Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa
File:                     ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa (raw, json)
Hash identifier:          t9McpA+BAhFDDi5StGrRkc7uPQIUutH9AT439yPjEko=
Subject key identifier:   45:C2:0E:3C:F6:67:78:7C:FD:92:01:08:08:64:F6:7B:2D:12:B1:47
Certificate issuer:       /CN=e7f210e3-2923-4916-a0dd-8d3cc9158403
Certificate serial:       010D0C9F4328584A5A30771110AC2BC1879F7900
Authority key identifier: BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     394837
IP address blocks:        2607:9d40::/32 maxlen: 32
                          2607:9d40::/37 maxlen: 37
                          2607:9d40:800::/37 maxlen: 37
                          2607:9d40:1000::/37 maxlen: 37
                          2607:9d40:1800::/37 maxlen: 37
                          2607:9d40:2000::/37 maxlen: 37
                          2607:9d40:2800::/37 maxlen: 37
                          2607:9d40:3000::/37 maxlen: 37
                          2607:9d40:3800::/37 maxlen: 37
                          2607:9d40:4000::/37 maxlen: 37
                          2607:9d40:4800::/37 maxlen: 37
                          2607:9d40:5000::/37 maxlen: 37
                          2607:9d40:5800::/37 maxlen: 37
                          2607:9d40:6000::/37 maxlen: 37
                          2607:9d40:6800::/37 maxlen: 37
                          2607:9d40:7000::/37 maxlen: 37
                          2607:9d40:7800::/37 maxlen: 37
                          2607:9d40:8000::/37 maxlen: 37
                          2607:9d40:8800::/37 maxlen: 37
                          2607:9d40:9000::/37 maxlen: 37
                          2607:9d40:9800::/37 maxlen: 37
                          2607:9d40:a000::/37 maxlen: 37
                          2607:9d40:a800::/37 maxlen: 37
                          2607:9d40:b000::/37 maxlen: 37
                          2607:9d40:b800::/37 maxlen: 37
                          2607:9d40:c000::/37 maxlen: 37
                          2607:9d40:c800::/37 maxlen: 37
                          2607:9d40:d000::/37 maxlen: 37
                          2607:9d40:d800::/37 maxlen: 37
                          2607:9d40:e000::/37 maxlen: 37
                          2607:9d40:e800::/37 maxlen: 37
                          2607:9d40:f000::/37 maxlen: 37
                          2607:9d40:f800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:77:11:10:ac:2b:c1:87:9f:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f210e3-2923-4916-a0dd-8d3cc9158403
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=fcb90aa8-6b1b-47b8-a4d6-4868217201f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c6:3b:bf:41:cf:7c:bf:6c:e9:1b:5c:1d:7f:
                    86:5f:79:92:7f:5b:3e:cc:91:a7:8b:62:04:1b:30:
                    93:08:24:c9:a4:c2:c2:6e:da:8d:a8:70:3d:bf:92:
                    ed:68:a2:8b:67:2a:01:4f:27:bf:8b:e8:96:7e:ed:
                    64:47:c6:18:79:aa:e2:55:20:2b:ae:be:90:ed:1e:
                    8d:2b:b2:9a:7b:25:c0:66:98:6a:72:29:c6:a8:bf:
                    6d:86:68:18:e6:e5:3d:33:f9:a7:3c:4a:07:a6:74:
                    65:f0:62:05:c1:ef:dd:06:87:68:71:09:c4:bf:6a:
                    b3:bc:5d:b7:95:5e:25:29:b4:9f:bf:34:29:73:6f:
                    9f:53:0d:ad:3a:ec:0d:08:5a:8b:49:e0:ad:81:06:
                    e0:e9:93:4c:dd:e9:35:71:eb:15:10:61:79:ef:6c:
                    ce:18:90:ba:6d:ae:23:94:bd:7e:29:41:4c:b8:86:
                    b2:93:0d:e0:e5:7b:b6:30:01:32:d4:5b:bc:01:0a:
                    b8:02:56:48:3e:ac:00:53:d6:e1:ce:b9:60:e1:bb:
                    65:75:45:e3:54:bc:82:67:36:e4:8b:2b:4b:78:2b:
                    8b:07:08:f5:7b:12:f3:c6:fb:74:57:7d:39:59:62:
                    d4:4f:66:04:75:d4:49:cf:4a:0f:76:67:ca:4c:32:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C2:0E:3C:F6:67:78:7C:FD:92:01:08:08:64:F6:7B:2D:12:B1:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/ab90850a-392a-34a3-aafa-e77d19ae6ba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403/e7f210e3-2923-4916-a0dd-8d3cc9158403.crl

            X509v3 Authority Key Identifier:
                keyid:BB:6A:83:FC:E2:B2:12:66:E9:FD:F7:B1:AF:54:50:0B:F9:0B:D8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7f210e3-2923-4916-a0dd-8d3cc9158403.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b1:83:4a:3b:f0:06:0b:5c:66:49:7a:cc:1e:9b:52:f1:4b:
         21:19:6b:6c:65:53:52:b8:d6:76:11:d7:22:4b:89:9b:58:ad:
         24:ec:d5:bc:a4:70:3c:19:69:aa:18:19:96:d6:64:65:a0:8d:
         01:dc:b2:07:1b:d9:06:95:ab:61:c6:46:b3:c8:24:f9:4d:c3:
         4d:db:30:d5:0c:af:5a:d2:20:fd:99:c9:f2:cf:5e:94:6d:6b:
         e6:5b:d3:b6:08:31:65:3d:8d:ae:b4:25:8a:35:36:e8:28:53:
         05:cc:c0:68:f7:1a:7f:bf:b1:bc:17:96:8a:04:b0:c9:0b:4e:
         0c:45:0b:c1:ce:05:c2:08:fc:f4:4f:b5:85:67:9d:f4:e9:f5:
         66:51:f4:49:28:4f:33:18:29:f6:af:1a:7b:63:d6:d7:39:3a:
         00:39:99:b2:23:0f:78:84:2b:57:bc:57:03:34:66:5a:0d:38:
         2d:58:55:ad:63:e3:47:22:0d:bd:ef:84:71:c6:33:c0:fe:07:
         97:68:b8:49:1b:6d:23:db:ef:46:fa:4a:2e:99:c1:55:8f:e6:
         82:ff:06:88:ce:d8:62:a2:1c:0a:fe:26:d0:34:f5:2a:4e:4a:
         ae:5d:ef:98:0c:a3:ae:54:c7:85:59:21:b1:52:35:73:74:3d:
         99:cb:19:5a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpaMHcREKwrwYefeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdmMjEwZTMtMjkyMy00OTE2LWEwZGQtOGQzY2M5MTU4
NDAzMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk
ZmNiOTBhYTgtNmIxYi00N2I4LWE0ZDYtNDg2ODIxNzIwMWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsY7v0HPfL9s6RtcHX+GX3mSf1s+zJGni2IE
GzCTCCTJpMLCbtqNqHA9v5LtaKKLZyoBTye/i+iWfu1kR8YYeariVSArrr6Q7R6N
K7KaeyXAZphqcinGqL9thmgY5uU9M/mnPEoHpnRl8GIFwe/dBodocQnEv2qzvF23
lV4lKbSfvzQpc2+fUw2tOuwNCFqLSeCtgQbg6ZNM3ek1cesVEGF572zOGJC6ba4j
lL1+KUFMuIaykw3g5Xu2MAEy1Fu8AQq4AlZIPqwAU9bhzrlg4btldUXjVLyCZzbk
iytLeCuLBwj1exLzxvt0V305WWLUT2YEddRJz0oPdmfKTDIySwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEXCDjz2Z3h8/ZIBCAhk9nstErFHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lN2Yy
MTBlMy0yOTIzLTQ5MTYtYTBkZC04ZDNjYzkxNTg0MDMvYWI5MDg1MGEtMzkyYS0z
NGEzLWFhZmEtZTc3ZDE5YWU2YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTdmMjEwZTMtMjkyMy00OTE2LWEw
ZGQtOGQzY2M5MTU4NDAzL2U3ZjIxMGUzLTI5MjMtNDkxNi1hMGRkLThkM2NjOTE1
ODQwMy5jcmwwHwYDVR0jBBgwFoAUu2qD/OKyEmbp/fexr1RQC/kL2P8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lN2YyMTBlMy0yOTIzLTQ5MTYtYTBkZC04ZDNj
YzkxNTg0MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgedQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCJsYNKO/AGC1xmSXrMHptS8UshGWtsZVNSuNZ2EdciS4mbWK0k7NW8
pHA8GWmqGBmW1mRloI0B3LIHG9kGlathxkazyCT5TcNN2zDVDK9a0iD9mcnyz16U
bWvmW9O2CDFlPY2utCWKNTboKFMFzMBo9xp/v7G8F5aKBLDJC04MRQvBzgXCCPz0
T7WFZ5306fVmUfRJKE8zGCn2rxp7Y9bXOToAOZmyIw94hCtXvFcDNGZaDTgtWFWt
Y+NHIg2974RxxjPA/geXaLhJG20j2+9G+koumcFVj+aC/waIzthiohwK/ibQNPUq
TkquXe+YDKOuVMeFWSGxUjVzdD2Zyxla
-----END CERTIFICATE-----
Generated at Mon Jun 30 10:40:07 2025 by rpki-client