Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/5d08b6cd-616d-3cda-affb-3753d328830d.roa
File:                     5d08b6cd-616d-3cda-affb-3753d328830d.roa (raw, json)
Hash identifier:          MigvYUykXfmA8cRczuhB0Kkw51e3jT43pPmllcxM88M=
Subject key identifier:   35:23:F8:9F:BD:0A:83:F8:36:C0:B2:34:E7:37:F3:05:15:36:F1:B5
Certificate issuer:       /CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
Certificate serial:       010D0C9F4328584B27618675ACCDC4CB3C5D1D00
Authority key identifier: 80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/5d08b6cd-616d-3cda-affb-3753d328830d.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     14874
IP address blocks:        2602:f836::/40 maxlen: 124
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:86:75:ac:cd:c4:cb:3c:5d:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=dc25ad11-f7c8-41ff-8314-9b9fcd7aadac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:b5:ab:48:cf:a0:12:69:75:44:1a:41:71:
                    36:d6:40:43:0c:b8:c0:d2:7b:20:5f:43:f5:b4:3b:
                    7a:44:29:18:4e:f0:01:8c:28:0f:f1:32:e8:75:21:
                    e3:92:d5:52:9e:db:17:03:6f:a0:11:33:29:0a:4e:
                    9f:59:fc:25:f7:d8:f7:de:8e:34:ac:45:e9:16:0d:
                    fd:9e:7a:d0:ab:a7:38:12:53:8f:f2:36:1d:60:78:
                    29:e9:55:0f:ad:5d:d4:6a:8d:59:a4:1f:a7:a9:d8:
                    b7:ba:b6:1f:f2:8c:5b:96:14:8e:22:ff:bc:f8:34:
                    e0:df:24:bb:65:4d:bb:05:60:3d:f8:19:3c:a6:57:
                    cf:3f:5b:6a:59:ef:68:05:bb:b0:46:00:de:34:10:
                    23:8d:8a:62:f5:74:9e:95:97:72:1a:de:ca:a0:70:
                    c8:07:23:c7:5e:82:e9:fe:bb:75:8f:62:a6:ca:07:
                    24:d0:ba:3b:10:78:19:36:30:bd:ed:da:61:a2:3a:
                    eb:d8:a4:80:12:32:21:93:68:8a:80:90:21:25:65:
                    da:17:2c:e4:9b:7c:00:b2:d7:b4:9b:01:8e:52:c5:
                    96:ff:3f:fb:51:97:eb:5f:34:e1:af:14:09:15:79:
                    80:ff:2e:e8:cf:f6:c2:bb:31:39:c7:8d:dd:6d:a9:
                    1b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:F8:9F:BD:0A:83:F8:36:C0:B2:34:E7:37:F3:05:15:36:F1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/5d08b6cd-616d-3cda-affb-3753d328830d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl

            X509v3 Authority Key Identifier:
                keyid:80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f836::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:33:e6:61:cd:4e:3b:b0:d2:72:5f:07:e5:a0:41:b1:7e:d4:
         75:d4:fc:0e:1d:f9:ba:47:39:7f:c8:58:4c:77:77:63:3a:c7:
         e9:25:14:41:c0:66:fb:c5:6c:4b:98:92:29:f0:24:61:b5:08:
         2c:0c:1c:7e:30:b5:81:e4:3c:c1:71:8a:ee:6a:7d:7c:f0:c9:
         37:15:48:30:81:25:38:70:4a:66:aa:ef:c0:b6:ff:e6:dc:ee:
         b1:8f:dd:47:4b:2c:04:5c:37:d5:9f:c4:b8:0b:25:2e:f0:5f:
         c7:73:c2:d4:dc:96:ce:c6:eb:60:ae:9c:8d:a9:b7:d6:8d:7f:
         36:09:95:a8:34:10:dc:84:6e:d8:a5:f0:85:06:5a:1a:18:39:
         88:bd:49:b4:2a:9d:c7:72:60:c7:03:c0:9a:8a:13:8a:f4:e1:
         7b:18:d0:19:06:52:34:c5:7c:f3:d5:36:da:ce:d7:90:2c:09:
         4c:5f:83:bb:cb:51:f7:68:5b:28:c2:ec:33:47:0e:52:ed:3f:
         50:0e:7f:f1:9d:54:5e:51:e8:c1:4b:0f:c7:d0:8c:90:1a:d6:
         b8:51:1f:e1:be:4f:7b:33:0b:15:7d:91:e4:32:4c:bd:93:9c:
         77:e7:eb:b2:dd:06:87:fa:45:d3:1f:d2:38:8b:0e:8e:28:29:
         31:7e:0e:ce
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsnYYZ1rM3EyzxdHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk0ZmNjYTgtZmNkNy00MzVlLWE0ZDEtYmQ5MjFkOTdj
NTFkMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk
ZGMyNWFkMTEtZjdjOC00MWZmLTgzMTQtOWI5ZmNkN2FhZGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlia1q0jPoBJpdUQaQXE21kBDDLjA0nsgX0P1
tDt6RCkYTvABjCgP8TLodSHjktVSntsXA2+gETMpCk6fWfwl99j33o40rEXpFg39
nnrQq6c4ElOP8jYdYHgp6VUPrV3Uao1ZpB+nqdi3urYf8oxblhSOIv+8+DTg3yS7
ZU27BWA9+Bk8plfPP1tqWe9oBbuwRgDeNBAjjYpi9XSelZdyGt7KoHDIByPHXoLp
/rt1j2Kmygck0Lo7EHgZNjC97dphojrr2KSAEjIhk2iKgJAhJWXaFyzkm3wAste0
mwGOUsWW/z/7UZfrXzThrxQJFXmA/y7oz/bCuzE5x43dbakbMQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDUj+J+9CoP4NsCyNOc38wUVNvG1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OTRm
Y2NhOC1mY2Q3LTQzNWUtYTRkMS1iZDkyMWQ5N2M1MWQvNWQwOGI2Y2QtNjE2ZC0z
Y2RhLWFmZmItMzc1M2QzMjg4MzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjk0ZmNjYTgtZmNkNy00MzVlLWE0
ZDEtYmQ5MjFkOTdjNTFkLzY5NGZjY2E4LWZjZDctNDM1ZS1hNGQxLWJkOTIxZDk3
YzUxZC5jcmwwHwYDVR0jBBgwFoAUgBVYnoVuXIAP+jk8xrIGqdJM65owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82OTRmY2NhOC1mY2Q3LTQzNWUtYTRkMS1iZDky
MWQ5N2M1MWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4NgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJjPmYc1OO7DScl8H5aBBsX7UddT8Dh35ukc5f8hYTHd3YzrH6SUU
QcBm+8VsS5iSKfAkYbUILAwcfjC1geQ8wXGK7mp9fPDJNxVIMIElOHBKZqrvwLb/
5tzusY/dR0ssBFw31Z/EuAslLvBfx3PC1NyWzsbrYK6cjam31o1/NgmVqDQQ3IRu
2KXwhQZaGhg5iL1JtCqdx3JgxwPAmooTivThexjQGQZSNMV889U22s7XkCwJTF+D
u8tR92hbKMLsM0cOUu0/UA5/8Z1UXlHowUsPx9CMkBrWuFEf4b5PezMLFX2R5DJM
vZOcd+frst0Gh/pF0x/SOIsOjigpMX4Ozg==
-----END CERTIFICATE-----
Generated at Fri Oct 10 23:52:21 2025 by rpki-client