Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce315f21-7bdf-316e-b88e-2c740cdf6096.roa
File:                     ce315f21-7bdf-316e-b88e-2c740cdf6096.roa (raw, json)
Hash identifier:          t6XmiO7yvABPPkUh2DNvLKHs1lBaImNkcwbONpndGUQ=
Subject key identifier:   CE:AE:69:5D:27:9E:1B:98:2F:BE:49:DF:B2:8F:F9:6D:CA:6C:1B:A2
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B4081A3AF1C8D126603625D80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce315f21-7bdf-316e-b88e-2c740cdf6096.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     104
IP address blocks:        2001:468:501::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:a3:af:1c:8d:12:66:03:62:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=a8104ba7-0f67-451c-8444-eff85c0dc3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5f:e0:10:6b:8c:34:a0:01:86:eb:a5:70:ba:
                    23:11:16:b1:d6:8d:e9:22:f8:28:1e:90:39:bf:64:
                    34:71:12:49:8b:1a:f6:66:23:4e:47:da:8d:68:5d:
                    02:9a:9e:47:31:7a:f4:f3:9c:28:0a:52:77:e0:4f:
                    e8:f7:17:25:fa:53:a3:84:67:f5:fc:7b:00:16:9c:
                    b3:39:5a:37:c3:a4:1a:d7:78:7f:47:e5:a5:3f:6d:
                    3d:a2:e9:4b:58:30:d5:0b:02:d0:f8:1a:b8:9d:18:
                    e7:a3:ff:73:0a:ad:32:91:94:f9:df:e1:f0:f4:a0:
                    3c:0c:15:fd:b2:56:0d:c9:b1:57:ab:2d:86:20:57:
                    35:1f:02:a0:b9:f2:99:9d:ef:8a:c7:ce:66:6e:c8:
                    74:e6:41:24:3d:c4:07:52:e4:cf:ce:36:e0:1f:f6:
                    61:88:f8:2b:41:88:7e:08:4f:52:86:cd:9d:23:c7:
                    f9:c0:ac:92:47:8e:42:4a:aa:8f:5c:28:1c:1a:5b:
                    77:9b:ae:75:67:1b:bf:d2:85:6f:8e:38:6b:ba:8b:
                    18:cd:ef:50:de:cc:a7:0c:1f:46:f1:2a:ea:c5:60:
                    fe:1e:17:31:9d:67:1d:25:b9:4f:f1:92:19:16:08:
                    e9:e0:f5:8c:4a:5d:8e:f5:8b:bd:4b:73:af:52:a8:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AE:69:5D:27:9E:1B:98:2F:BE:49:DF:B2:8F:F9:6D:CA:6C:1B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce315f21-7bdf-316e-b88e-2c740cdf6096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:501::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:98:d0:2a:fb:e4:dc:60:16:5a:7c:22:a4:26:36:18:4a:58:
         80:c2:44:96:10:9c:6e:20:a0:21:db:03:28:ef:ee:a1:cf:9e:
         19:d2:d4:ff:d2:7a:7a:54:25:df:94:2d:6a:3b:10:da:9e:9b:
         b0:64:38:02:3f:e9:e1:39:0c:55:ea:eb:25:e5:0c:90:62:a0:
         1d:5d:8a:fb:bc:57:a7:91:3c:88:39:a2:be:12:39:38:d0:d5:
         85:ad:00:2a:ce:d5:ba:c7:94:8c:ce:af:36:2d:ab:45:30:33:
         10:6e:c8:43:68:f9:14:68:8f:7f:50:bb:cf:5d:4a:37:20:6b:
         f5:05:42:d2:6a:83:32:32:73:2c:76:8f:3c:9a:a2:9a:b8:f3:
         40:14:95:bc:cd:13:93:3f:75:4d:14:b2:62:b8:94:1a:3b:a9:
         fe:04:14:6f:ac:c5:92:d4:aa:3c:c1:00:12:b0:4b:af:43:f4:
         71:2c:a7:ff:92:f3:02:0c:d1:ca:10:96:85:ab:4c:33:63:94:
         3b:49:e8:e5:3c:c6:f0:39:8e:e4:77:d8:f2:ab:ae:94:f7:fa:
         b5:02:d3:ab:32:b0:82:7f:65:ce:a6:24:7a:e7:b1:14:9a:e3:
         f1:bf:b5:24:bd:13:44:bf:ff:71:b9:86:14:d1:05:52:10:2b:
         20:3c:f8:a6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgaOvHI0SZgNiXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk
YTgxMDRiYTctMGY2Ny00NTFjLTg0NDQtZWZmODVjMGRjM2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV/gEGuMNKABhuulcLojERax1o3pIvgoHpA5
v2Q0cRJJixr2ZiNOR9qNaF0Cmp5HMXr085woClJ34E/o9xcl+lOjhGf1/HsAFpyz
OVo3w6Qa13h/R+WlP209oulLWDDVCwLQ+Bq4nRjno/9zCq0ykZT53+Hw9KA8DBX9
slYNybFXqy2GIFc1HwKgufKZne+Kx85mbsh05kEkPcQHUuTPzjbgH/ZhiPgrQYh+
CE9Shs2dI8f5wKySR45CSqqPXCgcGlt3m651Zxu/0oVvjjhruosYze9Q3synDB9G
8SrqxWD+HhcxnWcdJblP8ZIZFgjp4PWMSl2O9Yu9S3OvUqiafwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM6uaV0nnhuYL75J37KP+W3KbBuiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvY2UzMTVmMjEtN2JkZi0z
MTZlLWI4OGUtMmM3NDBjZGY2MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaAUB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABiY0Cr75NxgFlp8IqQmNhhKWIDCRJYQnG4goCHbAyjv7qHPnhnS
1P/SenpUJd+ULWo7ENqem7BkOAI/6eE5DFXq6yXlDJBioB1divu8V6eRPIg5or4S
OTjQ1YWtACrO1brHlIzOrzYtq0UwMxBuyENo+RRoj39Qu89dSjcga/UFQtJqgzIy
cyx2jzyaopq480AUlbzNE5M/dU0UsmK4lBo7qf4EFG+sxZLUqjzBABKwS69D9HEs
p/+S8wIM0coQloWrTDNjlDtJ6OU8xvA5juR32PKrrpT3+rUC06sysIJ/Zc6mJHrn
sRSa4/G/tSS9E0S//3G5hhTRBVIQKyA8+KY=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:09:24 2025 by rpki-client