Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/7054621e-1dac-3c1f-8da2-e05571e13452.roa
File:                     7054621e-1dac-3c1f-8da2-e05571e13452.roa (raw, json)
Hash identifier:          m7rf0VoDtDEuEfT3p3jQkM6uKoJF3rYJG+9JxAxKmfo=
Subject key identifier:   A1:AE:7B:6F:AE:E7:2E:C1:52:47:2C:B8:2A:9C:B3:0A:0D:27:D6:64
Certificate issuer:       /CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
Certificate serial:       010D0C9F4328584A31B5676A572F58C6F6254580
Authority key identifier: 61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/7054621e-1dac-3c1f-8da2-e05571e13452.roa
Signing time:             Sun 15 Jun 2025 01:00:49 +0000
ROA not before:           Sun 15 Jun 2025 01:00:49 +0000
ROA not after:            Sat 13 Sep 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2602:f702:222::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:31:b5:67:6a:57:2f:58:c6:f6:25:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cdafa2-3aa9-4253-a242-08ace2acaef2
        Validity
            Not Before: Jun 15 01:00:49 2025 GMT
            Not After : Sep 13 01:00:49 2025 GMT
        Subject: CN=3b5b8dfc-fee4-4445-bdc7-4b34ae10ed48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:51:c7:70:d9:3d:a3:ac:09:15:ff:2e:e6:4e:
                    2f:18:cc:ff:89:2f:99:33:03:c6:8c:6d:20:1d:86:
                    b7:7a:cb:94:65:43:3f:72:f5:38:a2:98:37:07:64:
                    25:e1:bd:17:e1:db:ac:0b:33:39:50:90:de:63:f4:
                    e6:a7:43:90:96:43:fe:cb:cc:ca:de:80:98:1c:78:
                    ea:74:30:d5:37:47:e0:80:25:d0:94:b8:d6:59:86:
                    c5:74:5e:22:f9:82:ba:cd:01:fd:d4:50:4f:af:0f:
                    44:ca:89:2c:44:b6:2d:b6:39:6b:91:21:f5:6b:3a:
                    f5:3a:5e:c7:22:0b:7c:8e:d3:91:b5:d9:26:9c:d6:
                    63:88:09:9b:40:ce:07:5f:ef:df:d3:ee:61:10:4c:
                    d1:49:8e:a1:e5:f9:45:d6:59:2c:41:b5:13:b9:89:
                    23:00:34:0d:56:7f:f9:7d:95:8e:fa:55:c6:19:1e:
                    f0:c6:ac:8c:6b:8b:c7:69:d8:1f:2c:09:93:86:5c:
                    0c:8d:cf:7a:9b:41:8c:d7:44:21:40:f3:bd:be:89:
                    2b:8a:25:d3:fb:ae:4f:95:b0:60:a1:50:ff:39:7e:
                    3f:e5:6b:e6:8e:c4:3d:de:4a:eb:ed:01:41:ec:c3:
                    b9:e0:0f:fe:a0:6e:8a:1b:61:57:fe:93:7d:7d:bb:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AE:7B:6F:AE:E7:2E:C1:52:47:2C:B8:2A:9C:B3:0A:0D:27:D6:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/7054621e-1dac-3c1f-8da2-e05571e13452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2/31cdafa2-3aa9-4253-a242-08ace2acaef2.crl

            X509v3 Authority Key Identifier:
                keyid:61:12:27:D5:7B:B1:66:AC:C6:7D:1D:A8:85:1A:3D:97:FF:5C:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31cdafa2-3aa9-4253-a242-08ace2acaef2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f702:222::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6e:ba:87:ba:47:fb:2e:59:1f:c4:bb:68:3a:2e:c2:cd:cd:
         aa:34:a6:8a:2b:7f:ee:e4:b1:41:ef:be:04:de:c9:cb:92:01:
         83:aa:40:45:5d:a3:99:3b:50:b3:b3:4b:89:26:38:b7:1a:f5:
         77:a8:ea:d7:d3:f6:ae:5d:24:72:90:d8:b7:08:3c:5c:2a:4d:
         77:7c:c0:0b:d6:e1:d2:9e:d0:1e:a1:60:38:77:b1:81:8f:16:
         93:ef:5d:e2:a2:a0:df:9c:e7:94:3e:3a:06:48:a1:2d:fd:88:
         bd:3e:ff:fd:d8:32:36:0e:f2:c3:4e:8c:d5:22:af:35:8f:28:
         a0:e0:cb:0b:43:b8:99:dd:77:87:68:2a:7f:e2:7e:54:84:e7:
         6f:c7:b1:ef:b3:7a:ac:17:b2:e4:da:b8:47:e1:ab:4c:b2:83:
         1d:57:53:1b:58:b7:3a:fe:a5:af:1d:cd:17:1b:63:73:16:fb:
         5b:8d:18:90:78:cc:ad:70:44:94:92:f1:ac:b5:b9:85:13:49:
         f3:be:e6:f9:f9:8c:03:cb:fd:96:14:f7:ba:ed:51:e6:22:94:
         c0:2c:77:00:bf:c1:a7:c3:db:36:53:f5:04:1c:24:ac:2f:e8:
         a4:af:ce:1f:77:5f:ec:dc:3f:da:20:3c:b4:09:61:52:4b:6e:
         30:be:85:9c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoxtWdqVy9YxvYlRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFjZGFmYTItM2FhOS00MjUzLWEyNDItMDhhY2UyYWNh
ZWYyMB4XDTI1MDYxNTAxMDA0OVoXDTI1MDkxMzAxMDA0OVowLzEtMCsGA1UEAxMk
M2I1YjhkZmMtZmVlNC00NDQ1LWJkYzctNGIzNGFlMTBlZDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1HHcNk9o6wJFf8u5k4vGMz/iS+ZMwPGjG0g
HYa3esuUZUM/cvU4opg3B2Ql4b0X4dusCzM5UJDeY/Tmp0OQlkP+y8zK3oCYHHjq
dDDVN0fggCXQlLjWWYbFdF4i+YK6zQH91FBPrw9EyoksRLYttjlrkSH1azr1Ol7H
Igt8jtORtdkmnNZjiAmbQM4HX+/f0+5hEEzRSY6h5flF1lksQbUTuYkjADQNVn/5
fZWO+lXGGR7wxqyMa4vHadgfLAmThlwMjc96m0GM10QhQPO9vokriiXT+65PlbBg
oVD/OX4/5WvmjsQ93krr7QFB7MO54A/+oG6KG2FX/pN9fbvmSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKGue2+u5y7BUkcsuCqcswoNJ9ZkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMWNk
YWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFjZTJhY2FlZjIvNzA1NDYyMWUtMWRhYy0z
YzFmLThkYTItZTA1NTcxZTEzNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzFjZGFmYTItM2FhOS00MjUzLWEy
NDItMDhhY2UyYWNhZWYyLzMxY2RhZmEyLTNhYTktNDI1My1hMjQyLTA4YWNlMmFj
YWVmMi5jcmwwHwYDVR0jBBgwFoAUYRIn1XuxZqzGfR2ohRo9l/9c+TQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMWNkYWZhMi0zYWE5LTQyNTMtYTI0Mi0wOGFj
ZTJhY2FlZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3AgIi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGNuuoe6R/suWR/Eu2g6LsLNzao0poorf+7ksUHvvgTeycuSAYOq
QEVdo5k7ULOzS4kmOLca9Xeo6tfT9q5dJHKQ2LcIPFwqTXd8wAvW4dKe0B6hYDh3
sYGPFpPvXeKioN+c55Q+OgZIoS39iL0+//3YMjYO8sNOjNUirzWPKKDgywtDuJnd
d4doKn/iflSE52/Hse+zeqwXsuTauEfhq0yygx1XUxtYtzr+pa8dzRcbY3MW+1uN
GJB4zK1wRJSS8ay1uYUTSfO+5vn5jAPL/ZYU97rtUeYilMAsdwC/wafD2zZT9QQc
JKwv6KSvzh93X+zcP9ogPLQJYVJLbjC+hZw=
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:13:26 2025 by rpki-client