Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/9f5ba162-5e81-3b04-bf64-7553fcf1cb60.roa
File:                     9f5ba162-5e81-3b04-bf64-7553fcf1cb60.roa (raw, json)
Hash identifier:          SFUjLQh4ZFx2X3HIce62IfV60/R7ePewRcFZLjlOxu8=
Subject key identifier:   C6:60:2A:06:D4:A5:E1:48:10:BB:16:4C:27:DF:69:BC:89:4C:55:1D
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584B110BFDD781D3BB5336706A80
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/9f5ba162-5e81-3b04-bf64-7553fcf1cb60.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2620:116:800c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0b:fd:d7:81:d3:bb:53:36:70:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=37e7aec3-6825-43b7-b65b-218971c3cf91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:f3:dd:1e:e6:9c:25:be:31:69:ba:cc:18:
                    17:11:31:bb:85:93:3b:b5:36:59:0f:59:d7:f8:a1:
                    28:20:77:e6:14:91:6f:4c:88:50:ef:95:2d:14:e0:
                    78:f7:30:9d:41:79:3f:9e:2f:16:84:f9:1a:ea:69:
                    56:52:15:75:4a:46:b6:06:c7:8f:db:ca:a5:62:23:
                    5a:68:a8:5c:65:ad:ea:d4:b0:52:6b:42:8f:d9:7a:
                    fe:b3:de:8a:d5:97:04:62:51:42:3c:42:fa:76:c4:
                    c4:f2:71:0e:04:75:12:88:bc:71:9f:5f:6f:7c:cc:
                    76:49:70:02:20:fb:6e:6f:d3:d3:cb:40:e0:0b:b7:
                    42:bf:66:6d:95:c5:36:41:49:1b:3a:35:31:81:5f:
                    4c:2d:1b:0d:6d:22:d2:fe:03:cd:a0:7a:1a:e6:c1:
                    75:f1:29:5a:77:85:ff:0a:91:6e:15:10:4b:81:22:
                    30:30:79:ce:eb:e0:31:43:69:87:e1:11:06:6d:e7:
                    2d:35:a4:34:bd:42:05:5e:a4:d1:1a:83:22:eb:97:
                    09:1a:9f:c1:ad:19:f2:2f:0c:ff:e3:c7:fa:f6:d4:
                    25:54:e8:79:56:da:c5:b2:53:bb:b7:5d:3d:dd:45:
                    4c:5b:6d:f3:70:cf:07:39:78:b2:3d:88:20:ef:8e:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:60:2A:06:D4:A5:E1:48:10:BB:16:4C:27:DF:69:BC:89:4C:55:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/9f5ba162-5e81-3b04-bf64-7553fcf1cb60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:ac:03:a7:6d:3c:0d:7d:37:88:40:03:76:42:83:b9:10:b6:
         ae:9e:6d:2f:2f:7f:33:bd:b6:6c:48:8d:b9:39:03:4b:20:59:
         71:5e:f8:f8:f1:eb:a9:c4:4f:76:76:fb:cf:6d:8b:8b:8c:ab:
         18:a5:5a:ec:01:94:0b:98:58:30:cd:97:c4:04:50:f5:44:7c:
         67:39:fa:71:d1:c9:af:0d:af:39:b3:5a:9e:65:1b:ce:8b:32:
         f1:6b:e8:b8:63:02:42:ee:ac:8d:94:b4:4b:01:58:6a:84:4c:
         b2:d3:dd:c4:0a:94:a5:2b:8a:b1:bd:0e:94:4e:69:17:b5:12:
         26:4c:80:dc:ff:03:b3:81:c9:62:05:2b:b7:87:7e:78:d7:de:
         e2:6f:00:ce:40:81:00:68:f3:49:82:78:b8:4c:10:ee:75:0e:
         5a:3a:89:dc:b4:e1:13:c7:82:eb:4f:68:ae:9e:8b:23:c8:1f:
         64:51:92:e9:15:46:c5:2a:96:61:fa:75:d3:a5:c4:88:90:9e:
         3b:6e:57:50:c1:74:3f:80:bd:e1:4b:c2:ed:26:59:df:5c:0d:
         80:56:f6:e5:37:f9:29:ce:f3:24:86:10:19:ab:34:ea:8d:e7:
         07:41:cd:55:34:a7:00:0a:1c:a4:ba:b4:10:70:d4:c0:7e:dc:
         c1:31:30:a1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsRC/3XgdO7UzZwaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5
Mzc4MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk
MzdlN2FlYzMtNjgyNS00M2I3LWI2NWItMjE4OTcxYzNjZjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNTz3R7mnCW+MWm6zBgXETG7hZM7tTZZD1nX
+KEoIHfmFJFvTIhQ75UtFOB49zCdQXk/ni8WhPka6mlWUhV1Ska2BseP28qlYiNa
aKhcZa3q1LBSa0KP2Xr+s96K1ZcEYlFCPEL6dsTE8nEOBHUSiLxxn19vfMx2SXAC
IPtub9PTy0DgC7dCv2ZtlcU2QUkbOjUxgV9MLRsNbSLS/gPNoHoa5sF18Slad4X/
CpFuFRBLgSIwMHnO6+AxQ2mH4REGbectNaQ0vUIFXqTRGoMi65cJGp/BrRnyLwz/
48f69tQlVOh5VtrFslO7t1093UVMW23zcM8HOXiyPYgg744GgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMZgKgbUpeFIELsWTCffabyJTFUdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy
MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvOWY1YmExNjItNWU4MS0z
YjA0LWJmNjQtNzU1M2ZjZjFjYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz
MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0
OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi
MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALqsA6dtPA19N4hAA3ZCg7kQtq6ebS8vfzO9tmxIjbk5A0sgWXFe
+Pjx66nET3Z2+89ti4uMqxilWuwBlAuYWDDNl8QEUPVEfGc5+nHRya8NrzmzWp5l
G86LMvFr6LhjAkLurI2UtEsBWGqETLLT3cQKlKUrirG9DpROaRe1EiZMgNz/A7OB
yWIFK7eHfnjX3uJvAM5AgQBo80mCeLhMEO51Dlo6idy04RPHgutPaK6eiyPIH2RR
kukVRsUqlmH6ddOlxIiQnjtuV1DBdD+AveFLwu0mWd9cDYBW9uU3+SnO8ySGEBmr
NOqN5wdBzVU0pwAKHKS6tBBw1MB+3MExMKE=
-----END CERTIFICATE-----
Generated at Wed Sep 17 03:45:47 2025 by rpki-client