Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
File:                     cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa (raw, json)
Hash identifier:          r3ccws8uT5kB1QfkJ1lKZWCgT3AwBqY49c5fmVj28Lc=
Subject key identifier:   81:7C:59:3B:78:90:91:5E:B1:54:5E:51:E8:DC:A6:4E:4B:0E:52:EF
Certificate issuer:       /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial:       010D0C9F4328584A549B1C26D1AA70885AE25040
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     32604
IP address blocks:        2602:fa9c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:1c:26:d1:aa:70:88:5a:e2:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=f55cd8de-be91-4809-9c9b-248413d003d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:e0:a3:1e:6a:6f:70:0a:27:03:35:78:5a:
                    f1:0b:42:e0:f5:31:3d:25:3a:b4:58:dc:6a:ce:cc:
                    09:e1:22:ff:9d:06:fb:e2:ea:98:07:24:b2:f5:e7:
                    61:a8:d6:30:e4:25:73:06:e8:f3:75:67:14:af:33:
                    88:88:5f:01:df:84:ec:d6:2f:20:18:c7:84:77:7f:
                    72:6e:8a:e6:14:45:46:e5:c6:e7:2a:79:5e:cc:eb:
                    f0:f2:9e:08:5d:5e:89:c8:31:d7:cd:04:ab:4c:94:
                    bc:91:47:c7:eb:15:4b:ae:a2:2b:f8:3b:35:26:d8:
                    bf:af:b3:d2:6a:8d:d2:a8:ca:4e:73:30:e4:da:60:
                    d1:44:2b:93:91:a6:3d:19:03:e8:e8:39:f9:b6:16:
                    03:57:78:59:af:f1:f2:a4:76:55:df:c4:cc:ca:ab:
                    04:c3:c0:a8:63:48:bf:dc:83:58:94:bd:8b:fd:d2:
                    95:7d:9c:0b:d9:3c:e0:d3:48:80:59:5a:26:68:c8:
                    8e:df:58:21:e9:1e:f5:97:05:0c:75:6b:f0:5e:b3:
                    26:ea:83:6a:bc:2c:a6:6f:d3:4b:59:64:88:70:93:
                    59:a0:b3:89:39:95:9d:fe:dd:16:22:3b:12:81:ce:
                    d1:17:4a:14:2c:e5:07:6a:8a:d5:bb:b7:da:97:f0:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7C:59:3B:78:90:91:5E:B1:54:5E:51:E8:DC:A6:4E:4B:0E:52:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl

            X509v3 Authority Key Identifier:
                keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:43:23:df:ff:26:ee:4b:6b:e3:ca:fa:db:94:cc:40:37:dc:
         67:c1:9b:ef:00:64:a0:72:7d:11:7e:83:ac:4f:1b:2c:13:1a:
         f4:9b:5d:e9:e6:17:f1:8a:5d:bc:8f:4a:c5:be:a4:2f:9d:8d:
         4c:33:a5:23:81:8d:55:a4:f5:5a:77:7f:9d:e6:49:15:09:45:
         5e:a2:8c:37:90:c9:70:91:16:db:64:b3:05:36:44:7f:3f:5a:
         19:93:b0:b0:e3:cd:aa:4b:ab:02:cc:4d:71:4a:3f:ab:55:64:
         38:0a:43:01:ff:5a:92:16:40:b7:a5:40:12:f0:21:7a:2d:31:
         6c:47:6e:8d:65:ca:67:3d:53:a4:23:cd:da:da:d4:39:2c:5e:
         c2:e2:cc:c4:22:d5:c8:ba:11:20:19:f4:e9:7e:a3:27:0d:ae:
         8f:32:eb:4a:21:ec:65:ec:a6:dd:52:6a:26:3d:2a:cb:49:ef:
         96:42:4a:d8:e1:71:1a:b1:cd:14:17:8e:6b:4d:dd:2e:49:b2:
         6b:9d:76:6e:37:31:53:f3:60:43:fa:9a:c8:17:5a:1c:ac:5a:
         c4:e1:83:09:d2:4f:e4:82:ca:84:b0:b6:52:b2:17:b4:b9:a3:
         e3:c1:09:98:26:57:c0:a0:6d:ff:85:8a:ad:7b:1d:ed:da:82:
         0f:66:de:e5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpUmxwm0apwiFriUEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ5MzgxYTMtOWM2Zi00N2Q2LTljNTItOWZhMDdkMmJm
MTg4MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk
ZjU1Y2Q4ZGUtYmU5MS00ODA5LTljOWItMjQ4NDEzZDAwM2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTrgox5qb3AKJwM1eFrxC0Lg9TE9JTq0WNxq
zswJ4SL/nQb74uqYBySy9edhqNYw5CVzBujzdWcUrzOIiF8B34Ts1i8gGMeEd39y
bormFEVG5cbnKnlezOvw8p4IXV6JyDHXzQSrTJS8kUfH6xVLrqIr+Ds1Jti/r7PS
ao3SqMpOczDk2mDRRCuTkaY9GQPo6Dn5thYDV3hZr/HypHZV38TMyqsEw8CoY0i/
3INYlL2L/dKVfZwL2Tzg00iAWVomaMiO31gh6R71lwUMdWvwXrMm6oNqvCymb9NL
WWSIcJNZoLOJOZWd/t0WIjsSgc7RF0oULOUHaorVu7fal/CrjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIF8WTt4kJFesVReUejcpk5LDlLvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkz
ODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEwN2QyYmYxODgvY2IyYWJmNjktMWRlNC0z
NGYwLTliZGEtNGY2NjIzNTBkYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTQ5MzgxYTMtOWM2Zi00N2Q2LTlj
NTItOWZhMDdkMmJmMTg4L2E0OTM4MWEzLTljNmYtNDdkNi05YzUyLTlmYTA3ZDJi
ZjE4OC5jcmwwHwYDVR0jBBgwFoAUYlJh53P6ANsVeqjVvHpystSAfMswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hNDkzODFhMy05YzZmLTQ3ZDYtOWM1Mi05ZmEw
N2QyYmYxODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6nAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEpDI9//Ju5La+PK+tuUzEA33GfBm+8AZKByfRF+g6xPGywTGvSb
XenmF/GKXbyPSsW+pC+djUwzpSOBjVWk9Vp3f53mSRUJRV6ijDeQyXCRFttkswU2
RH8/WhmTsLDjzapLqwLMTXFKP6tVZDgKQwH/WpIWQLelQBLwIXotMWxHbo1lymc9
U6Qjzdra1DksXsLizMQi1ci6ESAZ9Ol+oycNro8y60oh7GXspt1SaiY9KstJ75ZC
StjhcRqxzRQXjmtN3S5Jsmuddm43MVPzYEP6msgXWhysWsThgwnST+SCyoSwtlKy
F7S5o+PBCZgmV8Cgbf+Fiq17He3agg9m3uU=
-----END CERTIFICATE-----
Generated at Tue Jul 1 12:06:04 2025 by rpki-client