Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/454cd66f-518f-3f95-b41d-19021531bfd2.roa
File:                     454cd66f-518f-3f95-b41d-19021531bfd2.roa (raw, json)
Hash identifier:          DKkycX38HSWObqHriiDyBUKtZiKXXFjNvrMBt6798PE=
Subject key identifier:   F4:F6:92:A0:FC:D1:00:26:BD:1D:C6:08:D9:A4:D0:8C:81:29:01:56
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584B0B76C221B6816226106C9A00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/454cd66f-518f-3f95-b41d-19021531bfd2.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     54858
IP address blocks:        2605:2980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:c2:21:b6:81:62:26:10:6c:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=04e8b2d1-c9b6-4ded-9985-bb26bbb51a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:1c:f3:c7:3d:db:73:89:c0:84:2e:52:70:
                    1a:c4:9e:1b:98:bd:f7:c8:d0:bb:b8:31:a4:3c:57:
                    91:a8:18:b0:e8:8e:ec:d9:21:3d:19:41:60:fa:03:
                    97:33:61:8e:5d:31:25:ae:9b:cf:38:a3:c9:36:e8:
                    03:a3:47:c4:2d:f1:65:87:0d:6c:93:e8:2a:f8:57:
                    8d:d2:75:2b:c3:ea:73:b3:c2:27:ed:a3:f1:22:b8:
                    d7:3e:e2:06:94:cd:ea:3d:a7:cf:0f:54:2a:57:54:
                    f8:e9:ef:fa:89:df:0a:ba:8d:de:92:49:9a:f1:75:
                    07:6f:c2:81:c8:73:49:c0:17:b4:30:a8:51:86:41:
                    ac:20:6c:1b:45:6d:51:67:62:ee:8c:44:94:56:8e:
                    ea:d0:2e:88:37:bb:20:41:cd:f9:d4:60:ad:12:3a:
                    29:f6:be:78:2b:da:7d:09:0c:5d:6f:1d:9a:c2:fe:
                    60:6b:46:bc:21:70:0d:c7:bc:69:3a:74:8c:16:51:
                    2e:fe:4e:46:bd:b9:10:51:e5:6c:2a:09:33:b2:c8:
                    a1:dd:c9:ab:52:11:0b:e5:78:70:4b:e0:08:31:5a:
                    e4:97:5b:ac:94:56:69:e6:be:ad:d5:ec:4e:db:b3:
                    a8:a7:0a:d1:ea:41:b2:8c:00:b4:a4:a7:b4:72:36:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:92:A0:FC:D1:00:26:BD:1D:C6:08:D9:A4:D0:8C:81:29:01:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/454cd66f-518f-3f95-b41d-19021531bfd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:11:18:a3:2d:f0:9b:ca:7a:e9:f6:bc:44:93:46:63:18:
         a1:9f:40:a2:f5:87:d4:b4:04:4d:9a:03:bf:12:5e:cf:1a:f1:
         b6:4f:22:06:dd:93:8f:95:a2:b9:a4:21:d2:38:74:2a:01:f6:
         d2:c6:6c:d1:f4:d9:b0:18:4f:1e:e3:62:ca:27:16:b5:10:2f:
         e5:49:e9:d5:70:22:73:8a:15:fc:6a:d8:5e:98:e1:15:1f:c2:
         39:13:d4:61:0e:ec:77:e6:9b:c6:94:8b:a8:7b:8e:a6:8d:13:
         3d:63:34:7e:18:05:54:74:9b:5e:27:67:2e:8c:67:be:cc:b8:
         88:3d:d1:6a:f4:d3:2a:99:ca:25:b5:4d:ad:48:9f:23:20:c9:
         c0:94:d9:34:ee:a1:7c:67:23:63:91:5b:1a:65:b3:cb:fe:83:
         da:86:9f:8e:4e:13:36:91:02:e6:dc:4b:30:45:b9:5d:ac:1e:
         7e:ff:11:15:54:89:00:db:00:80:b3:43:d1:3e:8d:1d:51:a7:
         38:1e:0c:f7:77:d4:87:84:b3:5e:60:de:63:b4:06:eb:0d:a5:
         cd:a2:45:d5:18:7d:ba:40:e5:4e:03:c2:34:7d:08:b1:63:00:
         dd:17:65:e5:45:7b:1d:a7:82:52:d8:b3:74:f7:30:bd:b2:1c:
         3a:1a:6f:a8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsLdsIhtoFiJhBsmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk
MDRlOGIyZDEtYzliNi00ZGVkLTk5ODUtYmIyNmJiYjUxYTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIkc88c923OJwIQuUnAaxJ4bmL33yNC7uDGk
PFeRqBiw6I7s2SE9GUFg+gOXM2GOXTElrpvPOKPJNugDo0fELfFlhw1sk+gq+FeN
0nUrw+pzs8In7aPxIrjXPuIGlM3qPafPD1QqV1T46e/6id8Kuo3ekkma8XUHb8KB
yHNJwBe0MKhRhkGsIGwbRW1RZ2LujESUVo7q0C6IN7sgQc351GCtEjop9r54K9p9
CQxdbx2awv5ga0a8IXANx7xpOnSMFlEu/k5GvbkQUeVsKgkzssih3cmrUhEL5Xhw
S+AIMVrkl1uslFZp5r6t1exO27OopwrR6kGyjAC0pKe0cjYx9wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPT2kqD80QAmvR3GCNmk0IyBKQFWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNDU0Y2Q2NmYtNTE4Zi0z
Zjk1LWI0MWQtMTkwMjE1MzFiZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUpgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCHqBEYoy3wm8p66fa8RJNGYxihn0Ci9YfUtARNmgO/El7PGvG2TyIG
3ZOPlaK5pCHSOHQqAfbSxmzR9NmwGE8e42LKJxa1EC/lSenVcCJzihX8athemOEV
H8I5E9RhDux35pvGlIuoe46mjRM9YzR+GAVUdJteJ2cujGe+zLiIPdFq9NMqmcol
tU2tSJ8jIMnAlNk07qF8ZyNjkVsaZbPL/oPahp+OThM2kQLm3EswRbldrB5+/xEV
VIkA2wCAs0PRPo0dUac4Hgz3d9SHhLNeYN5jtAbrDaXNokXVGH26QOVOA8I0fQix
YwDdF2XlRXsdp4JS2LN09zC9shw6Gm+o
-----END CERTIFICATE-----
Generated at Fri Oct 10 23:36:54 2025 by rpki-client