Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa
File:                     a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa (raw, json)
Hash identifier:          p3d27cL1xrZ3D68hxYYl8lCS+i1Dg/3kvDeJTMdJ04E=
Subject key identifier:   49:C6:97:F5:8C:F6:5D:07:3F:41:BD:03:61:2D:40:E8:55:7B:2D:B5
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F4328584B5141BC1FC60F30FA94EDEFA0
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     3477
IP address blocks:        2602:810:d004::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:bc:1f:c6:0f:30:fa:94:ed:ef:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=8be0c833-9486-47d3-ba66-55a10d9655f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a2:10:83:36:d5:cc:ce:52:01:bb:81:bf:95:
                    f0:3b:36:88:2d:3d:18:a5:54:fe:fc:bb:fa:2a:c9:
                    c5:a4:14:12:02:f7:51:f6:79:6f:d3:2c:38:ff:a5:
                    b6:23:74:41:7b:42:4a:59:64:e1:d9:61:85:d3:15:
                    b5:b5:3b:28:0d:df:50:1b:0a:be:a9:4e:86:65:47:
                    70:5f:55:30:75:ed:a5:9a:89:40:a1:28:f9:dd:f3:
                    88:a3:3c:fb:d3:95:15:08:bd:30:9c:c5:a7:47:01:
                    bb:7d:0f:ae:91:5a:82:59:e7:00:f9:05:14:a0:e7:
                    ea:80:29:1a:b4:fe:39:02:e6:26:a7:e3:93:66:30:
                    9f:97:b1:80:5d:67:99:a0:b9:9f:1c:12:dc:69:bf:
                    4c:47:85:ce:56:7d:0d:ec:da:50:8d:3a:d0:7d:51:
                    d0:07:97:c4:6e:4e:9b:b0:56:3a:ce:82:a8:47:06:
                    40:92:68:95:59:c7:a8:9e:ba:33:f3:8e:70:66:61:
                    68:e5:f5:95:87:c3:3b:cf:54:ad:0b:00:73:de:4c:
                    43:d1:e0:69:4b:77:ac:b8:a8:63:13:44:f3:70:86:
                    87:6e:14:ab:53:68:cb:01:e4:aa:1e:65:86:7f:f7:
                    29:19:ef:b8:77:78:82:dc:d7:05:f7:c3:e8:3f:e9:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C6:97:F5:8C:F6:5D:07:3F:41:BD:03:61:2D:40:E8:55:7B:2D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/a56da1d9-4473-30c5-a9b9-924fcf74c5dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:d004::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:07:41:4b:a5:6f:bb:65:9c:2a:0b:11:f5:b4:23:e6:77:28:
         4f:b6:d0:c8:bb:44:16:68:f0:4f:c3:d1:96:7d:81:d4:76:a6:
         3a:e9:48:67:f6:5d:4d:f6:4b:85:fe:15:14:32:9f:77:b8:3e:
         8e:22:17:86:92:71:11:c4:aa:12:6e:61:a2:6d:ad:3e:0a:51:
         fc:88:63:61:f6:76:b1:cd:76:d0:7c:42:48:c1:dd:e9:a7:a9:
         2b:e3:9b:33:8f:ad:4b:70:7d:cf:9a:04:7d:70:a1:42:1d:85:
         c1:f6:30:75:3e:00:41:b0:49:d2:ca:e5:b3:e4:76:5d:9f:47:
         b7:2c:90:b7:4d:29:ee:57:34:a7:2f:d3:69:7e:90:fe:7b:d8:
         f3:6d:09:3d:cb:1d:eb:ee:5a:1a:64:04:63:df:e9:75:70:24:
         14:b6:4b:bf:af:0f:9c:04:eb:b2:94:69:7d:0f:0c:6b:24:c1:
         c8:db:f1:22:37:25:d6:2f:90:d6:2a:f4:36:9b:5f:2e:4a:6b:
         4e:9c:90:13:c2:64:52:31:3b:66:54:ec:3b:5e:a5:cb:ed:7b:
         44:2c:98:82:b0:60:28:fb:cd:33:15:da:f7:7b:e8:92:42:2c:
         0a:f7:de:b9:c2:81:eb:4d:b6:88:74:b4:fb:8e:d4:28:8d:51:
         33:4f:9f:c8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtRQbwfxg8w+pTt76AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5
Y2I1MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
OGJlMGM4MzMtOTQ4Ni00N2QzLWJhNjYtNTVhMTBkOTY1NWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06IQgzbVzM5SAbuBv5XwOzaILT0YpVT+/Lv6
KsnFpBQSAvdR9nlv0yw4/6W2I3RBe0JKWWTh2WGF0xW1tTsoDd9QGwq+qU6GZUdw
X1Uwde2lmolAoSj53fOIozz705UVCL0wnMWnRwG7fQ+ukVqCWecA+QUUoOfqgCka
tP45AuYmp+OTZjCfl7GAXWeZoLmfHBLcab9MR4XOVn0N7NpQjTrQfVHQB5fEbk6b
sFY6zoKoRwZAkmiVWceonroz845wZmFo5fWVh8M7z1StCwBz3kxD0eBpS3esuKhj
E0TzcIaHbhSrU2jLAeSqHmWGf/cpGe+4d3iC3NcF98PoP+n7cQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEnGl/WM9l0HP0G9A2EtQOhVey21MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl
NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvYTU2ZGExZDktNDQ3My0z
MGM1LWE5YjktOTI0ZmNmNzRjNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2
ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi
OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl
YzgzYjljYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIIENAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAOEHQUulb7tlnCoLEfW0I+Z3KE+20Mi7RBZo8E/D0ZZ9gdR2pjrp
SGf2XU32S4X+FRQyn3e4Po4iF4aScRHEqhJuYaJtrT4KUfyIY2H2drHNdtB8QkjB
3emnqSvjmzOPrUtwfc+aBH1woUIdhcH2MHU+AEGwSdLK5bPkdl2fR7cskLdNKe5X
NKcv02l+kP572PNtCT3LHevuWhpkBGPf6XVwJBS2S7+vD5wE67KUaX0PDGskwcjb
8SI3JdYvkNYq9DabXy5Ka06ckBPCZFIxO2ZU7Dtepcvte0QsmIKwYCj7zTMV2vd7
6JJCLAr33rnCgetNtoh0tPuO1CiNUTNPn8g=
-----END CERTIFICATE-----
Generated at Sun Oct 12 00:14:56 2025 by rpki-client