Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa
File:                     1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa (raw, json)
Hash identifier:          q89+JbVnaYX7onduS6aJ7KntZzMEHXTeDv+WUlScIlw=
Subject key identifier:   FE:E9:3F:F3:38:5F:90:A6:9C:7E:D3:E1:15:55:82:15:75:41:E2:05
Certificate issuer:       /CN=d9914204-e089-4759-b838-5325dc4683dd
Certificate serial:       010D0C9F4328584B477C7B7C732B5F2A9D479500
Authority key identifier: 3C:1C:70:92:5F:C0:CC:04:8D:10:BB:B4:41:F2:2C:DA:78:2F:0A:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     54686
IP address blocks:        2602:f9b8::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:7b:7c:73:2b:5f:2a:9d:47:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9914204-e089-4759-b838-5325dc4683dd
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=6f9da746-e6be-4312-8a74-015f738aa857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:76:ce:df:18:5f:d1:96:98:d9:8a:cb:e7:
                    f7:3a:5b:8c:b2:5a:7f:39:4d:2c:43:b9:1d:f8:33:
                    f8:8a:e8:12:30:f3:ac:73:b2:7c:80:ff:21:aa:44:
                    b3:65:6b:22:d9:0c:33:c3:6d:23:e2:04:0e:b3:8a:
                    b3:71:58:f9:a7:6c:1c:29:cf:61:0c:ad:f4:0d:3a:
                    3c:cc:84:03:42:a0:d9:54:17:8c:da:c7:a1:8d:82:
                    df:23:49:aa:ff:7d:bd:47:98:2f:a7:ee:7c:b0:04:
                    85:92:b8:da:01:73:95:1a:6b:ee:53:d2:22:37:40:
                    85:ab:f6:88:ff:27:53:0a:c5:ad:ed:50:99:f8:69:
                    09:38:1e:a6:8f:f9:36:66:f7:ab:b9:59:e1:ed:29:
                    ae:9e:0e:30:59:54:3b:4c:b6:64:4d:a2:cf:ec:c0:
                    a6:42:92:0e:ce:95:b6:db:3f:1c:d8:1c:ac:87:c4:
                    a8:b0:af:0b:dc:65:36:39:c3:38:50:40:21:83:d8:
                    d8:19:82:26:a0:b7:2f:ae:54:b4:8f:8d:89:5b:56:
                    e1:ea:07:8d:6b:e8:3e:96:55:b7:39:99:f5:57:54:
                    0f:2a:79:00:5a:6b:b3:05:de:19:4f:9b:aa:69:4b:
                    41:f8:5e:26:4b:2d:a5:19:53:a4:fe:df:fe:62:c8:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E9:3F:F3:38:5F:90:A6:9C:7E:D3:E1:15:55:82:15:75:41:E2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.crl

            X509v3 Authority Key Identifier:
                keyid:3C:1C:70:92:5F:C0:CC:04:8D:10:BB:B4:41:F2:2C:DA:78:2F:0A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9b8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a0:39:0f:85:a7:bf:90:af:99:03:b8:bf:0a:ea:26:a9:58:
         d0:aa:87:6a:e5:6e:af:96:3a:bf:7a:28:91:01:57:cc:85:1a:
         68:d8:9c:3a:78:70:2f:55:ab:7b:74:16:87:d6:f5:1e:9c:23:
         36:c8:2e:5d:8b:98:e7:3d:10:05:3f:c2:e8:24:74:6b:d8:28:
         a8:82:aa:d7:c2:87:f5:0f:f0:60:3a:cf:05:e7:1b:31:50:75:
         a9:9d:32:e7:de:f5:1c:9a:35:97:43:aa:82:4e:67:ed:1a:dd:
         86:e6:0d:07:8e:21:64:f0:68:1d:23:0b:68:25:1c:70:74:53:
         40:17:87:42:fa:de:f4:dc:9a:cc:1c:49:e3:fb:f2:ce:db:db:
         53:0a:02:63:1d:05:e2:ec:fa:8a:5c:9d:b9:db:94:a6:5c:21:
         d4:4c:09:3c:8e:81:1f:b4:9a:ed:d4:51:a0:b6:dd:57:50:ba:
         8c:58:1c:71:04:ec:87:b5:22:78:ba:b6:7d:9c:ad:8f:bc:00:
         06:57:1b:d1:33:fc:cb:80:b1:2d:22:c1:b2:07:35:b8:a3:b2:
         bb:27:d1:7f:f5:db:a3:c3:6f:24:ed:d4:aa:b9:e9:b8:ff:63:
         f1:5d:df:62:02:e0:2d:90:59:b6:7e:ce:6a:c4:2f:81:5a:6f:
         3a:d4:d2:66
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtHfHt8cytfKp1HlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk5MTQyMDQtZTA4OS00NzU5LWI4MzgtNTMyNWRjNDY4
M2RkMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
NmY5ZGE3NDYtZTZiZS00MzEyLThhNzQtMDE1ZjczOGFhODU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIR2zt8YX9GWmNmKy+f3OluMslp/OU0sQ7kd
+DP4iugSMPOsc7J8gP8hqkSzZWsi2Qwzw20j4gQOs4qzcVj5p2wcKc9hDK30DTo8
zIQDQqDZVBeM2sehjYLfI0mq/329R5gvp+58sASFkrjaAXOVGmvuU9IiN0CFq/aI
/ydTCsWt7VCZ+GkJOB6mj/k2ZveruVnh7Smung4wWVQ7TLZkTaLP7MCmQpIOzpW2
2z8c2Bysh8SosK8L3GU2OcM4UEAhg9jYGYImoLcvrlS0j42JW1bh6geNa+g+llW3
OZn1V1QPKnkAWmuzBd4ZT5uqaUtB+F4mSy2lGVOk/t/+YsiB9QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP7pP/M4X5CmnH7T4RVVghV1QeIFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kOTkx
NDIwNC1lMDg5LTQ3NTktYjgzOC01MzI1ZGM0NjgzZGQvMWY2NmE5OGUtMDU1ZS0z
YjM5LWE4NzQtNGM4ZGVlMmY2MWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDk5MTQyMDQtZTA4OS00NzU5LWI4
MzgtNTMyNWRjNDY4M2RkL2Q5OTE0MjA0LWUwODktNDc1OS1iODM4LTUzMjVkYzQ2
ODNkZC5jcmwwHwYDVR0jBBgwFoAUPBxwkl/AzASNELu0QfIs2ngvCv8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kOTkxNDIwNC1lMDg5LTQ3NTktYjgzOC01MzI1
ZGM0NjgzZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5uAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaqA5D4Wnv5CvmQO4vwrqJqlY0KqHauVur5Y6v3ookQFXzIUaaNic
OnhwL1Wre3QWh9b1HpwjNsguXYuY5z0QBT/C6CR0a9goqIKq18KH9Q/wYDrPBecb
MVB1qZ0y5971HJo1l0Oqgk5n7RrdhuYNB44hZPBoHSMLaCUccHRTQBeHQvre9Nya
zBxJ4/vyztvbUwoCYx0F4uz6ilyduduUplwh1EwJPI6BH7Sa7dRRoLbdV1C6jFgc
cQTsh7UieLq2fZytj7wABlcb0TP8y4CxLSLBsgc1uKOyuyfRf/Xbo8NvJO3Uqrnp
uP9j8V3fYgLgLZBZtn7OasQvgVpvOtTSZg==
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:12 2025 by rpki-client