Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa
File:                     0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa (raw, json)
Hash identifier:          H6qNi3GobpG0glwBAR/6lf+2EeKt2wcDzZULRyNtkGE=
Subject key identifier:   7B:86:FB:AA:CC:D5:01:2C:AF:A2:E4:82:36:E2:17:CB:26:51:74:26
Certificate issuer:       /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial:       010D0C9F4328584A549B1C3AE19BDA695C2BA980
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     32604
IP address blocks:        2602:fa9c:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:1c:3a:e1:9b:da:69:5c:2b:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=4db32b76-ab6e-4c55-badd-2700b31ef4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:36:aa:87:03:38:6d:f7:f4:72:df:dc:ed:
                    9d:dc:86:27:33:1d:c2:e0:71:eb:25:2e:a0:74:f0:
                    54:9e:08:06:e5:3c:26:76:4f:42:42:17:d1:9b:fb:
                    2b:2c:fe:d3:1a:f0:f1:4a:9b:04:42:ea:03:84:fb:
                    3e:d2:2f:9f:33:ce:e8:bf:a6:72:fe:d4:fc:bd:c5:
                    32:73:05:f2:bf:e9:96:f9:24:c2:d4:d6:bb:0f:7e:
                    d9:31:0d:a5:ec:42:a3:be:bb:6c:ed:33:d9:76:e8:
                    4c:5d:5e:d0:b5:33:e8:38:91:c3:87:8a:93:f7:99:
                    66:14:90:68:4c:02:f0:37:82:21:b4:6f:69:4f:b0:
                    40:2e:68:a6:b6:0b:a4:88:8d:f2:1b:a7:af:33:6f:
                    b3:cd:34:60:00:e1:0e:04:ef:62:d7:4d:c3:eb:da:
                    fb:e7:3f:2a:41:c3:1a:61:ec:09:b7:8b:96:aa:20:
                    3b:0e:d4:9a:87:43:89:37:47:12:a9:8e:69:54:70:
                    12:83:52:91:97:41:68:c8:a0:0e:ee:fd:1f:bc:97:
                    81:d1:31:68:b6:16:1b:9c:d4:04:41:fa:ca:4b:bd:
                    70:99:aa:ac:eb:9b:0b:ba:eb:39:27:e8:c9:0d:3f:
                    8f:1d:28:b7:64:7b:1b:05:bc:6d:23:b8:49:a2:b5:
                    83:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:86:FB:AA:CC:D5:01:2C:AF:A2:E4:82:36:E2:17:CB:26:51:74:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl

            X509v3 Authority Key Identifier:
                keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9c:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c5:dd:af:f6:91:ea:a1:fa:06:43:f7:c6:b4:f9:32:ea:6e:
         d2:35:ef:03:e4:70:93:d3:47:d1:d5:ec:ef:48:89:cf:e7:12:
         87:db:87:d3:02:60:9f:04:64:05:6a:ac:73:ec:96:f5:22:4e:
         82:a2:af:2e:81:bc:fe:cf:1c:63:b9:3a:07:f7:83:6b:ca:67:
         59:9a:09:18:4d:0a:86:61:d3:00:0e:47:39:be:a2:69:4f:a6:
         4d:fb:b1:11:4c:88:ed:b1:2d:e2:54:ff:57:ae:57:04:ee:e4:
         81:bb:4f:c3:2f:99:cc:06:51:a1:82:45:2b:cc:96:29:0c:8a:
         99:8d:4d:ba:2b:12:a1:2e:e2:05:97:90:a2:bc:e1:48:89:d9:
         0f:8c:36:ab:3e:85:f4:0c:57:28:f2:3d:03:00:65:2c:9e:ea:
         e0:92:cc:94:b0:e9:a8:b9:10:84:29:82:e9:e5:7a:4d:3d:8c:
         6c:5f:aa:82:e6:a2:ab:0d:af:50:0d:1b:24:af:0e:0a:35:47:
         8c:f6:77:58:f5:26:72:af:22:54:6b:89:55:5b:14:38:41:6f:
         fa:06:cf:fc:8d:ed:71:cc:a4:cd:59:19:d0:a4:81:bc:0e:db:
         7b:cc:6d:b7:cf:58:3e:82:80:70:c7:ed:0e:0e:88:d2:d8:36:
         30:2b:58:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpUmxw64ZvaaVwrqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ5MzgxYTMtOWM2Zi00N2Q2LTljNTItOWZhMDdkMmJm
MTg4MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk
NGRiMzJiNzYtYWI2ZS00YzU1LWJhZGQtMjcwMGIzMWVmNGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8k2qocDOG339HLf3O2d3IYnMx3C4HHrJS6g
dPBUnggG5Twmdk9CQhfRm/srLP7TGvDxSpsEQuoDhPs+0i+fM87ov6Zy/tT8vcUy
cwXyv+mW+STC1Na7D37ZMQ2l7EKjvrts7TPZduhMXV7QtTPoOJHDh4qT95lmFJBo
TALwN4IhtG9pT7BALmimtgukiI3yG6evM2+zzTRgAOEOBO9i103D69r75z8qQcMa
YewJt4uWqiA7DtSah0OJN0cSqY5pVHASg1KRl0FoyKAO7v0fvJeB0TFothYbnNQE
QfrKS71wmaqs65sLuus5J+jJDT+PHSi3ZHsbBbxtI7hJorWDCwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHuG+6rM1QEsr6LkgjbiF8smUXQmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkz
ODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEwN2QyYmYxODgvMGViYzBiYTgtZDI1MS0z
ZjE4LWE3MGUtMWI2YTBkNmRmOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTQ5MzgxYTMtOWM2Zi00N2Q2LTlj
NTItOWZhMDdkMmJmMTg4L2E0OTM4MWEzLTljNmYtNDdkNi05YzUyLTlmYTA3ZDJi
ZjE4OC5jcmwwHwYDVR0jBBgwFoAUYlJh53P6ANsVeqjVvHpystSAfMswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkzODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEw
N2QyYmYxODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6nAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGPF3a/2keqh+gZD98a0+TLqbtI17wPkcJPTR9HV7O9Iic/nEofb
h9MCYJ8EZAVqrHPslvUiToKiry6BvP7PHGO5Ogf3g2vKZ1maCRhNCoZh0wAORzm+
omlPpk37sRFMiO2xLeJU/1euVwTu5IG7T8MvmcwGUaGCRSvMlikMipmNTborEqEu
4gWXkKK84UiJ2Q+MNqs+hfQMVyjyPQMAZSye6uCSzJSw6ai5EIQpgunlek09jGxf
qoLmoqsNr1ANGySvDgo1R4z2d1j1JnKvIlRriVVbFDhBb/oGz/yN7XHMpM1ZGdCk
gbwO23vMbbfPWD6CgHDH7Q4OiNLYNjArWGA=
-----END CERTIFICATE-----
Generated at Tue Jul 1 05:08:20 2025 by rpki-client