Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa
File:                     8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa (raw, json)
Hash identifier:          0rC6A0PNiQN/QN65MVbhRM31/7Ert8/QqSEyRHuBpcI=
Subject key identifier:   D3:A7:0E:24:2A:0A:79:FE:80:39:64:BF:22:65:BB:CD:9C:36:27:DF
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF5213DDE1BE03CEBB9B9B880
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:202e::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:3d:de:1b:e0:3c:eb:b9:b9:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=9ed83a21-2ab8-4316-a3f5-809e612a1afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0a:07:3d:8c:fc:31:88:9e:6e:90:a8:f9:0f:
                    a7:f6:45:d6:32:67:24:28:c9:ff:2d:f9:97:32:11:
                    dc:93:0e:95:18:e5:3e:ef:8f:2d:66:b6:88:5a:b4:
                    89:7e:ca:77:c1:96:a3:2f:d2:9e:20:78:1d:98:a2:
                    99:a9:1e:f3:47:08:96:d4:ce:5e:05:43:d2:fc:80:
                    0c:44:d7:22:d3:9e:1c:f9:03:e3:09:12:9b:0e:42:
                    f4:5f:ba:cd:e1:25:77:fe:e7:57:62:c7:2c:ce:ab:
                    58:72:a3:30:61:69:c0:60:7a:9b:85:5d:4d:b5:01:
                    28:e7:08:43:08:4d:42:9d:e5:10:43:81:95:3e:ee:
                    fc:3c:b1:3c:3e:7a:74:5f:5f:57:ee:9c:3f:d8:c8:
                    ea:d5:cc:d8:98:8e:69:a8:e3:17:a0:b5:ad:ec:25:
                    9e:77:c4:cd:68:4d:f3:9f:99:eb:21:e8:7a:59:6d:
                    94:82:41:5f:58:0b:e4:10:e5:1e:8c:17:51:b3:bb:
                    b9:81:c2:14:00:ef:f4:23:e1:e1:4c:4b:ff:44:ce:
                    b4:1a:e2:38:62:ab:50:7f:1b:80:ab:03:18:9d:85:
                    8e:fc:d1:24:0d:c3:d3:1b:8c:24:e8:ed:d1:7e:d2:
                    ab:57:8b:08:77:bd:87:77:e3:b9:c1:a3:c4:cf:4d:
                    1d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A7:0E:24:2A:0A:79:FE:80:39:64:BF:22:65:BB:CD:9C:36:27:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8c89d20a-f5c2-3352-9d83-ea21ce71cac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:202e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:48:96:ca:30:c8:a8:aa:8e:1a:f4:39:9f:74:81:34:60:09:
         15:6e:c5:b5:3d:01:d7:2f:07:f2:83:0b:2a:e3:ae:3f:58:1d:
         21:a5:66:46:87:ee:05:7b:07:bc:6c:b3:e5:62:a0:38:d7:6e:
         7f:b7:9b:c2:34:b2:1e:7e:a7:98:be:b2:b1:c6:c1:5b:03:ea:
         25:52:18:56:27:17:88:53:d3:da:0b:49:53:e9:ad:24:53:8a:
         79:9f:1a:f1:21:8d:b9:11:e0:24:4d:96:42:c5:8c:e0:f7:09:
         b3:8b:2e:2a:4d:df:48:2f:4e:79:fc:e1:f5:f2:99:25:a0:af:
         be:57:95:30:48:db:dd:58:c1:94:e7:24:a1:13:1b:82:31:fe:
         8a:c5:0e:65:69:43:1a:25:3f:67:c9:8c:40:ba:85:8f:94:e4:
         f5:5d:e7:0c:74:e0:f7:24:e1:6f:ab:68:41:77:4a:48:f5:93:
         40:dc:70:5c:9c:57:a4:57:74:0b:b3:67:c3:3c:b3:b7:59:33:
         3a:0a:ad:b1:f0:10:f4:d7:4d:63:d2:74:2c:46:ed:08:00:0d:
         b7:e4:3b:d6:69:50:45:31:82:d1:4d:23:16:eb:06:30:98:57:
         aa:c2:a8:cc:70:11:35:37:b7:88:fb:85:40:47:a5:b4:15:eb:
         b4:3b:d1:c5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IT3eG+A867m5uIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
OWVkODNhMjEtMmFiOC00MzE2LWEzZjUtODA5ZTYxMmExYWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwoHPYz8MYiebpCo+Q+n9kXWMmckKMn/LfmX
MhHckw6VGOU+748tZraIWrSJfsp3wZajL9KeIHgdmKKZqR7zRwiW1M5eBUPS/IAM
RNci054c+QPjCRKbDkL0X7rN4SV3/udXYscszqtYcqMwYWnAYHqbhV1NtQEo5whD
CE1CneUQQ4GVPu78PLE8Pnp0X19X7pw/2Mjq1czYmI5pqOMXoLWt7CWed8TNaE3z
n5nrIeh6WW2UgkFfWAvkEOUejBdRs7u5gcIUAO/0I+HhTEv/RM60GuI4YqtQfxuA
qwMYnYWO/NEkDcPTG4wk6O3RftKrV4sId72Hd+O5waPEz00d7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNOnDiQqCnn+gDlkvyJlu82cNiffMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvOGM4OWQyMGEtZjVjMi0z
MzUyLTlkODMtZWEyMWNlNzFjYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCAu
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHtIlsowyKiqjhr0OZ90gTRgCRVuxbU9AdcvB/KDCyrjrj9YHSGl
ZkaH7gV7B7xss+VioDjXbn+3m8I0sh5+p5i+srHGwVsD6iVSGFYnF4hT09oLSVPp
rSRTinmfGvEhjbkR4CRNlkLFjOD3CbOLLipN30gvTnn84fXymSWgr75XlTBI291Y
wZTnJKETG4Ix/orFDmVpQxolP2fJjEC6hY+U5PVd5wx04Pck4W+raEF3Skj1k0Dc
cFycV6RXdAuzZ8M8s7dZMzoKrbHwEPTXTWPSdCxG7QgADbfkO9ZpUEUxgtFNIxbr
BjCYV6rCqMxwETU3t4j7hUBHpbQV67Q70cU=
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:45:46 2025 by rpki-client