Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/7c62a3be-b3af-37c6-a32e-88417f74f0a3.roa
File:                     7c62a3be-b3af-37c6-a32e-88417f74f0a3.roa (raw, json)
Hash identifier:          OuJPtg7G+zTZrQ0/tTSq5dFKnx2HzFuQOcDN3pzqIEw=
Subject key identifier:   71:FC:C0:6D:4F:86:D3:9D:81:8C:5A:C3:4B:4F:D6:2B:86:2A:CE:DE
Certificate issuer:       /CN=e56f33c4-5195-43f8-a0d4-992f28b374ee
Certificate serial:       010D0C9F4328584A0C054FBA44485D0022C72800
Authority key identifier: 20:60:C8:B3:53:2F:F2:8E:E9:F4:83:19:56:82:2D:04:BA:3C:0B:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/7c62a3be-b3af-37c6-a32e-88417f74f0a3.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     399273
IP address blocks:        2620:a2:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/e56f33c4-5195-43f8-a0d4-992f28b374ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/e56f33c4-5195-43f8-a0d4-992f28b374ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:4f:ba:44:48:5d:00:22:c7:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56f33c4-5195-43f8-a0d4-992f28b374ee
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=cdb6c1ad-6dae-4b42-87fa-f140f65e8fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:fb:2f:0d:37:03:8b:84:43:da:b0:08:f5:
                    c8:63:bb:8b:33:fe:a9:b6:5b:6f:f2:d4:82:c7:7f:
                    8d:ef:d9:16:d6:d0:0a:39:17:ca:47:de:42:e5:3a:
                    0a:1c:fd:14:b2:52:fb:6a:47:7a:1e:c5:76:69:26:
                    24:b6:ee:55:c5:d6:60:75:9e:ab:af:c6:3f:d7:0c:
                    20:11:0e:d5:bf:7d:cc:22:db:38:de:fe:6d:9f:4c:
                    4e:34:e9:38:f4:1f:ce:5d:e1:15:6c:e1:8e:39:42:
                    75:1d:c8:21:4a:87:33:05:e2:e4:f9:47:b7:f8:15:
                    38:50:c2:63:cd:40:eb:1e:2a:6c:01:4a:8d:a8:8c:
                    7e:45:88:f4:b5:85:f9:a0:0a:8b:04:62:b6:33:ea:
                    4c:b7:91:d4:df:66:1a:bc:83:51:56:33:3b:1b:83:
                    aa:9e:eb:38:7a:aa:7a:32:52:e8:b1:73:5e:fc:3f:
                    b6:e9:6a:d7:cc:89:06:be:85:13:09:0e:8b:3d:c9:
                    3b:a7:12:13:e7:33:b0:13:c1:e0:e4:54:dd:23:24:
                    61:6f:c5:ee:a4:ad:c7:a1:93:01:17:03:99:7b:9f:
                    54:23:58:1c:79:39:6e:80:62:66:57:9e:95:ad:ce:
                    8d:3b:dc:2f:05:c6:96:7e:8a:d3:3f:4b:6f:4e:1a:
                    e8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FC:C0:6D:4F:86:D3:9D:81:8C:5A:C3:4B:4F:D6:2B:86:2A:CE:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/7c62a3be-b3af-37c6-a32e-88417f74f0a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/e56f33c4-5195-43f8-a0d4-992f28b374ee.crl

            X509v3 Authority Key Identifier:
                keyid:20:60:C8:B3:53:2F:F2:8E:E9:F4:83:19:56:82:2D:04:BA:3C:0B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a2:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:7b:b3:ba:3b:86:01:bd:ef:57:58:76:0e:d3:3e:ab:66:cb:
         4e:0c:7c:6c:52:8c:0c:bf:73:32:3d:39:3a:83:55:d1:6b:01:
         f1:14:bb:19:44:73:c5:ea:33:ee:91:ba:88:df:25:b2:4f:c1:
         2e:60:03:3b:f1:0a:54:b6:79:1a:1b:92:58:92:d3:60:1d:63:
         44:55:1a:b5:20:f8:91:73:9b:df:97:84:e2:0a:03:21:64:be:
         b7:12:8b:b0:7e:08:b4:7f:0a:12:64:8b:73:da:d4:a9:43:b6:
         2b:62:80:28:fb:15:3c:cd:e2:db:59:9b:0b:15:20:c5:c7:04:
         89:36:e4:6e:4d:7c:da:1e:2f:ea:e1:82:19:b5:6b:96:42:ea:
         f2:73:dd:dc:45:85:a0:23:e0:43:b0:59:48:a7:20:d5:38:0a:
         05:18:e2:54:98:e8:18:69:22:43:26:e7:1e:1a:ef:9b:ee:28:
         2a:4c:0a:13:5e:66:2e:91:02:21:86:b6:48:8c:f7:46:17:a1:
         2b:89:05:9f:8b:0a:d4:c8:2e:0f:9f:1f:8f:b5:23:5a:c0:a0:
         2e:0c:42:3f:44:8a:d9:a0:fd:f2:2d:8a:b8:49:bb:3f:45:9d:
         d3:85:26:79:47:40:7d:ff:3a:a6:3d:b5:c6:79:e5:64:9c:57:
         80:63:21:29
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoMBU+6REhdACLHKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTU2ZjMzYzQtNTE5NS00M2Y4LWEwZDQtOTkyZjI4YjM3
NGVlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
Y2RiNmMxYWQtNmRhZS00YjQyLTg3ZmEtZjE0MGY2NWU4ZmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQD7Lw03A4uEQ9qwCPXIY7uLM/6ptltv8tSC
x3+N79kW1tAKORfKR95C5ToKHP0UslL7akd6HsV2aSYktu5VxdZgdZ6rr8Y/1wwg
EQ7Vv33MIts43v5tn0xONOk49B/OXeEVbOGOOUJ1HcghSoczBeLk+Ue3+BU4UMJj
zUDrHipsAUqNqIx+RYj0tYX5oAqLBGK2M+pMt5HU32YavINRVjM7G4Oqnus4eqp6
MlLosXNe/D+26WrXzIkGvoUTCQ6LPck7pxIT5zOwE8Hg5FTdIyRhb8XupK3HoZMB
FwOZe59UI1gceTlugGJmV56Vrc6NO9wvBcaWforTP0tvThro3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHH8wG1PhtOdgYxaw0tP1iuGKs7eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lNTZm
MzNjNC01MTk1LTQzZjgtYTBkNC05OTJmMjhiMzc0ZWUvN2M2MmEzYmUtYjNhZi0z
N2M2LWEzMmUtODg0MTdmNzRmMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTU2ZjMzYzQtNTE5NS00M2Y4LWEw
ZDQtOTkyZjI4YjM3NGVlL2U1NmYzM2M0LTUxOTUtNDNmOC1hMGQ0LTk5MmYyOGIz
NzRlZS5jcmwwHwYDVR0jBBgwFoAUIGDIs1Mv8o7p9IMZVoItBLo8C/QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lNTZmMzNjNC01MTk1LTQzZjgtYTBkNC05OTJm
MjhiMzc0ZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAouAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKZ7s7o7hgG971dYdg7TPqtmy04MfGxSjAy/czI9OTqDVdFrAfEU
uxlEc8XqM+6RuojfJbJPwS5gAzvxClS2eRobkliS02AdY0RVGrUg+JFzm9+XhOIK
AyFkvrcSi7B+CLR/ChJki3Pa1KlDtitigCj7FTzN4ttZmwsVIMXHBIk25G5NfNoe
L+rhghm1a5ZC6vJz3dxFhaAj4EOwWUinINU4CgUY4lSY6BhpIkMm5x4a75vuKCpM
ChNeZi6RAiGGtkiM90YXoSuJBZ+LCtTILg+fH4+1I1rAoC4MQj9Eitmg/fItirhJ
uz9FndOFJnlHQH3/OqY9tcZ55WScV4BjISk=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:06:09 2025 by rpki-client