Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/5654a4a4-a12d-3b62-a5dd-539d4594a091.roa
File:                     5654a4a4-a12d-3b62-a5dd-539d4594a091.roa (raw, json)
Hash identifier:          MFB0IZ1oHkM6P9fdTs1IsFSsoRlUWEUah6gwh/Hvo64=
Subject key identifier:   CA:E2:FE:4B:AE:0F:BF:AB:8A:ED:CC:3D:28:77:B5:94:AC:1E:B7:DC
Certificate issuer:       /CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
Certificate serial:       010D0C9F4328584B047C0489F0CAA0D55C6AA440
Authority key identifier: 37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/5654a4a4-a12d-3b62-a5dd-539d4594a091.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     14478
IP address blocks:        2602:fb65::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:04:89:f0:ca:a0:d5:5c:6a:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=83ce6371-eb1b-4510-8d0e-a50baa630b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:35:29:c6:09:db:ca:2f:ab:fd:01:18:36:
                    fb:96:37:93:c3:54:02:1f:e6:a7:f9:d3:dd:37:ea:
                    db:00:ad:03:21:1f:76:50:99:39:37:0e:06:f9:7c:
                    98:9e:b3:9f:a7:59:f5:4c:97:47:82:58:80:a2:2a:
                    30:30:f8:a6:e8:a9:26:6c:4b:17:36:a7:a8:cf:c0:
                    09:5f:4e:3a:eb:ac:9f:4a:02:16:0f:f5:14:75:c1:
                    54:ba:93:ed:f2:b5:f7:16:37:3b:de:54:2d:bf:b9:
                    2d:ab:4a:5e:20:26:42:46:3f:83:67:68:5d:ac:24:
                    0f:23:6e:01:20:2b:5e:7d:02:e2:1b:bd:6d:f9:76:
                    3c:09:d2:f9:2f:01:3f:a4:a1:ee:4d:e7:5c:da:59:
                    f8:6c:7b:bd:4e:26:b4:c7:48:98:9e:5e:35:62:1d:
                    f1:69:81:86:53:7d:5a:11:64:47:ab:c0:e4:68:8b:
                    48:ef:5d:6e:59:64:dd:65:27:18:6e:69:3e:9a:65:
                    1d:71:df:5f:58:a5:99:27:dd:a4:ad:39:dc:83:25:
                    9e:1a:39:48:2b:2e:a6:ae:54:e3:a8:bf:44:59:b3:
                    88:ca:90:69:04:eb:d9:28:d0:ce:f5:74:2a:e5:fe:
                    26:50:1a:d1:0b:19:45:54:f7:8d:ce:a7:30:5d:cf:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E2:FE:4B:AE:0F:BF:AB:8A:ED:CC:3D:28:77:B5:94:AC:1E:B7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/5654a4a4-a12d-3b62-a5dd-539d4594a091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl

            X509v3 Authority Key Identifier:
                keyid:37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb65::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:6e:ec:1f:a9:3c:75:60:50:06:b4:81:9e:ba:17:56:ff:
         0c:be:48:85:52:14:94:a3:28:a8:ff:99:92:9b:49:c4:43:2f:
         f0:48:03:4a:ac:8f:17:af:d9:a0:79:67:06:76:ae:67:ed:08:
         db:97:06:07:b5:8b:0f:8e:9b:65:0d:81:7f:92:50:b9:5f:fc:
         12:f2:07:6d:5e:6f:ed:14:11:11:29:b3:06:1f:2a:8c:c4:cc:
         c0:60:2b:cf:da:61:ff:dd:43:1d:cf:33:d8:5e:95:55:af:96:
         d1:42:e8:0d:ec:55:78:45:94:48:4c:af:cb:ad:10:10:56:0b:
         af:13:86:a6:29:2a:a7:8f:7d:b9:1f:40:91:93:4d:57:9a:19:
         e5:fb:05:65:1b:15:aa:d4:ce:8a:17:0a:a2:b1:c6:b2:17:99:
         d2:73:0d:64:03:4d:d2:a6:d1:5e:ef:f5:3b:21:cf:f8:2f:7e:
         88:17:96:98:ae:e4:d8:34:ae:94:2f:6a:b3:cd:84:99:a1:52:
         1f:30:7e:b5:29:26:59:d1:06:2f:6c:dd:99:b2:aa:ef:fc:37:
         05:c0:7d:cf:f6:ea:2f:7d:29:b2:29:d9:f9:f1:fc:40:f5:f9:
         17:8b:cb:be:da:47:3c:5c:69:5e:ba:67:48:71:3d:3f:b3:28:
         e5:14:85:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsEfASJ8Mqg1VxqpEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGIwMWY4MjktMWNlNi00N2Q1LWFmMmQtZjYxYTI1N2Yw
MjNmMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
ODNjZTYzNzEtZWIxYi00NTEwLThkMGUtYTUwYmFhNjMwYjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksA1KcYJ28ovq/0BGDb7ljeTw1QCH+an+dPd
N+rbAK0DIR92UJk5Nw4G+XyYnrOfp1n1TJdHgliAoiowMPim6KkmbEsXNqeoz8AJ
X04666yfSgIWD/UUdcFUupPt8rX3Fjc73lQtv7ktq0peICZCRj+DZ2hdrCQPI24B
ICtefQLiG71t+XY8CdL5LwE/pKHuTedc2ln4bHu9Tia0x0iYnl41Yh3xaYGGU31a
EWRHq8DkaItI711uWWTdZScYbmk+mmUdcd9fWKWZJ92krTncgyWeGjlIKy6mrlTj
qL9EWbOIypBpBOvZKNDO9XQq5f4mUBrRCxlFVPeNzqcwXc+uXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMri/kuuD7+riu3MPSh3tZSsHrfcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YjAx
ZjgyOS0xY2U2LTQ3ZDUtYWYyZC1mNjFhMjU3ZjAyM2YvNTY1NGE0YTQtYTEyZC0z
YjYyLWE1ZGQtNTM5ZDQ1OTRhMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGIwMWY4MjktMWNlNi00N2Q1LWFm
MmQtZjYxYTI1N2YwMjNmLzhiMDFmODI5LTFjZTYtNDdkNS1hZjJkLWY2MWEyNTdm
MDIzZi5jcmwwHwYDVR0jBBgwFoAUN6UgHh7+xC+2bdTq4xb3MP7vkQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84YjAxZjgyOS0xY2U2LTQ3ZDUtYWYyZC1mNjFh
MjU3ZjAyM2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7ZQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACWcbuwfqTx1YFAGtIGeuhdW/wy+SIVSFJSjKKj/mZKbScRDL/BI
A0qsjxev2aB5ZwZ2rmftCNuXBge1iw+Om2UNgX+SULlf/BLyB21eb+0UEREpswYf
KozEzMBgK8/aYf/dQx3PM9helVWvltFC6A3sVXhFlEhMr8utEBBWC68ThqYpKqeP
fbkfQJGTTVeaGeX7BWUbFarUzooXCqKxxrIXmdJzDWQDTdKm0V7v9Tshz/gvfogX
lpiu5Ng0rpQvarPNhJmhUh8wfrUpJlnRBi9s3Zmyqu/8NwXAfc/26i99KbIp2fnx
/ED1+ReLy77aRzxcaV66Z0hxPT+zKOUUhXI=
-----END CERTIFICATE-----
Generated at Wed Sep 17 11:03:12 2025 by rpki-client