Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ea91aec7-ca67-38d1-8dd0-545feb17592a.roa
File:                     ea91aec7-ca67-38d1-8dd0-545feb17592a.roa (raw, json)
Hash identifier:          xBo00+SEzVOur8i6v0qZLTIzKK/+LaIU5RT9xilO2gc=
Subject key identifier:   D4:BE:C7:C4:66:79:11:1D:0C:91:7A:36:D0:18:A4:AF:40:3F:8A:69
Certificate issuer:       /CN=4b7340fc-698a-4488-b211-325f4ded4152
Certificate serial:       010D0C9F4328584AEE26860B98C3E43FDF8BC180
Authority key identifier: 23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ea91aec7-ca67-38d1-8dd0-545feb17592a.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     9009
IP address blocks:        2605:3b80:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:86:0b:98:c3:e4:3f:df:8b:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7340fc-698a-4488-b211-325f4ded4152
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=b97bf850-0bca-4213-ba95-ba07fe6cbf14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:6e:46:97:4a:5c:ea:05:a2:13:0f:29:fc:
                    21:d9:3e:6a:5b:b0:b0:c1:08:84:9e:9b:a9:03:df:
                    68:6c:3d:98:4a:26:d2:8b:82:84:8e:c1:2b:87:b2:
                    e7:13:62:4e:ac:fc:1c:0d:cb:84:69:6a:bf:61:d2:
                    a9:6a:4e:8e:7d:97:50:f4:d8:34:25:44:32:53:4c:
                    e0:4e:0b:57:ed:7a:e7:32:9d:c0:9b:30:eb:95:9a:
                    9d:a6:7c:d6:b8:08:ab:b2:4c:f1:bc:5c:00:be:0b:
                    f0:25:86:74:96:2d:8b:7e:de:dd:b5:b9:86:13:75:
                    e6:1d:45:de:9e:fe:4e:b4:10:96:2e:1e:d1:f0:9f:
                    f8:9a:39:24:bb:0f:e2:fe:48:2b:28:79:1f:61:76:
                    44:d6:72:0f:bd:d0:07:a6:7e:c4:0a:2e:a0:e4:5a:
                    ed:67:8e:67:95:b7:9c:61:1b:c2:7e:f7:a7:29:fa:
                    d8:8c:7d:99:cb:85:f0:8a:96:11:6a:d4:d6:7a:a8:
                    94:f4:87:b6:6f:e6:4c:0d:67:a0:9f:6d:73:13:40:
                    c7:3a:99:a5:bd:8b:d1:88:b7:3a:01:6a:9d:9c:bd:
                    00:00:0d:0b:54:13:7d:82:74:de:c8:5e:5c:6f:39:
                    8e:63:a1:c7:ff:d2:30:2d:ba:4b:85:b8:f5:5d:15:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BE:C7:C4:66:79:11:1D:0C:91:7A:36:D0:18:A4:AF:40:3F:8A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ea91aec7-ca67-38d1-8dd0-545feb17592a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl

            X509v3 Authority Key Identifier:
                keyid:23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3b80:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:de:eb:72:d2:fb:32:39:bd:3c:75:74:ed:e0:57:d2:f3:6a:
         6b:6e:47:44:de:99:ac:ea:c9:48:72:fb:3a:06:bf:5a:19:a0:
         9a:b1:07:37:ff:9d:83:86:5c:5f:52:49:33:1f:97:b3:e8:98:
         30:24:d5:dc:fd:93:f7:0d:34:bb:84:35:6b:41:9b:13:4f:bb:
         fa:51:fb:05:3a:d2:b6:c9:41:58:d7:15:79:c0:51:c8:82:25:
         77:1c:35:43:ca:8e:b9:df:7a:fa:c0:70:33:ac:3b:2d:a7:08:
         dd:48:59:7a:f9:4a:47:4d:15:e6:79:d3:78:67:21:cc:6d:9d:
         30:3d:cc:20:97:a4:50:58:1d:8f:33:d2:9d:3b:2a:7a:43:03:
         0e:95:40:23:da:d9:c5:ae:d4:80:73:88:3f:03:08:46:19:c3:
         85:64:46:1d:fd:30:cd:8a:20:55:f0:9f:16:d5:04:2c:df:3c:
         53:57:b7:02:8b:d4:52:19:20:0c:f5:8d:ae:e5:99:3f:b6:73:
         9b:e3:1a:95:cc:58:bd:9b:52:e7:60:95:13:e4:0b:ed:2d:36:
         55:a4:a2:9b:b3:db:c0:76:5b:8b:2f:55:8f:15:97:d1:6e:d8:
         a7:3f:07:97:f3:60:0f:5f:19:1d:12:9c:0f:17:33:50:15:a8:
         67:eb:c0:fc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruJoYLmMPkP9+LwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGI3MzQwZmMtNjk4YS00NDg4LWIyMTEtMzI1ZjRkZWQ0
MTUyMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk
Yjk3YmY4NTAtMGJjYS00MjEzLWJhOTUtYmEwN2ZlNmNiZjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqBuRpdKXOoFohMPKfwh2T5qW7CwwQiEnpup
A99obD2YSibSi4KEjsErh7LnE2JOrPwcDcuEaWq/YdKpak6OfZdQ9Ng0JUQyU0zg
TgtX7XrnMp3AmzDrlZqdpnzWuAirskzxvFwAvgvwJYZ0li2Lft7dtbmGE3XmHUXe
nv5OtBCWLh7R8J/4mjkkuw/i/kgrKHkfYXZE1nIPvdAHpn7ECi6g5FrtZ45nlbec
YRvCfvenKfrYjH2Zy4XwipYRatTWeqiU9Ie2b+ZMDWegn21zE0DHOpmlvYvRiLc6
AWqdnL0AAA0LVBN9gnTeyF5cbzmOY6HH/9IwLbpLhbj1XRUXWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNS+x8RmeREdDJF6NtAYpK9AP4ppMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Yjcz
NDBmYy02OThhLTQ0ODgtYjIxMS0zMjVmNGRlZDQxNTIvZWE5MWFlYzctY2E2Ny0z
OGQxLThkZDAtNTQ1ZmViMTc1OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGI3MzQwZmMtNjk4YS00NDg4LWIy
MTEtMzI1ZjRkZWQ0MTUyLzRiNzM0MGZjLTY5OGEtNDQ4OC1iMjExLTMyNWY0ZGVk
NDE1Mi5jcmwwHwYDVR0jBBgwFoAUIz1eV1UEFzo7KfsSr/WYDO3Wd6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80YjczNDBmYy02OThhLTQ0ODgtYjIxMS0zMjVm
NGRlZDQxNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgU7gAAR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIre63LS+zI5vTx1dO3gV9LzamtuR0TemazqyUhy+zoGv1oZoJqx
Bzf/nYOGXF9SSTMfl7PomDAk1dz9k/cNNLuENWtBmxNPu/pR+wU60rbJQVjXFXnA
UciCJXccNUPKjrnfevrAcDOsOy2nCN1IWXr5SkdNFeZ503hnIcxtnTA9zCCXpFBY
HY8z0p07KnpDAw6VQCPa2cWu1IBziD8DCEYZw4VkRh39MM2KIFXwnxbVBCzfPFNX
twKL1FIZIAz1ja7lmT+2c5vjGpXMWL2bUudglRPkC+0tNlWkopuz28B2W4svVY8V
l9Fu2Kc/B5fzYA9fGR0SnA8XM1AVqGfrwPw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:09:59 2025 by rpki-client