Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/3c2ed612-660b-3cfd-ab9a-3eacf479a9ee.roa
File:                     3c2ed612-660b-3cfd-ab9a-3eacf479a9ee.roa (raw, json)
Hash identifier:          GYmr3UC0+3HGmvAdS0UHzzPQ9ZGH6Rabhu6NdpFFsJc=
Subject key identifier:   73:E6:F6:5C:16:4B:84:17:41:69:FC:F5:98:D7:32:E5:8D:49:32:ED
Certificate issuer:       /CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
Certificate serial:       010D0C9F4328584B4BAC56533168A1CBDC695800
Authority key identifier: EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/3c2ed612-660b-3cfd-ab9a-3eacf479a9ee.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     15082
IP address blocks:        2602:f78b:a31::/48 maxlen: 48
                          2602:f78b:a32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:56:53:31:68:a1:cb:dc:69:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=8993fe7e-0a47-4ae6-8889-7f4856b9588f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:fb:75:c2:e2:fd:49:22:08:c7:ee:40:6d:
                    c0:8f:26:29:9e:5a:ff:02:af:14:55:91:93:b5:c8:
                    f6:79:6e:d4:a6:c6:b9:9b:62:63:5f:19:61:9e:00:
                    9f:56:d5:68:05:48:3e:33:44:2f:68:ff:4c:2b:b5:
                    41:28:65:a6:8b:34:cd:c5:e3:64:47:b9:c8:47:dd:
                    41:13:2e:90:d3:01:10:3b:7c:3b:3e:ff:77:93:51:
                    15:13:c1:eb:e6:3c:e2:af:58:d0:ee:a1:3c:0e:3f:
                    60:fb:27:d5:10:12:41:47:ee:7c:6d:42:54:83:56:
                    2d:6b:50:9e:37:a3:dd:82:8c:20:fa:1e:58:f4:ac:
                    4a:da:96:44:16:5c:8d:7f:81:85:85:46:4c:71:b0:
                    0a:86:cb:81:20:00:bc:d8:ed:28:23:d6:9f:45:45:
                    80:40:3c:14:9f:1d:de:08:5b:fa:c4:df:41:09:7c:
                    4b:9c:c3:1d:8b:67:41:8a:28:75:fc:d1:56:09:4a:
                    79:6c:72:ca:a2:5f:02:da:15:a6:c9:66:74:cb:e9:
                    b6:b5:3b:34:04:bb:95:17:b7:29:0d:47:62:8d:ed:
                    e8:0c:7f:06:83:33:f9:2a:24:2b:77:b1:5e:6b:3b:
                    85:61:26:7d:dd:15:b2:6f:d2:cc:e6:99:20:0d:f2:
                    40:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E6:F6:5C:16:4B:84:17:41:69:FC:F5:98:D7:32:E5:8D:49:32:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/3c2ed612-660b-3cfd-ab9a-3eacf479a9ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78b:a31::-2602:f78b:a32:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:af:4d:58:7d:1a:74:30:57:cd:49:03:87:f2:2f:3a:2a:38:
         cc:90:a5:de:24:13:77:6e:8a:ec:c6:eb:08:bd:f3:ea:ea:0b:
         db:32:ad:74:53:6d:0d:6a:62:9b:d0:76:1c:a3:93:84:c9:09:
         7a:20:3c:40:7a:39:02:88:18:f9:e3:79:71:98:20:eb:5d:be:
         d9:4f:31:24:0b:b9:37:23:b6:36:68:61:70:48:82:1c:8b:84:
         73:97:09:88:82:9d:27:35:a9:6e:6d:d3:88:b8:03:f6:2f:a7:
         11:62:e9:cc:b0:03:62:fb:86:26:f1:28:69:a7:b0:13:4a:e2:
         da:b2:06:05:c8:55:e8:22:dc:51:b6:42:e7:15:78:d9:5f:d4:
         87:db:49:2a:91:ba:a8:10:95:26:94:8e:55:25:a0:a6:45:c1:
         81:d9:09:53:fe:df:47:1b:61:bc:28:b9:31:cf:26:3d:81:1a:
         50:9d:cd:13:8c:c3:f3:91:3c:03:20:c5:93:c1:9a:45:53:d9:
         ba:37:f2:e0:03:7b:44:a9:19:44:a9:0b:e1:72:7f:a4:e1:8f:
         b8:e0:b7:b9:f4:95:b8:00:95:42:6e:06:a8:c2:54:e6:1c:56:
         b7:ba:7c:a6:e6:bc:4d:74:49:8b:da:38:6b:57:5c:f5:ac:37:
         1a:a7:73:d3
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEtLrFZTMWihy9xpWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmNkM2M1NTAtNWJkZS00NTY5LWIzNWQtYTNlYTU3MGNm
ZjFjMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
ODk5M2ZlN2UtMGE0Ny00YWU2LTg4ODktN2Y0ODU2Yjk1ODhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjb7dcLi/UkiCMfuQG3AjyYpnlr/Aq8UVZGT
tcj2eW7Upsa5m2JjXxlhngCfVtVoBUg+M0QvaP9MK7VBKGWmizTNxeNkR7nIR91B
Ey6Q0wEQO3w7Pv93k1EVE8Hr5jzir1jQ7qE8Dj9g+yfVEBJBR+58bUJUg1Yta1Ce
N6Pdgowg+h5Y9KxK2pZEFlyNf4GFhUZMcbAKhsuBIAC82O0oI9afRUWAQDwUnx3e
CFv6xN9BCXxLnMMdi2dBiih1/NFWCUp5bHLKol8C2hWmyWZ0y+m2tTs0BLuVF7cp
DUdije3oDH8GgzP5KiQrd7FeazuFYSZ93RWyb9LM5pkgDfJA9QIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFHPm9lwWS4QXQWn89ZjXMuWNSTLtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Y2Qz
YzU1MC01YmRlLTQ1NjktYjM1ZC1hM2VhNTcwY2ZmMWMvM2MyZWQ2MTItNjYwYi0z
Y2ZkLWFiOWEtM2VhY2Y0NzlhOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmNkM2M1NTAtNWJkZS00NTY5LWIz
NWQtYTNlYTU3MGNmZjFjLzZjZDNjNTUwLTViZGUtNDU2OS1iMzVkLWEzZWE1NzBj
ZmYxYy5jcmwwHwYDVR0jBBgwFoAU7PvtP30EqoDtnC5RonnWMmJ/EFUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82Y2QzYzU1MC01YmRlLTQ1NjktYjM1ZC1hM2Vh
NTcwY2ZmMWMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmAveL
CjEDBwAmAveLCjIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAWa9NWH0adDBXzUkDh/IvOio4zJCl3iQTd26K
7MbrCL3z6uoL2zKtdFNtDWpim9B2HKOThMkJeiA8QHo5AogY+eN5cZgg612+2U8x
JAu5NyO2NmhhcEiCHIuEc5cJiIKdJzWpbm3TiLgD9i+nEWLpzLADYvuGJvEoaaew
E0ri2rIGBchV6CLcUbZC5xV42V/Uh9tJKpG6qBCVJpSOVSWgpkXBgdkJU/7fRxth
vCi5Mc8mPYEaUJ3NE4zD85E8AyDFk8GaRVPZujfy4AN7RKkZRKkL4XJ/pOGPuOC3
ufSVuACVQm4GqMJU5hxWt7p8pua8TXRJi9o4a1dc9aw3Gqdz0w==
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:34:44 2025 by rpki-client