Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/21241b13-92d7-3d56-a386-ac8cf5db5dce.roa
File:                     21241b13-92d7-3d56-a386-ac8cf5db5dce.roa (raw, json)
Hash identifier:          B65QJV4zvrLlDpzNmilpR0FwQbZoIKpjp5BaNgzcPT4=
Subject key identifier:   26:F3:D1:F7:1A:63:FB:20:C3:A8:71:D1:E8:03:FF:89:2D:50:50:E0
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F4328584A093AA387F55A9F05536A5580
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/21241b13-92d7-3d56-a386-ac8cf5db5dce.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     401362
IP address blocks:        2602:fa42:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a3:87:f5:5a:9f:05:53:6a:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=f7991989-9af5-4b40-87d7-1275f7f55fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:db:42:f8:46:ee:a9:31:8b:6e:69:6b:82:0b:
                    c2:0a:d9:4a:84:e9:d7:01:f9:97:95:75:29:53:4d:
                    a0:d5:56:19:ae:79:a6:16:db:26:d7:c1:e6:0e:36:
                    91:df:76:76:a0:10:a5:d3:15:18:74:b1:bc:6d:f4:
                    28:64:a2:14:4c:8e:e4:3b:14:1c:c1:5d:e3:4c:97:
                    c0:8b:04:be:20:5a:9b:23:c0:0e:98:14:53:ed:81:
                    e8:ec:63:58:d2:0d:24:ac:21:1b:74:e7:f8:01:48:
                    19:0c:54:25:8e:b9:7c:43:09:b5:fb:0b:08:de:f9:
                    d0:2f:85:96:48:94:4e:52:94:cc:44:cc:e5:a4:e0:
                    1c:be:79:4b:fd:b0:fd:f7:5b:dc:77:e7:fa:05:54:
                    e8:07:e7:d2:c9:fb:3c:27:83:2e:d0:90:88:4c:8e:
                    b4:f0:8d:69:8c:28:2c:7f:da:f6:e7:8b:97:32:97:
                    29:38:00:c6:0b:fa:b5:27:a2:7d:f0:6c:68:e1:a7:
                    6b:3f:f8:dc:59:91:92:3a:ec:a6:44:c5:dd:47:3b:
                    7c:76:b0:60:f3:8f:2a:32:44:34:c1:03:36:2c:52:
                    6a:b4:64:b6:12:6f:3a:e6:e2:c0:3f:f6:2d:89:64:
                    a4:11:fb:b7:41:2c:01:e9:fd:e1:df:e7:fe:04:d8:
                    ae:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F3:D1:F7:1A:63:FB:20:C3:A8:71:D1:E8:03:FF:89:2D:50:50:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/21241b13-92d7-3d56-a386-ac8cf5db5dce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa42:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:40:71:63:b7:c6:d4:1b:2b:72:be:8b:f3:88:a6:ee:dc:85:
         0b:80:62:db:36:88:52:af:f2:07:9b:07:16:ba:33:61:ff:a5:
         bb:a2:25:a9:d5:4a:72:23:73:3b:0a:da:27:6b:ed:62:3e:93:
         8e:a5:86:6b:16:ff:a5:94:ec:df:5b:d1:86:9d:f7:ab:62:52:
         2f:30:0b:7b:ff:bb:a9:0a:4f:ba:de:fb:03:ac:61:35:c8:b4:
         ea:57:57:fe:01:49:91:7c:61:c7:a4:7b:46:ff:2d:f5:9b:1a:
         a0:61:35:80:fd:26:b9:58:9b:62:17:45:9a:ce:5a:cb:c6:10:
         e7:a1:7a:52:d8:fa:8a:65:9d:b9:51:a7:ed:d0:85:a6:4e:3e:
         4b:fb:33:37:1a:f5:44:c5:51:9d:e1:79:58:3d:ec:f5:7a:68:
         98:56:63:41:6c:bc:1f:9d:e4:5b:86:ef:4d:be:1d:4a:e9:f1:
         1c:b0:0a:eb:c4:58:0c:9c:c8:09:81:55:5d:22:56:14:45:0d:
         e0:28:00:98:92:d2:2a:3f:3a:d2:e4:d0:51:52:1f:53:e4:29:
         ab:f7:3f:dc:ae:30:cd:17:9c:d0:35:1c:cd:eb:ea:9d:c1:ed:
         77:f5:31:86:60:b5:1c:3f:3e:10:c2:02:75:27:51:04:5e:ae:
         88:99:3b:4c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoJOqOH9VqfBVNqVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJiZTY5MTItYTQ4Yi00NDFiLTllZTYtOTRhYTZkYTAz
Mjc1MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk
Zjc5OTE5ODktOWFmNS00YjQwLTg3ZDctMTI3NWY3ZjU1ZmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdtC+EbuqTGLbmlrggvCCtlKhOnXAfmXlXUp
U02g1VYZrnmmFtsm18HmDjaR33Z2oBCl0xUYdLG8bfQoZKIUTI7kOxQcwV3jTJfA
iwS+IFqbI8AOmBRT7YHo7GNY0g0krCEbdOf4AUgZDFQljrl8Qwm1+wsI3vnQL4WW
SJROUpTMRMzlpOAcvnlL/bD991vcd+f6BVToB+fSyfs8J4Mu0JCITI608I1pjCgs
f9r254uXMpcpOADGC/q1J6J98Gxo4adrP/jcWZGSOuymRMXdRzt8drBg848qMkQ0
wQM2LFJqtGS2Em865uLAP/YtiWSkEfu3QSwB6f3h3+f+BNiu+wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCbz0fcaY/sgw6hx0egD/4ktUFDgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83MmJl
NjkxMi1hNDhiLTQ0MWItOWVlNi05NGFhNmRhMDMyNzUvMjEyNDFiMTMtOTJkNy0z
ZDU2LWEzODYtYWM4Y2Y1ZGI1ZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzJiZTY5MTItYTQ4Yi00NDFiLTll
ZTYtOTRhYTZkYTAzMjc1LzcyYmU2OTEyLWE0OGItNDQxYi05ZWU2LTk0YWE2ZGEw
MzI3NS5jcmwwHwYDVR0jBBgwFoAUoU1WbC8yzneHx9LMOrMYtGeb/IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83MmJlNjkxMi1hNDhiLTQ0MWItOWVlNi05NGFh
NmRhMDMyNzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6QgIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALUBxY7fG1Bsrcr6L84im7tyFC4Bi2zaIUq/yB5sHFrozYf+lu6Il
qdVKciNzOwraJ2vtYj6TjqWGaxb/pZTs31vRhp33q2JSLzALe/+7qQpPut77A6xh
Nci06ldX/gFJkXxhx6R7Rv8t9ZsaoGE1gP0muVibYhdFms5ay8YQ56F6Utj6imWd
uVGn7dCFpk4+S/szNxr1RMVRneF5WD3s9XpomFZjQWy8H53kW4bvTb4dSunxHLAK
68RYDJzICYFVXSJWFEUN4CgAmJLSKj860uTQUVIfU+Qpq/c/3K4wzRec0DUczevq
ncHtd/UxhmC1HD8+EMICdSdRBF6uiJk7TA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:42:03 2025 by rpki-client