Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f9457e98-5423-3f04-90ee-67760a3cd563.roa
File:                     f9457e98-5423-3f04-90ee-67760a3cd563.roa (raw, json)
Hash identifier:          33PGn45UVLQKaOp9mQlQw13gYnlGylOiBhG7jB+t7FA=
Subject key identifier:   DF:7F:3F:B0:87:72:09:66:2B:8D:64:D4:13:4D:DD:FD:71:40:27:F2
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584B4081B3FDD5A731C52D9CB5C0
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f9457e98-5423-3f04-90ee-67760a3cd563.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     63150
IP address blocks:        2602:f988:40::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:b3:fd:d5:a7:31:c5:2d:9c:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=59881d52-93fb-4c7a-b7cd-e8b3493a69bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:51:30:2b:93:b1:60:36:d2:00:03:2a:85:
                    b6:5f:e7:7b:6b:32:0b:a5:44:57:30:de:4e:77:c8:
                    3d:9f:0f:eb:92:3e:21:16:2f:e7:ed:ce:21:87:50:
                    12:a3:ed:98:7d:fc:ed:b5:17:1c:3d:13:fa:94:18:
                    75:0f:2b:55:85:83:74:cd:d7:9a:de:cc:fe:1d:a5:
                    2b:03:35:63:10:57:6f:d5:75:bf:d9:41:1a:14:bc:
                    cc:eb:d6:f3:ee:1b:54:77:ad:8d:58:08:4b:2b:34:
                    05:f5:26:6a:18:66:2a:81:dc:9b:45:97:ed:2b:f9:
                    3c:35:3a:ec:ab:5a:df:f8:1f:16:2d:e7:cd:ed:26:
                    01:4c:47:88:ce:5e:a7:96:16:bb:cb:d1:fb:1a:82:
                    b3:6e:78:42:79:66:f0:29:05:e5:ff:d3:1b:84:c7:
                    0d:ae:f3:d5:62:db:c6:27:40:03:6f:2d:ec:89:d5:
                    a9:a8:64:df:af:75:52:6b:ef:a0:5b:ec:a9:69:c8:
                    26:b9:95:a4:f7:bb:3b:86:44:6b:b9:94:6b:88:54:
                    a5:04:7b:7f:9c:2d:ca:65:98:ac:81:51:28:b9:4b:
                    d7:f8:00:bf:19:30:c7:df:a7:23:4d:b2:74:70:2e:
                    69:11:c5:6e:5c:ca:29:b1:45:a7:c4:b4:7a:bc:bd:
                    46:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7F:3F:B0:87:72:09:66:2B:8D:64:D4:13:4D:DD:FD:71:40:27:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/f9457e98-5423-3f04-90ee-67760a3cd563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0d:08:82:de:d4:d6:b9:13:ba:c2:8c:1d:a4:81:3e:7b:06:
         63:02:56:51:e8:f4:d7:74:9c:37:73:b5:d3:19:44:ba:ac:99:
         f2:b6:0e:8d:cc:ef:62:70:71:34:51:5d:e9:71:ee:91:db:10:
         da:82:11:3b:0b:ea:a7:74:3f:d0:64:d8:87:50:fa:2c:cb:bd:
         68:56:0a:e4:bc:74:d1:e2:d1:7c:f1:b5:48:fe:2d:b8:a0:2a:
         16:ee:bd:72:4d:8b:05:2b:5d:3e:e0:32:46:e3:a7:ff:73:c0:
         78:36:44:ab:23:0f:9a:cb:f0:96:28:fa:ed:2f:a1:96:e5:ac:
         d8:0e:81:1f:7f:ba:b7:3b:e0:f8:42:11:5b:f6:bc:db:35:6e:
         f9:5a:8f:31:d2:0a:68:cd:86:87:d0:ba:c8:93:28:2b:76:fa:
         6e:34:0d:d3:9e:cf:9a:b4:9e:9f:b6:09:21:fd:a9:b9:65:a8:
         d2:a9:ee:7a:65:39:16:10:13:2a:3b:95:80:e5:01:46:0b:86:
         57:77:00:8c:35:fc:f5:58:de:f0:08:b0:e1:de:6e:0c:cf:47:
         10:f3:a1:fe:d8:f9:88:e6:8c:f0:05:ef:14:b0:f8:b1:b9:67:
         c7:96:06:f1:27:be:42:b6:5b:99:c3:57:ca:d8:4e:0a:b2:ba:
         cd:e3:58:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtAgbP91acxxS2ctcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMThhOTI4ZWItNDhhNS00NTYwLWEyMTctMzZjYjFlYTMy
NjQ4MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk
NTk4ODFkNTItOTNmYi00YzdhLWI3Y2QtZThiMzQ5M2E2OWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ElRMCuTsWA20gADKoW2X+d7azILpURXMN5O
d8g9nw/rkj4hFi/n7c4hh1ASo+2YffzttRccPRP6lBh1DytVhYN0zdea3sz+HaUr
AzVjEFdv1XW/2UEaFLzM69bz7htUd62NWAhLKzQF9SZqGGYqgdybRZftK/k8NTrs
q1rf+B8WLefN7SYBTEeIzl6nlha7y9H7GoKzbnhCeWbwKQXl/9MbhMcNrvPVYtvG
J0ADby3sidWpqGTfr3VSa++gW+ypacgmuZWk97s7hkRruZRriFSlBHt/nC3KZZis
gVEouUvX+AC/GTDH36cjTbJ0cC5pEcVuXMopsUWnxLR6vL1G4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN9/P7CHcglmK41k1BNN3f1xQCfyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOGE5
MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNiMWVhMzI2NDgvZjk0NTdlOTgtNTQyMy0z
ZjA0LTkwZWUtNjc3NjBhM2NkNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMThhOTI4ZWItNDhhNS00NTYwLWEy
MTctMzZjYjFlYTMyNjQ4LzE4YTkyOGViLTQ4YTUtNDU2MC1hMjE3LTM2Y2IxZWEz
MjY0OC5jcmwwHwYDVR0jBBgwFoAU9H6x3C6P5f0Uj3qixMZGdbQwqzgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xOGE5MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNi
MWVhMzI2NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL5iABA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIYNCILe1Na5E7rCjB2kgT57BmMCVlHo9Nd0nDdztdMZRLqsmfK2
Do3M72JwcTRRXelx7pHbENqCETsL6qd0P9Bk2IdQ+izLvWhWCuS8dNHi0XzxtUj+
LbigKhbuvXJNiwUrXT7gMkbjp/9zwHg2RKsjD5rL8JYo+u0voZblrNgOgR9/urc7
4PhCEVv2vNs1bvlajzHSCmjNhofQusiTKCt2+m40DdOez5q0np+2CSH9qbllqNKp
7nplORYQEyo7lYDlAUYLhld3AIw1/PVY3vAIsOHebgzPRxDzof7Y+YjmjPAF7xSw
+LG5Z8eWBvEnvkK2W5nDV8rYTgqyus3jWCA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:54 2025 by rpki-client