Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/1df67e8b-b920-367e-8eab-569d3fdcc91b.roa
File:                     1df67e8b-b920-367e-8eab-569d3fdcc91b.roa (raw, json)
Hash identifier:          F/3b1eZtzbFkP7GECLbmGwRgVqeM++8q8rBLUM+bJL0=
Subject key identifier:   F6:1A:B4:C7:06:4E:DF:CD:44:23:50:FF:05:20:BF:41:33:C8:04:83
Certificate issuer:       /CN=e2ad8bac-f79e-47d1-8fca-077de04d0f7a
Certificate serial:       010D0C9F4328584AC2E0E04D91A823C7CD08AB00
Authority key identifier: 81:06:2F:A8:8C:38:96:74:3A:C6:EC:B2:75:DF:6A:DC:F6:DB:1A:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/1df67e8b-b920-367e-8eab-569d3fdcc91b.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     21804
IP address blocks:        2605:7200::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:e0:4d:91:a8:23:c7:cd:08:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ad8bac-f79e-47d1-8fca-077de04d0f7a
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=7193a4a5-df8e-4848-8f08-aa0233421c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:2c:15:6b:7a:ac:d1:34:50:9e:93:d3:90:
                    e4:b5:7f:c5:14:5b:03:0c:5b:d2:65:7c:ae:6e:54:
                    f3:fa:61:7e:ca:ab:07:c8:6e:6c:95:b0:3f:b2:56:
                    fa:85:11:00:31:6f:88:c4:49:bb:5f:fb:52:f0:59:
                    e1:74:21:69:4e:75:64:12:64:7e:6e:32:81:57:fa:
                    e1:1a:e8:d1:26:54:9f:a1:3c:35:5e:29:72:96:04:
                    94:70:e6:9b:4d:6d:9b:d0:f3:1f:51:71:89:0e:cd:
                    9e:55:4f:4c:c6:bd:d6:e4:07:ba:d8:0b:63:1a:86:
                    24:3e:45:dc:6c:37:0e:0a:a5:f5:65:a6:a0:16:f9:
                    58:81:da:65:dd:c3:e4:77:bf:d5:3a:60:79:80:32:
                    5d:c7:e7:f0:89:18:38:09:63:64:f2:41:a1:60:9b:
                    16:7f:fa:8a:4c:92:ec:8e:b7:0a:ae:1f:14:f0:1d:
                    8f:e2:ab:cd:f0:85:7b:af:96:93:3c:3a:9d:71:69:
                    3b:73:65:6b:e1:0d:fc:21:e6:0a:e1:91:1f:b7:6b:
                    17:f7:7e:6c:b8:d5:f7:88:ab:e1:1e:95:5b:e2:43:
                    c2:94:f1:58:26:b4:3a:ef:cc:20:ef:d7:f8:16:f9:
                    eb:12:c8:e8:91:a1:15:5e:db:2a:82:ef:93:fc:f7:
                    e9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1A:B4:C7:06:4E:DF:CD:44:23:50:FF:05:20:BF:41:33:C8:04:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/1df67e8b-b920-367e-8eab-569d3fdcc91b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.crl

            X509v3 Authority Key Identifier:
                keyid:81:06:2F:A8:8C:38:96:74:3A:C6:EC:B2:75:DF:6A:DC:F6:DB:1A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e2ad8bac-f79e-47d1-8fca-077de04d0f7a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e7:1e:ea:9b:09:a1:b6:6b:0a:e6:f8:d0:ad:1b:00:99:36:
         3c:9e:59:40:5b:da:92:75:27:8f:a8:ee:81:7e:a8:ad:a3:b4:
         21:bb:84:49:f7:e1:a6:c7:97:9c:29:5e:62:09:fc:86:c2:3c:
         d0:14:f2:d9:7a:07:49:58:35:22:00:eb:2c:25:bd:1b:ec:ff:
         f2:7e:07:fd:4a:87:87:6e:12:1b:54:bb:9b:30:b1:f8:65:49:
         e3:a3:3e:dc:49:25:d2:a8:77:30:ec:70:b1:d4:1e:27:5d:7a:
         fb:e7:cc:b1:bd:3c:85:86:fc:27:ad:80:5b:a4:3e:6b:ab:01:
         29:ef:b9:bc:a4:b9:72:38:38:b6:cf:b8:30:e7:99:de:48:c6:
         36:d8:30:27:e1:06:34:e6:53:1b:f5:76:74:03:f1:74:35:2b:
         f4:96:2e:5b:0a:98:eb:4e:b1:4e:28:3b:48:15:76:7d:2c:00:
         ff:c1:0b:cc:0b:77:3f:9c:4c:f8:2a:0d:fe:31:c6:3b:f4:55:
         22:41:89:bb:4e:b6:d0:cd:0e:b5:ed:02:4d:1d:d3:1b:ed:0c:
         14:cc:a7:e2:ff:fa:eb:59:3b:fd:b4:ea:91:dc:d0:99:ad:ed:
         b4:65:66:d6:49:d5:38:89:fd:6b:7e:96:09:98:10:5d:26:74:
         8f:cd:5d:3f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErC4OBNkagjx80IqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTJhZDhiYWMtZjc5ZS00N2QxLThmY2EtMDc3ZGUwNGQw
ZjdhMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
NzE5M2E0YTUtZGY4ZS00ODQ4LThmMDgtYWEwMjMzNDIxYzA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop8sFWt6rNE0UJ6T05DktX/FFFsDDFvSZXyu
blTz+mF+yqsHyG5slbA/slb6hREAMW+IxEm7X/tS8FnhdCFpTnVkEmR+bjKBV/rh
GujRJlSfoTw1XilylgSUcOabTW2b0PMfUXGJDs2eVU9Mxr3W5Ae62AtjGoYkPkXc
bDcOCqX1ZaagFvlYgdpl3cPkd7/VOmB5gDJdx+fwiRg4CWNk8kGhYJsWf/qKTJLs
jrcKrh8U8B2P4qvN8IV7r5aTPDqdcWk7c2Vr4Q38IeYK4ZEft2sX935suNX3iKvh
HpVb4kPClPFYJrQ678wg79f4FvnrEsjokaEVXtsqgu+T/PfpUwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPYatMcGTt/NRCNQ/wUgv0EzyASDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMmFk
OGJhYy1mNzllLTQ3ZDEtOGZjYS0wNzdkZTA0ZDBmN2EvMWRmNjdlOGItYjkyMC0z
NjdlLThlYWItNTY5ZDNmZGNjOTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTJhZDhiYWMtZjc5ZS00N2QxLThm
Y2EtMDc3ZGUwNGQwZjdhL2UyYWQ4YmFjLWY3OWUtNDdkMS04ZmNhLTA3N2RlMDRk
MGY3YS5jcmwwHwYDVR0jBBgwFoAUgQYvqIw4lnQ6xuyydd9q3PbbGkgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lMmFkOGJhYy1mNzllLTQ3ZDEtOGZjYS0wNzdk
ZTA0ZDBmN2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVyADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCN5x7qmwmhtmsK5vjQrRsAmTY8nllAW9qSdSePqO6Bfqito7Qhu4RJ
9+Gmx5ecKV5iCfyGwjzQFPLZegdJWDUiAOssJb0b7P/yfgf9SoeHbhIbVLubMLH4
ZUnjoz7cSSXSqHcw7HCx1B4nXXr758yxvTyFhvwnrYBbpD5rqwEp77m8pLlyODi2
z7gw55neSMY22DAn4QY05lMb9XZ0A/F0NSv0li5bCpjrTrFOKDtIFXZ9LAD/wQvM
C3c/nEz4Kg3+McY79FUiQYm7TrbQzQ617QJNHdMb7QwUzKfi//rrWTv9tOqR3NCZ
re20ZWbWSdU4if1rfpYJmBBdJnSPzV0/
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:07:50 2025 by rpki-client