Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa
File:                     14ccf9e3-3501-3d49-b394-7e1405d6383d.roa (raw, json)
Hash identifier:          oF7bIHLcDmzmaZLx7gKFm+5fv655u1BRJlqDxuJFXUI=
Subject key identifier:   A7:1F:FE:24:DD:65:94:42:BF:15:DA:16:56:38:63:B2:4A:47:F9:EB
Certificate issuer:       /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial:       010D0C9F4328584A4C3B18A609C1BEB75554D580
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     62563
IP address blocks:        2602:fec3:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:18:a6:09:c1:be:b7:55:54:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=24530f96-a4cd-42e8-8809-59f773a8e485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:de:e0:47:ce:90:08:1d:79:e7:f9:d0:b9:
                    c3:7e:9b:47:d8:19:cf:f5:b2:05:23:cd:8b:60:29:
                    10:35:8f:df:f7:3f:75:f3:23:a1:7c:7b:1e:5a:87:
                    ac:ac:20:3e:35:f1:61:37:94:a1:a2:85:9c:80:1b:
                    d2:aa:37:12:f1:e3:e5:fc:6e:1e:36:92:4a:1a:4c:
                    f1:fe:d0:26:ec:83:7c:eb:4f:b3:e7:39:c9:d4:29:
                    d6:b0:25:91:5f:49:a6:64:e1:fa:a9:2a:60:82:84:
                    d8:e9:bd:9d:3d:b6:29:e7:96:0e:e0:a9:a5:af:2e:
                    ef:f2:c2:d5:57:81:e0:2e:c2:da:f4:82:74:0a:a2:
                    c2:70:84:66:1a:ce:ff:1f:64:24:51:0d:e5:e2:b5:
                    98:0e:d8:0d:87:14:a9:70:82:fa:c2:67:be:c1:af:
                    d7:77:6e:46:43:42:8f:ad:58:e0:a6:9e:57:6d:80:
                    83:93:ff:93:45:78:78:e7:a7:f1:87:e0:b8:30:c2:
                    a5:7d:d9:3b:84:40:62:5f:62:84:50:70:d5:0a:af:
                    38:b7:a6:10:49:62:c1:79:53:79:03:f3:47:6a:ba:
                    eb:a4:6e:10:66:92:d9:24:0d:8d:30:40:4d:79:9c:
                    c8:83:4e:59:3c:6e:a4:e4:6e:ed:3d:66:4c:b1:4c:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:FE:24:DD:65:94:42:BF:15:DA:16:56:38:63:B2:4A:47:F9:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fec3:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:51:d6:3e:84:03:3f:9f:c7:af:3b:4b:19:5c:2b:97:28:a2:
         81:23:9a:7e:7c:07:12:db:56:b6:b9:86:9a:7d:16:99:25:35:
         f3:ee:d8:1b:81:7e:64:5f:70:47:fa:c2:96:db:76:e2:02:06:
         5d:e7:29:74:d3:29:17:61:af:5e:44:50:d7:b4:0e:cc:63:7e:
         9c:92:e1:80:19:63:13:fe:d2:83:d0:1e:57:bd:c6:25:ce:94:
         5c:29:86:38:f5:20:37:2b:90:29:a2:c5:5c:70:93:19:12:19:
         ca:03:c5:f8:f6:74:32:6b:fd:11:bd:2b:49:04:ef:5e:03:d1:
         56:46:d4:2e:c0:fb:ad:ed:0f:a7:cd:b6:13:ba:e5:c3:fa:a8:
         94:46:30:c4:7f:78:c8:25:40:aa:f9:4b:41:7e:50:7e:f7:9f:
         9b:f9:66:9e:db:c1:85:0a:28:6b:7b:01:d7:77:a4:fe:d6:14:
         7a:cf:6b:3d:a8:b1:c2:e5:b1:09:5a:74:ee:7e:be:47:7d:33:
         fc:c8:5b:b4:f9:5f:91:91:28:df:31:be:93:b0:60:ba:5f:69:
         29:2d:ec:6b:87:10:43:23:82:a8:5e:4f:8f:c2:35:d2:e2:c2:
         1e:47:81:95:18:ef:67:94:c3:6a:ce:1f:a1:b7:e2:76:99:38:
         4f:4a:99:19
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpMOximCcG+t1VU1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0
Mjc4MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
MjQ1MzBmOTYtYTRjZC00MmU4LTg4MDktNTlmNzczYThlNDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOre4EfOkAgdeef50LnDfptH2BnP9bIFI82L
YCkQNY/f9z918yOhfHseWoesrCA+NfFhN5ShooWcgBvSqjcS8ePl/G4eNpJKGkzx
/tAm7IN860+z5znJ1CnWsCWRX0mmZOH6qSpggoTY6b2dPbYp55YO4Kmlry7v8sLV
V4HgLsLa9IJ0CqLCcIRmGs7/H2QkUQ3l4rWYDtgNhxSpcIL6wme+wa/Xd25GQ0KP
rVjgpp5XbYCDk/+TRXh456fxh+C4MMKlfdk7hEBiX2KEUHDVCq84t6YQSWLBeVN5
A/NHarrrpG4QZpLZJA2NMEBNeZzIg05ZPG6k5G7tPWZMsUyPzQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKcf/iTdZZRCvxXaFlY4Y7JKR/nrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2
NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvMTRjY2Y5ZTMtMzUwMS0z
ZDQ5LWIzOTQtN2UxNDA1ZDYzODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw
MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5
NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm
M2MxOTQyNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+wwIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAqVHWPoQDP5/HrztLGVwrlyiigSOafnwHEttWtrmGmn0WmSU18+7Y
G4F+ZF9wR/rCltt24gIGXecpdNMpF2GvXkRQ17QOzGN+nJLhgBljE/7Sg9AeV73G
Jc6UXCmGOPUgNyuQKaLFXHCTGRIZygPF+PZ0Mmv9Eb0rSQTvXgPRVkbULsD7re0P
p822E7rlw/qolEYwxH94yCVAqvlLQX5Qfvefm/lmntvBhQooa3sB13ek/tYUes9r
PaixwuWxCVp07n6+R30z/MhbtPlfkZEo3zG+k7Bgul9pKS3sa4cQQyOCqF5Pj8I1
0uLCHkeBlRjvZ5TDas4fobfidpk4T0qZGQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:26:41 2025 by rpki-client