Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa
File:                     1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa (raw, json)
Hash identifier:          9nf2hmkClq6ThvZHQJDi6CMyqFRUtQ/KBYn6uLfRLSY=
Subject key identifier:   47:A2:92:B8:E9:54:92:A0:35:28:9B:A8:09:12:AA:42:27:ED:07:1A
Certificate issuer:       /CN=112b9ff8-31bc-4ba4-b852-11826fa336d5
Certificate serial:       010D0C9F4328584AD7D12AD8F5FE8797AAFE9C00
Authority key identifier: 88:24:CE:9B:C9:2F:15:68:37:5D:8A:4A:21:97:9D:E0:38:F7:39:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     53566
IP address blocks:        2606:dd80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:2a:d8:f5:fe:87:97:aa:fe:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112b9ff8-31bc-4ba4-b852-11826fa336d5
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=c6b7f9a6-f390-4885-809d-928d7942f893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:e7:5f:2b:07:4e:75:f8:98:df:a6:17:a8:
                    17:bc:65:68:bc:de:1e:64:a2:93:6d:17:69:bf:c1:
                    4b:69:2f:55:09:7e:53:f3:05:97:18:e9:de:50:0e:
                    0b:02:7e:03:b4:d2:19:b7:b8:41:e8:81:a5:82:8f:
                    d0:d4:69:1f:ee:6a:93:a0:0a:f0:cf:67:5c:08:d3:
                    79:37:42:14:41:67:61:6d:e3:c8:44:2c:89:bb:8e:
                    ca:76:28:02:8f:c5:ab:72:64:e1:71:14:c3:e8:89:
                    f8:34:e0:9f:d9:d7:dd:68:08:66:19:2b:e8:2d:64:
                    13:b5:8a:7b:dc:0d:f3:10:97:0a:b0:34:5d:46:8d:
                    28:99:38:92:b3:45:cf:f3:d1:dd:fb:0f:17:28:34:
                    d6:d0:26:d4:f6:2d:43:22:68:0e:6e:37:e2:81:82:
                    13:da:55:5f:84:7b:81:44:51:80:36:af:36:ac:66:
                    8f:7a:34:90:31:a8:c8:c3:34:3f:c8:45:3d:24:ae:
                    30:85:60:d1:ea:9f:c7:1a:0a:9a:0a:5f:9d:0f:e4:
                    2c:29:7c:d8:2d:7f:77:2b:ca:f4:7c:38:d0:53:93:
                    ae:eb:c0:47:32:2a:33:13:d5:08:86:d7:1e:fc:97:
                    5b:81:16:70:c8:5e:0a:21:7a:69:9d:a9:df:b1:29:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A2:92:B8:E9:54:92:A0:35:28:9B:A8:09:12:AA:42:27:ED:07:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.crl

            X509v3 Authority Key Identifier:
                keyid:88:24:CE:9B:C9:2F:15:68:37:5D:8A:4A:21:97:9D:E0:38:F7:39:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:29:5d:39:22:23:da:60:13:e4:f0:3d:73:b4:fe:3d:d1:
         90:8d:92:53:67:16:a4:68:04:bc:1c:6c:da:1f:7c:6c:ee:4e:
         16:c0:90:32:66:99:93:43:89:24:16:1d:68:45:8b:eb:19:58:
         90:d2:a8:42:89:ab:23:4f:fa:6f:66:36:30:4c:53:ef:6c:2e:
         a3:b4:53:a3:69:5e:6b:2a:7b:ae:f2:4f:e5:56:47:b8:5e:5f:
         26:6e:09:05:b9:80:6e:fc:1d:21:b4:d2:ae:a1:f6:61:5a:db:
         64:52:4c:8b:25:df:65:7f:8c:97:8f:ee:cd:d0:7b:5c:c8:44:
         52:37:0a:9a:0f:f3:e2:5e:74:17:ca:59:8e:d4:60:dc:61:dc:
         57:6b:55:5d:4c:2d:1c:0b:41:4c:78:82:76:65:47:7a:19:c4:
         4d:e9:dd:96:c9:26:7b:0c:b5:66:f9:13:75:97:af:cf:17:3b:
         8a:60:d8:e6:75:25:72:f6:7e:8e:ca:e7:bc:3e:f4:ef:3f:ee:
         d3:46:31:c5:04:8c:c7:cd:9d:c4:7d:ad:9a:cd:aa:dd:bd:a1:
         24:79:05:cb:ab:d2:1a:06:51:58:fb:12:5f:bd:3e:51:62:cd:
         29:78:59:06:80:ee:88:84:a1:d0:3b:69:83:fa:02:7a:9b:df:
         60:cd:ce:53
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErX0SrY9f6Hl6r+nAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTEyYjlmZjgtMzFiYy00YmE0LWI4NTItMTE4MjZmYTMz
NmQ1MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
YzZiN2Y5YTYtZjM5MC00ODg1LTgwOWQtOTI4ZDc5NDJmODkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGXnXysHTnX4mN+mF6gXvGVovN4eZKKTbRdp
v8FLaS9VCX5T8wWXGOneUA4LAn4DtNIZt7hB6IGlgo/Q1Gkf7mqToArwz2dcCNN5
N0IUQWdhbePIRCyJu47KdigCj8WrcmThcRTD6In4NOCf2dfdaAhmGSvoLWQTtYp7
3A3zEJcKsDRdRo0omTiSs0XP89Hd+w8XKDTW0CbU9i1DImgObjfigYIT2lVfhHuB
RFGANq82rGaPejSQMajIwzQ/yEU9JK4whWDR6p/HGgqaCl+dD+QsKXzYLX93K8r0
fDjQU5Ou68BHMiozE9UIhtce/JdbgRZwyF4KIXppnanfsSmn/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEeikrjpVJKgNSibqAkSqkIn7QcaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMTJi
OWZmOC0zMWJjLTRiYTQtYjg1Mi0xMTgyNmZhMzM2ZDUvMTE2N2RkNGQtZTA5NS0z
M2NkLTg4ZDgtZmY2MDkwYmI2ZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTEyYjlmZjgtMzFiYy00YmE0LWI4
NTItMTE4MjZmYTMzNmQ1LzExMmI5ZmY4LTMxYmMtNGJhNC1iODUyLTExODI2ZmEz
MzZkNS5jcmwwHwYDVR0jBBgwFoAUiCTOm8kvFWg3XYpKIZed4Dj3OYwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMTJiOWZmOC0zMWJjLTRiYTQtYjg1Mi0xMTgy
NmZhMzM2ZDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbdgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAedSldOSIj2mAT5PA9c7T+PdGQjZJTZxakaAS8HGzaH3xs7k4WwJAy
ZpmTQ4kkFh1oRYvrGViQ0qhCiasjT/pvZjYwTFPvbC6jtFOjaV5rKnuu8k/lVke4
Xl8mbgkFuYBu/B0htNKuofZhWttkUkyLJd9lf4yXj+7N0HtcyERSNwqaD/PiXnQX
ylmO1GDcYdxXa1VdTC0cC0FMeIJ2ZUd6GcRN6d2WySZ7DLVm+RN1l6/PFzuKYNjm
dSVy9n6Oyue8PvTvP+7TRjHFBIzHzZ3Efa2azardvaEkeQXLq9IaBlFY+xJfvT5R
Ys0peFkGgO6IhKHQO2mD+gJ6m99gzc5T
-----END CERTIFICATE-----
Generated at Sun Aug 24 12:23:46 2025 by rpki-client