Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810/f02bb46a-a3af-3863-9d0f-92593b573276.roa
File:                     f02bb46a-a3af-3863-9d0f-92593b573276.roa (raw, json)
Hash identifier:          itSxEtOaMnRBzfn2ylkwyHAlNbUBYH3LQIRsi1HPQKA=
Subject key identifier:   B3:89:C4:ED:0B:98:60:1D:D3:F9:96:54:72:00:70:EF:C6:CB:32:53
Certificate issuer:       /CN=6f6e37c0-35b2-4a26-aef0-29be5d9a3810
Certificate serial:       010D0C9F4328584AF0F13EF6D5FCC252C9ECD980
Authority key identifier: A7:1C:4D:65:B0:0F:4D:A7:C2:AD:52:A3:1E:0B:A1:7C:72:07:63:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810/f02bb46a-a3af-3863-9d0f-92593b573276.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     46494
IP address blocks:        2607:12c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810/6f6e37c0-35b2-4a26-aef0-29be5d9a3810.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810/6f6e37c0-35b2-4a26-aef0-29be5d9a3810.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:3e:f6:d5:fc:c2:52:c9:ec:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6e37c0-35b2-4a26-aef0-29be5d9a3810
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=831c6996-e05a-4b5e-a9ab-5c83a27dae02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:81:aa:cf:26:81:1c:ae:f2:e6:8c:7c:34:
                    9d:c7:97:72:06:54:83:d6:2e:f3:6d:ba:7f:3e:b7:
                    57:98:ee:bf:9d:ca:f0:ca:6f:6b:ca:5d:c7:4c:f7:
                    36:b6:11:85:54:76:50:bb:25:07:20:97:f9:8b:de:
                    43:2d:84:42:4f:d0:e9:40:1a:fe:01:65:c9:47:5a:
                    2f:5f:fe:f7:6d:a5:5b:82:85:0e:3e:fc:35:5c:7e:
                    c4:f8:c3:1b:91:c6:29:1c:66:21:65:33:0d:22:42:
                    53:c1:98:8c:1d:1e:98:80:3a:ac:8c:60:9a:6b:92:
                    86:8e:9c:8d:18:ad:e7:48:dc:12:91:ef:08:b3:bf:
                    ea:ec:6e:e7:66:1c:69:85:ef:91:9f:e3:a8:0f:e7:
                    58:63:97:a4:6d:ed:81:88:aa:eb:e4:ac:0d:42:33:
                    da:0d:85:eb:35:cd:df:22:7d:fa:35:7c:22:2d:76:
                    3b:dc:89:ea:29:7d:a6:78:9a:74:fc:20:1f:73:48:
                    64:f5:6a:97:02:4e:02:85:3c:1b:90:c2:75:7a:11:
                    5d:06:5e:a2:dc:6e:f4:f0:e9:e1:c3:cf:3a:c4:e6:
                    92:e6:4a:85:f2:be:7b:a4:9e:fc:91:73:66:88:42:
                    6d:0f:ad:20:ea:e2:d1:f9:eb:e9:1b:06:2a:b3:57:
                    45:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:89:C4:ED:0B:98:60:1D:D3:F9:96:54:72:00:70:EF:C6:CB:32:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810/f02bb46a-a3af-3863-9d0f-92593b573276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810/6f6e37c0-35b2-4a26-aef0-29be5d9a3810.crl

            X509v3 Authority Key Identifier:
                keyid:A7:1C:4D:65:B0:0F:4D:A7:C2:AD:52:A3:1E:0B:A1:7C:72:07:63:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f6e37c0-35b2-4a26-aef0-29be5d9a3810.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:12c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:8d:01:41:f7:37:41:06:67:bc:e6:c0:88:78:bc:79:b7:
         66:b6:57:b1:14:d3:58:b3:83:48:bb:38:4b:09:ce:9f:b9:55:
         49:5f:e6:c8:e5:cd:9a:1a:ff:ac:ca:1f:cb:6d:7e:0b:2a:3d:
         ac:ed:61:7c:85:8b:55:8a:df:87:7c:27:4b:ec:5e:17:af:7b:
         ee:2b:37:91:c8:0e:b5:fb:40:bc:81:a8:9d:dd:ab:aa:30:b4:
         c7:62:4c:8e:28:97:9d:d5:8b:6e:d2:3c:b4:d1:eb:7c:eb:86:
         f1:24:17:8b:8d:b6:bb:91:5e:3c:d3:01:e1:46:2e:81:e0:e1:
         34:28:38:12:c6:fe:b3:f6:a3:59:9b:01:a6:65:8c:ef:37:5b:
         41:52:c0:ff:8b:78:3c:63:f4:0c:d3:e2:84:86:59:cb:43:eb:
         99:87:30:2a:3c:d2:09:fa:05:a3:2f:fb:96:35:7e:b6:b8:5d:
         71:bd:ae:4b:35:ca:4d:f4:78:ac:53:52:01:c9:bf:ff:51:b4:
         40:01:45:53:da:f5:95:60:fe:e6:ad:85:1c:11:9f:c3:d0:69:
         19:28:55:52:d1:e5:46:69:3d:21:7a:05:bf:a2:83:74:21:d9:
         91:f1:19:d8:a7:e4:02:4c:73:a0:cf:2c:34:9f:bf:7c:1f:de:
         d3:47:97:a3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErw8T721fzCUsns2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY2ZTM3YzAtMzViMi00YTI2LWFlZjAtMjliZTVkOWEz
ODEwMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
ODMxYzY5OTYtZTA1YS00YjVlLWE5YWItNWM4M2EyN2RhZTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH2Bqs8mgRyu8uaMfDSdx5dyBlSD1i7zbbp/
PrdXmO6/ncrwym9ryl3HTPc2thGFVHZQuyUHIJf5i95DLYRCT9DpQBr+AWXJR1ov
X/73baVbgoUOPvw1XH7E+MMbkcYpHGYhZTMNIkJTwZiMHR6YgDqsjGCaa5KGjpyN
GK3nSNwSke8Is7/q7G7nZhxphe+Rn+OoD+dYY5ekbe2BiKrr5KwNQjPaDYXrNc3f
In36NXwiLXY73InqKX2meJp0/CAfc0hk9WqXAk4ChTwbkMJ1ehFdBl6i3G708Onh
w886xOaS5kqF8r57pJ78kXNmiEJtD60g6uLR+evpGwYqs1dFOwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLOJxO0LmGAd0/mWVHIAcO/GyzJTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjZl
MzdjMC0zNWIyLTRhMjYtYWVmMC0yOWJlNWQ5YTM4MTAvZjAyYmI0NmEtYTNhZi0z
ODYzLTlkMGYtOTI1OTNiNTczMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY2ZTM3YzAtMzViMi00YTI2LWFl
ZjAtMjliZTVkOWEzODEwLzZmNmUzN2MwLTM1YjItNGEyNi1hZWYwLTI5YmU1ZDlh
MzgxMC5jcmwwHwYDVR0jBBgwFoAUpxxNZbAPTafCrVKjHguhfHIHYxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjZlMzdjMC0zNWIyLTRhMjYtYWVmMC0yOWJl
NWQ5YTM4MTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcSwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBAnI0BQfc3QQZnvObAiHi8ebdmtlexFNNYs4NIuzhLCc6fuVVJX+bI
5c2aGv+syh/LbX4LKj2s7WF8hYtVit+HfCdL7F4Xr3vuKzeRyA61+0C8gaid3auq
MLTHYkyOKJed1Ytu0jy00et864bxJBeLjba7kV480wHhRi6B4OE0KDgSxv6z9qNZ
mwGmZYzvN1tBUsD/i3g8Y/QM0+KEhlnLQ+uZhzAqPNIJ+gWjL/uWNX62uF1xva5L
NcpN9HisU1IByb//UbRAAUVT2vWVYP7mrYUcEZ/D0GkZKFVS0eVGaT0hegW/ooN0
IdmR8RnYp+QCTHOgzyw0n798H97TR5ej
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:45:56 2025 by rpki-client