Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa
File:                     d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa (raw, json)
Hash identifier:          DBHVAXVISjbpQ5Kpe//8Os+uSBdTOfuclXnYDSHwSo8=
Subject key identifier:   C4:64:84:B6:AE:0F:09:71:7C:67:1A:5C:4F:2D:F3:7C:8F:BB:1B:AC
Certificate issuer:       /CN=643177f7-12a4-4138-aa72-1b5beaada59f
Certificate serial:       010D0C9F4328584B34B20CE4C82BCD6F37CEFD40
Authority key identifier: E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa
Signing time:             Mon 15 Sep 2025 19:28:29 +0000
ROA not before:           Mon 15 Sep 2025 19:28:29 +0000
ROA not after:            Sun 14 Dec 2025 20:28:29 +0000
asID:                     46309
IP address blocks:        2605:bc00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:b2:0c:e4:c8:2b:cd:6f:37:ce:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643177f7-12a4-4138-aa72-1b5beaada59f
        Validity
            Not Before: Sep 15 19:28:29 2025 GMT
            Not After : Dec 14 20:28:29 2025 GMT
        Subject: CN=4956c322-3e13-4028-a656-cc50ff2e0ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:66:b7:3b:c1:2c:98:0b:05:04:8c:2e:00:
                    52:6c:9a:f7:71:f5:01:47:61:39:86:07:49:cb:9d:
                    4c:13:e5:51:df:5c:f8:0e:2f:cb:99:e3:58:cc:11:
                    fe:f4:f0:52:e3:84:f8:54:69:2c:06:51:b8:ac:3a:
                    8b:9c:50:78:43:e5:24:71:cc:6e:1f:36:67:77:10:
                    46:dd:a4:4b:fb:92:dc:33:87:96:7e:67:72:83:94:
                    9d:ab:ff:67:e6:06:90:0d:c0:3f:76:6f:ac:1b:84:
                    92:f4:0b:ee:52:ee:7f:e1:65:37:32:3d:b2:a3:01:
                    16:d8:5a:a1:99:4e:70:81:a8:4b:5a:3e:61:79:a5:
                    51:43:aa:41:b5:86:9f:b2:ed:90:5f:a2:6d:76:e1:
                    ac:be:47:ba:3b:d9:90:67:f2:4a:bb:7b:e6:d5:f5:
                    01:37:0b:79:ca:da:1e:df:db:22:d3:28:47:a0:06:
                    d4:ca:18:79:1a:67:6f:d2:54:b8:ee:ac:ef:f8:70:
                    b1:0c:61:02:d3:bd:f7:f1:eb:77:64:26:98:6a:3e:
                    72:29:6f:32:ab:ba:fd:1f:00:b7:be:4d:95:6b:59:
                    37:35:6d:39:3d:09:4e:46:d9:58:40:60:87:cc:5c:
                    fd:b0:6f:f0:4e:14:a4:b1:3e:b6:c3:d3:af:23:a4:
                    d9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:64:84:B6:AE:0F:09:71:7C:67:1A:5C:4F:2D:F3:7C:8F:BB:1B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/d1bd83dd-5ecc-3c77-906c-ea56ae624196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f/643177f7-12a4-4138-aa72-1b5beaada59f.crl

            X509v3 Authority Key Identifier:
                keyid:E0:81:C9:F2:5C:4F:5E:48:25:37:49:E0:5D:7D:6D:F8:EE:CF:36:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/643177f7-12a4-4138-aa72-1b5beaada59f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bc00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3b:4e:ce:7a:ad:4d:90:3b:b1:28:d8:7d:d6:39:50:d0:62:
         f6:95:a8:3d:bd:a6:59:aa:cd:7c:15:4c:1a:a8:d0:39:32:ea:
         89:0c:3d:35:4b:71:cb:83:8e:d9:d1:83:d4:60:34:d1:bf:67:
         33:b3:06:ee:14:e0:c6:a4:f7:62:a2:dd:ce:8a:35:9c:18:8a:
         d7:e9:9b:72:aa:db:0a:74:e1:81:33:fb:6a:ac:8a:c1:c8:e0:
         19:42:39:6d:fc:7e:d8:d1:ad:9b:d1:b2:b5:b2:0e:7e:f7:d4:
         aa:06:f0:59:37:9e:93:9b:d7:e7:d5:d1:c1:bb:9e:18:bc:9b:
         e1:f6:7a:5f:bf:73:27:7d:ed:1c:04:13:bb:d3:11:7c:19:38:
         53:9d:b9:9e:e9:bb:24:f6:00:9d:75:8a:da:49:17:28:f3:7f:
         75:bc:88:18:54:11:73:dc:4f:20:f2:99:20:0d:cc:a6:5c:c9:
         14:15:16:bd:b7:04:5c:bb:03:31:5d:c3:3d:4e:79:13:43:5a:
         ea:d7:8f:e9:4c:77:44:e2:9f:86:af:29:fe:b9:55:ee:44:bf:
         86:25:50:40:b4:ae:39:a7:72:8e:c1:91:0e:f0:38:29:45:82:
         ef:32:e2:af:d3:45:fe:da:00:76:86:bb:55:bf:04:81:95:97:
         cf:b0:03:21
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs0sgzkyCvNbzfO/UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQzMTc3ZjctMTJhNC00MTM4LWFhNzItMWI1YmVhYWRh
NTlmMB4XDTI1MDkxNTE5MjgyOVoXDTI1MTIxNDIwMjgyOVowLzEtMCsGA1UEAxMk
NDk1NmMzMjItM2UxMy00MDI4LWE2NTYtY2M1MGZmMmUwZWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZZmtzvBLJgLBQSMLgBSbJr3cfUBR2E5hgdJ
y51ME+VR31z4Di/LmeNYzBH+9PBS44T4VGksBlG4rDqLnFB4Q+UkccxuHzZndxBG
3aRL+5LcM4eWfmdyg5Sdq/9n5gaQDcA/dm+sG4SS9AvuUu5/4WU3Mj2yowEW2Fqh
mU5wgahLWj5heaVRQ6pBtYafsu2QX6JtduGsvke6O9mQZ/JKu3vm1fUBNwt5ytoe
39si0yhHoAbUyhh5Gmdv0lS47qzv+HCxDGEC07338et3ZCaYaj5yKW8yq7r9HwC3
vk2Va1k3NW05PQlORtlYQGCHzFz9sG/wThSksT62w9OvI6TZzwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMRkhLauDwlxfGcaXE8t83yPuxusMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NDMx
NzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjViZWFhZGE1OWYvZDFiZDgzZGQtNWVjYy0z
Yzc3LTkwNmMtZWE1NmFlNjI0MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjQzMTc3ZjctMTJhNC00MTM4LWFh
NzItMWI1YmVhYWRhNTlmLzY0MzE3N2Y3LTEyYTQtNDEzOC1hYTcyLTFiNWJlYWFk
YTU5Zi5jcmwwHwYDVR0jBBgwFoAU4IHJ8lxPXkglN0ngXX1t+O7PNiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC82NDMxNzdmNy0xMmE0LTQxMzgtYWE3Mi0xYjVi
ZWFhZGE1OWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgW8ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAeO07Oeq1NkDuxKNh91jlQ0GL2lag9vaZZqs18FUwaqNA5MuqJDD01
S3HLg47Z0YPUYDTRv2czswbuFODGpPdiot3OijWcGIrX6ZtyqtsKdOGBM/tqrIrB
yOAZQjlt/H7Y0a2b0bK1sg5+99SqBvBZN56Tm9fn1dHBu54YvJvh9npfv3Mnfe0c
BBO70xF8GThTnbme6bsk9gCddYraSRco8391vIgYVBFz3E8g8pkgDcymXMkUFRa9
twRcuwMxXcM9TnkTQ1rq14/pTHdE4p+Gryn+uVXuRL+GJVBAtK45p3KOwZEO8Dgp
RYLvMuKv00X+2gB2hrtVvwSBlZfPsAMh
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:30:38 2025 by rpki-client