Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/d081b8cf-9f69-3201-9281-293c163a8a96.roa
File:                     d081b8cf-9f69-3201-9281-293c163a8a96.roa (raw, json)
Hash identifier:          iWJ5lSTpdGXmLiRqeFYVYYODwMJOwujKw1+85U5vmUE=
Subject key identifier:   46:02:2C:BF:18:DC:08:E6:8C:AB:AC:1F:B7:09:1E:FD:5D:8D:0F:55
Certificate issuer:       /CN=1d394508-6160-4e82-89e3-165fa2784b30
Certificate serial:       010D0C9F4328584BCD9B07F6D3C7B3D6B0F0ED00
Authority key identifier: A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/d081b8cf-9f69-3201-9281-293c163a8a96.roa
Signing time:             Sun 09 Nov 2025 14:00:38 +0000
ROA not before:           Sun 09 Nov 2025 14:00:38 +0000
ROA not after:            Sat 07 Feb 2026 14:00:38 +0000
asID:                     399214
IP address blocks:        2602:803:b000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:cd:9b:07:f6:d3:c7:b3:d6:b0:f0:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d394508-6160-4e82-89e3-165fa2784b30
        Validity
            Not Before: Nov  9 14:00:38 2025 GMT
            Not After : Feb  7 14:00:38 2026 GMT
        Subject: CN=94bb5ac7-19cf-4f9b-812e-acf17a567367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:52:f1:19:70:8d:be:4c:b3:9f:cf:fb:ae:45:
                    f7:4c:60:e9:85:6d:6c:a8:5d:bd:3e:df:10:90:57:
                    62:6c:8b:56:56:49:7c:b2:3f:f5:f0:0f:34:ac:f5:
                    5e:0b:2e:4f:94:47:48:88:49:2b:ae:d6:ae:ea:7d:
                    ad:8d:75:d6:67:71:57:9e:df:37:fb:43:99:8a:cb:
                    66:36:7e:ec:20:0e:f4:e7:4d:8c:fd:67:43:7f:21:
                    69:13:51:41:33:0b:f2:e4:66:4c:64:1d:7b:95:60:
                    31:d1:8f:66:15:49:cd:91:c4:6b:e4:4b:5a:59:5e:
                    0c:09:fc:08:bc:0f:d5:56:ab:8e:01:3a:df:17:65:
                    79:e3:6e:12:2c:1e:89:be:ed:d9:fb:74:6e:ee:22:
                    49:3c:bc:2c:6e:f2:0d:0c:dd:52:e8:00:ec:f8:8c:
                    96:63:30:c9:bc:29:a9:f0:60:cc:b7:bf:fb:09:b0:
                    c2:06:f6:0f:8e:92:b8:f8:da:b4:34:33:16:87:a5:
                    63:29:7e:5a:c1:46:6e:8c:ed:9f:a2:5b:55:44:d6:
                    57:0a:5d:aa:aa:e0:b7:b4:01:3a:56:b9:18:a0:3f:
                    60:7f:71:d4:e0:e4:29:c8:de:f2:16:28:c1:e2:8c:
                    ea:49:40:3f:0e:2b:46:e3:5c:da:47:70:bc:7a:78:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:02:2C:BF:18:DC:08:E6:8C:AB:AC:1F:B7:09:1E:FD:5D:8D:0F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/d081b8cf-9f69-3201-9281-293c163a8a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl

            X509v3 Authority Key Identifier:
                keyid:A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6e:1b:64:0e:ab:e1:09:73:0e:49:56:b1:26:8e:10:f9:3e:
         2c:c4:f9:21:be:9d:4a:5b:6e:d2:02:eb:cc:35:9c:23:18:3b:
         89:f8:e2:b9:1f:99:d4:48:30:e9:d7:8d:dc:9e:11:95:bf:9e:
         aa:b8:aa:6d:7e:61:f7:6d:21:8b:6c:7c:0b:f4:cb:4f:9d:0e:
         34:82:18:01:99:b9:a7:26:7a:af:82:e5:52:00:37:9d:69:bb:
         32:5a:a4:ca:df:f6:0d:2f:48:59:b4:3b:7b:7f:66:f4:fc:d0:
         35:78:3b:06:04:cc:01:84:94:63:0f:1a:5e:13:49:43:e7:d9:
         89:bd:3b:01:c1:83:c3:ab:ed:a0:d7:48:98:f5:d7:c1:ea:3e:
         e3:05:08:15:bc:97:0f:f9:b4:72:18:47:29:3b:04:d4:8d:17:
         c2:07:50:53:4d:86:bf:bf:15:ca:79:0f:26:e6:7d:a7:5f:1a:
         73:06:d6:70:de:a9:0d:89:98:96:13:3a:c0:53:b0:8f:93:d7:
         80:eb:c8:cd:85:68:e0:d9:24:13:d3:a3:45:13:4b:20:3d:9e:
         9d:ec:8e:c1:47:97:07:68:25:82:17:c7:ff:5f:2a:1f:d3:ce:
         d3:a1:17:98:31:b2:4d:33:03:7c:f5:c8:9d:f5:a9:43:ba:43:
         de:d4:20:cd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvNmwf208ez1rDw7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQzOTQ1MDgtNjE2MC00ZTgyLTg5ZTMtMTY1ZmEyNzg0
YjMwMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk
OTRiYjVhYzctMTljZi00ZjliLTgxMmUtYWNmMTdhNTY3MzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVLxGXCNvkyzn8/7rkX3TGDphW1sqF29Pt8Q
kFdibItWVkl8sj/18A80rPVeCy5PlEdIiEkrrtau6n2tjXXWZ3FXnt83+0OZistm
Nn7sIA70502M/WdDfyFpE1FBMwvy5GZMZB17lWAx0Y9mFUnNkcRr5EtaWV4MCfwI
vA/VVquOATrfF2V5424SLB6Jvu3Z+3Ru7iJJPLwsbvINDN1S6ADs+IyWYzDJvCmp
8GDMt7/7CbDCBvYPjpK4+Nq0NDMWh6VjKX5awUZujO2foltVRNZXCl2qquC3tAE6
VrkYoD9gf3HU4OQpyN7yFijB4ozqSUA/DitG41zaR3C8eniRIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEYCLL8Y3AjmjKusH7cJHv1djQ9VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5
NDUwOC02MTYwLTRlODItODllMy0xNjVmYTI3ODRiMzAvZDA4MWI4Y2YtOWY2OS0z
MjAxLTkyODEtMjkzYzE2M2E4YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQzOTQ1MDgtNjE2MC00ZTgyLTg5
ZTMtMTY1ZmEyNzg0YjMwLzFkMzk0NTA4LTYxNjAtNGU4Mi04OWUzLTE2NWZhMjc4
NGIzMC5jcmwwHwYDVR0jBBgwFoAUpwdXzXfTWfPTkKnrq8W2Hfi5KEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5NDUwOC02MTYwLTRlODItODllMy0xNjVm
YTI3ODRiMzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIA7AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIFuG2QOq+EJcw5JVrEmjhD5PizE+SG+nUpbbtIC68w1nCMYO4n4
4rkfmdRIMOnXjdyeEZW/nqq4qm1+YfdtIYtsfAv0y0+dDjSCGAGZuacmeq+C5VIA
N51puzJapMrf9g0vSFm0O3t/ZvT80DV4OwYEzAGElGMPGl4TSUPn2Ym9OwHBg8Or
7aDXSJj118HqPuMFCBW8lw/5tHIYRyk7BNSNF8IHUFNNhr+/Fcp5DybmfadfGnMG
1nDeqQ2JmJYTOsBTsI+T14DryM2FaODZJBPTo0UTSyA9np3sjsFHlwdoJYIXx/9f
Kh/TztOhF5gxsk0zA3z1yJ31qUO6Q97UIM0=
-----END CERTIFICATE-----
Generated at Thu Nov 13 16:29:13 2025 by rpki-client