Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/89edca34-026a-3c55-9706-b38b7c4a3279.roa
File:                     89edca34-026a-3c55-9706-b38b7c4a3279.roa (raw, json)
Hash identifier:          e/CgNqw6NrPDGMeGVdeMRYkkpY7PI9rClOizfbF7QGY=
Subject key identifier:   F8:09:82:E1:27:BF:FA:3B:5F:A0:60:53:89:EC:20:01:A0:E1:EE:15
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF521392C3EA5C607AD85B000
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/89edca34-026a-3c55-9706-b38b7c4a3279.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:39:2c:3e:a5:c6:07:ad:85:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=46d82549-fb85-42b9-b093-009877f93bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:94:0b:5d:cc:3f:3a:d3:c8:22:a3:39:a4:
                    69:2a:fc:c9:70:58:b2:e8:c8:ee:40:a7:fb:43:09:
                    9e:78:3e:48:e0:0f:07:61:67:e6:35:a5:62:fa:81:
                    c5:cc:85:53:dc:50:31:44:b2:26:2c:11:20:0e:05:
                    83:4f:9d:a4:2a:c0:48:6d:ac:42:34:fc:64:3d:e1:
                    f9:75:96:14:0e:c6:c8:a4:78:26:85:29:99:f1:41:
                    19:c8:e7:fc:66:d9:1a:32:11:e9:94:aa:02:fc:af:
                    09:66:fb:66:e6:a0:d9:69:f2:51:4b:59:9f:ba:22:
                    26:06:c9:3b:31:b9:47:4e:44:99:ea:47:fe:76:0d:
                    c0:be:ed:19:aa:5f:98:0a:08:bc:cb:0f:83:eb:6d:
                    34:b2:db:92:ae:f6:ae:98:5f:22:35:89:3f:52:c3:
                    dc:b9:3f:ad:fe:55:7e:b5:b0:38:3a:96:ca:2a:4c:
                    bd:e3:ef:0e:da:19:fc:e1:c3:1a:71:aa:63:f7:c6:
                    a4:ce:66:41:b7:0f:5c:0a:b8:fd:a1:a0:7b:34:94:
                    a7:5c:34:21:c7:73:07:02:d5:f6:11:06:04:c9:d3:
                    ea:e7:f9:86:62:c9:b2:7d:bd:36:66:74:f6:f4:82:
                    3c:88:46:95:04:ce:7c:45:70:0f:76:9f:a8:24:43:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:09:82:E1:27:BF:FA:3B:5F:A0:60:53:89:EC:20:01:A0:E1:EE:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/89edca34-026a-3c55-9706-b38b7c4a3279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:3d:fb:2f:23:22:23:24:d3:6d:01:96:93:83:b0:fd:b7:39:
         0d:c5:5a:86:70:28:37:31:4e:82:5b:7d:c7:bb:d4:23:f2:bc:
         5a:ea:72:6b:66:57:60:c7:f1:35:04:e8:9d:62:7b:42:63:d5:
         5e:5d:44:a9:6d:60:4f:6f:cd:57:bc:ce:c0:99:f2:82:eb:f8:
         31:19:6d:8d:7a:db:d8:9e:99:b8:34:ae:59:6a:71:07:58:0a:
         c3:af:f1:ba:5c:d2:10:25:c8:5e:b4:dc:5b:31:eb:11:e7:ae:
         4a:88:51:7b:45:24:2f:17:de:d2:da:52:5c:af:0d:69:f3:fa:
         c0:b7:1e:84:7c:6d:fe:90:a6:62:16:27:d4:dd:49:9c:c2:5f:
         07:b0:bb:38:81:4d:45:f6:df:ee:63:24:9d:b0:b9:f1:13:4a:
         e7:2f:ca:cd:f2:5d:f4:e6:e4:7b:f1:77:ba:d0:f1:2f:2d:4b:
         f6:f9:34:74:74:9e:8d:ee:3d:fe:47:ab:86:09:2b:2a:5e:0e:
         be:f5:5e:18:e0:6c:f5:7e:f8:af:13:4f:8f:8b:29:78:f7:92:
         ce:c2:33:73:65:a1:75:62:0c:c4:b9:14:f3:43:ed:e4:1f:cf:
         b1:c5:31:dd:74:d7:97:bd:e0:27:72:a4:5d:be:e0:8e:4e:55:
         c7:db:b4:4d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1ITksPqXGB62FsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
NDZkODI1NDktZmI4NS00MmI5LWIwOTMtMDA5ODc3ZjkzYmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllCUC13MPzrTyCKjOaRpKvzJcFiy6MjuQKf7
QwmeeD5I4A8HYWfmNaVi+oHFzIVT3FAxRLImLBEgDgWDT52kKsBIbaxCNPxkPeH5
dZYUDsbIpHgmhSmZ8UEZyOf8ZtkaMhHplKoC/K8JZvtm5qDZafJRS1mfuiImBsk7
MblHTkSZ6kf+dg3Avu0Zql+YCgi8yw+D6200stuSrvaumF8iNYk/UsPcuT+t/lV+
tbA4OpbKKky94+8O2hn84cMacapj98akzmZBtw9cCrj9oaB7NJSnXDQhx3MHAtX2
EQYEydPq5/mGYsmyfb02ZnT29II8iEaVBM58RXAPdp+oJEPARQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPgJguEnv/o7X6BgU4nsIAGg4e4VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvODllZGNhMzQtMDI2YS0z
YzU1LTk3MDYtYjM4YjdjNGEzMjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIDCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADM9+y8jIiMk020BlpODsP23OQ3FWoZwKDcxToJbfce71CPyvFrq
cmtmV2DH8TUE6J1ie0Jj1V5dRKltYE9vzVe8zsCZ8oLr+DEZbY1629iembg0rllq
cQdYCsOv8bpc0hAlyF603Fsx6xHnrkqIUXtFJC8X3tLaUlyvDWnz+sC3HoR8bf6Q
pmIWJ9TdSZzCXwewuziBTUX23+5jJJ2wufETSucvys3yXfTm5Hvxd7rQ8S8tS/b5
NHR0no3uPf5Hq4YJKypeDr71XhjgbPV++K8TT4+LKXj3ks7CM3NloXViDMS5FPND
7eQfz7HFMd1015e94CdypF2+4I5OVcfbtE0=
-----END CERTIFICATE-----
Generated at Mon Aug 25 19:37:55 2025 by rpki-client