Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa
File:                     88777c11-cebf-398b-9cd2-dcb17df89b2d.roa (raw, json)
Hash identifier:          9NRYYNrqaFikS77xza4NS3oALl4LQsc8RlUn04Ehq1c=
Subject key identifier:   58:07:2B:5C:18:BF:07:C9:C8:BE:F9:D3:06:E9:E0:BE:B6:15:3C:1C
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584B540C67E1E315C1ED82C68600
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     62711
IP address blocks:        2602:f921::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:67:e1:e3:15:c1:ed:82:c6:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=8d7a04c5-02c0-47e4-87e0-a69e21e1e240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:ae:98:28:c3:c7:4e:d8:01:ea:ad:b4:c0:
                    89:7b:b1:91:12:4d:b9:e3:a8:e0:fb:b6:31:da:54:
                    a2:c0:f5:1c:45:bc:5a:b6:52:1c:0b:ad:78:aa:ed:
                    14:fc:cf:a8:35:ff:2d:82:b7:20:1e:4d:73:7d:9e:
                    96:df:1d:8e:03:9b:58:df:bc:ae:6c:dd:19:5c:fe:
                    5f:30:57:6f:1a:34:6f:47:87:fa:02:12:3c:2f:10:
                    18:e2:9c:a3:b6:3f:f4:64:bf:06:89:39:2e:82:84:
                    e9:f1:1a:54:14:99:2b:79:1e:7b:5b:be:c1:89:d6:
                    33:b6:4c:bd:73:1d:0f:8c:3f:ea:c6:77:9a:3e:8e:
                    23:e0:48:87:9e:23:6b:71:ac:7c:90:cc:55:f2:56:
                    b0:64:40:f3:ee:98:37:11:73:44:35:a3:cd:19:94:
                    c0:79:2d:6d:f4:be:e4:21:5a:66:ee:c0:ce:eb:d0:
                    44:22:4e:79:49:08:d7:94:04:48:cd:29:93:da:a1:
                    a0:96:31:d4:be:de:28:f6:8a:f7:53:8c:7b:74:e9:
                    9c:81:ce:a8:48:0a:a6:a1:fd:cb:1f:07:e6:38:79:
                    ee:24:73:0c:22:51:12:18:07:0a:b5:40:36:21:a7:
                    65:75:b2:40:93:2c:b0:43:b4:f0:0f:c9:c3:b4:62:
                    07:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:07:2B:5C:18:BF:07:C9:C8:BE:F9:D3:06:E9:E0:BE:B6:15:3C:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:66:fb:08:eb:a8:9a:cd:26:48:33:90:a3:42:e4:67:61:af:
         af:03:db:04:0b:32:11:ec:44:08:1d:70:15:a6:4c:fa:f3:b1:
         0b:43:fd:5d:09:8f:d8:fa:5b:3b:26:7b:03:09:c5:b5:cb:b8:
         6f:1d:bf:38:bf:77:6e:f6:13:7c:b4:bd:5b:af:65:97:3a:b0:
         0a:9e:55:87:e0:a7:70:5f:16:d2:9b:df:d7:1d:09:98:da:97:
         d7:a1:50:aa:ac:0b:69:b7:69:fe:74:59:2b:83:a8:bf:42:42:
         b8:43:2d:2a:a5:77:44:8d:0b:f2:00:94:d7:b5:e5:b4:53:d2:
         4b:c1:f9:a0:35:d2:0f:8d:88:d6:dc:6f:b2:07:3b:f9:5d:49:
         06:dd:ac:e9:dc:4d:22:9f:91:48:47:4d:63:87:57:39:a5:33:
         e5:f6:0c:57:1c:f5:fd:ca:b7:32:0f:2d:62:60:ab:a5:79:6a:
         ef:0b:a9:f3:fb:ca:76:92:0b:86:70:7c:12:24:ec:84:bd:f2:
         95:cf:37:54:0d:e7:44:1e:65:7e:47:1d:d2:d2:1a:e1:65:39:
         32:9f:4f:c0:eb:33:77:04:b3:46:54:c1:5d:a4:87:aa:db:59:
         16:f7:37:60:62:40:d3:13:5e:99:5d:34:ed:17:87:bd:59:0e:
         ce:60:6a:5c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtUDGfh4xXB7YLGhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBmMjE4MjctNmQ2NC00ODgwLTllNDYtYzNkMTMzMTNj
OTc1MB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk
OGQ3YTA0YzUtMDJjMC00N2U0LTg3ZTAtYTY5ZTIxZTFlMjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN6umCjDx07YAeqttMCJe7GREk2546jg+7Yx
2lSiwPUcRbxatlIcC614qu0U/M+oNf8tgrcgHk1zfZ6W3x2OA5tY37yubN0ZXP5f
MFdvGjRvR4f6AhI8LxAY4pyjtj/0ZL8GiTkugoTp8RpUFJkreR57W77BidYztky9
cx0PjD/qxneaPo4j4EiHniNrcax8kMxV8lawZEDz7pg3EXNENaPNGZTAeS1t9L7k
IVpm7sDO69BEIk55SQjXlARIzSmT2qGgljHUvt4o9or3U4x7dOmcgc6oSAqmof3L
HwfmOHnuJHMMIlESGAcKtUA2IadldbJAkyywQ7TwD8nDtGIHyQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFgHK1wYvwfJyL750wbp4L62FTwcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MGYy
MTgyNy02ZDY0LTQ4ODAtOWU0Ni1jM2QxMzMxM2M5NzUvODg3NzdjMTEtY2ViZi0z
OThiLTljZDItZGNiMTdkZjg5YjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTBmMjE4MjctNmQ2NC00ODgwLTll
NDYtYzNkMTMzMTNjOTc1LzUwZjIxODI3LTZkNjQtNDg4MC05ZTQ2LWMzZDEzMzEz
Yzk3NS5jcmwwHwYDVR0jBBgwFoAU6x5xukiPrqQmrp9PrnGCEkf7LG4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81MGYyMTgyNy02ZDY0LTQ4ODAtOWU0Ni1jM2Qx
MzMxM2M5NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5IQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAhWb7COuoms0mSDOQo0LkZ2GvrwPbBAsyEexECB1wFaZM+vOxC0P9
XQmP2PpbOyZ7AwnFtcu4bx2/OL93bvYTfLS9W69llzqwCp5Vh+CncF8W0pvf1x0J
mNqX16FQqqwLabdp/nRZK4Oov0JCuEMtKqV3RI0L8gCU17XltFPSS8H5oDXSD42I
1txvsgc7+V1JBt2s6dxNIp+RSEdNY4dXOaUz5fYMVxz1/cq3Mg8tYmCrpXlq7wup
8/vKdpILhnB8EiTshL3ylc83VA3nRB5lfkcd0tIa4WU5Mp9PwOszdwSzRlTBXaSH
qttZFvc3YGJA0xNemV007ReHvVkOzmBqXA==
-----END CERTIFICATE-----
Generated at Fri Oct 10 21:14:02 2025 by rpki-client