Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa
File:                     824e6379-abbf-3ba1-8155-eeab702f1b96.roa (raw, json)
Hash identifier:          0dzx1DLr99NHAiSK/QMQ5tWcvvskA1khREsVXNOsiXU=
Subject key identifier:   27:0C:86:8E:EA:AB:1B:0A:1D:4B:0B:D1:2F:0D:B9:05:79:C8:76:0C
Certificate issuer:       /CN=4bc701e5-cff5-4660-9102-08342e5ad35f
Certificate serial:       010D0C9F4328584B715C9F107C73D4BAB97F4480
Authority key identifier: 62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     26523
IP address blocks:        2620:0:f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:9f:10:7c:73:d4:ba:b9:7f:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc701e5-cff5-4660-9102-08342e5ad35f
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=69219db4-7616-4937-8f5f-333d7eceb56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:63:75:2f:44:a8:ff:b8:26:f8:53:08:a0:
                    24:07:09:e2:8d:e0:e2:6a:4e:de:55:bd:48:d6:d9:
                    18:b3:d6:e1:86:1d:99:3f:78:ce:15:be:06:58:be:
                    96:6e:c0:44:09:3b:17:cb:0d:cb:2d:85:a8:3a:30:
                    f7:35:2b:15:06:ef:f2:a3:ac:19:9a:f1:ba:ac:dd:
                    56:50:02:84:29:6b:de:3a:1c:6a:a3:d1:1c:23:44:
                    8a:56:03:9d:b3:68:59:73:21:9e:e9:20:80:cf:c4:
                    67:0c:0e:55:7e:f6:a4:0a:d3:77:3b:ef:98:1d:e2:
                    83:5a:b7:77:96:51:d5:ee:3e:9b:af:d9:f2:37:96:
                    67:44:0c:4f:ab:8b:10:29:b1:97:0f:e4:65:2a:2b:
                    d6:4b:89:07:bf:3f:9d:14:03:3c:09:c2:c1:a7:f1:
                    21:4c:f9:96:12:37:67:96:e7:c5:ee:ac:46:94:ed:
                    c0:e1:85:5c:32:47:4a:a6:51:2f:38:cc:c5:15:25:
                    81:57:9b:64:23:65:a0:28:ec:95:5e:c1:53:7f:33:
                    52:6e:62:7e:85:fe:03:24:c0:e1:b1:39:2f:d3:b3:
                    c8:f4:60:f4:4a:3e:05:d8:01:8d:bd:27:89:5e:a0:
                    96:4c:ff:ae:59:28:f2:50:86:7c:0e:98:ed:9e:bf:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0C:86:8E:EA:AB:1B:0A:1D:4B:0B:D1:2F:0D:B9:05:79:C8:76:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.crl

            X509v3 Authority Key Identifier:
                keyid:62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:47:e2:bd:6c:11:03:a1:67:6c:57:66:34:f0:6e:e4:55:7e:
         1e:7d:cb:74:b0:65:ca:50:c3:39:35:b1:cd:36:f9:eb:22:95:
         5a:36:c9:54:e3:87:f5:10:31:94:71:08:ef:3d:87:7d:2b:23:
         f5:a0:c8:c8:06:58:fa:33:c7:67:44:4a:cc:f2:b9:37:ee:0d:
         de:fd:62:40:31:86:f4:e5:91:a4:21:16:04:24:a8:72:38:f0:
         11:50:79:44:80:61:14:21:b7:d5:a7:d0:58:68:22:72:2b:11:
         a6:ac:9c:ae:54:5a:75:51:ed:dc:ee:f3:e1:04:90:03:7e:7f:
         9a:5c:bb:41:2d:1c:61:dd:28:2d:a3:15:4c:e7:81:de:a9:b5:
         9d:0a:9b:f6:0d:b3:24:2f:ec:c6:40:a0:f0:c0:d3:a2:eb:3e:
         32:ce:eb:96:22:f6:3d:41:57:d6:93:e7:b6:aa:8f:b3:81:67:
         8a:d1:52:99:97:bc:d0:17:c8:96:41:22:11:80:ab:53:42:5a:
         bc:fe:c6:5e:e3:53:cb:61:0d:87:84:7f:61:e4:fb:1a:28:ba:
         31:37:a9:a1:db:7b:2b:a8:97:98:27:c2:fe:d9:c9:58:9f:79:
         39:0d:95:ff:0e:28:f5:94:a0:17:5c:ef:f0:c2:dc:26:06:ea:
         9b:50:c6:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXJ8QfHPUurl/RIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJjNzAxZTUtY2ZmNS00NjYwLTkxMDItMDgzNDJlNWFk
MzVmMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
NjkyMTlkYjQtNzYxNi00OTM3LThmNWYtMzMzZDdlY2ViNTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2ZjdS9EqP+4JvhTCKAkBwnijeDiak7eVb1I
1tkYs9bhhh2ZP3jOFb4GWL6WbsBECTsXyw3LLYWoOjD3NSsVBu/yo6wZmvG6rN1W
UAKEKWveOhxqo9EcI0SKVgOds2hZcyGe6SCAz8RnDA5VfvakCtN3O++YHeKDWrd3
llHV7j6br9nyN5ZnRAxPq4sQKbGXD+RlKivWS4kHvz+dFAM8CcLBp/EhTPmWEjdn
lufF7qxGlO3A4YVcMkdKplEvOMzFFSWBV5tkI2WgKOyVXsFTfzNSbmJ+hf4DJMDh
sTkv07PI9GD0Sj4F2AGNvSeJXqCWTP+uWSjyUIZ8Dpjtnr8VFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCcMho7qqxsKHUsL0S8NuQV5yHYMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YmM3
MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0MmU1YWQzNWYvODI0ZTYzNzktYWJiZi0z
YmExLTgxNTUtZWVhYjcwMmYxYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGJjNzAxZTUtY2ZmNS00NjYwLTkx
MDItMDgzNDJlNWFkMzVmLzRiYzcwMWU1LWNmZjUtNDY2MC05MTAyLTA4MzQyZTVh
ZDM1Zi5jcmwwHwYDVR0jBBgwFoAUYmRTfrlWuIlXLETUQaIf+l4Bu7YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80YmM3MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0
MmU1YWQzNWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAADw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEZH4r1sEQOhZ2xXZjTwbuRVfh59y3SwZcpQwzk1sc02+esilVo2
yVTjh/UQMZRxCO89h30rI/WgyMgGWPozx2dESszyuTfuDd79YkAxhvTlkaQhFgQk
qHI48BFQeUSAYRQht9Wn0FhoInIrEaasnK5UWnVR7dzu8+EEkAN+f5pcu0EtHGHd
KC2jFUzngd6ptZ0Km/YNsyQv7MZAoPDA06LrPjLO65Yi9j1BV9aT57aqj7OBZ4rR
UpmXvNAXyJZBIhGAq1NCWrz+xl7jU8thDYeEf2Hk+xooujE3qaHbeyuol5gnwv7Z
yVifeTkNlf8OKPWUoBdc7/DC3CYG6ptQxuI=
-----END CERTIFICATE-----
Generated at Sat Oct 11 09:27:31 2025 by rpki-client