Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1dba0f14-dad9-34cb-a232-c6cb22a53113.roa
File:                     1dba0f14-dad9-34cb-a232-c6cb22a53113.roa (raw, json)
Hash identifier:          5LIyefeVy9jNCojpQlJ0O7P7vjFASK8PVrlfhr0jYo0=
Subject key identifier:   1B:CD:59:70:32:42:B5:A5:2F:03:98:13:ED:25:25:0E:0A:8F:68:5A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584AF2568221DA43CB1DFA6A3280
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1dba0f14-dad9-34cb-a232-c6cb22a53113.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     7861
IP address blocks:        2001:56b:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:82:21:da:43:cb:1d:fa:6a:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=cdfcf58c-737c-4175-b860-0a3f5b8efe55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:7d:7d:c2:b5:51:02:1f:26:7c:ea:3c:ec:
                    b2:50:43:3b:4c:1c:be:7b:83:73:b7:05:a0:9b:fe:
                    4e:19:3a:5d:fd:1f:cf:fb:fe:66:f1:82:f8:9f:58:
                    21:88:46:3d:5e:24:57:6a:37:5a:60:0f:e2:b2:f4:
                    fc:b2:74:a1:f4:be:4f:6e:6b:f2:22:37:be:68:6b:
                    2a:e3:bb:72:e6:02:6a:ae:69:93:85:02:0d:d8:3e:
                    f7:2f:cf:4d:34:26:55:89:4a:84:fd:75:ec:e1:ad:
                    11:4e:9a:a5:2b:e5:5a:c3:99:c6:ad:88:8f:e5:78:
                    4d:1f:d6:1d:11:85:0d:cb:10:e5:c2:5f:15:1c:56:
                    d0:4a:bb:8c:fa:cd:4f:a1:b6:30:22:98:b0:9e:07:
                    7c:53:d0:f7:9d:bc:88:b9:0b:26:c5:18:93:9b:48:
                    49:25:0a:25:b0:26:1c:2d:44:5b:79:a9:7b:a2:3f:
                    90:7c:a0:c9:ef:72:be:a6:07:de:2e:45:e9:63:8e:
                    4b:24:7d:c1:69:33:a8:bb:b4:b9:e0:46:05:5d:87:
                    f6:db:43:82:4f:da:28:c3:1b:0e:c9:ef:6b:a5:cc:
                    db:e1:f9:90:2b:48:2b:00:f9:18:3c:33:c6:b1:47:
                    53:52:67:4a:46:87:e9:32:ce:4c:7b:e2:86:03:3c:
                    a5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CD:59:70:32:42:B5:A5:2F:03:98:13:ED:25:25:0E:0A:8F:68:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1dba0f14-dad9-34cb-a232-c6cb22a53113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e2:c2:2a:f4:55:b7:cd:02:66:32:dd:b9:49:fa:8f:51:4b:
         5a:7d:85:f6:40:f7:ab:b3:4c:9f:06:e6:0e:bf:f5:98:0f:08:
         64:55:a8:95:82:92:ea:f7:94:f6:1e:87:36:14:96:7f:e2:90:
         56:12:0e:1e:59:d3:74:4e:ec:a0:15:10:59:69:81:5c:1e:f9:
         a8:86:82:fb:fa:71:a9:65:0f:7f:32:a4:ed:b9:45:91:39:8c:
         14:2a:f3:64:31:50:f3:13:cd:de:b7:5e:71:07:28:ca:e1:50:
         0f:9b:5f:16:8c:47:a7:12:10:d9:27:79:04:67:28:8b:c3:24:
         ec:8f:71:ff:b1:9b:67:09:9f:1c:12:30:b6:ed:c9:3b:95:45:
         7a:8c:8d:61:0c:eb:2f:5e:22:ef:55:1b:79:7c:8e:1e:ee:3f:
         ff:80:20:7c:3d:98:be:e5:61:42:0b:0c:f1:90:0f:2b:53:7f:
         f2:3f:ab:57:b5:87:36:da:1a:29:5e:db:3a:52:9f:f7:12:42:
         e8:96:f9:b0:b1:8e:1d:13:a4:b5:b0:de:e9:23:25:69:99:e2:
         81:e2:06:2e:e6:44:77:ff:b2:77:11:bf:b4:3d:36:44:1d:c6:
         02:3d:29:a8:27:e7:94:b2:4d:ea:72:70:ac:a5:98:55:a7:23:
         4a:f7:b9:91
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEryVoIh2kPLHfpqMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk
Y2RmY2Y1OGMtNzM3Yy00MTc1LWI4NjAtMGEzZjViOGVmZTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQJ9fcK1UQIfJnzqPOyyUEM7TBy+e4NztwWg
m/5OGTpd/R/P+/5m8YL4n1ghiEY9XiRXajdaYA/isvT8snSh9L5PbmvyIje+aGsq
47ty5gJqrmmThQIN2D73L89NNCZViUqE/XXs4a0RTpqlK+Vaw5nGrYiP5XhNH9Yd
EYUNyxDlwl8VHFbQSruM+s1PobYwIpiwngd8U9D3nbyIuQsmxRiTm0hJJQolsCYc
LURbeal7oj+QfKDJ73K+pgfeLkXpY45LJH3BaTOou7S54EYFXYf220OCT9oowxsO
ye9rpczb4fmQK0grAPkYPDPGsUdTUmdKRofpMs5Me+KGAzyl/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBvNWXAyQrWlLwOYE+0lJQ4Kj2haMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWRiYTBmMTQtZGFkOS0z
NGNiLWEyMzItYzZjYjIyYTUzMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEFaw8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKOLCKvRVt80CZjLduUn6j1FLWn2F9kD3q7NMnwbmDr/1mA8IZFWo
lYKS6veU9h6HNhSWf+KQVhIOHlnTdE7soBUQWWmBXB75qIaC+/pxqWUPfzKk7blF
kTmMFCrzZDFQ8xPN3rdecQcoyuFQD5tfFoxHpxIQ2Sd5BGcoi8Mk7I9x/7GbZwmf
HBIwtu3JO5VFeoyNYQzrL14i71UbeXyOHu4//4AgfD2YvuVhQgsM8ZAPK1N/8j+r
V7WHNtoaKV7bOlKf9xJC6Jb5sLGOHROktbDe6SMlaZnigeIGLuZEd/+ydxG/tD02
RB3GAj0pqCfnlLJN6nJwrKWYVacjSve5kQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:31:14 2025 by rpki-client