Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa
File:                     2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa (raw, json)
Hash identifier:          CZtbEKKulO1NZQkY0ziW9EbvmV5YBHSAZge2SOE5AA8=
Subject key identifier:   04:2B:95:2D:4F:DA:99:DB:72:50:55:D9:23:59:33:B0:89:EF:C9:52
Certificate issuer:       /CN=53cc15fa-4aac-4896-89f6-ee84e1915dca
Certificate serial:       010D0C9F4328584AADF1120158CE710B8E6D292E
Authority key identifier: 4E:19:B9:FB:72:6B:F1:39:59:C4:08:9E:51:5F:5B:58:B8:D9:D6:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14224
IP address blocks:        2600:7d00::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:12:01:58:ce:71:0b:8e:6d:29:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53cc15fa-4aac-4896-89f6-ee84e1915dca
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=733c9386-6be8-418c-8a33-f0100bee1c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:33:fe:26:a3:8c:98:c0:87:2b:65:4f:15:bd:
                    50:92:11:a1:09:93:e2:99:6f:c9:da:0d:47:66:6b:
                    e1:a6:27:5a:d8:32:bb:a9:a8:c9:ab:2a:f8:de:3d:
                    56:19:22:90:38:df:ae:27:c9:1b:29:c7:7f:93:07:
                    20:ed:e7:b6:bc:9e:93:46:5f:25:07:c8:85:2d:81:
                    6c:0d:8d:d4:ca:f5:7b:15:a6:5e:1a:d3:37:25:bc:
                    60:c0:ba:04:6c:4a:8f:de:7c:94:2f:3b:a8:ce:ef:
                    a3:3f:48:3a:90:10:ac:bc:dc:29:25:9d:af:20:d3:
                    43:22:63:29:30:84:6d:11:68:3d:c8:97:3f:a2:f2:
                    d3:cb:d5:1a:f9:00:2b:cc:ec:f2:c7:a9:90:e7:d0:
                    70:e2:9c:4f:5c:a8:ae:35:e1:fe:70:22:10:d9:2f:
                    6a:e6:19:b1:01:c5:78:02:ac:4f:0f:cd:d9:e4:b7:
                    c0:29:90:11:09:79:03:a3:88:19:ea:59:2d:f2:6a:
                    9d:83:3b:e5:b7:f1:93:5f:1c:fd:d2:06:a6:af:49:
                    8c:30:ea:74:df:10:f7:de:c5:5e:5d:35:f3:66:35:
                    33:70:41:c5:f5:c9:e7:04:65:2e:09:28:be:ec:4d:
                    fb:42:95:54:c1:e1:a3:11:62:2d:62:f7:ed:8c:c5:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2B:95:2D:4F:DA:99:DB:72:50:55:D9:23:59:33:B0:89:EF:C9:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.crl

            X509v3 Authority Key Identifier:
                keyid:4E:19:B9:FB:72:6B:F1:39:59:C4:08:9E:51:5F:5B:58:B8:D9:D6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:7d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:dc:d3:e8:4d:44:56:5b:4a:6c:6d:ba:48:1d:56:ff:1d:8b:
         55:05:b1:06:c6:a6:e7:7a:6c:f6:45:49:b5:1f:ab:3f:e1:da:
         7f:47:8e:2e:ff:5c:f6:38:2f:fe:2e:66:bd:68:24:a3:18:58:
         af:79:fc:69:f9:73:49:9e:aa:2b:94:0f:1f:6f:fc:11:bb:f1:
         24:ab:30:63:45:0a:9b:bb:50:f2:b2:4b:bf:92:06:b2:0b:83:
         18:73:08:36:1e:a7:54:bf:05:c5:95:a0:f6:fc:54:00:4a:c4:
         09:ff:44:39:f8:c3:0f:1c:11:46:f3:e9:03:d5:e1:b6:c8:52:
         f9:23:29:1b:d0:98:fa:71:ae:ab:46:0d:fb:b2:f4:0e:cc:77:
         f2:7f:4e:7a:c0:4f:30:05:fa:53:b2:68:bb:7b:69:d3:43:10:
         84:63:91:80:b8:de:4f:9e:b7:6a:8a:93:82:cf:13:ce:59:ab:
         d8:77:05:3f:07:0d:b3:d5:b2:bb:02:0e:df:a0:5a:24:e2:36:
         e3:7c:7d:b2:33:09:3f:2f:2b:1f:56:ae:4c:8b:4e:c7:22:91:
         e0:5a:eb:9c:36:00:9f:08:ea:12:6b:51:28:94:e3:99:1d:de:
         47:cc:12:aa:d4:72:89:d5:b6:81:5a:c4:f5:12:f3:63:a6:a9:
         ef:32:d7:10
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqt8RIBWM5xC45tKS4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNjYzE1ZmEtNGFhYy00ODk2LTg5ZjYtZWU4NGUxOTE1
ZGNhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
NzMzYzkzODYtNmJlOC00MThjLThhMzMtZjAxMDBiZWUxYzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjP+JqOMmMCHK2VPFb1QkhGhCZPimW/J2g1H
Zmvhpida2DK7qajJqyr43j1WGSKQON+uJ8kbKcd/kwcg7ee2vJ6TRl8lB8iFLYFs
DY3UyvV7FaZeGtM3JbxgwLoEbEqP3nyULzuozu+jP0g6kBCsvNwpJZ2vINNDImMp
MIRtEWg9yJc/ovLTy9Ua+QArzOzyx6mQ59Bw4pxPXKiuNeH+cCIQ2S9q5hmxAcV4
AqxPD83Z5LfAKZARCXkDo4gZ6lkt8mqdgzvlt/GTXxz90gamr0mMMOp03xD33sVe
XTXzZjUzcEHF9cnnBGUuCSi+7E37QpVUweGjEWItYvftjMXOawIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAQrlS1P2pnbclBV2SNZM7CJ78lSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81M2Nj
MTVmYS00YWFjLTQ4OTYtODlmNi1lZTg0ZTE5MTVkY2EvMmRhZDM0ZjAtNDNiYS0z
YWMxLWJhYzctMzQ5OTVmZGY4MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTNjYzE1ZmEtNGFhYy00ODk2LTg5
ZjYtZWU4NGUxOTE1ZGNhLzUzY2MxNWZhLTRhYWMtNDg5Ni04OWY2LWVlODRlMTkx
NWRjYS5jcmwwHwYDVR0jBBgwFoAUThm5+3Jr8TlZxAieUV9bWLjZ1gQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81M2NjMTVmYS00YWFjLTQ4OTYtODlmNi1lZTg0
ZTE5MTVkY2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgB9ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBv3NPoTURWW0psbbpIHVb/HYtVBbEGxqbnemz2RUm1H6s/4dp/R44u
/1z2OC/+Lma9aCSjGFivefxp+XNJnqorlA8fb/wRu/EkqzBjRQqbu1Dysku/kgay
C4MYcwg2HqdUvwXFlaD2/FQASsQJ/0Q5+MMPHBFG8+kD1eG2yFL5Iykb0Jj6ca6r
Rg37svQOzHfyf056wE8wBfpTsmi7e2nTQxCEY5GAuN5PnrdqipOCzxPOWavYdwU/
Bw2z1bK7Ag7foFok4jbjfH2yMwk/LysfVq5Mi07HIpHgWuucNgCfCOoSa1EolOOZ
Hd5HzBKq1HKJ1baBWsT1EvNjpqnvMtcQ
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:33 2025 by rpki-client