Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa
File:                     cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa (raw, json)
Hash identifier:          /3FYY4IWbp5M1KBnL6PMVNClzfFJQYIUPNjlX/jIuoU=
Subject key identifier:   97:1A:6C:0B:F8:DF:39:10:B0:80:A8:D2:87:EB:56:47:68:A6:46:63
Certificate issuer:       /CN=e0b025a6-f810-4886-9422-6feaed3df1ee
Certificate serial:       010D0C9F4328584B8382167B0F385F4ED4E8B580
Authority key identifier: 70:7E:CE:FE:E7:9E:FA:12:C6:B8:64:19:94:18:5C:91:01:5C:D0:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     63311
IP address blocks:        2602:20c::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/e0b025a6-f810-4886-9422-6feaed3df1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/e0b025a6-f810-4886-9422-6feaed3df1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:16:7b:0f:38:5f:4e:d4:e8:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b025a6-f810-4886-9422-6feaed3df1ee
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=cd31f2e9-7998-434e-bf33-479feabc9360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:92:b0:f9:25:54:6e:87:b9:90:c9:bd:05:
                    b7:e5:26:11:3a:0b:ac:aa:31:3d:3e:df:96:c5:a2:
                    fd:2e:86:69:d3:17:63:da:17:39:41:6c:75:01:64:
                    e8:ab:96:14:26:96:cd:fd:cb:f5:a5:70:ae:30:1e:
                    4b:b2:48:33:9e:bd:c8:49:99:e6:a4:62:04:4e:32:
                    76:8a:1c:e6:5d:b9:e1:45:27:51:ac:e7:97:2e:af:
                    74:16:6c:7f:b9:60:d3:7f:36:c6:d4:6a:d4:05:1b:
                    b7:13:c0:29:66:bd:62:b5:fe:d0:ef:db:b8:8d:61:
                    49:a3:da:cd:7c:44:3b:ba:c4:29:fb:b9:57:50:8a:
                    94:4f:bf:6e:93:00:ec:56:0a:0a:b9:38:58:ed:ec:
                    85:25:2f:77:9e:42:e1:8f:5d:7d:74:c9:f4:de:00:
                    9e:27:be:74:a6:33:df:66:5a:3c:61:dc:25:3c:0c:
                    13:ac:c2:a7:ac:af:56:7b:8c:36:96:00:60:7c:ed:
                    69:97:61:57:d6:1f:ef:b3:7d:30:e9:16:0d:eb:ee:
                    2f:14:98:fa:3e:0d:eb:a7:aa:29:82:66:44:ae:e4:
                    33:8d:2e:12:a8:7e:c3:88:c2:ef:42:43:4c:50:78:
                    1b:f9:11:ca:92:91:73:0c:56:12:c4:2d:8c:62:ee:
                    8d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1A:6C:0B:F8:DF:39:10:B0:80:A8:D2:87:EB:56:47:68:A6:46:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/e0b025a6-f810-4886-9422-6feaed3df1ee.crl

            X509v3 Authority Key Identifier:
                keyid:70:7E:CE:FE:E7:9E:FA:12:C6:B8:64:19:94:18:5C:91:01:5C:D0:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:20c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:38:57:d0:d7:b3:83:b2:37:1d:07:c1:73:d2:1b:ce:60:77:
         6a:a7:9d:9e:03:2d:5b:9e:08:86:36:9c:58:b6:79:25:8f:38:
         bf:00:19:67:dd:dd:50:f7:53:f5:2a:f6:f0:5d:4d:97:fa:06:
         9a:3a:92:06:b7:90:c9:b5:0e:97:4d:f9:3e:b5:e8:5a:10:3d:
         ec:d6:5a:dc:c7:2f:97:36:13:56:5e:4a:fe:6e:a7:35:4b:ca:
         d8:2e:6a:90:b9:01:b6:5d:17:c7:3a:dc:c9:44:cd:45:f7:ae:
         0d:75:e1:6a:3a:35:7b:ee:05:99:94:c8:d0:3a:9c:7f:68:08:
         f1:ec:68:80:08:c6:cb:ff:85:93:24:7f:75:02:34:49:56:f1:
         e8:28:76:bc:21:20:12:9b:bb:02:3c:e5:71:78:25:08:fe:95:
         aa:72:a7:4f:49:24:2f:5f:06:aa:99:c5:6d:f4:63:2b:58:30:
         92:83:8f:e9:e3:fc:f0:31:38:09:1d:57:2b:08:4c:2d:09:94:
         d5:8c:60:39:5e:99:9f:2c:90:a0:1c:3a:52:2e:36:ed:39:b9:
         8a:07:9b:33:1b:1b:64:3f:39:67:95:2e:0e:ac:91:5e:ba:78:
         f8:ad:38:ce:93:8c:49:e9:fa:25:98:30:b2:49:5b:3c:ca:f8:
         05:3f:8c:db
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuDghZ7DzhfTtTotYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBiMDI1YTYtZjgxMC00ODg2LTk0MjItNmZlYWVkM2Rm
MWVlMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk
Y2QzMWYyZTktNzk5OC00MzRlLWJmMzMtNDc5ZmVhYmM5MzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHaSsPklVG6HuZDJvQW35SYROgusqjE9Pt+W
xaL9LoZp0xdj2hc5QWx1AWToq5YUJpbN/cv1pXCuMB5Lskgznr3ISZnmpGIETjJ2
ihzmXbnhRSdRrOeXLq90Fmx/uWDTfzbG1GrUBRu3E8ApZr1itf7Q79u4jWFJo9rN
fEQ7usQp+7lXUIqUT79ukwDsVgoKuThY7eyFJS93nkLhj119dMn03gCeJ750pjPf
Zlo8YdwlPAwTrMKnrK9We4w2lgBgfO1pl2FX1h/vs30w6RYN6+4vFJj6Pg3rp6op
gmZEruQzjS4SqH7DiMLvQkNMUHgb+RHKkpFzDFYSxC2MYu6NhwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJcabAv43zkQsICo0ofrVkdopkZjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGIw
MjVhNi1mODEwLTQ4ODYtOTQyMi02ZmVhZWQzZGYxZWUvY2M1ZjA3ZjYtM2VjYy0z
ZTUxLThlMmQtNzBlMzlmYTUzYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBiMDI1YTYtZjgxMC00ODg2LTk0
MjItNmZlYWVkM2RmMWVlL2UwYjAyNWE2LWY4MTAtNDg4Ni05NDIyLTZmZWFlZDNk
ZjFlZS5jcmwwHwYDVR0jBBgwFoAUcH7O/uee+hLGuGQZlBhckQFc0BYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGIwMjVhNi1mODEwLTQ4ODYtOTQyMi02ZmVh
ZWQzZGYxZWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgICDAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgDhX0Nezg7I3HQfBc9IbzmB3aqedngMtW54IhjacWLZ5JY84vwAZ
Z93dUPdT9Sr28F1Nl/oGmjqSBreQybUOl035PrXoWhA97NZa3McvlzYTVl5K/m6n
NUvK2C5qkLkBtl0XxzrcyUTNRfeuDXXhajo1e+4FmZTI0Dqcf2gI8exogAjGy/+F
kyR/dQI0SVbx6Ch2vCEgEpu7AjzlcXglCP6VqnKnT0kkL18GqpnFbfRjK1gwkoOP
6eP88DE4CR1XKwhMLQmU1YxgOV6ZnyyQoBw6Ui427Tm5igebMxsbZD85Z5UuDqyR
Xrp4+K04zpOMSen6JZgwsklbPMr4BT+M2w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:55 2025 by rpki-client