Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7c7f0b46-fee4-36ff-96f1-9f7c1f257503.roa
File:                     7c7f0b46-fee4-36ff-96f1-9f7c1f257503.roa (raw, json)
Hash identifier:          MuiBHMa7RehESTqBD5LdnwCbmV0HnQ+tsIALlzysAMc=
Subject key identifier:   F1:F6:F0:65:0B:5C:24:56:EE:BA:98:14:C6:A7:DF:9B:43:A2:AD:F4
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584B1806C764829BCCC9ABCE4200
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7c7f0b46-fee4-36ff-96f1-9f7c1f257503.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     396998
IP address blocks:        2602:fd00::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c7:64:82:9b:cc:c9:ab:ce:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=2099c6ea-9eff-4dfd-a911-d2b40aa95298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:41:7a:29:a5:32:33:04:6c:82:99:43:7b:
                    09:c1:67:48:29:f7:15:13:e5:2c:12:4f:96:8b:b3:
                    0f:44:8e:c3:69:ea:e2:1c:f6:04:3c:28:1d:86:59:
                    0f:b8:87:80:09:b5:9a:3f:f8:d6:ea:d3:2b:5e:26:
                    06:da:45:f5:60:36:57:3d:96:58:dd:10:be:9d:b1:
                    51:f8:c5:76:bc:4c:d2:80:aa:44:7b:b1:0e:70:35:
                    6b:b9:ac:76:88:c8:26:31:a0:ed:a0:b2:cd:f8:b4:
                    c1:c7:f7:6a:73:4a:58:12:45:75:af:a3:63:2d:68:
                    c1:0b:23:4e:5d:a7:c4:6b:b5:d3:c2:5b:cc:d6:07:
                    2a:d5:9a:0c:c0:56:0e:fb:84:4d:7b:ab:d0:37:09:
                    53:d7:a0:02:a2:9a:ba:c4:e0:24:75:49:97:47:44:
                    25:38:aa:84:82:08:4f:ee:49:ba:9d:2d:b7:1a:41:
                    80:d8:90:65:c4:d0:96:90:01:db:74:8d:76:08:84:
                    99:70:6e:dc:4f:8c:fa:02:57:6e:ac:1c:9f:50:1e:
                    89:30:70:28:5b:8c:a7:af:39:26:fc:88:aa:19:d9:
                    85:1d:31:01:d6:6c:e2:e7:f7:51:17:7f:10:12:ac:
                    9c:82:ee:5e:83:78:9d:13:1a:cc:fa:c8:62:a4:88:
                    c0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F6:F0:65:0B:5C:24:56:EE:BA:98:14:C6:A7:DF:9B:43:A2:AD:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7c7f0b46-fee4-36ff-96f1-9f7c1f257503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd00::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:dc:22:8a:23:99:31:88:3f:88:f2:cf:40:2f:ad:dd:d0:61:
         6e:27:fe:cf:55:3a:54:df:6c:36:0b:5e:98:4d:cf:5d:66:86:
         69:c7:83:63:bf:3d:2c:a3:d3:d1:fc:e5:62:ed:45:b5:57:2c:
         22:42:51:a6:8d:1c:83:f4:56:41:ee:c4:fd:a2:77:f5:a7:4a:
         4f:65:30:8b:b9:4b:fc:7b:44:c4:3a:f8:b2:97:00:73:5c:cb:
         49:47:47:e6:11:fe:8d:f8:63:14:b4:c8:b4:ee:74:d5:5d:2c:
         6e:3a:10:5a:5c:4c:8c:58:6c:d6:d7:45:26:0b:e5:61:36:6e:
         53:60:43:a2:1a:5a:7b:77:17:9a:88:e6:b2:24:cb:ab:13:28:
         d1:d8:02:e4:1f:ba:b8:81:71:15:41:1d:53:31:c1:ec:b1:ef:
         b7:84:1b:ff:55:f5:1b:49:b7:79:f1:8a:a5:74:00:de:c2:cd:
         1a:3a:15:de:ce:1f:19:24:03:14:74:e2:dd:b7:34:dd:da:00:
         32:7a:b0:ea:35:cd:12:58:5c:6d:b8:a5:c5:d3:62:8b:5b:05:
         a4:02:20:a2:ea:a4:6c:b2:81:33:1e:e3:01:e8:c8:22:6c:75:
         03:e2:90:39:b5:9e:29:e5:6d:fc:46:26:f7:72:13:1c:e2:4e:
         81:90:d0:e3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsYBsdkgpvMyavOQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4
ZjNjMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MjA5OWM2ZWEtOWVmZi00ZGZkLWE5MTEtZDJiNDBhYTk1Mjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljhBeimlMjMEbIKZQ3sJwWdIKfcVE+UsEk+W
i7MPRI7DaeriHPYEPCgdhlkPuIeACbWaP/jW6tMrXiYG2kX1YDZXPZZY3RC+nbFR
+MV2vEzSgKpEe7EOcDVruax2iMgmMaDtoLLN+LTBx/dqc0pYEkV1r6NjLWjBCyNO
XafEa7XTwlvM1gcq1ZoMwFYO+4RNe6vQNwlT16ACopq6xOAkdUmXR0QlOKqEgghP
7km6nS23GkGA2JBlxNCWkAHbdI12CISZcG7cT4z6AldurByfUB6JMHAoW4ynrzkm
/IiqGdmFHTEB1mzi5/dRF38QEqycgu5eg3idExrM+shipIjAVwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPH28GULXCRW7rqYFMan35tDoq30MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi
MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvN2M3ZjBiNDYtZmVlNC0z
NmZmLTk2ZjEtOWY3YzFmMjU3NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz
ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi
OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1
NDkwYjhmM2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9AAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAStwiiiOZMYg/iPLPQC+t3dBhbif+z1U6VN9sNgtemE3PXWaGaceD
Y789LKPT0fzlYu1FtVcsIkJRpo0cg/RWQe7E/aJ39adKT2Uwi7lL/HtExDr4spcA
c1zLSUdH5hH+jfhjFLTItO501V0sbjoQWlxMjFhs1tdFJgvlYTZuU2BDohpae3cX
mojmsiTLqxMo0dgC5B+6uIFxFUEdUzHB7LHvt4Qb/1X1G0m3efGKpXQA3sLNGjoV
3s4fGSQDFHTi3bc03doAMnqw6jXNElhcbbilxdNii1sFpAIgouqkbLKBMx7jAejI
Imx1A+KQObWeKeVt/EYm93ITHOJOgZDQ4w==
-----END CERTIFICATE-----
Generated at Sun Oct 12 00:32:44 2025 by rpki-client