Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa
File:                     b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa (raw, json)
Hash identifier:          pmzjXHtmHQ72NePgR1rd98Df+Vbt4aE4ay1yJ+tdvBw=
Subject key identifier:   B6:90:9D:85:97:7E:0F:EC:2D:7B:C8:52:2E:7B:DB:2E:9B:B6:B1:CD
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584A5A30743B2D55C5DF53A46E40
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     400780
IP address blocks:        2607:13c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:74:3b:2d:55:c5:df:53:a4:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=ac29999f-f8f9-46d6-8511-631e7ea1bf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b3:1b:5f:fa:b7:06:81:3d:ac:e3:76:ee:08:
                    4b:2f:19:2d:a5:ae:70:05:79:df:3f:8c:71:5b:8c:
                    ec:83:c8:8f:f4:46:a0:c2:8e:71:98:c3:b3:5f:da:
                    32:63:cf:c1:da:95:bf:18:5c:7e:b5:e4:14:5b:a4:
                    9d:69:72:6b:da:c0:1d:16:06:95:5c:d3:54:06:2e:
                    62:ce:9e:2d:66:98:3d:0e:63:f5:0a:4c:ad:d9:a9:
                    0f:d1:ea:3d:40:4f:ee:4d:7d:f9:a3:8a:24:da:79:
                    af:27:39:fd:e0:9b:9d:4e:f2:b7:8f:65:d5:89:ee:
                    fc:86:c3:19:71:0e:d1:6f:36:e5:05:89:95:83:3f:
                    09:2f:3f:ac:39:39:40:ea:e4:c9:16:77:3c:32:50:
                    32:1f:6f:45:b9:0a:7a:68:86:7a:6f:f8:57:96:21:
                    74:f4:ba:61:11:93:a8:ad:3a:14:17:81:05:5c:d4:
                    24:f4:07:2c:68:b5:87:29:75:1d:ac:67:19:b9:d7:
                    9f:e3:d5:a5:30:52:f5:af:e8:7f:f3:42:71:07:6f:
                    17:89:10:52:e3:5d:83:b9:2c:1d:59:b6:70:54:e2:
                    03:71:16:91:5b:d8:3f:45:e6:e0:f3:e3:a0:e3:23:
                    ad:f7:22:23:70:b9:ff:f6:fb:ad:91:da:a5:ea:04:
                    71:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:90:9D:85:97:7E:0F:EC:2D:7B:C8:52:2E:7B:DB:2E:9B:B6:B1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:13c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6a:76:29:62:41:b2:e6:93:6d:4e:ae:50:ab:71:9e:f7:68:
         ac:cb:0d:45:17:c4:e4:7c:53:41:8e:e5:f8:fa:bb:e4:ad:cb:
         db:4a:2b:71:6f:65:73:16:b9:df:51:e5:61:4d:98:e3:92:87:
         47:80:50:40:1e:60:3b:f1:b0:e2:ad:c5:a1:6b:3a:c7:22:d7:
         a0:d1:89:4b:98:41:8c:b9:45:c0:4c:c0:8c:fb:e4:90:49:45:
         25:d8:a8:03:7b:f7:f2:76:00:5b:82:4d:21:86:a3:30:89:c2:
         6e:33:37:16:57:ec:49:d5:25:83:7c:7f:2e:c7:9d:b5:c3:16:
         b3:67:81:e7:da:ea:8e:f8:f7:38:4c:df:55:e2:f4:3a:a7:7a:
         a8:0b:cf:ee:19:d1:2b:ee:93:4c:18:8f:7e:44:ba:fb:e7:a9:
         50:b6:41:95:24:29:d2:40:cc:23:44:0c:1b:7d:48:f7:a4:56:
         f2:d3:dd:77:c8:9a:0a:e4:0c:28:a2:1c:08:48:3e:0d:8f:ef:
         36:d0:01:5c:d8:7e:a4:1e:92:44:bd:7a:20:b9:8b:d3:2f:9d:
         e8:1b:69:75:c4:e2:0b:cc:26:2d:80:8b:42:7d:a7:75:ec:4b:
         eb:de:31:d0:b4:3b:c3:40:8f:1f:05:67:c1:ad:e3:6f:24:58:
         c3:ad:d1:45
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpaMHQ7LVXF31OkbkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgwZjkyOTgtODAyOS00Mjg1LTg5ZDctMjczMDgzNDFi
MmUwMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk
YWMyOTk5OWYtZjhmOS00NmQ2LTg1MTEtNjMxZTdlYTFiZjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbMbX/q3BoE9rON27ghLLxktpa5wBXnfP4xx
W4zsg8iP9Eagwo5xmMOzX9oyY8/B2pW/GFx+teQUW6SdaXJr2sAdFgaVXNNUBi5i
zp4tZpg9DmP1Ckyt2akP0eo9QE/uTX35o4ok2nmvJzn94JudTvK3j2XVie78hsMZ
cQ7RbzblBYmVgz8JLz+sOTlA6uTJFnc8MlAyH29FuQp6aIZ6b/hXliF09LphEZOo
rToUF4EFXNQk9AcsaLWHKXUdrGcZudef49WlMFL1r+h/80JxB28XiRBS412DuSwd
WbZwVOIDcRaRW9g/Rebg8+Og4yOt9yIjcLn/9vutkdql6gRx1wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLaQnYWXfg/sLXvIUi572y6btrHNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mODBm
OTI5OC04MDI5LTQyODUtODlkNy0yNzMwODM0MWIyZTAvYjdiNWM2YzAtNmZmNC0z
M2I2LTgzZWMtYTE5NzQzZDdiMTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjgwZjkyOTgtODAyOS00Mjg1LTg5
ZDctMjczMDgzNDFiMmUwL2Y4MGY5Mjk4LTgwMjktNDI4NS04OWQ3LTI3MzA4MzQx
YjJlMC5jcmwwHwYDVR0jBBgwFoAUZ2/fmN3Fstann5/PDklcOGTRROcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mODBmOTI5OC04MDI5LTQyODUtODlkNy0yNzMw
ODM0MWIyZTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcTwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAGanYpYkGy5pNtTq5Qq3Ge92isyw1FF8TkfFNBjuX4+rvkrcvbSitx
b2VzFrnfUeVhTZjjkodHgFBAHmA78bDircWhazrHIteg0YlLmEGMuUXATMCM++SQ
SUUl2KgDe/fydgBbgk0hhqMwicJuMzcWV+xJ1SWDfH8ux521wxazZ4Hn2uqO+Pc4
TN9V4vQ6p3qoC8/uGdEr7pNMGI9+RLr756lQtkGVJCnSQMwjRAwbfUj3pFby0913
yJoK5AwoohwISD4Nj+820AFc2H6kHpJEvXoguYvTL53oG2l1xOILzCYtgItCfad1
7Evr3jHQtDvDQI8fBWfBreNvJFjDrdFF
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:48:03 2025 by rpki-client