Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/71a63c70-3ce0-3c7a-8db2-d4a981430241.roa
File:                     71a63c70-3ce0-3c7a-8db2-d4a981430241.roa (raw, json)
Hash identifier:          jyF1kp3PGtu/O1FcD3bcacOrviW7X6YSMvpX2K22+S4=
Subject key identifier:   BF:68:85:D2:DF:E6:5F:D9:C7:13:CA:85:F6:67:EB:E0:35:CE:AE:C2
Certificate issuer:       /CN=2b564b98-807f-4472-b081-8e4364ab6410
Certificate serial:       010D0C9F4328584B45ED75F96DACBEBE39702760
Authority key identifier: B6:1D:CE:E8:86:25:13:83:CF:B9:AD:6C:15:01:96:64:E0:6A:03:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/71a63c70-3ce0-3c7a-8db2-d4a981430241.roa
Signing time:             Sun 21 Sep 2025 23:36:56 +0000
ROA not before:           Sun 21 Sep 2025 23:36:56 +0000
ROA not after:            Sun 21 Dec 2025 00:36:56 +0000
asID:                     402000
IP address blocks:        2602:f554::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:45:ed:75:f9:6d:ac:be:be:39:70:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b564b98-807f-4472-b081-8e4364ab6410
        Validity
            Not Before: Sep 21 23:36:56 2025 GMT
            Not After : Dec 21 00:36:56 2025 GMT
        Subject: CN=870a3902-a4e0-449a-8fde-7fd8f18ffa06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2c:b3:d8:c4:8f:7d:7f:9a:70:d4:57:a8:e0:
                    94:fc:99:45:bc:47:84:96:30:49:30:e3:3b:c7:47:
                    33:c5:79:fc:a6:ff:6d:1c:73:78:11:e4:2a:3d:c8:
                    d1:61:cf:14:bc:f5:91:e1:1a:75:06:06:21:63:06:
                    62:03:1c:73:ad:ef:bd:3d:72:a6:27:43:af:fe:8b:
                    ed:71:7b:28:29:a3:0f:89:c8:63:6c:f4:c5:31:ac:
                    11:f1:bc:37:bd:66:bf:aa:1a:7d:e2:36:a1:69:44:
                    68:bc:f4:3b:b1:b8:3f:a0:7a:ea:0a:c3:7f:f9:e3:
                    3e:42:34:f3:34:9a:0c:e6:b0:0e:a0:8e:27:d6:8a:
                    dc:46:26:ea:ac:e9:69:80:12:53:7d:df:2e:09:78:
                    bf:d6:aa:4f:08:c2:03:a0:c2:9d:e2:39:fd:f2:81:
                    97:11:c6:a1:6e:ab:e5:8e:00:d6:6e:1e:59:83:3d:
                    ea:cf:6a:51:23:e6:96:de:a4:cf:ae:2f:55:94:1b:
                    1d:f2:9a:6d:22:d9:32:f4:de:63:2c:5c:4c:15:a7:
                    6b:b9:7a:b9:a7:00:16:af:40:5e:ee:26:b0:c4:f1:
                    bb:ba:fb:d7:5e:4a:f8:bb:de:6c:d5:b8:ad:66:aa:
                    b8:47:f8:e3:df:a1:98:37:54:07:74:15:3a:b1:52:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:68:85:D2:DF:E6:5F:D9:C7:13:CA:85:F6:67:EB:E0:35:CE:AE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/71a63c70-3ce0-3c7a-8db2-d4a981430241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410/2b564b98-807f-4472-b081-8e4364ab6410.crl

            X509v3 Authority Key Identifier:
                keyid:B6:1D:CE:E8:86:25:13:83:CF:B9:AD:6C:15:01:96:64:E0:6A:03:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b564b98-807f-4472-b081-8e4364ab6410.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f554::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:21:0f:38:21:3f:9b:50:9e:92:dc:f4:80:33:f5:63:33:20:
         5b:e3:9b:b5:2e:44:a7:9b:a1:5f:4b:5f:21:eb:d3:3d:93:0d:
         4f:8c:a1:9f:39:73:a1:a4:fd:8e:57:9b:f1:9c:da:38:38:a1:
         4e:f7:cf:46:0e:e8:b7:79:cf:c2:c2:87:94:0f:9d:89:ac:5b:
         82:f7:30:3d:c2:87:bf:dd:2a:cc:56:ca:46:32:36:ae:37:0c:
         1d:82:1d:1a:4e:b7:42:8f:a9:08:b3:4e:df:37:14:9b:c1:bb:
         22:a5:b2:da:10:d3:2b:ec:81:a8:bb:70:32:c9:33:14:00:8d:
         98:d5:ae:bd:c0:f5:e0:21:80:b1:ff:c0:d1:02:83:6b:83:4f:
         3c:25:b0:3b:ad:6b:e3:d9:cd:71:14:fb:1a:65:e0:bc:fc:c6:
         10:b5:55:b6:cb:34:0a:32:ea:40:b1:6f:39:9b:e8:2e:8f:10:
         9c:ed:db:4d:8a:08:88:96:03:a6:07:1a:e7:b3:7b:6d:6a:1c:
         14:5b:cb:27:58:81:1e:95:06:97:5f:9c:ae:6f:7c:e8:b7:de:
         82:de:7f:c9:21:44:fe:e5:37:de:67:7e:fb:6a:8a:6a:05:c0:
         d4:5f:e7:1a:1a:4b:e7:3a:c3:b3:b5:48:0e:38:5c:3d:e9:48:
         ff:ad:8b:a4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtF7XX5bay+vjlwJ2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI1NjRiOTgtODA3Zi00NDcyLWIwODEtOGU0MzY0YWI2
NDEwMB4XDTI1MDkyMTIzMzY1NloXDTI1MTIyMTAwMzY1NlowLzEtMCsGA1UEAxMk
ODcwYTM5MDItYTRlMC00NDlhLThmZGUtN2ZkOGYxOGZmYTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSyz2MSPfX+acNRXqOCU/JlFvEeEljBJMOM7
x0czxXn8pv9tHHN4EeQqPcjRYc8UvPWR4Rp1BgYhYwZiAxxzre+9PXKmJ0Ov/ovt
cXsoKaMPichjbPTFMawR8bw3vWa/qhp94jahaURovPQ7sbg/oHrqCsN/+eM+QjTz
NJoM5rAOoI4n1orcRibqrOlpgBJTfd8uCXi/1qpPCMIDoMKd4jn98oGXEcahbqvl
jgDWbh5Zgz3qz2pRI+aW3qTPri9VlBsd8pptItky9N5jLFxMFadruXq5pwAWr0Be
7iawxPG7uvvXXkr4u95s1bitZqq4R/jj36GYN1QHdBU6sVJp0QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL9ohdLf5l/ZxxPKhfZn6+A1zq7CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYjU2
NGI5OC04MDdmLTQ0NzItYjA4MS04ZTQzNjRhYjY0MTAvNzFhNjNjNzAtM2NlMC0z
YzdhLThkYjItZDRhOTgxNDMwMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmI1NjRiOTgtODA3Zi00NDcyLWIw
ODEtOGU0MzY0YWI2NDEwLzJiNTY0Yjk4LTgwN2YtNDQ3Mi1iMDgxLThlNDM2NGFi
NjQxMC5jcmwwHwYDVR0jBBgwFoAUth3O6IYlE4PPua1sFQGWZOBqA20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yYjU2NGI5OC04MDdmLTQ0NzItYjA4MS04ZTQz
NjRhYjY0MTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL1VAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcyEPOCE/m1Cektz0gDP1YzMgW+ObtS5Ep5uhX0tfIevTPZMNT4yh
nzlzoaT9jleb8ZzaODihTvfPRg7ot3nPwsKHlA+diaxbgvcwPcKHv90qzFbKRjI2
rjcMHYIdGk63Qo+pCLNO3zcUm8G7IqWy2hDTK+yBqLtwMskzFACNmNWuvcD14CGA
sf/A0QKDa4NPPCWwO61r49nNcRT7GmXgvPzGELVVtss0CjLqQLFvOZvoLo8QnO3b
TYoIiJYDpgca57N7bWocFFvLJ1iBHpUGl1+crm986Lfegt5/ySFE/uU33md++2qK
agXA1F/nGhpL5zrDs7VIDjhcPelI/62LpA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:05 2025 by rpki-client