Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/255bb3fc-187b-3f8c-9677-3842e9537e0d.roa
File:                     255bb3fc-187b-3f8c-9677-3842e9537e0d.roa (raw, json)
Hash identifier:          J58XhDbBz5Uo/TJbuMdEuJR65jOS2FkeQHVp61VWuW8=
Subject key identifier:   44:39:B0:ED:7C:27:0C:4C:F5:06:92:A5:5D:DD:A1:DA:17:3C:E6:19
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584ADECBC3E74191B54AE9AA99C0
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/255bb3fc-187b-3f8c-9677-3842e9537e0d.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2603:5004:8000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:c3:e7:41:91:b5:4a:e9:aa:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=2d6b7558-39bc-4d35-aea2-41bc51a73824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3e:2f:b8:e7:b3:67:d3:61:b9:76:fd:ca:59:
                    64:29:a6:69:04:6a:df:6d:e7:8f:2d:d0:8c:de:b9:
                    b6:79:6b:46:3c:0a:81:b6:fb:54:55:ad:e5:3a:4e:
                    b3:e6:e3:73:2d:22:c8:75:86:52:aa:e5:84:39:75:
                    92:de:c4:6d:f9:10:8d:3d:9f:e9:97:5c:1b:53:20:
                    d9:84:b4:7e:d9:b6:cc:a4:6b:dd:84:9c:56:ee:64:
                    86:a7:b1:ec:14:23:3d:54:23:a1:8d:6a:eb:26:2a:
                    0b:f8:ee:9a:ff:ef:34:ae:0e:41:fc:eb:59:47:31:
                    65:8a:c5:26:d4:dd:a8:71:5d:d7:c7:b3:06:d9:38:
                    17:d6:84:67:ab:0d:87:02:7c:63:c4:51:86:5c:df:
                    ca:f4:5c:4c:7b:d1:03:3a:2c:38:d9:1f:17:61:93:
                    46:d9:90:de:51:ef:09:8c:fe:bc:fa:96:bc:fe:ed:
                    4e:66:92:83:8c:2f:2d:3f:3a:9c:8a:2a:75:df:68:
                    fb:33:51:90:96:76:b9:1a:61:cc:b4:2b:ab:f2:37:
                    53:1a:0f:e9:72:14:bc:62:28:35:65:69:3e:53:51:
                    ec:a8:21:7b:e8:1d:78:be:68:4a:57:ff:63:4d:5d:
                    63:39:37:6c:b5:94:0c:76:d9:a6:82:8a:13:0e:ff:
                    24:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:39:B0:ED:7C:27:0C:4C:F5:06:92:A5:5D:DD:A1:DA:17:3C:E6:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/255bb3fc-187b-3f8c-9677-3842e9537e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5004:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:85:c4:ae:e6:7c:c7:af:b1:23:f8:67:89:0a:73:ff:33:e9:
         74:b0:24:22:e7:9e:39:56:13:ee:2e:a9:07:15:34:a8:f6:3e:
         a3:91:ec:70:cd:d6:29:92:3a:b9:20:29:9a:5b:de:39:ec:f8:
         bc:db:a9:26:6a:4b:56:b6:29:4e:95:de:25:be:c0:84:25:ea:
         8b:88:57:17:81:18:53:5e:d3:58:94:1f:e6:e2:be:c6:f6:9f:
         13:38:1b:fa:c4:a4:41:c2:5a:db:1c:b3:b9:d9:5d:40:b5:15:
         74:42:7f:d1:13:7f:bf:2a:f3:e2:7e:a3:f4:56:78:62:01:b8:
         1c:79:e3:bf:bb:4f:3c:07:fb:de:2d:05:bb:28:d4:3e:53:6c:
         2c:3e:c5:24:7d:8c:71:42:cb:79:a3:42:19:40:52:9c:e0:b5:
         7f:77:1d:b4:74:ef:24:cc:73:29:48:fd:9e:95:87:9c:a8:0f:
         4b:07:19:b7:38:3c:5d:48:6d:2b:09:09:61:c2:ba:64:9d:e9:
         09:07:86:c5:12:b1:03:9f:b3:55:b6:e1:a1:ff:f4:f5:e3:5c:
         c1:b7:d5:88:7c:e0:e8:25:54:89:53:78:88:a8:d0:19:fd:02:
         01:82:13:24:0c:d1:6b:ba:35:c9:16:f3:52:fe:d3:26:e1:ce:
         36:b6:71:fb
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErey8PnQZG1SumqmcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc1ZDIwZjYtMWNmYS00ODNlLWJlMGYtZDE1ZWI1NDhm
NjZkMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk
MmQ2Yjc1NTgtMzliYy00ZDM1LWFlYTItNDFiYzUxYTczODI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD4vuOezZ9NhuXb9yllkKaZpBGrfbeePLdCM
3rm2eWtGPAqBtvtUVa3lOk6z5uNzLSLIdYZSquWEOXWS3sRt+RCNPZ/pl1wbUyDZ
hLR+2bbMpGvdhJxW7mSGp7HsFCM9VCOhjWrrJioL+O6a/+80rg5B/OtZRzFlisUm
1N2ocV3Xx7MG2TgX1oRnqw2HAnxjxFGGXN/K9FxMe9EDOiw42R8XYZNG2ZDeUe8J
jP68+pa8/u1OZpKDjC8tPzqciip132j7M1GQlna5GmHMtCur8jdTGg/pchS8Yig1
ZWk+U1HsqCF76B14vmhKV/9jTV1jOTdstZQMdtmmgooTDv8kVQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEQ5sO18JwxM9QaSpV3dodoXPOYZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NzVk
MjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVlYjU0OGY2NmQvMjU1YmIzZmMtMTg3Yi0z
ZjhjLTk2NzctMzg0MmU5NTM3ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc1ZDIwZjYtMWNmYS00ODNlLWJl
MGYtZDE1ZWI1NDhmNjZkLzc3NWQyMGY2LTFjZmEtNDgzZS1iZTBmLWQxNWViNTQ4
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUGy2qCGYWpuHYP/G3Oy3sdH8TIz4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83NzVkMjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVl
YjU0OGY2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgNQBIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJoXEruZ8x6+xI/hniQpz/zPpdLAkIueeOVYT7i6pBxU0qPY+o5Hs
cM3WKZI6uSApmlveOez4vNupJmpLVrYpTpXeJb7AhCXqi4hXF4EYU17TWJQf5uK+
xvafEzgb+sSkQcJa2xyzudldQLUVdEJ/0RN/vyrz4n6j9FZ4YgG4HHnjv7tPPAf7
3i0FuyjUPlNsLD7FJH2McULLeaNCGUBSnOC1f3cdtHTvJMxzKUj9npWHnKgPSwcZ
tzg8XUhtKwkJYcK6ZJ3pCQeGxRKxA5+zVbbhof/09eNcwbfViHzg6CVUiVN4iKjQ
Gf0CAYITJAzRa7o1yRbzUv7TJuHONrZx+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:13:36 2025 by rpki-client