Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5730f7ce-f13c-3679-a65e-eabb449e499c.roa
File:                     5730f7ce-f13c-3679-a65e-eabb449e499c.roa (raw, json)
Hash identifier:          S2XD4YdMNHLVyNjwjI86aZRoMtuEnf9vcF64YBWGrMg=
Subject key identifier:   D1:2E:66:64:04:4F:A9:EF:83:85:39:E7:25:18:D0:F2:3E:E0:95:48
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584ACE0B93D3A5D40EB0B3FA6A80
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5730f7ce-f13c-3679-a65e-eabb449e499c.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     19437
IP address blocks:        2607:6003:2303::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:93:d3:a5:d4:0e:b0:b3:fa:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=86002f5d-4991-48bf-bd05-484035b1ec42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b7:95:11:44:ff:06:d7:78:ae:65:39:02:79:
                    84:f4:9c:10:74:b4:d1:12:43:5c:e8:0c:48:8b:1f:
                    a5:f4:38:bc:36:65:e1:9c:d8:16:ff:bd:a0:2a:0e:
                    76:17:1a:4b:68:28:7d:0f:d9:9e:bc:82:95:bf:a7:
                    cd:ab:55:9d:ef:1e:81:4a:5d:68:2d:23:0c:95:5e:
                    4b:6b:b5:08:8c:88:74:49:1c:c0:1c:1e:1f:fd:dc:
                    82:14:48:42:57:cf:fc:21:c9:03:e5:ac:d1:04:5a:
                    42:fa:87:3e:3f:b8:38:a4:69:a1:c0:de:bb:16:88:
                    20:19:3b:8c:14:86:1e:7e:3a:67:57:ed:ba:8d:88:
                    99:8a:4c:00:4e:7c:00:94:d8:2e:8c:c6:1a:18:8b:
                    ee:8c:02:d3:cd:b8:f2:c3:b7:18:e7:6f:40:9a:7d:
                    60:f4:fa:b4:1c:15:3c:7e:e7:b9:3e:ca:91:2e:36:
                    48:20:38:91:0c:91:1d:2b:e7:eb:0d:a3:7f:41:4f:
                    30:ca:fe:0c:83:70:d8:05:40:57:87:8a:a8:91:c1:
                    b8:f4:93:08:ff:d8:2f:9a:b9:73:44:49:76:98:27:
                    92:e9:2d:ad:29:15:f2:a7:06:a2:fe:a4:9e:90:c5:
                    31:fb:19:62:56:13:9c:c1:78:9c:ea:36:b4:26:30:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2E:66:64:04:4F:A9:EF:83:85:39:E7:25:18:D0:F2:3E:E0:95:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5730f7ce-f13c-3679-a65e-eabb449e499c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6003:2303::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:08:40:79:0f:51:8f:a8:cf:f3:25:e0:e2:d6:3e:88:d9:44:
         ff:88:96:e4:b3:02:d5:3f:00:72:78:d8:f5:44:e9:78:56:d5:
         ba:9b:59:52:b3:63:41:5f:2d:a3:36:64:6e:d6:f6:d8:26:25:
         58:02:ed:ed:4d:e4:5e:ea:d2:b4:19:77:bf:7d:6b:40:77:cf:
         37:f6:81:63:11:9c:c6:5a:fd:a4:17:0d:93:bc:71:65:39:03:
         a3:8d:b9:42:c6:14:fb:59:87:0e:90:d3:8f:67:3d:71:27:9e:
         d7:38:69:0b:69:88:c4:a7:e9:61:a0:1d:0b:5d:d9:10:09:82:
         3c:dc:17:66:9c:41:36:3a:62:fc:dd:22:b1:c4:62:31:c8:bf:
         a3:5b:ee:68:b9:2f:b3:2a:47:37:6e:1d:c2:f9:58:3b:e8:ba:
         1e:9c:03:b7:7e:63:8b:1d:4f:80:f5:9a:80:ee:cd:42:71:ec:
         f0:b9:66:b1:84:1e:b1:bd:ac:b6:f6:66:f7:59:50:d8:0f:b8:
         5c:a7:a4:70:b1:ec:b1:4f:2e:ff:c4:02:de:b6:f2:ac:cd:15:
         4e:6c:7b:03:47:34:3e:f5:cd:58:ae:d1:d7:bd:4a:65:46:da:
         8b:6d:cb:1d:00:ec:62:c8:6c:85:a9:d6:4e:05:4f:a7:60:29:
         30:aa:45:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErOC5PTpdQOsLP6aoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
ODYwMDJmNWQtNDk5MS00OGJmLWJkMDUtNDg0MDM1YjFlYzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhreVEUT/Btd4rmU5AnmE9JwQdLTREkNc6AxI
ix+l9Di8NmXhnNgW/72gKg52FxpLaCh9D9mevIKVv6fNq1Wd7x6BSl1oLSMMlV5L
a7UIjIh0SRzAHB4f/dyCFEhCV8/8IckD5azRBFpC+oc+P7g4pGmhwN67FoggGTuM
FIYefjpnV+26jYiZikwATnwAlNgujMYaGIvujALTzbjyw7cY529Amn1g9Pq0HBU8
fue5PsqRLjZIIDiRDJEdK+frDaN/QU8wyv4Mg3DYBUBXh4qokcG49JMI/9gvmrlz
REl2mCeS6S2tKRXypwai/qSekMUx+xliVhOcwXic6ja0JjDtOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNEuZmQET6nvg4U55yUY0PI+4JVIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNTczMGY3Y2UtZjEzYy0z
Njc5LWE2NWUtZWFiYjQ0OWU0OTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdgAyMD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGsIQHkPUY+oz/Ml4OLWPojZRP+IluSzAtU/AHJ42PVE6XhW1bqb
WVKzY0FfLaM2ZG7W9tgmJVgC7e1N5F7q0rQZd799a0B3zzf2gWMRnMZa/aQXDZO8
cWU5A6ONuULGFPtZhw6Q049nPXEnntc4aQtpiMSn6WGgHQtd2RAJgjzcF2acQTY6
YvzdIrHEYjHIv6Nb7mi5L7MqRzduHcL5WDvouh6cA7d+Y4sdT4D1moDuzUJx7PC5
ZrGEHrG9rLb2ZvdZUNgPuFynpHCx7LFPLv/EAt628qzNFU5sewNHND71zViu0de9
SmVG2ottyx0A7GLIbIWp1k4FT6dgKTCqRYs=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:54:00 2025 by rpki-client