Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bdf40ea5-bc80-30cd-8512-a48042bc0fcb.roa
File:                     bdf40ea5-bc80-30cd-8512-a48042bc0fcb.roa (raw, json)
Hash identifier:          N9215ihfu6KsymmGC7NdwZIeehjlFgLrL000nwF+y9k=
Subject key identifier:   B2:69:3A:52:B5:5D:9A:65:4E:B8:38:F8:F1:C1:57:DD:43:5A:CC:C5
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF521548AEAC00CFDE1FCCB00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bdf40ea5-bc80-30cd-8512-a48042bc0fcb.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:20bb::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:54:8a:ea:c0:0c:fd:e1:fc:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=d5f14390-9299-4895-b6cc-6390c3555013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:75:9a:a2:1b:0b:68:dc:75:d0:6a:12:a4:
                    78:e2:b5:69:07:1f:f5:31:58:e7:79:22:10:5d:68:
                    2b:3a:71:f2:e4:d6:e9:fe:9a:ab:1b:c6:03:2a:ea:
                    eb:5b:72:94:c5:27:93:61:bd:2c:63:73:bd:52:35:
                    ca:e6:15:1b:f5:c3:09:95:d6:04:d1:29:f3:8d:a3:
                    ff:9f:ea:e3:b1:46:06:04:b6:cd:46:92:49:da:8f:
                    6b:f1:22:dc:2c:2b:91:56:32:9f:05:d5:a9:1f:cd:
                    8f:73:fd:36:bf:54:63:d4:dc:41:bd:e1:3c:25:c4:
                    f2:bf:6a:4f:5d:d6:81:46:cb:fa:09:85:b6:7d:67:
                    c0:b6:13:e4:8f:8d:64:78:40:31:bd:c7:51:2a:38:
                    39:cf:78:eb:5b:9f:e8:fd:51:f3:ad:d5:68:1c:89:
                    19:b7:6d:cd:73:e7:26:96:be:d5:d2:9f:14:8b:02:
                    3f:97:52:69:7a:43:f2:15:c0:a8:e9:de:a3:77:a0:
                    f3:fe:f7:61:f4:31:d8:5c:39:66:7e:ec:c3:be:de:
                    a5:72:a4:87:2b:16:94:bc:b2:37:05:a7:49:bc:5c:
                    b9:19:66:7a:00:0a:a9:50:5b:09:f7:62:ad:73:44:
                    a7:dc:50:62:80:be:46:ab:02:5d:3b:26:87:e9:61:
                    be:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:3A:52:B5:5D:9A:65:4E:B8:38:F8:F1:C1:57:DD:43:5A:CC:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bdf40ea5-bc80-30cd-8512-a48042bc0fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8f:45:6c:34:84:44:d8:bf:32:10:68:f6:42:e6:20:81:80:
         db:e8:4a:f4:c6:5f:c6:2f:c9:b6:7e:8f:80:d8:57:9c:8c:fa:
         4f:1a:32:7d:c3:15:4e:14:90:74:91:8c:9d:49:10:a1:85:97:
         b6:15:ea:a6:95:b2:06:4e:e0:02:86:48:22:45:1b:8a:90:60:
         ed:fd:11:8d:e5:38:83:eb:d3:97:46:23:2a:42:f5:c5:ec:5f:
         8e:ea:79:c9:04:32:dc:6b:34:03:b5:60:85:33:58:2b:a0:91:
         e2:c5:91:a6:54:6d:c0:e4:71:9e:10:5d:d0:02:aa:4b:52:28:
         45:03:db:f3:62:04:8c:8f:c8:cb:01:32:c0:9f:34:51:3e:aa:
         61:6e:cd:20:66:2b:36:26:b3:69:02:d6:16:eb:16:a7:1d:7c:
         0a:05:4e:ca:3b:e6:79:6b:1f:4f:01:e0:bc:72:19:1b:ca:3f:
         21:db:fc:46:d4:37:d8:e4:42:56:8f:77:cb:14:eb:cf:ee:09:
         0f:f4:7f:ec:71:5d:fd:a1:52:c7:9e:4c:aa:a2:c7:21:bd:c3:
         10:8f:fa:e5:07:e5:ed:55:d5:d3:c2:ba:66:3e:aa:e6:9c:76:
         20:16:f7:39:94:f1:00:26:49:1b:12:a0:86:5f:f1:cd:d7:6b:
         49:6f:f2:f3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IVSK6sAM/eH8ywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZDVmMTQzOTAtOTI5OS00ODk1LWI2Y2MtNjM5MGMzNTU1MDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifl1mqIbC2jcddBqEqR44rVpBx/1MVjneSIQ
XWgrOnHy5Nbp/pqrG8YDKurrW3KUxSeTYb0sY3O9UjXK5hUb9cMJldYE0SnzjaP/
n+rjsUYGBLbNRpJJ2o9r8SLcLCuRVjKfBdWpH82Pc/02v1Rj1NxBveE8JcTyv2pP
XdaBRsv6CYW2fWfAthPkj41keEAxvcdRKjg5z3jrW5/o/VHzrdVoHIkZt23Nc+cm
lr7V0p8UiwI/l1JpekPyFcCo6d6jd6Dz/vdh9DHYXDlmfuzDvt6lcqSHKxaUvLI3
BadJvFy5GWZ6AAqpUFsJ92Ktc0Sn3FBigL5GqwJdOyaH6WG+DwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLJpOlK1XZplTrg4+PHBV91DWszFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvYmRmNDBlYTUtYmM4MC0z
MGNkLTg1MTItYTQ4MDQyYmMwZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCC7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABKPRWw0hETYvzIQaPZC5iCBgNvoSvTGX8YvybZ+j4DYV5yM+k8a
Mn3DFU4UkHSRjJ1JEKGFl7YV6qaVsgZO4AKGSCJFG4qQYO39EY3lOIPr05dGIypC
9cXsX47qeckEMtxrNAO1YIUzWCugkeLFkaZUbcDkcZ4QXdACqktSKEUD2/NiBIyP
yMsBMsCfNFE+qmFuzSBmKzYms2kC1hbrFqcdfAoFTso75nlrH08B4LxyGRvKPyHb
/EbUN9jkQlaPd8sU68/uCQ/0f+xxXf2hUseeTKqixyG9wxCP+uUH5e1V1dPCumY+
quacdiAW9zmU8QAmSRsSoIZf8c3Xa0lv8vM=
-----END CERTIFICATE-----
Generated at Mon Aug 25 19:31:28 2025 by rpki-client