Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f4ae7e5a-1890-321a-806e-d394f46564ca.roa
File:                     f4ae7e5a-1890-321a-806e-d394f46564ca.roa (raw, json)
Hash identifier:          vnOy6j8lteBDE8el8GEI4sJEdN+6ImTHL7LdBrS7LdA=
Subject key identifier:   D4:28:08:EA:05:AF:2F:20:D5:98:BF:36:26:2D:B9:A5:B4:B6:FE:23
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B34C7AA5923511A9C16088780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f4ae7e5a-1890-321a-806e-d394f46564ca.roa
Signing time:             Mon 15 Sep 2025 20:12:02 +0000
ROA not before:           Mon 15 Sep 2025 20:12:02 +0000
ROA not after:            Sun 14 Dec 2025 21:12:02 +0000
asID:                     54253
IP address blocks:        2603:c0da::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:c7:aa:59:23:51:1a:9c:16:08:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 15 20:12:02 2025 GMT
            Not After : Dec 14 21:12:02 2025 GMT
        Subject: CN=81e92157-4807-4e06-adac-3c8ef264d0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:7c:39:37:80:68:a6:70:bb:51:fc:2d:03:
                    33:10:a3:7d:e2:84:88:ad:22:82:38:67:88:5f:a6:
                    3d:60:ab:54:9a:00:e9:ca:93:91:55:12:a4:38:f4:
                    9f:52:2e:b8:25:d8:6f:68:65:04:ff:bd:e8:ea:ef:
                    6a:22:a7:8d:34:7d:99:41:04:30:86:bb:6b:bb:d2:
                    12:20:f2:cb:09:d3:77:26:97:f2:db:ac:db:e8:fb:
                    e6:ec:fe:5c:77:5f:4f:b5:e6:fe:f4:ca:e4:ba:99:
                    05:59:4d:c5:5a:fb:49:ad:fc:88:6e:2c:1c:00:dd:
                    35:ba:6b:51:c6:60:83:c9:18:f6:03:69:6f:5d:e7:
                    86:ed:98:1e:b9:16:c9:3a:c3:98:cf:2e:c1:27:59:
                    16:9c:85:65:3a:1b:17:d6:ff:e9:87:27:2d:07:60:
                    bf:c7:33:fc:f4:70:08:fb:2f:3a:3b:59:f1:62:5a:
                    93:80:37:50:3d:6f:6a:d0:7e:0a:a3:54:9a:d1:36:
                    a1:78:c7:0a:47:9b:76:cd:c6:0e:29:28:1c:e5:ce:
                    4a:7f:16:9a:b3:d8:8a:3a:df:a9:68:d6:d5:3c:28:
                    bf:e8:fb:41:11:c9:15:4f:d9:f9:af:c2:8c:3d:ce:
                    d1:c0:bd:71:5f:c4:ff:76:b4:b4:a0:81:ce:ef:5e:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:28:08:EA:05:AF:2F:20:D5:98:BF:36:26:2D:B9:A5:B4:B6:FE:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f4ae7e5a-1890-321a-806e-d394f46564ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0da::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:17:e3:81:fe:35:62:a7:58:69:0d:1d:8d:fe:04:cf:91:e0:
         21:8e:bd:d1:01:db:8b:cd:cd:df:fd:4c:90:1a:9b:18:91:87:
         fe:a3:4d:1e:51:5a:98:ea:88:71:0a:af:c9:64:55:67:84:bd:
         5c:27:5b:00:5b:a5:a9:ea:67:08:01:01:31:40:50:53:cd:16:
         7c:04:0d:d4:42:9c:89:64:09:b7:17:70:36:45:82:b4:b0:18:
         7a:38:b9:8e:36:05:16:75:cd:cc:41:a6:8e:1b:3a:a8:3b:81:
         72:93:62:42:5e:b3:c5:c8:d5:e3:97:77:35:19:7f:c0:e9:c8:
         3b:4d:46:cf:b3:c4:d0:68:8e:05:ad:bb:ca:19:2c:9a:43:32:
         42:05:01:a6:78:97:5d:e0:f0:a4:87:12:d3:ca:7c:d1:ff:0e:
         27:59:fd:78:c6:19:60:f0:78:8d:75:32:a3:ae:11:cd:ca:5f:
         c0:d1:26:b8:d7:41:59:6c:eb:c2:0d:9f:eb:8e:ef:7f:ac:38:
         72:16:33:04:a6:00:bb:ab:25:49:47:bd:92:44:11:68:9e:ba:
         e6:cb:3f:4e:6a:b7:67:42:a5:3c:a7:2e:ef:96:a3:84:0c:ea:
         99:8f:96:24:5e:69:fa:c3:d4:3e:f8:05:bd:00:c3:32:42:c9:
         1f:2b:e2:ec
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs0x6pZI1EanBYIh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDkxNTIwMTIwMloXDTI1MTIxNDIxMTIwMlowLzEtMCsGA1UEAxMk
ODFlOTIxNTctNDgwNy00ZTA2LWFkYWMtM2M4ZWYyNjRkMGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLR8OTeAaKZwu1H8LQMzEKN94oSIrSKCOGeI
X6Y9YKtUmgDpypORVRKkOPSfUi64JdhvaGUE/73o6u9qIqeNNH2ZQQQwhrtru9IS
IPLLCdN3Jpfy26zb6Pvm7P5cd19Pteb+9MrkupkFWU3FWvtJrfyIbiwcAN01umtR
xmCDyRj2A2lvXeeG7ZgeuRbJOsOYzy7BJ1kWnIVlOhsX1v/phyctB2C/xzP89HAI
+y86O1nxYlqTgDdQPW9q0H4Ko1Sa0TaheMcKR5t2zcYOKSgc5c5Kfxaas9iKOt+p
aNbVPCi/6PtBEckVT9n5r8KMPc7RwL1xX8T/drS0oIHO717dBQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNQoCOoFry8g1Zi/NiYtuaW0tv4jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjRhZTdlNWEtMTg5MC0z
MjFhLTgwNmUtZDM5NGY0NjU2NGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPA2gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWxfjgf41YqdYaQ0djf4Ez5HgIY690QHbi83N3/1MkBqbGJGH/qNN
HlFamOqIcQqvyWRVZ4S9XCdbAFulqepnCAEBMUBQU80WfAQN1EKciWQJtxdwNkWC
tLAYeji5jjYFFnXNzEGmjhs6qDuBcpNiQl6zxcjV45d3NRl/wOnIO01Gz7PE0GiO
Ba27yhksmkMyQgUBpniXXeDwpIcS08p80f8OJ1n9eMYZYPB4jXUyo64RzcpfwNEm
uNdBWWzrwg2f647vf6w4chYzBKYAu6slSUe9kkQRaJ665ss/Tmq3Z0KlPKcu75aj
hAzqmY+WJF5p+sPUPvgFvQDDMkLJHyvi7A==
-----END CERTIFICATE-----
Generated at Thu Oct 9 03:14:00 2025 by rpki-client