Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e666913e-9906-3516-98a8-a6e27a69ef82.roa
File:                     e666913e-9906-3516-98a8-a6e27a69ef82.roa (raw, json)
Hash identifier:          o/7HsFhhJNPWPUzP9+opOs61uEdKDh9GGamQ4mPpsCc=
Subject key identifier:   E8:EE:DD:D3:78:35:69:63:01:0A:7B:37:E0:91:B1:23:B6:0E:AF:54
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F4328584A3CE02CDCBF66C4C9BF23DC5C
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e666913e-9906-3516-98a8-a6e27a69ef82.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        2620:12c:9005::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:2c:dc:bf:66:c4:c9:bf:23:dc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=1d82f5d4-e4e6-460f-8c08-90c834e13ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:15:fe:2d:60:01:70:a0:e8:63:59:5f:77:
                    ec:41:8e:bd:89:b7:58:90:b1:19:b1:d6:18:23:88:
                    86:be:1e:16:9e:35:63:d8:bb:d7:4a:a3:8f:b4:99:
                    ed:45:cc:d7:c2:d8:bf:29:85:a8:67:c5:95:02:b1:
                    1d:6d:96:9d:a2:05:d2:50:04:dc:65:51:95:f8:e6:
                    85:78:28:d9:ed:c6:c5:a1:42:3f:8a:55:2b:bf:7d:
                    6b:e1:62:40:74:1f:a7:ac:86:47:83:8b:00:5f:21:
                    be:23:6f:e4:5b:ac:30:16:4e:53:72:48:90:3f:70:
                    dc:a8:f3:ee:4f:e7:e6:2b:54:3c:3e:56:79:34:e2:
                    5f:e7:be:eb:07:d6:50:81:b7:ac:be:d0:46:10:ab:
                    89:1e:d1:9c:6b:e9:de:7b:77:63:d6:90:d8:e3:af:
                    38:23:1c:2c:19:81:42:e0:30:3b:4b:09:68:7c:28:
                    8a:d8:c6:94:d3:96:6d:02:6a:c5:af:9a:75:2b:d1:
                    92:6e:30:af:84:3b:c1:3b:2a:fb:a6:9c:d0:16:66:
                    66:60:ff:2f:44:74:a6:bd:34:17:4d:db:9d:79:d9:
                    1c:68:3f:57:3c:c0:5e:01:3d:fe:22:29:86:f2:dc:
                    80:e6:91:f1:80:4a:88:23:8f:6c:ce:87:f0:7a:13:
                    6f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EE:DD:D3:78:35:69:63:01:0A:7B:37:E0:91:B1:23:B6:0E:AF:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/e666913e-9906-3516-98a8-a6e27a69ef82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12c:9005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c0:63:5d:5d:7a:7b:ea:e2:9d:68:f5:3e:fd:c2:12:ab:ba:
         a4:e2:30:08:8e:55:a4:13:2f:54:1e:68:49:72:79:f6:7e:0e:
         2b:0a:86:b7:6b:45:22:c6:21:c0:71:f6:c7:20:f6:c3:43:f0:
         72:d1:2c:b9:f3:68:84:f2:94:ae:48:60:7f:8d:0c:50:96:67:
         80:5c:9d:b4:d1:2f:14:47:99:6f:b0:72:ba:b3:b0:25:92:fa:
         06:66:3c:9b:48:40:91:e6:93:94:22:a9:93:eb:e0:71:07:16:
         06:94:cb:76:a0:dc:df:ec:66:58:0b:13:2c:c9:a7:ce:1f:d6:
         f7:d0:4d:86:ca:f0:23:40:28:c2:37:ad:55:4c:82:3b:b3:cc:
         32:cd:ff:0e:60:d2:3d:e1:a3:42:ef:c5:c8:bd:c0:24:d4:cb:
         c4:04:d4:59:1e:87:28:bb:9f:7f:c9:2b:4f:47:83:d8:86:e1:
         63:96:0f:9e:39:3e:f8:2a:30:e4:b5:46:d0:f3:99:fb:f9:e4:
         4e:21:2b:e7:7a:5d:81:a6:7b:5e:62:a9:de:53:ef:e2:21:10:
         bd:e1:1b:a8:c2:0e:43:0c:d4:7c:31:31:1a:a3:a9:0a:ab:06:
         4b:ba:0c:7e:63:14:58:e2:05:95:25:d0:2d:d2:3f:68:1b:a4:
         34:ab:8f:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo84Czcv2bEyb8j3FwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk
Y2M0MB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk
MWQ4MmY1ZDQtZTRlNi00NjBmLThjMDgtOTBjODM0ZTEzZmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfMV/i1gAXCg6GNZX3fsQY69ibdYkLEZsdYY
I4iGvh4WnjVj2LvXSqOPtJntRczXwti/KYWoZ8WVArEdbZadogXSUATcZVGV+OaF
eCjZ7cbFoUI/ilUrv31r4WJAdB+nrIZHg4sAXyG+I2/kW6wwFk5TckiQP3DcqPPu
T+fmK1Q8PlZ5NOJf577rB9ZQgbesvtBGEKuJHtGca+nee3dj1pDY4684IxwsGYFC
4DA7SwlofCiK2MaU05ZtAmrFr5p1K9GSbjCvhDvBOyr7ppzQFmZmYP8vRHSmvTQX
TdudedkcaD9XPMBeAT3+IimG8tyA5pHxgEqII49szofwehNvUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOju3dN4NWljAQp7N+CRsSO2Dq9UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk
ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvZTY2NjkxM2UtOTkwNi0z
NTE2LTk4YTgtYTZlMjdhNjllZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz
MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3
ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5
M2ZhN2RjYzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABLJAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKHAY11denvq4p1o9T79whKruqTiMAiOVaQTL1QeaElyefZ+DisK
hrdrRSLGIcBx9scg9sND8HLRLLnzaITylK5IYH+NDFCWZ4BcnbTRLxRHmW+wcrqz
sCWS+gZmPJtIQJHmk5QiqZPr4HEHFgaUy3ag3N/sZlgLEyzJp84f1vfQTYbK8CNA
KMI3rVVMgjuzzDLN/w5g0j3ho0Lvxci9wCTUy8QE1Fkehyi7n3/JK09Hg9iG4WOW
D545PvgqMOS1RtDzmfv55E4hK+d6XYGme15iqd5T7+IhEL3hG6jCDkMM1HwxMRqj
qQqrBku6DH5jFFjiBZUl0C3SP2gbpDSrj8w=
-----END CERTIFICATE-----
Generated at Sun Jun 29 15:51:34 2025 by rpki-client