Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/963eacf9-8491-393f-939a-545d3964dc00.roa
File:                     963eacf9-8491-393f-939a-545d3964dc00.roa (raw, json)
Hash identifier:          /c/4HU5T5u0BJw0eOWan1ur70Pum3KGUYh4n7X7cBK0=
Subject key identifier:   03:C9:A3:85:12:EE:5E:1E:40:CE:52:F2:62:1E:F8:9C:20:CB:A3:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD6278E681C0AF65FE1A0D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/963eacf9-8491-393f-939a-545d3964dc00.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     32651
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:78:e6:81:c0:af:65:fe:1a:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=2181e34e-e1b9-4709-882c-4c822e1be186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:3e:3e:4b:fa:2e:75:e8:e9:19:7a:e7:f8:
                    75:57:6c:33:42:12:aa:84:59:26:f3:4f:b7:2f:42:
                    b8:da:88:7b:2c:13:08:79:0f:1f:dc:15:ef:bd:54:
                    cf:ff:1a:27:7e:a9:eb:23:ac:d1:75:8f:95:a2:2a:
                    9c:e1:93:3e:12:02:34:3a:ac:6b:6e:57:1c:11:a5:
                    f4:05:47:6c:fd:9e:dc:3d:40:76:b4:e2:bd:68:85:
                    3c:fd:4d:ac:1e:fc:f1:4c:d8:5e:18:29:a6:b0:99:
                    5c:ec:ce:03:09:4a:33:14:f4:eb:63:64:e3:c3:61:
                    9d:50:58:89:25:ab:ce:e5:9e:d3:8d:96:a7:b9:af:
                    71:67:68:87:14:a9:49:07:86:35:11:79:c3:1e:24:
                    d5:f2:7e:23:e5:fa:bb:09:14:26:4c:11:3d:6f:3f:
                    12:4c:64:5c:9e:ad:4f:91:b4:83:72:57:ba:f9:1a:
                    88:52:7a:ff:89:35:ac:77:7c:48:37:39:a6:17:c6:
                    c4:f2:2c:32:03:8e:d6:65:87:67:82:00:67:4c:2f:
                    c2:21:1c:48:36:29:e3:00:bb:31:64:4b:8d:eb:84:
                    6d:3a:a4:ea:ee:b7:a3:23:e0:1f:a9:cc:66:57:8c:
                    9b:c7:6a:dd:a2:9d:4a:8f:97:08:29:f4:11:d0:35:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C9:A3:85:12:EE:5E:1E:40:CE:52:F2:62:1E:F8:9C:20:CB:A3:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/963eacf9-8491-393f-939a-545d3964dc00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:22:06:39:85:e7:9f:96:a7:59:98:2a:df:24:54:1e:6a:8e:
         c7:fb:34:d9:80:2b:e9:8a:e8:48:6d:4e:c8:f1:01:50:90:9d:
         6d:39:e6:60:3a:23:ff:94:db:c5:3b:55:0d:6b:76:8a:cc:bf:
         c6:26:51:b1:fb:07:bb:ac:15:89:4d:e6:3d:42:eb:bb:fc:3d:
         5d:64:d2:3b:ad:d6:3c:3d:e0:aa:e8:ad:d3:f5:e5:93:77:4a:
         25:02:c4:5e:e0:63:92:95:d7:9e:a0:b2:43:31:34:b7:8e:48:
         4e:0c:b0:09:10:fa:ca:bf:71:1d:d3:66:4e:1e:a1:d7:0d:00:
         85:7e:94:16:b4:ac:ac:fe:98:9f:5b:78:ab:56:5e:42:05:47:
         90:9a:00:c5:d8:a7:38:fd:27:da:58:2a:71:dc:8b:0e:f4:39:
         6a:0d:6f:1d:94:63:57:46:f1:25:b1:02:32:be:bc:c8:5a:83:
         63:c3:35:62:78:51:bf:21:22:69:24:c3:e6:ee:f6:25:8f:df:
         31:18:69:cf:ad:d2:5a:7c:29:ad:bc:e8:20:7e:f3:08:62:39:
         1f:52:32:f4:d8:09:d1:4f:f1:10:59:f9:6c:81:cc:46:0d:b9:
         bc:4f:f3:8b:ad:32:d5:16:d2:a3:56:91:16:b0:ed:4d:50:25:
         ed:44:b2:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYnjmgcCvZf4aDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
MjE4MWUzNGUtZTFiOS00NzA5LTg4MmMtNGM4MjJlMWJlMTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5I+Pkv6LnXo6Rl65/h1V2wzQhKqhFkm80+3
L0K42oh7LBMIeQ8f3BXvvVTP/xonfqnrI6zRdY+Voiqc4ZM+EgI0OqxrblccEaX0
BUds/Z7cPUB2tOK9aIU8/U2sHvzxTNheGCmmsJlc7M4DCUozFPTrY2Tjw2GdUFiJ
JavO5Z7TjZanua9xZ2iHFKlJB4Y1EXnDHiTV8n4j5fq7CRQmTBE9bz8STGRcnq1P
kbSDcle6+RqIUnr/iTWsd3xINzmmF8bE8iwyA47WZYdnggBnTC/CIRxINinjALsx
ZEuN64RtOqTq7rejI+AfqcxmV4ybx2rdop1Kj5cIKfQR0DVVCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAPJo4US7l4eQM5S8mIe+Jwgy6M8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTYzZWFjZjktODQ5MS0z
OTNmLTkzOWEtNTQ1ZDM5NjRkYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE4iBjmF55+Wp1mYKt8kVB5qjsf7NNmAK+mK6EhtTsjxAVCQnW05
5mA6I/+U28U7VQ1rdorMv8YmUbH7B7usFYlN5j1C67v8PV1k0jut1jw94KrordP1
5ZN3SiUCxF7gY5KV156gskMxNLeOSE4MsAkQ+sq/cR3TZk4eodcNAIV+lBa0rKz+
mJ9beKtWXkIFR5CaAMXYpzj9J9pYKnHciw70OWoNbx2UY1dG8SWxAjK+vMhag2PD
NWJ4Ub8hImkkw+bu9iWP3zEYac+t0lp8Ka286CB+8whiOR9SMvTYCdFP8RBZ+WyB
zEYNubxP84utMtUW0qNWkRaw7U1QJe1Esqo=
-----END CERTIFICATE-----
Generated at Wed Oct 29 07:08:08 2025 by rpki-client