Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ac816649-9299-3a2e-bc05-74848b509dd8.roa
File:                     ac816649-9299-3a2e-bc05-74848b509dd8.roa (raw, json)
Hash identifier:          wIq5aaI/Zt2B5EMvDXO9TwUClwdUgpuWmg+YMnTuQ8Y=
Subject key identifier:   4F:64:92:B5:8A:5C:D2:46:72:EB:9D:75:5D:8B:BD:63:B3:5C:A1:CD
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584B8BE22DB1284AB763226DA230
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ac816649-9299-3a2e-bc05-74848b509dd8.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        2604:ea80:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:2d:b1:28:4a:b7:63:22:6d:a2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=f2328770-59d9-4c1c-b1f0-83b565b921a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:0a:16:07:e4:78:a5:29:5e:f8:fa:a9:ad:
                    5e:5c:0d:9c:9c:cf:0f:d8:ae:1f:79:00:f2:2e:24:
                    a9:7c:12:0e:f4:49:53:82:6f:06:4a:b3:b2:77:23:
                    13:cb:ac:85:21:b9:3d:93:98:93:a6:d2:77:11:40:
                    b5:e7:a5:59:5e:c8:11:61:ee:fa:bc:39:8f:05:76:
                    20:c4:e1:b9:38:51:1e:fa:d2:df:e3:08:35:77:fa:
                    ff:26:22:4e:5e:5b:b3:ae:f2:21:22:d8:e9:ca:94:
                    42:88:e8:54:50:e5:83:c9:c5:c6:df:03:64:a9:fd:
                    f6:18:27:5e:82:f1:63:0e:15:07:a0:a1:cf:7f:2f:
                    78:d5:26:04:69:58:a9:ed:f8:81:ad:ca:0d:a8:db:
                    ea:6e:39:2c:49:f3:91:c9:cb:d3:dc:98:fa:ae:d4:
                    70:45:28:c9:94:6f:75:9a:46:24:47:49:7b:61:84:
                    0a:04:cc:20:60:01:60:35:35:fb:61:61:0f:a1:79:
                    32:51:98:35:74:7a:41:6e:2e:54:b1:89:b1:d7:9d:
                    49:35:41:77:0f:47:60:8e:ae:67:a5:39:4d:e6:3f:
                    7a:da:f6:e1:83:75:e4:e1:75:5f:ff:07:7b:ad:b2:
                    7a:83:d6:b5:5e:5e:b4:b2:72:a5:22:a9:d3:c4:2a:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:64:92:B5:8A:5C:D2:46:72:EB:9D:75:5D:8B:BD:63:B3:5C:A1:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ac816649-9299-3a2e-bc05-74848b509dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ea80:1400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:09:83:75:83:02:45:f8:e4:ab:14:d9:0a:a5:49:f0:1b:6c:
         6c:5b:91:e4:8f:6f:91:e0:aa:fd:30:2c:55:f4:20:9b:3c:46:
         d7:0d:f5:e5:18:cb:8d:ff:83:e5:bc:28:e7:70:31:a0:72:99:
         a5:08:97:22:b5:35:b3:2f:7a:e1:97:03:89:c7:c7:6c:e7:e5:
         cc:66:d5:5d:d4:74:80:70:74:ee:ce:92:83:0a:a7:bf:2a:a3:
         90:89:3f:ae:7a:36:a3:85:7c:b9:60:55:6a:16:c4:3e:99:18:
         9c:82:cd:d0:ae:0c:1d:02:a8:75:ca:9f:d2:ab:ea:a8:c5:47:
         b1:f7:de:2b:75:15:bb:32:7c:7b:09:c2:07:02:a7:a2:3d:de:
         e4:b1:f8:1e:86:ed:5e:b3:c6:82:00:55:81:a7:59:93:54:d3:
         e8:fb:74:fc:9d:9b:a9:57:77:e7:71:50:5a:d1:69:1a:2e:82:
         b2:33:e1:96:06:73:dd:80:36:5c:22:fd:57:2d:8f:b2:94:e5:
         7e:e2:99:f3:5e:95:38:f7:4d:87:65:cd:ea:eb:ea:4b:71:d8:
         29:6b:27:ff:7e:60:82:de:ae:4e:12:34:87:44:38:c5:d1:65:
         52:34:10:e3:e0:7a:be:ee:f8:78:54:3c:a0:49:0b:14:c1:aa:
         04:fd:23:01
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuL4i2xKEq3YyJtojAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
ZjIzMjg3NzAtNTlkOS00YzFjLWIxZjAtODNiNTY1YjkyMWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYEKFgfkeKUpXvj6qa1eXA2cnM8P2K4feQDy
LiSpfBIO9ElTgm8GSrOydyMTy6yFIbk9k5iTptJ3EUC156VZXsgRYe76vDmPBXYg
xOG5OFEe+tLf4wg1d/r/JiJOXluzrvIhItjpypRCiOhUUOWDycXG3wNkqf32GCde
gvFjDhUHoKHPfy941SYEaVip7fiBrcoNqNvqbjksSfORycvT3Jj6rtRwRSjJlG91
mkYkR0l7YYQKBMwgYAFgNTX7YWEPoXkyUZg1dHpBbi5UsYmx151JNUF3D0dgjq5n
pTlN5j962vbhg3Xk4XVf/wd7rbJ6g9a1Xl60snKlIqnTxCrfvQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE9kkrWKXNJGcuuddV2LvWOzXKHNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYWM4MTY2NDktOTI5OS0z
YTJlLWJjMDUtNzQ4NDhiNTA5ZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTqgBQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZgmDdYMCRfjkqxTZCqVJ8BtsbFuR5I9vkeCq/TAsVfQgmzxG1w31
5RjLjf+D5bwo53AxoHKZpQiXIrU1sy964ZcDicfHbOflzGbVXdR0gHB07s6Sgwqn
vyqjkIk/rno2o4V8uWBVahbEPpkYnILN0K4MHQKodcqf0qvqqMVHsffeK3UVuzJ8
ewnCBwKnoj3e5LH4HobtXrPGggBVgadZk1TT6Pt0/J2bqVd353FQWtFpGi6CsjPh
lgZz3YA2XCL9Vy2PspTlfuKZ816VOPdNh2XN6uvqS3HYKWsn/35ggt6uThI0h0Q4
xdFlUjQQ4+B6vu74eFQ8oEkLFMGqBP0jAQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:45:13 2025 by rpki-client