Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/4ca1a533-c342-3a84-84f9-2df80cda1c94.roa
File:                     4ca1a533-c342-3a84-84f9-2df80cda1c94.roa (raw, json)
Hash identifier:          +ThsAK1Y7v/TKJduL6I3a61pAT4DfxsGhzngxS5SrXI=
Subject key identifier:   60:80:58:74:93:2C:34:96:74:76:A5:F3:18:6B:C4:F6:FB:41:37:3F
Certificate issuer:       /CN=5701ab54-077b-43a9-8b22-67e8fe12ded7
Certificate serial:       010D0C9F4328584B48E1B2B8B91D10E3329AA640
Authority key identifier: 19:19:13:1D:36:B4:5E:A5:05:6F:9C:D3:2A:28:08:29:01:C6:0F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/4ca1a533-c342-3a84-84f9-2df80cda1c94.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397797
IP address blocks:        2605:6640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b2:b8:b9:1d:10:e3:32:9a:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5701ab54-077b-43a9-8b22-67e8fe12ded7
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=a3091685-1a02-44c0-a2b1-ebf18032d48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:03:36:2a:7a:38:38:22:24:f4:f0:93:97:
                    22:8a:95:42:3c:a9:46:2b:e5:07:62:2b:de:9b:de:
                    95:bb:11:e6:6b:ca:13:bf:44:68:54:d9:7c:e9:f6:
                    d0:95:79:08:60:cc:9b:2c:25:89:06:03:5c:3c:f0:
                    2d:60:d7:17:b3:97:48:9c:81:f8:e4:49:94:e7:a3:
                    03:d7:e3:61:81:fe:35:64:b1:07:f0:76:d0:fe:65:
                    7e:24:05:99:9b:fa:f9:f8:b7:b6:35:3d:d3:fa:0c:
                    ba:97:52:02:e6:24:c0:9f:35:8d:10:a8:1a:8a:4a:
                    43:c8:af:89:2b:38:08:d2:5b:39:d7:d6:66:90:9e:
                    d8:c8:a3:70:54:e7:28:49:9e:b6:6d:9b:6e:92:43:
                    ed:de:06:6e:8b:a4:66:73:85:27:1d:9a:50:70:3f:
                    4f:ee:f9:5f:0d:03:34:5e:93:8d:a0:41:32:9a:55:
                    4c:99:dc:8e:dd:bc:3f:ee:2a:54:cd:e8:cd:a3:da:
                    a3:23:e2:81:9c:b3:8b:e2:f9:bd:1d:37:86:e4:6b:
                    67:96:ce:0d:dd:c7:d6:13:b4:20:47:80:11:4f:f4:
                    74:80:ec:0c:e5:29:77:43:42:72:19:9f:f2:45:31:
                    33:5a:22:ce:bd:64:ff:ca:29:a8:52:fb:7d:9c:f5:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:80:58:74:93:2C:34:96:74:76:A5:F3:18:6B:C4:F6:FB:41:37:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/4ca1a533-c342-3a84-84f9-2df80cda1c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.crl

            X509v3 Authority Key Identifier:
                keyid:19:19:13:1D:36:B4:5E:A5:05:6F:9C:D3:2A:28:08:29:01:C6:0F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:29:2d:bf:9b:e5:df:98:a0:69:07:00:81:ba:c0:01:71:b9:
         24:03:e5:15:63:4c:a3:69:93:9d:b7:d2:f5:1e:46:85:11:93:
         45:0a:44:76:d3:4d:3f:69:1c:10:20:1b:61:3d:bc:38:f8:97:
         bd:51:31:fa:13:af:4d:5c:92:29:64:a0:a1:a3:05:d3:9a:1d:
         67:93:2a:92:15:b0:2e:cd:16:51:04:1e:84:9a:fc:ef:df:60:
         6f:ee:ea:ab:15:13:d5:a1:fa:71:4a:e5:83:79:9e:6a:46:fa:
         0b:15:d8:70:0d:f0:ed:6f:ce:e6:64:ed:33:4c:c0:f5:ef:d2:
         2b:9d:4c:04:4d:7e:9f:aa:61:2e:4b:2e:37:c6:6a:ad:10:48:
         d5:7e:b3:2a:c5:20:55:f3:8d:68:ac:a8:6c:d8:39:1e:44:c1:
         e2:d4:99:f0:97:aa:b6:73:70:57:6c:63:cd:fc:b3:3b:b2:df:
         51:9d:a9:7f:21:6b:ec:87:cb:f0:22:a8:5d:1d:97:89:99:d4:
         d7:e8:fb:9d:d8:01:6d:8d:3b:86:ea:2d:81:9c:8c:56:a6:e3:
         ca:25:de:fc:0a:93:77:49:ef:cb:af:8c:23:5b:80:dc:ee:4b:
         83:7e:7f:26:92:57:66:f5:ec:1f:f1:40:2b:06:8d:f4:d8:28:
         1a:b0:e5:15
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtI4bK4uR0Q4zKapkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTcwMWFiNTQtMDc3Yi00M2E5LThiMjItNjdlOGZlMTJk
ZWQ3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
YTMwOTE2ODUtMWEwMi00NGMwLWEyYjEtZWJmMTgwMzJkNDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7YDNip6ODgiJPTwk5ciipVCPKlGK+UHYive
m96VuxHma8oTv0RoVNl86fbQlXkIYMybLCWJBgNcPPAtYNcXs5dInIH45EmU56MD
1+Nhgf41ZLEH8HbQ/mV+JAWZm/r5+Le2NT3T+gy6l1IC5iTAnzWNEKgaikpDyK+J
KzgI0ls519ZmkJ7YyKNwVOcoSZ62bZtukkPt3gZui6Rmc4UnHZpQcD9P7vlfDQM0
XpONoEEymlVMmdyO3bw/7ipUzejNo9qjI+KBnLOL4vm9HTeG5Gtnls4N3cfWE7Qg
R4ART/R0gOwM5Sl3Q0JyGZ/yRTEzWiLOvWT/yimoUvt9nPV2twIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGCAWHSTLDSWdHal8xhrxPb7QTc/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NzAx
YWI1NC0wNzdiLTQzYTktOGIyMi02N2U4ZmUxMmRlZDcvNGNhMWE1MzMtYzM0Mi0z
YTg0LTg0ZjktMmRmODBjZGExYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTcwMWFiNTQtMDc3Yi00M2E5LThi
MjItNjdlOGZlMTJkZWQ3LzU3MDFhYjU0LTA3N2ItNDNhOS04YjIyLTY3ZThmZTEy
ZGVkNy5jcmwwHwYDVR0jBBgwFoAUGRkTHTa0XqUFb5zTKigIKQHGDxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NzAxYWI1NC0wNzdiLTQzYTktOGIyMi02N2U4
ZmUxMmRlZDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVmQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB+KS2/m+XfmKBpBwCBusABcbkkA+UVY0yjaZOdt9L1HkaFEZNFCkR2
000/aRwQIBthPbw4+Je9UTH6E69NXJIpZKChowXTmh1nkyqSFbAuzRZRBB6Emvzv
32Bv7uqrFRPVofpxSuWDeZ5qRvoLFdhwDfDtb87mZO0zTMD179IrnUwETX6fqmEu
Sy43xmqtEEjVfrMqxSBV841orKhs2DkeRMHi1Jnwl6q2c3BXbGPN/LM7st9Rnal/
IWvsh8vwIqhdHZeJmdTX6Pud2AFtjTuG6i2BnIxWpuPKJd78CpN3Se/Lr4wjW4Dc
7kuDfn8mkldm9ewf8UArBo302CgasOUV
-----END CERTIFICATE-----
Generated at Wed Oct 22 03:13:35 2025 by rpki-client