Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/534a17c3-55a7-3edd-b528-c4cb6f33d26b.roa
File:                     534a17c3-55a7-3edd-b528-c4cb6f33d26b.roa (raw, json)
Hash identifier:          LEN5VTVbxi9U7E91pLA/IvqlUCknJr1OUuwjsbuz4Ik=
Subject key identifier:   8F:45:E6:99:84:EE:81:74:9F:D1:D0:02:18:58:1D:6F:AB:D3:46:BD
Certificate issuer:       /CN=c1ca327a-71b9-47e5-b718-53788c38e86c
Certificate serial:       010D0C9F4328584A011863497C51784658DFD040
Authority key identifier: CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/534a17c3-55a7-3edd-b528-c4cb6f33d26b.roa
Signing time:             Wed 28 May 2025 15:05:43 +0000
ROA not before:           Wed 28 May 2025 15:05:43 +0000
ROA not after:            Tue 26 Aug 2025 15:05:43 +0000
asID:                     399821
IP address blocks:        2606:5b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:01:18:63:49:7c:51:78:46:58:df:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ca327a-71b9-47e5-b718-53788c38e86c
        Validity
            Not Before: May 28 15:05:43 2025 GMT
            Not After : Aug 26 15:05:43 2025 GMT
        Subject: CN=f9745b78-d984-4b80-8b92-621427f7f4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:95:69:f5:1e:23:da:85:4c:64:6f:a7:2c:
                    cd:5e:b3:40:85:91:44:e5:c4:50:2c:65:ab:d0:59:
                    51:05:df:14:eb:95:e6:9f:a1:c7:4a:73:85:cb:d1:
                    d1:69:74:27:65:c1:5f:e4:57:28:cc:e4:e8:4a:48:
                    dd:44:65:58:a2:37:68:42:1f:61:7b:c6:80:91:05:
                    08:07:af:67:6a:43:06:4d:d6:95:b8:aa:c1:ab:92:
                    53:60:e2:92:70:fc:83:e6:e3:61:5b:14:91:57:0a:
                    31:cf:f0:24:85:b7:11:ab:29:d8:7e:14:45:ef:a1:
                    e6:d9:fd:bc:98:e4:cc:04:f1:80:fd:be:86:1a:bf:
                    24:94:80:0b:84:a4:70:03:9f:52:bf:1a:0e:1c:63:
                    14:7c:db:b4:45:b7:18:83:51:21:ed:3c:03:70:20:
                    18:f3:fa:71:dd:3c:7e:6a:6b:65:4f:bc:7a:1a:01:
                    61:0b:9e:86:63:0c:6c:ed:1a:73:e9:ec:8a:83:86:
                    dd:bf:2f:40:c6:e6:84:a9:b9:f0:ff:1b:b7:1b:7d:
                    c4:f5:33:d3:70:55:04:8c:6e:8e:56:47:a9:50:dc:
                    b9:6b:e1:96:07:4b:d5:f2:ef:90:43:a5:73:8a:20:
                    6d:2e:a9:f0:4a:52:82:fc:96:f2:e5:ca:f7:3b:50:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:45:E6:99:84:EE:81:74:9F:D1:D0:02:18:58:1D:6F:AB:D3:46:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/534a17c3-55a7-3edd-b528-c4cb6f33d26b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.crl

            X509v3 Authority Key Identifier:
                keyid:CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:aa:21:d7:f1:85:81:9e:79:2c:e7:7f:4e:31:af:2e:da:b4:
         21:c9:ea:e5:ca:fb:0d:98:a3:fd:7b:02:f7:f7:04:a7:6d:d8:
         1e:3f:34:7c:96:cf:0c:4e:52:3b:eb:64:d7:97:1d:da:23:43:
         e1:8f:68:69:94:02:e0:69:15:6d:03:a4:cc:53:ab:0e:a8:9b:
         7d:f3:c5:3c:18:38:9e:1b:d3:a1:a9:ab:4a:3e:2b:01:62:63:
         c9:bb:b2:1e:40:27:64:3c:3c:d5:f9:2e:aa:78:a8:1a:16:5c:
         82:25:62:4a:92:83:5b:d7:7b:b2:09:de:a3:e0:6e:1d:ca:f7:
         5f:28:b3:83:e5:4c:91:65:c0:b6:00:08:18:55:7b:0e:af:0c:
         d2:c5:00:fc:53:c4:c0:54:53:af:ae:f4:69:a5:b5:45:b9:1a:
         08:0d:9a:eb:1c:ae:7f:e8:69:a1:bc:96:b2:c3:05:e9:f9:22:
         42:a4:06:31:2a:54:7d:d2:03:60:1f:ed:97:2c:9e:b1:61:00:
         fa:4a:9e:05:e1:43:2e:88:fb:a3:41:81:b1:c4:8a:db:27:86:
         bf:56:ab:c2:4a:20:7e:13:98:9b:96:a8:68:b0:e2:58:ce:c1:
         cc:b5:cc:ed:bd:23:39:82:65:ad:15:99:b4:f5:e6:64:98:70:
         5c:9d:c5:cb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoBGGNJfFF4Rljf0EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjYTMyN2EtNzFiOS00N2U1LWI3MTgtNTM3ODhjMzhl
ODZjMB4XDTI1MDUyODE1MDU0M1oXDTI1MDgyNjE1MDU0M1owLzEtMCsGA1UEAxMk
Zjk3NDViNzgtZDk4NC00YjgwLThiOTItNjIxNDI3ZjdmNGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEWVafUeI9qFTGRvpyzNXrNAhZFE5cRQLGWr
0FlRBd8U65Xmn6HHSnOFy9HRaXQnZcFf5FcozOToSkjdRGVYojdoQh9he8aAkQUI
B69nakMGTdaVuKrBq5JTYOKScPyD5uNhWxSRVwoxz/AkhbcRqynYfhRF76Hm2f28
mOTMBPGA/b6GGr8klIALhKRwA59SvxoOHGMUfNu0RbcYg1Eh7TwDcCAY8/px3Tx+
amtlT7x6GgFhC56GYwxs7Rpz6eyKg4bdvy9AxuaEqbnw/xu3G33E9TPTcFUEjG6O
VkepUNy5a+GWB0vV8u+QQ6VziiBtLqnwSlKC/Jby5cr3O1CwxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFI9F5pmE7oF0n9HQAhhYHW+r00a9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jMWNh
MzI3YS03MWI5LTQ3ZTUtYjcxOC01Mzc4OGMzOGU4NmMvNTM0YTE3YzMtNTVhNy0z
ZWRkLWI1MjgtYzRjYjZmMzNkMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzFjYTMyN2EtNzFiOS00N2U1LWI3
MTgtNTM3ODhjMzhlODZjL2MxY2EzMjdhLTcxYjktNDdlNS1iNzE4LTUzNzg4YzM4
ZTg2Yy5jcmwwHwYDVR0jBBgwFoAUzEihtiYbHxx9y9mplUuuEsc/mZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jMWNhMzI3YS03MWI5LTQ3ZTUtYjcxOC01Mzc4
OGMzOGU4NmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZbQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBzqiHX8YWBnnks539OMa8u2rQhyerlyvsNmKP9ewL39wSnbdgePzR8
ls8MTlI762TXlx3aI0Phj2hplALgaRVtA6TMU6sOqJt988U8GDieG9OhqatKPisB
YmPJu7IeQCdkPDzV+S6qeKgaFlyCJWJKkoNb13uyCd6j4G4dyvdfKLOD5UyRZcC2
AAgYVXsOrwzSxQD8U8TAVFOvrvRppbVFuRoIDZrrHK5/6GmhvJaywwXp+SJCpAYx
KlR90gNgH+2XLJ6xYQD6Sp4F4UMuiPujQYGxxIrbJ4a/VqvCSiB+E5iblqhosOJY
zsHMtcztvSM5gmWtFZm09eZkmHBcncXL
-----END CERTIFICATE-----
Generated at Thu Jul 3 22:37:39 2025 by rpki-client