Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/c83fc820-b750-37e9-8ad2-330bf7d51168.roa
File:                     c83fc820-b750-37e9-8ad2-330bf7d51168.roa (raw, json)
Hash identifier:          2m7AT45s8W24wDx1PivJT3yyNzE/4kzFK5a4HrQayg0=
Subject key identifier:   EB:65:5E:08:3D:70:D3:9B:90:FC:9D:33:AB:9A:F9:33:CF:7D:47:97
Certificate issuer:       /CN=e9ba2448-ef35-44cb-836b-3f71ba57a40f
Certificate serial:       010D0C9F4328584B110BFEBE6D033AED8E5E80C4
Authority key identifier: FB:2F:B9:30:BA:6A:33:B7:58:B2:F9:D9:38:BB:3C:36:3C:68:96:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/c83fc820-b750-37e9-8ad2-330bf7d51168.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2602:fb33::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0b:fe:be:6d:03:3a:ed:8e:5e:80:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ba2448-ef35-44cb-836b-3f71ba57a40f
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=c38a20e5-b046-4aa0-aab5-83f23417e888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:32:e2:1c:9c:ef:58:7e:fe:85:d8:fe:64:5f:
                    53:23:32:59:39:74:f2:03:be:34:76:86:44:51:d7:
                    31:91:48:e9:25:c4:a4:f0:9c:b6:54:66:8e:cb:52:
                    57:43:de:73:30:9d:27:b5:20:a6:60:1a:9c:d7:f6:
                    47:47:8c:de:4b:6b:d9:45:f9:60:c6:49:2b:21:ee:
                    9e:d9:be:12:82:6e:8e:59:17:72:6f:3d:8d:7e:b1:
                    2b:2a:e0:3b:43:14:2f:8e:e1:67:c4:03:6d:62:09:
                    55:e6:d9:14:b5:fe:a9:76:9f:f1:ca:87:8b:c6:7e:
                    13:53:d4:fa:6c:ad:03:85:8d:6e:27:22:b3:6a:8c:
                    0c:f6:91:1b:fe:f4:88:27:aa:d7:67:b6:48:3f:08:
                    bd:1c:26:80:91:f3:e2:22:18:0f:ad:1a:ad:bc:f9:
                    93:d8:5c:1a:7b:99:03:af:36:3d:f2:f8:71:b6:99:
                    54:68:8c:ba:27:0d:f7:8d:e1:4e:51:fb:cf:19:98:
                    72:37:98:4c:4c:89:b4:97:f5:c2:75:2c:be:0e:e5:
                    18:a0:9d:6b:22:8b:86:f3:8a:f3:a5:29:a6:74:30:
                    9d:15:ab:c4:07:67:f2:8d:2c:18:41:3b:51:94:f7:
                    d5:1f:91:7f:6e:86:66:a1:44:0d:1c:1a:10:f0:ab:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:65:5E:08:3D:70:D3:9B:90:FC:9D:33:AB:9A:F9:33:CF:7D:47:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/c83fc820-b750-37e9-8ad2-330bf7d51168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.crl

            X509v3 Authority Key Identifier:
                keyid:FB:2F:B9:30:BA:6A:33:B7:58:B2:F9:D9:38:BB:3C:36:3C:68:96:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb33::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e0:ee:c6:b3:df:1a:1b:2d:a6:c8:77:13:09:3e:30:66:0e:
         12:23:f9:b0:89:3f:05:d2:8d:87:4b:e8:d6:4d:f4:a3:a2:71:
         6f:45:aa:3f:69:01:17:d8:b1:c4:1c:80:a0:16:ad:ec:e6:72:
         9c:5f:11:87:91:c9:27:d9:f9:1f:95:b7:0e:f5:e8:2b:34:09:
         25:80:b6:a2:13:88:4a:9d:49:a2:68:80:c9:6f:22:19:35:1f:
         a1:a5:ee:83:f4:ab:d2:f5:2d:61:b0:75:e9:bd:26:1d:a0:7e:
         e8:c2:68:17:15:e9:6a:8e:a0:65:e3:49:10:fc:b9:f6:f9:51:
         a0:df:43:40:a9:82:85:64:02:84:93:d4:55:9a:3a:cd:3f:9b:
         24:01:4a:2d:b7:4e:20:84:a6:47:c5:ed:f4:10:d4:83:8d:d1:
         ef:6a:6c:c7:13:22:ed:eb:dd:ab:32:3f:aa:f4:1f:9f:4d:a1:
         c1:cc:e0:dd:b1:a9:d6:f2:dd:79:c9:b0:f2:0b:59:5c:51:af:
         b3:af:9a:08:56:9c:63:58:dc:1d:ac:91:3d:64:5f:71:b7:48:
         9e:1c:bb:29:46:5f:c3:54:48:c0:09:f5:23:6c:5b:ac:a4:b7:
         8c:31:76:c0:e1:b2:67:65:46:a7:94:73:b3:0f:4f:7c:b6:f2:
         c2:cb:2c:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsRC/6+bQM67Y5egMQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTliYTI0NDgtZWYzNS00NGNiLTgzNmItM2Y3MWJhNTdh
NDBmMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk
YzM4YTIwZTUtYjA0Ni00YWEwLWFhYjUtODNmMjM0MTdlODg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTLiHJzvWH7+hdj+ZF9TIzJZOXTyA740doZE
UdcxkUjpJcSk8Jy2VGaOy1JXQ95zMJ0ntSCmYBqc1/ZHR4zeS2vZRflgxkkrIe6e
2b4Sgm6OWRdybz2NfrErKuA7QxQvjuFnxANtYglV5tkUtf6pdp/xyoeLxn4TU9T6
bK0DhY1uJyKzaowM9pEb/vSIJ6rXZ7ZIPwi9HCaAkfPiIhgPrRqtvPmT2Fwae5kD
rzY98vhxtplUaIy6Jw33jeFOUfvPGZhyN5hMTIm0l/XCdSy+DuUYoJ1rIouG84rz
pSmmdDCdFavEB2fyjSwYQTtRlPfVH5F/boZmoUQNHBoQ8KuH3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOtlXgg9cNObkPydM6ua+TPPfUeXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lOWJh
MjQ0OC1lZjM1LTQ0Y2ItODM2Yi0zZjcxYmE1N2E0MGYvYzgzZmM4MjAtYjc1MC0z
N2U5LThhZDItMzMwYmY3ZDUxMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTliYTI0NDgtZWYzNS00NGNiLTgz
NmItM2Y3MWJhNTdhNDBmL2U5YmEyNDQ4LWVmMzUtNDRjYi04MzZiLTNmNzFiYTU3
YTQwZi5jcmwwHwYDVR0jBBgwFoAU+y+5MLpqM7dYsvnZOLs8NjxolpkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lOWJhMjQ0OC1lZjM1LTQ0Y2ItODM2Yi0zZjcx
YmE1N2E0MGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL7MwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIXg7saz3xobLabIdxMJPjBmDhIj+bCJPwXSjYdL6NZN9KOicW9F
qj9pARfYscQcgKAWrezmcpxfEYeRySfZ+R+Vtw716Cs0CSWAtqITiEqdSaJogMlv
Ihk1H6Gl7oP0q9L1LWGwdem9Jh2gfujCaBcV6WqOoGXjSRD8ufb5UaDfQ0CpgoVk
AoST1FWaOs0/myQBSi23TiCEpkfF7fQQ1ION0e9qbMcTIu3r3asyP6r0H59NocHM
4N2xqdby3XnJsPILWVxRr7OvmghWnGNY3B2skT1kX3G3SJ4cuylGX8NUSMAJ9SNs
W6ykt4wxdsDhsmdlRqeUc7MPT3y28sLLLHw=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:19:56 2025 by rpki-client