Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa
File:                     09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa (raw, json)
Hash identifier:          FtzU3WjrR7porb606qOkSFjHP0BTYF5HKcukteU4wRk=
Subject key identifier:   C4:FA:06:5B:6D:70:87:2E:27:30:EB:56:DC:44:14:A9:37:33:3C:A9
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584B13D6C09366880EA0BE414800
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     11290
IP address blocks:        2602:210::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c0:93:66:88:0e:a0:be:41:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=a8b4e4c5-ea83-460f-9139-014b1a479aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:59:fe:c1:84:f3:c2:e6:6f:c2:ec:09:a1:
                    15:a1:87:dc:bd:0e:1c:ca:3e:b7:4a:be:69:fd:42:
                    a8:e5:85:98:a4:e7:fc:23:e3:2a:54:84:1e:a4:a2:
                    6b:a7:c0:a4:82:1a:d4:9e:94:da:65:db:10:0f:05:
                    ed:aa:1f:4c:40:1c:d4:4d:28:b2:36:2b:be:8a:01:
                    5a:4a:06:66:f2:74:0e:1c:80:c4:dc:22:7a:11:96:
                    af:fc:2e:36:12:3c:98:00:0f:1f:4b:59:41:60:3d:
                    66:0b:a5:34:d4:e0:16:7d:3f:ca:69:48:0f:a3:a8:
                    83:ce:32:f7:e3:4d:61:48:1b:4e:cf:20:a4:f4:0c:
                    8f:94:28:47:a9:9a:f9:b5:66:45:1e:bf:0a:04:a9:
                    22:5f:1d:63:c9:10:f9:f6:2f:6a:28:c8:e4:c6:bc:
                    d4:f7:bc:a7:d3:d8:69:c6:dc:c0:65:7b:86:5c:b4:
                    1e:8f:17:1f:b9:e2:79:c2:16:a8:a0:9f:6f:6d:18:
                    99:03:2b:3f:6b:71:9e:fb:20:00:7c:23:e6:d5:8e:
                    73:fa:6f:bf:ff:1a:8e:1a:36:90:8c:eb:54:e2:f1:
                    5f:2b:9b:ec:f3:8a:42:32:7b:34:2b:aa:3a:98:ad:
                    15:56:4c:37:37:57:0f:eb:99:a9:f0:df:09:e3:f3:
                    ed:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FA:06:5B:6D:70:87:2E:27:30:EB:56:DC:44:14:A9:37:33:3C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/09ac24ee-ac4d-32e2-b8b5-ed10e4b94312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:210::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a1:22:28:49:4b:e6:61:0c:5d:73:56:45:e8:51:43:7e:0c:
         e9:18:e6:c9:5e:5d:4b:32:47:f6:e5:9f:44:5c:e2:cc:ff:5b:
         ea:a3:10:24:ba:e2:38:81:41:8f:c1:c5:6d:30:79:9c:e5:02:
         ef:b3:d3:d1:97:b6:c1:3d:c6:dc:a8:da:c3:29:e1:89:c0:fa:
         08:82:13:bf:6b:35:92:c4:17:aa:2c:e7:d8:e9:32:c3:46:9f:
         1a:d6:da:73:f5:40:0b:b9:97:85:2c:91:42:b2:f5:32:2e:02:
         86:3a:a2:83:ee:13:0e:46:10:88:41:6e:7f:25:93:91:35:c8:
         c1:3e:2b:00:08:3d:56:e0:61:18:38:e8:c7:ed:86:36:c5:62:
         50:2e:7f:1f:cc:d6:95:cd:30:42:fc:07:e7:ab:3c:55:44:da:
         50:d0:08:c2:3f:5c:74:c2:bd:9a:95:68:63:87:fd:85:dd:38:
         53:36:56:fa:36:94:d2:be:4a:8d:f8:dd:88:00:97:22:94:0d:
         a8:1c:b2:82:68:0a:f7:74:4a:be:1a:d0:98:55:fb:4e:13:16:
         83:fe:a6:b9:b1:93:98:e6:8f:bb:de:ec:cf:ab:07:9c:08:8b:
         99:96:eb:04:8b:32:8e:b0:25:5a:57:76:eb:14:9d:ad:59:12:
         10:c9:9c:58
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1sCTZogOoL5BSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
YThiNGU0YzUtZWE4My00NjBmLTkxMzktMDE0YjFhNDc5YWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQhZ/sGE88Lmb8LsCaEVoYfcvQ4cyj63Sr5p
/UKo5YWYpOf8I+MqVIQepKJrp8CkghrUnpTaZdsQDwXtqh9MQBzUTSiyNiu+igFa
SgZm8nQOHIDE3CJ6EZav/C42EjyYAA8fS1lBYD1mC6U01OAWfT/KaUgPo6iDzjL3
401hSBtOzyCk9AyPlChHqZr5tWZFHr8KBKkiXx1jyRD59i9qKMjkxrzU97yn09hp
xtzAZXuGXLQejxcfueJ5whaooJ9vbRiZAys/a3Ge+yAAfCPm1Y5z+m+//xqOGjaQ
jOtU4vFfK5vs84pCMns0K6o6mK0VVkw3N1cP65mp8N8J4/PtlwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMT6BlttcIcuJzDrVtxEFKk3MzypMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMDlhYzI0ZWUtYWM0ZC0z
MmUyLWI4YjUtZWQxMGU0Yjk0MzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICEDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA7oSIoSUvmYQxdc1ZF6FFDfgzpGObJXl1LMkf25Z9EXOLM/1vqoxAk
uuI4gUGPwcVtMHmc5QLvs9PRl7bBPcbcqNrDKeGJwPoIghO/azWSxBeqLOfY6TLD
Rp8a1tpz9UALuZeFLJFCsvUyLgKGOqKD7hMORhCIQW5/JZORNcjBPisACD1W4GEY
OOjH7YY2xWJQLn8fzNaVzTBC/AfnqzxVRNpQ0AjCP1x0wr2alWhjh/2F3ThTNlb6
NpTSvkqN+N2IAJcilA2oHLKCaAr3dEq+GtCYVftOExaD/qa5sZOY5o+73uzPqwec
CIuZlusEizKOsCVaV3brFJ2tWRIQyZxY
-----END CERTIFICATE-----
Generated at Mon Sep 15 14:17:19 2025 by rpki-client