Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/2e02765e-cbfc-39d3-a6da-c9071036fe94.roa
File:                     2e02765e-cbfc-39d3-a6da-c9071036fe94.roa (raw, json)
Hash identifier:          2ftAPFOrtKTlpyKNXv/S91XbU6lo48te9bQGa4BZJjs=
Subject key identifier:   3F:9A:79:82:76:69:BE:7F:EA:54:13:8D:36:D8:88:A7:6D:48:8D:6A
Certificate issuer:       /CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
Certificate serial:       010D0C9F4328584B4FDC71ED89AE5803FBC6C080
Authority key identifier: BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/2e02765e-cbfc-39d3-a6da-c9071036fe94.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     6517
IP address blocks:        2607:f2d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:71:ed:89:ae:58:03:fb:c6:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=c368ac4b-5e60-45f3-891a-b51334a96653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:40:97:20:cd:2f:99:c0:0c:02:60:43:82:
                    39:bf:9f:ee:72:17:51:5c:f4:46:2b:77:86:1d:05:
                    3d:31:39:74:ab:c2:15:9f:9d:49:25:e6:3c:f8:ad:
                    f3:59:5d:f3:44:35:f7:e7:ee:17:77:e6:25:b5:a1:
                    b8:78:aa:8f:bd:95:c8:fc:e1:95:77:70:b5:ab:84:
                    a5:81:d2:1d:81:fc:b3:dc:6e:78:ee:be:c7:5d:6d:
                    56:7d:67:23:1c:88:58:2a:18:0a:ea:5b:0d:70:85:
                    d1:6a:32:66:5a:c8:a4:c4:1d:b4:ad:99:e2:7a:a9:
                    a4:6c:e7:9c:2c:8d:be:15:62:6f:59:dc:c8:a5:9b:
                    4c:d1:37:30:21:8c:11:b2:94:2b:2b:73:cd:a3:d6:
                    5d:81:19:c2:cf:8c:b6:41:8d:d3:aa:f7:62:18:23:
                    15:de:47:d2:39:33:53:19:c4:c6:18:9d:52:5e:f0:
                    dd:f0:a5:a5:c6:6d:29:4b:50:22:b8:73:b0:ca:24:
                    f9:db:0c:64:1a:98:9c:f7:0b:5f:a3:30:ff:49:61:
                    9a:a8:8a:82:3f:53:f1:f8:57:5f:5a:8e:c2:da:5a:
                    99:27:4a:17:02:e1:8b:2e:00:2a:71:b5:4f:34:ed:
                    71:ce:bf:3a:1d:8b:9c:44:6b:48:49:17:0d:55:59:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9A:79:82:76:69:BE:7F:EA:54:13:8D:36:D8:88:A7:6D:48:8D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/2e02765e-cbfc-39d3-a6da-c9071036fe94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.crl

            X509v3 Authority Key Identifier:
                keyid:BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f2d0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ce:86:25:06:ce:e2:3c:b5:26:f4:26:f4:86:e0:ec:8c:f8:
         1c:5e:c0:64:bc:de:91:5d:bb:04:68:cc:45:99:8f:4a:c9:de:
         a0:58:16:60:0f:62:7f:20:1d:72:1d:bd:33:40:7e:8d:5b:11:
         99:f7:70:73:48:fc:25:d7:78:1e:fc:ff:da:07:6c:54:c9:61:
         3c:92:cf:ec:8d:87:59:6b:54:04:5c:89:ab:a9:02:50:f1:44:
         6c:43:c6:67:21:c7:68:65:0c:6f:a1:89:7f:37:ac:c2:b4:8f:
         42:99:1e:09:0f:59:57:bc:fd:23:72:df:d1:7d:a1:91:5e:2d:
         e9:a1:da:01:4c:95:fd:29:12:f7:28:a3:3f:b3:57:e4:d0:1e:
         01:12:20:85:5c:73:d9:21:55:f0:60:5e:39:8e:56:8c:dd:77:
         e9:2e:27:6c:3f:0b:b3:e4:6a:6c:8c:95:b0:b0:2b:5f:9c:37:
         ab:ea:7f:aa:86:88:7f:eb:97:e4:ef:be:ef:72:9d:d3:99:4c:
         cf:92:f3:c7:cf:ea:9d:73:0c:e4:bd:77:e2:07:fe:07:72:56:
         67:7e:39:79:15:a4:55:1a:80:21:b0:1f:12:19:9f:b7:2d:aa:
         f2:3c:54:c3:25:96:34:f1:ae:34:8e:2c:94:e5:7c:4b:88:ea:
         a6:2f:48:6a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtP3HHtia5YA/vGwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQxYWI2N2YtMzVhNy00NDg5LWFkM2QtZmY1YjczYWIw
NDQ3MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
YzM2OGFjNGItNWU2MC00NWYzLTg5MWEtYjUxMzM0YTk2NjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm29AlyDNL5nADAJgQ4I5v5/uchdRXPRGK3eG
HQU9MTl0q8IVn51JJeY8+K3zWV3zRDX35+4Xd+YltaG4eKqPvZXI/OGVd3C1q4Sl
gdIdgfyz3G547r7HXW1WfWcjHIhYKhgK6lsNcIXRajJmWsikxB20rZnieqmkbOec
LI2+FWJvWdzIpZtM0TcwIYwRspQrK3PNo9ZdgRnCz4y2QY3TqvdiGCMV3kfSOTNT
GcTGGJ1SXvDd8KWlxm0pS1AiuHOwyiT52wxkGpic9wtfozD/SWGaqIqCP1Px+Fdf
Wo7C2lqZJ0oXAuGLLgAqcbVPNO1xzr86HYucRGtISRcNVVlpVQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFD+aeYJ2ab5/6lQTjTbYiKdtSI1qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNDFh
YjY3Zi0zNWE3LTQ0ODktYWQzZC1mZjViNzNhYjA0NDcvMmUwMjc2NWUtY2JmYy0z
OWQzLWE2ZGEtYzkwNzEwMzZmZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDQxYWI2N2YtMzVhNy00NDg5LWFk
M2QtZmY1YjczYWIwNDQ3L2Q0MWFiNjdmLTM1YTctNDQ4OS1hZDNkLWZmNWI3M2Fi
MDQ0Ny5jcmwwHwYDVR0jBBgwFoAUvfoqVkNKfJIRitSOopfVwr+UNWcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kNDFhYjY3Zi0zNWE3LTQ0ODktYWQzZC1mZjVi
NzNhYjA0NDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfy0DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAFzoYlBs7iPLUm9Cb0huDsjPgcXsBkvN6RXbsEaMxFmY9Kyd6gWBZg
D2J/IB1yHb0zQH6NWxGZ93BzSPwl13ge/P/aB2xUyWE8ks/sjYdZa1QEXImrqQJQ
8URsQ8ZnIcdoZQxvoYl/N6zCtI9CmR4JD1lXvP0jct/RfaGRXi3podoBTJX9KRL3
KKM/s1fk0B4BEiCFXHPZIVXwYF45jlaM3XfpLidsPwuz5GpsjJWwsCtfnDer6n+q
hoh/65fk777vcp3TmUzPkvPHz+qdcwzkvXfiB/4HclZnfjl5FaRVGoAhsB8SGZ+3
LaryPFTDJZY08a40jiyU5XxLiOqmL0hq
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:35:07 2025 by rpki-client