Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/627e2265-9cd5-3b23-92c2-779bcf2d369b.roa
File:                     627e2265-9cd5-3b23-92c2-779bcf2d369b.roa (raw, json)
Hash identifier:          dwN2+8S/wkWzhity9/EZZ8pwwyeG5Lb9b684gK5eRoU=
Subject key identifier:   74:E7:21:F6:77:FA:93:BD:0D:08:44:8E:D0:08:62:04:AA:A5:AF:B3
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584ACA35A96AA5B009BFC246EFC0
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/627e2265-9cd5-3b23-92c2-779bcf2d369b.roa
Signing time:             Fri 08 Aug 2025 16:02:10 +0000
ROA not before:           Fri 08 Aug 2025 16:02:10 +0000
ROA not after:            Thu 06 Nov 2025 17:02:10 +0000
asID:                     32806
IP address blocks:        2604:9900:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ca:35:a9:6a:a5:b0:09:bf:c2:46:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Aug  8 16:02:10 2025 GMT
            Not After : Nov  6 17:02:10 2025 GMT
        Subject: CN=d63c38aa-8a13-49e7-bfac-e2499ecdbb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:87:b1:b5:ce:3e:4e:bd:5a:e1:1e:0e:b3:
                    47:14:2a:7f:43:9d:c9:43:dc:2d:88:fa:b1:59:4e:
                    11:cb:5a:e5:30:93:7b:aa:4d:5e:34:ac:f0:61:b4:
                    ce:cc:65:20:9c:e1:8c:11:db:53:fe:04:ea:44:7a:
                    69:4e:38:73:90:ba:c3:3b:4f:38:15:d7:bd:1a:65:
                    5d:67:f5:f4:65:12:e2:c5:34:42:b3:1a:41:0b:a0:
                    2e:d2:b3:36:59:8f:46:6f:2d:d9:c8:ea:7c:9b:be:
                    0e:4d:ad:83:10:3d:dd:e6:15:1d:86:52:d4:f6:fd:
                    22:43:71:02:6d:a9:2c:ac:a5:57:e9:4d:be:b4:78:
                    c4:72:05:58:f0:ea:00:50:6e:0a:cf:ce:0f:2b:30:
                    5d:22:8d:6b:0b:4a:01:63:2b:7e:23:8c:0f:60:80:
                    99:ba:37:91:e3:6c:aa:a1:91:92:79:86:eb:62:1e:
                    78:03:99:f7:74:d1:b3:f9:c5:1c:62:9f:94:50:60:
                    5b:87:f8:f8:b3:b9:67:49:7e:71:1a:28:14:4e:6e:
                    2f:c9:e0:22:85:b8:19:ab:c0:20:11:7c:45:3c:4d:
                    16:9c:3e:50:0b:27:40:54:73:c7:e7:ee:02:16:84:
                    63:99:91:dd:fc:f3:1b:ae:65:03:f6:42:78:53:c2:
                    71:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E7:21:F6:77:FA:93:BD:0D:08:44:8E:D0:08:62:04:AA:A5:AF:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/627e2265-9cd5-3b23-92c2-779bcf2d369b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9900:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:27:3e:b0:af:c2:ba:49:60:85:65:ac:2c:83:24:9e:68:63:
         2e:a2:8f:59:cb:38:e2:07:44:9f:2b:fd:b0:48:27:dd:ed:0c:
         c1:0d:25:32:f2:57:f6:28:f1:5f:1c:9e:4b:14:16:3f:8c:c2:
         06:f3:a2:59:42:bd:dd:9e:af:5c:d2:8a:64:f0:be:33:4a:50:
         a4:fd:04:ba:5f:ee:af:53:95:b7:20:1f:2a:51:78:b6:70:3f:
         a0:2e:ee:4c:32:b3:10:60:37:d2:84:29:f2:99:7d:a1:b5:9d:
         70:65:32:a4:86:e1:20:a7:14:7f:e8:5c:c0:8c:8c:53:bf:73:
         3d:ff:f6:8c:80:ca:b8:a6:0a:de:8b:d0:a2:2a:a1:7a:cd:f3:
         7b:94:25:09:38:53:67:25:81:5c:95:8c:58:c2:d9:d3:a3:58:
         10:72:55:23:c2:33:f7:d8:7b:0d:2d:00:12:74:78:5e:67:46:
         28:02:7f:7d:b7:bd:55:64:09:22:27:23:51:e1:34:88:79:ba:
         35:13:0c:70:a9:e9:20:d1:4c:b4:e6:df:f3:db:2f:89:22:87:
         d5:9c:75:83:b2:08:21:09:0d:62:2c:f3:47:cc:42:e6:22:76:
         35:d4:c2:37:33:de:e1:62:ac:15:97:a4:28:14:a9:88:d6:17:
         83:57:bb:f6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErKNalqpbAJv8JG78AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1
OGQwMB4XDTI1MDgwODE2MDIxMFoXDTI1MTEwNjE3MDIxMFowLzEtMCsGA1UEAxMk
ZDYzYzM4YWEtOGExMy00OWU3LWJmYWMtZTI0OTllY2RiYjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6iHsbXOPk69WuEeDrNHFCp/Q53JQ9wtiPqx
WU4Ry1rlMJN7qk1eNKzwYbTOzGUgnOGMEdtT/gTqRHppTjhzkLrDO084Fde9GmVd
Z/X0ZRLixTRCsxpBC6Au0rM2WY9Gby3ZyOp8m74OTa2DED3d5hUdhlLU9v0iQ3EC
baksrKVX6U2+tHjEcgVY8OoAUG4Kz84PKzBdIo1rC0oBYyt+I4wPYICZujeR42yq
oZGSeYbrYh54A5n3dNGz+cUcYp+UUGBbh/j4s7lnSX5xGigUTm4vyeAihbgZq8Ag
EXxFPE0WnD5QCydAVHPH5+4CFoRjmZHd/PMbrmUD9kJ4U8JxnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHTnIfZ3+pO9DQhEjtAIYgSqpa+zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh
N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNjI3ZTIyNjUtOWNkNS0z
YjIzLTkyYzItNzc5YmNmMmQzNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm
MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1
NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2
NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJonPrCvwrpJYIVlrCyDJJ5oYy6ij1nLOOIHRJ8r/bBIJ93tDMEN
JTLyV/Yo8V8cnksUFj+MwgbzollCvd2er1zSimTwvjNKUKT9BLpf7q9TlbcgHypR
eLZwP6Au7kwysxBgN9KEKfKZfaG1nXBlMqSG4SCnFH/oXMCMjFO/cz3/9oyAyrim
Ct6L0KIqoXrN83uUJQk4U2clgVyVjFjC2dOjWBByVSPCM/fYew0tABJ0eF5nRigC
f323vVVkCSInI1HhNIh5ujUTDHCp6SDRTLTm3/PbL4kih9WcdYOyCCEJDWIs80fM
QuYidjXUwjcz3uFirBWXpCgUqYjWF4NXu/Y=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:14:14 2025 by rpki-client