Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b3aa0c0-8f71-3fc4-b739-d73a8ed3adce.roa
File:                     3b3aa0c0-8f71-3fc4-b739-d73a8ed3adce.roa (raw, json)
Hash identifier:          QP85BgMNq8I8+lQUvlvjfwJ630qqp+beQrFUzfj3OXE=
Subject key identifier:   FF:57:71:EB:FF:0C:83:95:93:DC:56:AA:28:F2:CD:18:46:98:63:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE0313C3064DD61D88E9B6F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b3aa0c0-8f71-3fc4-b739-d73a8ed3adce.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        2603:20c6:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:3c:30:64:dd:61:d8:8e:9b:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=324a191d-a69b-4af7-bdc6-7cdb072f25bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cb:65:b9:02:3e:ff:c6:ea:d9:51:e3:fd:54:
                    a1:07:26:cd:ce:c8:8b:99:7d:8f:62:4e:f0:99:2e:
                    36:07:82:31:a2:e3:9b:2a:c4:d0:91:33:28:7f:76:
                    3d:01:25:00:3b:2e:3a:31:4c:52:cd:33:93:6f:4e:
                    40:fc:d8:96:54:e4:d7:12:40:fc:20:1b:a7:0a:09:
                    b2:ce:d4:ce:6c:f6:d0:67:f8:8c:86:67:44:dc:a7:
                    09:b3:a8:c9:9f:56:73:1f:f1:86:45:88:fe:8b:6e:
                    92:88:17:05:3d:db:26:22:6d:67:18:c1:b5:36:20:
                    0d:95:32:5f:fb:f5:42:3c:f1:e3:05:cb:71:c0:06:
                    6d:c7:c1:55:73:85:c9:c9:ac:c5:38:ed:d3:5e:5f:
                    8a:84:58:b9:f3:de:8b:45:49:e9:8b:32:b8:89:d7:
                    7f:f5:d3:1e:d8:17:ea:fc:49:7f:98:dd:81:16:6f:
                    50:8a:88:15:38:67:96:a2:5c:a7:39:5d:52:17:72:
                    b1:cf:a2:8e:5a:6c:cd:24:ce:c6:8a:76:71:35:94:
                    30:91:00:c3:43:7a:d2:85:3b:5d:cb:a5:aa:81:a9:
                    55:e8:d6:fa:9e:7d:7c:8e:94:c2:67:22:6d:6f:3d:
                    e1:ce:40:a6:7a:77:ae:55:94:ee:c6:13:aa:57:6f:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:57:71:EB:FF:0C:83:95:93:DC:56:AA:28:F2:CD:18:46:98:63:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b3aa0c0-8f71-3fc4-b739-d73a8ed3adce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:20c6:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d2:43:e2:73:6a:61:33:35:25:9a:39:d0:95:b1:85:10:29:
         05:f1:95:1d:3c:12:e3:89:1a:19:45:df:0a:e3:a5:15:b9:01:
         5f:3f:21:4c:e1:f8:1e:a2:26:0d:d0:48:aa:a5:3b:60:95:74:
         d8:a7:ea:db:48:20:ce:70:17:e0:94:cf:be:8b:bd:98:6e:68:
         56:a6:1f:4c:3c:74:0d:dd:c9:a2:37:6c:23:00:84:2c:0d:07:
         2d:e0:1a:27:64:d8:8e:b9:b0:0f:6b:c6:d2:69:d6:0b:dd:50:
         3d:0f:65:d3:e4:66:37:4e:8d:c7:56:9a:95:e0:73:9e:8e:7a:
         a2:0a:f7:af:52:15:f4:22:a3:e5:86:3a:30:08:41:94:c1:60:
         96:40:62:66:eb:d5:22:71:7d:d1:21:49:f7:92:ca:2a:72:2e:
         04:ce:31:1f:db:a1:61:99:1e:0a:f3:1e:ae:fa:53:21:a6:b5:
         45:2c:74:db:d0:44:69:77:e6:23:7e:ec:64:b3:6c:ab:e2:72:
         57:ed:49:dd:f9:3e:2a:29:2e:f0:96:27:98:5c:e8:ca:17:2e:
         12:cf:7c:9c:dc:a5:ea:4c:5f:c6:85:7a:af:62:a3:1f:74:cf:
         d6:2a:63:98:8d:f9:cd:7d:05:31:c6:fd:73:77:5f:2c:bb:79:
         8f:7c:45:51
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErgMTwwZN1h2I6bbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
MzI0YTE5MWQtYTY5Yi00YWY3LWJkYzYtN2NkYjA3MmYyNWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMtluQI+/8bq2VHj/VShBybNzsiLmX2PYk7w
mS42B4IxouObKsTQkTMof3Y9ASUAOy46MUxSzTOTb05A/NiWVOTXEkD8IBunCgmy
ztTObPbQZ/iMhmdE3KcJs6jJn1ZzH/GGRYj+i26SiBcFPdsmIm1nGMG1NiANlTJf
+/VCPPHjBctxwAZtx8FVc4XJyazFOO3TXl+KhFi5896LRUnpizK4idd/9dMe2Bfq
/El/mN2BFm9QiogVOGeWolynOV1SF3Kxz6KOWmzNJM7GinZxNZQwkQDDQ3rShTtd
y6WqgalV6Nb6nn18jpTCZyJtbz3hzkCmeneuVZTuxhOqV28gvwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP9Xcev/DIOVk9xWqijyzRhGmGMZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2IzYWEwYzAtOGY3MS0z
ZmM0LWI3MzktZDczYThlZDNhZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgxoAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAstJD4nNqYTM1JZo50JWxhRApBfGVHTwS44kaGUXfCuOlFbkBXz8h
TOH4HqImDdBIqqU7YJV02Kfq20ggznAX4JTPvou9mG5oVqYfTDx0Dd3JojdsIwCE
LA0HLeAaJ2TYjrmwD2vG0mnWC91QPQ9l0+RmN06Nx1aaleBzno56ogr3r1IV9CKj
5YY6MAhBlMFglkBiZuvVInF90SFJ95LKKnIuBM4xH9uhYZkeCvMervpTIaa1RSx0
29BEaXfmI37sZLNsq+JyV+1J3fk+Kiku8JYnmFzoyhcuEs98nNyl6kxfxoV6r2Kj
H3TP1ipjmI35zX0FMcb9c3dfLLt5j3xFUQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:03:55 2025 by rpki-client