Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/55eaa5cb-2cd3-343c-84b6-0c5fef689df4.roa
File:                     55eaa5cb-2cd3-343c-84b6-0c5fef689df4.roa (raw, json)
Hash identifier:          Fduvjqi8FIz9Yeq8GVsO8w2HyiKEJnhLCatE9owph2M=
Subject key identifier:   E6:27:64:69:44:86:32:C1:B2:27:75:89:6C:E2:76:2B:41:FD:F0:A3
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584AC8764FBCBEDFDC899518D280
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/55eaa5cb-2cd3-343c-84b6-0c5fef689df4.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     25855
IP address blocks:        2602:f891::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:4f:bc:be:df:dc:89:95:18:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=22b0d427-78f0-4d77-98b6-94366ac1401e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:51:1a:f7:f0:91:b8:7b:7b:38:a9:7f:6e:
                    87:94:e1:f6:86:ab:87:a1:74:f9:66:ad:4a:b1:80:
                    b8:c3:20:45:4a:bd:dc:d0:bb:1c:8c:3a:b7:8f:68:
                    5a:46:2d:55:f2:69:7c:2b:b4:03:54:a3:1e:4e:cb:
                    28:d6:bb:35:97:e4:a6:ee:70:90:1b:de:e5:91:8e:
                    53:52:78:5f:4f:67:dc:db:ba:36:e2:af:45:89:c8:
                    00:58:01:c9:41:cb:b0:66:5d:d4:f2:e4:8a:9b:70:
                    37:90:ce:56:f8:69:08:e2:33:db:9a:4a:a0:7f:f7:
                    3e:59:ed:6b:af:c0:a0:6a:2b:90:b4:e9:93:71:7e:
                    70:92:ae:f2:c3:7e:c2:b6:73:be:aa:3c:3c:b4:ec:
                    66:82:7a:de:fe:f3:94:91:9f:f6:27:3a:13:87:22:
                    c7:40:3f:ed:be:46:df:1f:48:c4:f0:d2:b9:7f:53:
                    f0:a4:2f:4d:de:2d:df:15:d2:33:9d:d3:26:61:a1:
                    88:c1:a5:13:fb:89:81:7d:c5:89:00:a1:8c:d5:f8:
                    7d:35:94:dd:07:f1:cc:74:29:45:46:97:9c:97:6a:
                    56:a8:f4:6e:ed:1e:4d:b4:e9:31:48:eb:cb:0b:85:
                    3f:d6:f4:9d:1e:c6:e9:16:d3:ca:31:d9:f5:53:23:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:27:64:69:44:86:32:C1:B2:27:75:89:6C:E2:76:2B:41:FD:F0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/55eaa5cb-2cd3-343c-84b6-0c5fef689df4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f891::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e8:24:b6:cd:86:7e:41:3f:09:c1:64:ba:f1:de:47:b5:5a:
         23:b5:dd:3f:87:a6:a9:11:b0:bd:65:7a:37:8b:60:c7:07:4d:
         b1:45:2c:f0:63:d6:6f:43:24:a3:32:ac:8c:d4:ab:6c:ba:4c:
         31:0e:2d:74:03:ea:fe:09:e4:c3:f3:26:9a:9e:8a:cb:d3:bc:
         50:f9:59:b1:83:1b:19:bb:55:b0:7d:96:16:b4:94:e0:fe:1c:
         36:72:6a:0d:6e:56:7e:76:eb:f5:a3:07:ec:a1:2d:04:b9:c3:
         cc:a6:01:55:94:fd:6f:98:90:df:82:bd:92:91:77:36:f2:90:
         2c:0c:bb:d1:8e:e4:f0:7f:f4:02:a8:05:56:15:e8:26:5c:d3:
         c5:13:f1:67:65:28:ba:d8:d2:dc:d9:37:02:08:40:63:f0:1c:
         03:2a:8b:c5:b7:f8:e5:8d:ba:f1:02:2c:e1:53:ce:09:9f:84:
         12:37:48:87:ba:21:d4:07:c4:e0:24:31:09:2c:89:1c:41:15:
         34:88:a7:4c:01:d5:a9:b9:a8:af:be:8e:1b:38:cd:cf:49:36:
         bf:38:25:e2:10:c7:7d:56:5f:db:be:e7:6d:e7:17:bd:0b:1a:
         9e:a9:88:81:bc:7e:3b:e5:7b:2f:21:68:2e:6a:fa:d2:9d:3b:
         e5:18:f6:a6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErIdk+8vt/ciZUY0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
MjJiMGQ0MjctNzhmMC00ZDc3LTk4YjYtOTQzNjZhYzE0MDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnFRGvfwkbh7ezipf26HlOH2hquHoXT5Zq1K
sYC4wyBFSr3c0LscjDq3j2haRi1V8ml8K7QDVKMeTsso1rs1l+Sm7nCQG97lkY5T
UnhfT2fc27o24q9FicgAWAHJQcuwZl3U8uSKm3A3kM5W+GkI4jPbmkqgf/c+We1r
r8CgaiuQtOmTcX5wkq7yw37CtnO+qjw8tOxmgnre/vOUkZ/2JzoThyLHQD/tvkbf
H0jE8NK5f1PwpC9N3i3fFdIzndMmYaGIwaUT+4mBfcWJAKGM1fh9NZTdB/HMdClF
Rpecl2pWqPRu7R5NtOkxSOvLC4U/1vSdHsbpFtPKMdn1UyORiwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOYnZGlEhjLBsid1iWziditB/fCjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvNTVlYWE1Y2ItMmNkMy0z
NDNjLTg0YjYtMGM1ZmVmNjg5ZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4kQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKugkts2GfkE/CcFkuvHeR7VaI7XdP4emqRGwvWV6N4tgxwdNsUUs
8GPWb0MkozKsjNSrbLpMMQ4tdAPq/gnkw/Mmmp6Ky9O8UPlZsYMbGbtVsH2WFrSU
4P4cNnJqDW5Wfnbr9aMH7KEtBLnDzKYBVZT9b5iQ34K9kpF3NvKQLAy70Y7k8H/0
AqgFVhXoJlzTxRPxZ2UoutjS3Nk3AghAY/AcAyqLxbf45Y268QIs4VPOCZ+EEjdI
h7oh1AfE4CQxCSyJHEEVNIinTAHVqbmor76OGzjNz0k2vzgl4hDHfVZf277nbecX
vQsanqmIgbx+O+V7LyFoLmr60p075Rj2pg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:44:12 2025 by rpki-client