Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/887cba21-5728-3b95-9ab6-0cfc8921eab1.roa
File:                     887cba21-5728-3b95-9ab6-0cfc8921eab1.roa (raw, json)
Hash identifier:          N6FKuciL0/pCEf8jwbT3TQHRKWu/V9HG4aqn64gVMjg=
Subject key identifier:   01:C3:DC:AD:16:AB:9F:29:28:5F:0C:8B:07:4A:2D:B7:20:0B:A5:53
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584B33F19EDD0B79C833CF8ABE80
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/887cba21-5728-3b95-9ab6-0cfc8921eab1.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     2152
IP address blocks:        2607:cc80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:9e:dd:0b:79:c8:33:cf:8a:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=39c0356a-b55d-431b-b467-208b98b4d971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:18:60:37:75:8e:89:9c:f9:3e:7c:90:a8:
                    68:ef:7d:4d:62:4a:9a:fa:00:d1:c4:7f:e9:96:84:
                    6c:c4:b5:43:db:d8:55:76:76:a1:29:71:55:b7:22:
                    87:2a:a5:96:69:7e:4e:ad:3d:93:7b:12:d5:0f:c6:
                    78:ba:6b:f9:a8:43:e2:62:ec:f9:9b:64:c9:2b:b9:
                    ed:c8:ac:29:73:59:e8:43:92:80:e3:72:c0:81:bb:
                    36:9f:05:81:70:01:50:98:fd:15:65:60:92:52:97:
                    74:20:d6:45:78:b2:f3:66:e4:fb:30:c9:4a:97:cd:
                    b9:a2:5e:fd:c8:9a:45:cc:a4:e0:5b:be:22:3c:74:
                    1b:a2:5e:20:f6:07:99:9c:02:e5:0e:16:7f:bc:65:
                    ea:7c:16:dd:eb:1c:d8:c9:15:14:83:41:6b:5c:76:
                    71:67:06:98:f3:d0:ac:50:2a:42:00:10:67:8b:33:
                    56:3c:3b:66:10:d6:f8:ab:f2:6d:78:20:6c:90:f4:
                    51:a3:5e:02:fc:0d:04:70:dd:1c:ee:61:e5:62:22:
                    c6:4e:c7:79:a1:ed:3f:34:a9:ec:30:db:70:c4:79:
                    8a:ef:a9:c4:26:8a:51:52:e5:57:44:73:37:99:0e:
                    cf:97:af:2d:cb:51:73:db:40:9b:fd:ab:f3:ac:b2:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C3:DC:AD:16:AB:9F:29:28:5F:0C:8B:07:4A:2D:B7:20:0B:A5:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/887cba21-5728-3b95-9ab6-0cfc8921eab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:04:5e:d4:c1:b3:f1:a8:c9:d4:72:79:8a:03:3c:31:92:3c:
         a2:7f:17:ff:f1:1a:0c:53:c5:42:87:2a:f0:69:e3:1e:08:ff:
         ae:a7:82:fe:b8:fb:03:2e:12:51:73:ed:59:12:f5:05:fa:b6:
         87:46:a4:f1:25:52:e5:b4:32:ba:31:af:1f:04:b3:a4:6c:34:
         dc:a3:52:d6:26:c4:86:60:52:4e:f9:60:b2:92:1c:10:e6:ac:
         29:5d:e9:08:28:a2:55:fc:9c:1d:72:e3:04:31:54:b7:fc:db:
         26:96:b1:6c:fc:e1:c0:20:8a:0b:da:d8:d2:06:56:9d:e6:0a:
         26:9a:d0:b4:20:f4:9c:ea:e7:71:fe:cf:2e:ed:62:1e:25:ae:
         cf:fb:1b:ca:c5:47:1f:bd:bb:10:36:8a:af:39:a2:a3:e0:8a:
         1c:e7:01:7b:c3:6c:10:8f:41:19:39:57:6d:d2:d2:b4:92:c6:
         91:0f:aa:63:87:3e:9b:d3:58:5c:82:e0:9f:b9:ae:32:18:5c:
         75:d2:a4:8b:84:32:83:1b:0e:a6:8b:ef:d3:14:36:30:00:b1:
         cf:5a:12:95:73:14:3a:38:84:c2:0b:7b:1a:99:2a:c5:a0:fd:
         49:e9:49:73:48:b4:7d:a9:d3:17:74:20:ca:b8:3d:c4:0a:71:
         2b:ef:3f:19
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8Z7dC3nIM8+KvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0
MDc4MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk
MzljMDM1NmEtYjU1ZC00MzFiLWI0NjctMjA4Yjk4YjRkOTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2QYYDd1jomc+T58kKho731NYkqa+gDRxH/p
loRsxLVD29hVdnahKXFVtyKHKqWWaX5OrT2TexLVD8Z4umv5qEPiYuz5m2TJK7nt
yKwpc1noQ5KA43LAgbs2nwWBcAFQmP0VZWCSUpd0INZFeLLzZuT7MMlKl825ol79
yJpFzKTgW74iPHQbol4g9geZnALlDhZ/vGXqfBbd6xzYyRUUg0FrXHZxZwaY89Cs
UCpCABBnizNWPDtmENb4q/JteCBskPRRo14C/A0EcN0c7mHlYiLGTsd5oe0/NKns
MNtwxHmK76nEJopRUuVXRHM3mQ7Pl68ty1Fz20Cb/avzrLJgywIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAHD3K0Wq58pKF8MiwdKLbcgC6VTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk
M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvODg3Y2JhMjEtNTcyOC0z
Yjk1LTlhYjYtMGNmYzg5MjFlYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3
MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm
NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2
ZjAyZjQwNzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfMgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBDBF7UwbPxqMnUcnmKAzwxkjyifxf/8RoMU8VChyrwaeMeCP+up4L+
uPsDLhJRc+1ZEvUF+raHRqTxJVLltDK6Ma8fBLOkbDTco1LWJsSGYFJO+WCykhwQ
5qwpXekIKKJV/JwdcuMEMVS3/NsmlrFs/OHAIIoL2tjSBlad5gommtC0IPSc6udx
/s8u7WIeJa7P+xvKxUcfvbsQNoqvOaKj4Ioc5wF7w2wQj0EZOVdt0tK0ksaRD6pj
hz6b01hcguCfua4yGFx10qSLhDKDGw6mi+/TFDYwALHPWhKVcxQ6OITCC3samSrF
oP1J6UlzSLR9qdMXdCDKuD3ECnEr7z8Z
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:12 2025 by rpki-client