6:51:8e:c8:51:12:e5:
         72:62:92:58:26:20:df:d6:fd:e3:d5:f8:4c:30:d8:78:b1:10:
         f2:88:47:8a:63:ff:d5:ee:4c:c9:f4:02:aa:68:f8:67:a7:ae:
         96:8f:ce:ee:5e:ac:f1:86:21:a1:17:cb:94:bc:d3:8c:22:b6:
         39:ff:58:1a:cd:00:cf:e5:62:2e:44:78:e5:21:99:3d:99:77:
         7f:8f:68:84
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq5G6iHaMpDkyFLNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc2N2VhMTYtNzJiNC00MDJhLTliMmYtNzU4M2ZlMzkw
YmI3MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
ZGU4MzA3MmEtNzBkNi00YmQ5LWJlMDAtYzlkZGJlMDc1OTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/eNrgM4ClmTf/EAhw4MQi6Nf1xGx94TnTKQ
1jDhpq0C8HD5I0EY6qLYUZFDb8ix5ErTt/ga/qyxRKKBSzQXQiMKgRbhxIhZM96K
NF1YojLpXd0eXLUSHkPu8o1H6noEvfmyk4Ws2NDaqoJdZr0rxcicYYwmRX9eYoju
uvMkOlsPy1A70Is88CFV9qIQFbD88hbWYlBlhVgLjOxX/Lq1PS/mrm+iNDKJJCVx
HFObSLz+pqtejqEzWPtyr0PI5aH94EsLuY2uUfgPrgEJzDKrBo1G9SCY8TC9YDUt
RU1gmUEGF/mBnHm9qkNflPIjeEH2C8qpQB6oS9sDyZWbN6AUeQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCtMxYJXiLtCgnSkGjhZG3hMuvYJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3
ZWExNi03MmI0LTQwMmEtOWIyZi03NTgzZmUzOTBiYjcvMmY3YjA1ZTYtMzcxMy0z
NDU0LWIwZmUtYTJiMWE3YTI1NjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc2N2VhMTYtNzJiNC00MDJhLTli
MmYtNzU4M2ZlMzkwYmI3L2Y3NjdlYTE2LTcyYjQtNDAyYS05YjJmLTc1ODNmZTM5
MGJiNy5jcmwwHwYDVR0jBBgwFoAUesYuc/uCJzFiX8COdvsgVaYFuSkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3ZWExNi03MmI0LTQwMmEtOWIyZi03NTgz
ZmUzOTBiYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiAB1QEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQl/LtsK0wCOMul+FnkEWxr/LIyU5XfPSwXG39z5ebEHS0xvaxrnT
p8XI0SHM7BzJh5BLc2L5ycs5ovNkrqfaH37VnsE+k/A+qO97Hdq0D+ysLBbhIw+m
rCmSE9faNqNTbHX+lRC5O48A+DQyNMgORryDLj1nNwYWHIDyavDb0t+O73R9fr6D
+EwS0oN0oUC6iOPvnWpkheL++FWRE1K+zXlmc6vIIvVOB1UB8pfWUY7IURLlcmKS
WCYg39b949X4TDDYeLEQ8ohHimP/1e5MyfQCqmj4Z6eulo/O7l6s8YYhoRfLlLzT
jCK2Of9YGs0Az+ViLkR45SGZPZl3f49ohA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:34:27 2025 by rpki-client