Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa
File:                     dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa (raw, json)
Hash identifier:          wyhQGjEgJHJT7PGJz81SzR/OM/mXCb8yZKa4OJ0iTAs=
Subject key identifier:   1D:1B:44:8D:F3:1E:70:27:CB:2E:58:2C:B6:6A:9D:D5:6C:ED:7F:A2
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584ACE0B8EE26762755394008580
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     211584
IP address blocks:        2602:fd92:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:8e:e2:67:62:75:53:94:00:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=e65821af-b260-4a01-9f6b-09ede50042ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8d:82:51:0e:93:f8:f3:af:e2:eb:a0:c6:39:
                    f2:de:b7:bb:90:51:38:82:97:57:b9:90:7a:07:2e:
                    f5:db:10:cb:b8:a5:1a:36:ff:63:05:ec:c6:2f:ef:
                    74:bc:1f:63:48:55:bb:b2:c1:4f:a4:7c:26:1e:23:
                    6b:08:ae:4e:32:42:d7:94:3c:27:1a:4d:ad:3b:74:
                    08:2d:47:e1:99:fb:39:c3:9a:e9:2b:db:fe:1c:3c:
                    47:dd:02:41:83:2b:39:b0:c9:00:da:2a:43:de:f4:
                    8e:98:a4:3e:d0:d4:6e:cb:34:14:a4:57:cc:7a:d3:
                    25:39:ff:86:08:d1:3b:75:3a:8f:e9:39:8e:bf:10:
                    0f:cb:f7:7e:4d:3f:09:ce:78:b1:47:b0:ba:04:cb:
                    d5:57:50:dd:74:35:d5:8a:0b:4b:01:f7:ec:eb:b4:
                    d6:79:16:ef:53:e4:90:d8:4b:3d:e6:c1:a2:1e:5a:
                    1b:95:d7:64:a4:4b:26:d8:59:bb:30:25:57:08:0e:
                    26:6e:38:af:c4:f1:a7:4a:48:8e:8a:db:3c:7b:4d:
                    e3:e6:95:f3:bf:16:c1:fb:f9:3e:67:f5:00:c5:e0:
                    a6:a0:6c:b3:66:fa:26:8f:03:a6:b9:23:c1:34:c0:
                    73:7c:2f:ac:33:7c:71:de:e8:c9:4f:05:4b:43:1e:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1B:44:8D:F3:1E:70:27:CB:2E:58:2C:B6:6A:9D:D5:6C:ED:7F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:91:c3:26:fc:5b:db:13:4f:f0:6c:03:83:de:a5:17:20:26:
         16:12:fc:fb:05:7f:d6:d7:98:7a:25:ab:e9:c6:dd:28:5b:03:
         87:f0:a5:b5:52:43:f2:7c:da:fd:c8:6c:1b:60:e5:97:aa:bb:
         f2:17:1b:22:59:2f:a7:fa:bb:ce:f0:87:45:8b:2e:3b:1a:d7:
         08:37:5e:a7:c6:fd:11:3d:7e:b3:e3:bd:69:d0:11:31:13:64:
         b2:84:ea:1f:bc:6c:66:ee:db:3b:68:c4:90:a4:88:9e:de:e6:
         0e:9c:66:77:82:4f:5f:19:24:ad:64:13:7e:6e:5a:5a:5a:00:
         ba:1c:88:b6:16:dd:fd:a0:83:58:fd:f7:0b:a5:ea:e6:df:83:
         0b:5d:25:6f:0a:f7:9b:25:66:3c:73:0e:a4:93:08:bd:49:10:
         a1:54:01:e2:8a:68:ee:61:4b:6a:30:62:78:bc:65:f2:e9:04:
         0a:d1:e4:1e:b8:62:7c:98:34:c3:52:91:9d:f6:1a:db:6e:a6:
         1e:a5:4b:58:89:86:3b:db:43:fc:62:b2:47:a9:40:c5:03:47:
         00:d7:83:69:f3:40:0f:eb:9b:b2:07:86:b6:7c:c2:5b:d7:fc:
         23:af:5a:6b:2a:57:e5:7c:85:f7:8c:a1:db:50:66:70:c6:30:
         8e:cf:3b:e8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErOC47iZ2J1U5QAhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
ZTY1ODIxYWYtYjI2MC00YTAxLTlmNmItMDllZGU1MDA0MmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY2CUQ6T+POv4uugxjny3re7kFE4gpdXuZB6
By712xDLuKUaNv9jBezGL+90vB9jSFW7ssFPpHwmHiNrCK5OMkLXlDwnGk2tO3QI
LUfhmfs5w5rpK9v+HDxH3QJBgys5sMkA2ipD3vSOmKQ+0NRuyzQUpFfMetMlOf+G
CNE7dTqP6TmOvxAPy/d+TT8JznixR7C6BMvVV1DddDXVigtLAffs67TWeRbvU+SQ
2Es95sGiHloblddkpEsm2Fm7MCVXCA4mbjivxPGnSkiOits8e03j5pXzvxbB+/k+
Z/UAxeCmoGyzZvomjwOmuSPBNMBzfC+sM3xx3ujJTwVLQx4H6QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB0bRI3zHnAnyy5YLLZqndVs7X+iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvZGQzYWU0NWQtYTc2YS0z
NWY1LTg0YjctMDY4NzEzNjZiMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9kg4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAoJHDJvxb2xNP8GwDg96lFyAmFhL8+wV/1teYeiWr6cbdKFsDh/Cl
tVJD8nza/chsG2Dll6q78hcbIlkvp/q7zvCHRYsuOxrXCDdep8b9ET1+s+O9adAR
MRNksoTqH7xsZu7bO2jEkKSInt7mDpxmd4JPXxkkrWQTfm5aWloAuhyIthbd/aCD
WP33C6Xq5t+DC10lbwr3myVmPHMOpJMIvUkQoVQB4opo7mFLajBieLxl8ukECtHk
HrhifJg0w1KRnfYa226mHqVLWImGO9tD/GKyR6lAxQNHANeDafNAD+ubsgeGtnzC
W9f8I69aaypX5XyF94yh21BmcMYwjs876A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:32:11 2025 by rpki-client