Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa
File:                     8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa (raw, json)
Hash identifier:          jDepU428c5XU47e2ugYNKNibnuhqoXFuEa6TZ2obriQ=
Subject key identifier:   D5:B0:AA:1F:50:B3:EF:8F:E3:00:DB:55:54:B3:A4:0C:04:76:89:AF
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F4328584B715CA73F2B56D79406173280
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     398351
IP address blocks:        2602:80a:2014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a7:3f:2b:56:d7:94:06:17:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=8082850c-d589-4088-a1e9-31f12fd74ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:39:db:7a:8e:9f:4b:8b:0c:1d:a9:12:44:d7:
                    51:e4:d7:a7:91:a4:a9:eb:92:e7:86:0b:72:5d:ec:
                    1d:b6:7a:2a:02:71:a6:47:e1:de:a7:d9:26:0f:3a:
                    5e:78:97:2f:76:a2:5f:ce:7e:a5:0e:0e:bc:fe:57:
                    34:2b:f9:9e:03:6b:f7:d0:e7:72:6f:b4:dd:69:49:
                    f1:9b:d0:03:0a:32:a7:1f:6c:a9:07:80:fc:5c:6c:
                    48:9a:36:f8:04:de:44:34:39:7b:9c:ab:32:aa:fa:
                    1b:21:a3:8c:f0:33:80:e8:cf:6d:b3:86:a0:a3:2d:
                    d1:42:f7:15:fc:dd:01:9d:cd:c3:57:82:60:59:58:
                    36:97:c2:50:09:7e:b3:ac:3f:ef:13:43:eb:04:3a:
                    5d:8d:51:08:c1:9f:87:c1:90:14:d4:38:f1:af:d9:
                    51:85:6f:a7:1d:10:7a:11:2c:35:3f:55:92:93:e2:
                    2b:22:3f:75:c6:ac:48:30:88:c0:3d:ad:8b:77:ab:
                    3e:06:b9:d7:d1:e1:5e:fb:52:a7:d1:49:00:07:34:
                    76:e8:e6:02:0e:0e:96:e1:39:82:f2:97:73:20:a1:
                    bc:38:fb:a6:81:c3:5c:0d:cd:79:2d:b3:8d:c5:35:
                    55:15:50:12:30:0d:fe:5b:ae:cb:53:b8:c9:63:42:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B0:AA:1F:50:B3:EF:8F:E3:00:DB:55:54:B3:A4:0C:04:76:89:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8dc7216f-3399-3b26-a916-b6d939f9e2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:34:f6:04:6e:81:ba:92:fe:f9:c7:72:fa:4c:af:e6:bb:79:
         43:66:cb:d2:a9:c2:05:b6:15:8e:8b:c7:d4:53:36:57:b6:fc:
         09:b4:ef:d8:0e:9f:51:99:fb:d3:f8:d8:41:ce:8d:38:47:8c:
         fa:f3:64:d6:a8:d7:79:b6:22:81:48:e5:37:d1:6b:14:fb:b2:
         a0:70:a2:4b:94:08:88:e5:15:61:39:46:1a:91:ea:ff:53:d3:
         8b:f7:f5:10:21:87:cc:04:d6:89:f1:94:fa:6d:c3:7a:0e:3b:
         e5:fc:ce:10:d4:b1:39:d5:97:90:48:87:77:c8:4a:e3:45:5e:
         b5:c0:a3:aa:58:10:40:10:99:1e:b3:31:e2:19:7d:28:a2:ae:
         01:78:25:1f:95:2e:a6:5a:23:58:ab:b1:ae:84:b7:50:d7:75:
         91:3e:f3:3f:3a:00:f3:8a:11:00:5d:b5:84:44:14:c5:7f:5c:
         fb:20:13:2a:2b:da:63:4a:f9:63:28:89:35:63:42:e5:3b:54:
         7c:31:7e:a9:a8:42:86:6e:5d:b5:76:ed:f4:b7:bc:fd:4f:f9:
         7b:ad:2d:b9:51:fc:c6:e6:be:44:08:43:56:4c:dd:26:b0:7d:
         04:38:5b:e7:1d:82:f5:39:67:a3:8e:77:e9:ce:09:5f:47:72:
         8e:ab:19:e6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXKc/K1bXlAYXMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkxOGVlNTYtMzQzYy00MGRjLWIwMWQtZmI1ZWZkNTFl
MjZhMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
ODA4Mjg1MGMtZDU4OS00MDg4LWExZTktMzFmMTJmZDc0Y2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTnbeo6fS4sMHakSRNdR5NenkaSp65Lnhgty
XewdtnoqAnGmR+Hep9kmDzpeeJcvdqJfzn6lDg68/lc0K/meA2v30Odyb7TdaUnx
m9ADCjKnH2ypB4D8XGxImjb4BN5ENDl7nKsyqvobIaOM8DOA6M9ts4agoy3RQvcV
/N0Bnc3DV4JgWVg2l8JQCX6zrD/vE0PrBDpdjVEIwZ+HwZAU1Djxr9lRhW+nHRB6
ESw1P1WSk+IrIj91xqxIMIjAPa2Ld6s+BrnX0eFe+1Kn0UkABzR26OYCDg6W4TmC
8pdzIKG8OPumgcNcDc15LbONxTVVFVASMA3+W67LU7jJY0LjZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNWwqh9Qs++P4wDbVVSzpAwEdomvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOTE4
ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVlZmQ1MWUyNmEvOGRjNzIxNmYtMzM5OS0z
YjI2LWE5MTYtYjZkOTM5ZjllMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTkxOGVlNTYtMzQzYy00MGRjLWIw
MWQtZmI1ZWZkNTFlMjZhLzE5MThlZTU2LTM0M2MtNDBkYy1iMDFkLWZiNWVmZDUx
ZTI2YS5jcmwwHwYDVR0jBBgwFoAUFzlJxoOm8qM5Fg81AM2BgXVrf+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOTE4ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVl
ZmQ1MWUyNmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIICiAU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADg09gRugbqS/vnHcvpMr+a7eUNmy9KpwgW2FY6Lx9RTNle2/Am0
79gOn1GZ+9P42EHOjThHjPrzZNao13m2IoFI5TfRaxT7sqBwokuUCIjlFWE5RhqR
6v9T04v39RAhh8wE1onxlPptw3oOO+X8zhDUsTnVl5BIh3fISuNFXrXAo6pYEEAQ
mR6zMeIZfSiirgF4JR+VLqZaI1irsa6Et1DXdZE+8z86APOKEQBdtYREFMV/XPsg
Eyor2mNK+WMoiTVjQuU7VHwxfqmoQoZuXbV27fS3vP1P+XutLblR/MbmvkQIQ1ZM
3SawfQQ4W+cdgvU5Z6OOd+nOCV9Hco6rGeY=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:39 2025 by rpki-client