Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa
File:                     3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa (raw, json)
Hash identifier:          5W3rIY/OYmipqpSXM8MiR+V1BnwiGKcmHZyqSXy25Bw=
Subject key identifier:   90:66:B9:40:70:AB:B3:0E:DD:C3:0C:C0:51:13:1E:B2:9E:70:70:E7
Certificate issuer:       /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Certificate serial:       010D0C9F4328584B2CF6E4CE153467973616E5A0
Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     945
IP address blocks:        2001:4858:aaaf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e4:ce:15:34:67:97:36:16:e5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=e1e72854-b28f-4dd5-bbfc-f112528b71a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:da:10:62:fc:2b:d0:14:3b:cb:59:9c:49:
                    77:05:90:c6:0b:85:44:01:da:e8:71:e0:71:c4:92:
                    e3:54:ad:98:01:f4:d8:6a:b5:dd:d6:76:83:96:f8:
                    f3:06:88:8f:ff:f6:19:a7:4a:d6:fd:32:61:11:2d:
                    f0:2b:27:02:7b:18:53:e6:1c:a4:48:f5:10:86:93:
                    b0:9d:2d:7d:f5:5f:ef:c9:78:da:72:16:80:9c:38:
                    3e:2e:c7:8b:6a:2d:84:37:0c:90:53:44:48:31:55:
                    73:34:3f:a7:80:e7:05:88:75:d0:7c:53:64:41:f7:
                    b5:5a:93:8b:93:1b:80:18:73:4d:d1:4a:c2:2b:2d:
                    1a:0c:d5:3e:47:46:06:05:ea:cd:2b:3b:cf:41:01:
                    ec:60:2c:d4:b0:6e:b2:54:73:c1:47:18:a9:34:09:
                    f0:fd:9b:cb:f3:bc:0f:b0:70:bd:c8:7f:d4:3f:bd:
                    92:38:22:3b:49:d7:50:60:d7:ab:6f:58:af:69:76:
                    88:ef:17:82:e9:ab:6c:a0:f0:b5:fc:18:41:28:1f:
                    16:d8:d9:c9:0a:43:63:a2:8a:8d:32:61:4e:7e:64:
                    d7:4f:a8:ad:cb:46:3d:4c:3e:d7:77:7c:a4:f8:51:
                    6e:e4:c7:e5:c4:e8:1d:bd:eb:52:3b:9d:7c:e1:5d:
                    0c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:66:B9:40:70:AB:B3:0E:DD:C3:0C:C0:51:13:1E:B2:9E:70:70:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/3c5bf68b-8875-3744-9c6a-f0b924ce23e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4858:aaaf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8f:bb:4e:51:87:06:eb:0d:24:90:95:5d:96:44:f6:49:6c:
         c2:89:f6:88:54:c9:2e:3b:cf:1e:98:3e:5a:0b:b2:a0:41:2a:
         56:f3:72:10:3f:da:9c:45:6a:d6:68:f4:a7:ff:07:2f:ca:e0:
         00:d2:99:6d:fb:3c:37:1a:a9:bb:31:f7:f0:fb:77:61:7d:d5:
         36:e9:c4:9e:46:f5:f9:5b:fc:dd:a5:d0:6e:a1:90:5f:45:af:
         91:0f:39:30:7a:b0:29:1d:f1:a0:b3:94:85:68:5a:87:f1:1f:
         b3:1e:d2:5e:0f:96:05:f7:5e:78:44:42:82:b8:4e:54:b8:6e:
         98:98:8a:01:33:bb:f4:40:f0:3c:7a:95:f8:17:8b:a1:df:82:
         b4:35:40:67:18:fe:e5:73:f1:2b:2e:44:96:97:24:9f:35:1c:
         65:1f:ec:aa:e0:28:05:7e:9e:22:f4:09:86:6f:68:bf:e7:db:
         95:7b:15:48:a7:64:b3:73:29:16:7e:d2:0a:95:e9:fd:40:b0:
         c6:dc:b8:4b:c4:79:c0:a8:3a:7f:2e:bc:d7:31:f4:e2:87:0a:
         15:60:fc:38:6a:fd:13:75:e8:db:e6:90:dc:0e:58:77:32:47:
         fb:0b:30:2b:45:cf:4d:0e:a7:b3:dc:08:26:ec:46:15:71:4a:
         ad:2e:e6:06
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9uTOFTRnlzYW5aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQ5MWI3MmMtYjgzYS00MzFjLTljZmQtNjBiNzk3ZjMx
MTNlMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZTFlNzI4NTQtYjI4Zi00ZGQ1LWJiZmMtZjExMjUyOGI3MWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvvaEGL8K9AUO8tZnEl3BZDGC4VEAdroceBx
xJLjVK2YAfTYarXd1naDlvjzBoiP//YZp0rW/TJhES3wKycCexhT5hykSPUQhpOw
nS199V/vyXjachaAnDg+LseLai2ENwyQU0RIMVVzND+ngOcFiHXQfFNkQfe1WpOL
kxuAGHNN0UrCKy0aDNU+R0YGBerNKzvPQQHsYCzUsG6yVHPBRxipNAnw/ZvL87wP
sHC9yH/UP72SOCI7SddQYNerb1ivaXaI7xeC6atsoPC1/BhBKB8W2NnJCkNjooqN
MmFOfmTXT6ity0Y9TD7Xd3yk+FFu5MflxOgdvetSO5184V0MxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJBmuUBwq7MO3cMMwFETHrKecHDnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDkx
YjcyYy1iODNhLTQzMWMtOWNmZC02MGI3OTdmMzExM2UvM2M1YmY2OGItODg3NS0z
NzQ0LTljNmEtZjBiOTI0Y2UyM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWQ5MWI3MmMtYjgzYS00MzFjLTlj
ZmQtNjBiNzk3ZjMxMTNlLzlkOTFiNzJjLWI4M2EtNDMxYy05Y2ZkLTYwYjc5N2Yz
MTEzZS5jcmwwHwYDVR0jBBgwFoAUPjNm+hrAnQiv1exytdf7JMy2qUkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDkxYjcyYy1iODNhLTQzMWMtOWNmZC02MGI3
OTdmMzExM2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIWKqv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHmPu05RhwbrDSSQlV2WRPZJbMKJ9ohUyS47zx6YPloLsqBBKlbz
chA/2pxFatZo9Kf/By/K4ADSmW37PDcaqbsx9/D7d2F91TbpxJ5G9flb/N2l0G6h
kF9Fr5EPOTB6sCkd8aCzlIVoWofxH7Me0l4PlgX3XnhEQoK4TlS4bpiYigEzu/RA
8Dx6lfgXi6HfgrQ1QGcY/uVz8SsuRJaXJJ81HGUf7KrgKAV+niL0CYZvaL/n25V7
FUinZLNzKRZ+0gqV6f1AsMbcuEvEecCoOn8uvNcx9OKHChVg/Dhq/RN16NvmkNwO
WHcyR/sLMCtFz00Op7PcCCbsRhVxSq0u5gY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:06:19 2025 by rpki-client