Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/06428e3c-5113-3803-9d85-2f26395b0d1e.roa
File:                     06428e3c-5113-3803-9d85-2f26395b0d1e.roa (raw, json)
Hash identifier:          DuhFUaL6xCu6wzlThPBKrjzqCi5G9vmuem/tItd8Iow=
Subject key identifier:   C3:3A:F1:5C:5E:08:17:29:D3:11:C5:13:3D:D9:BA:EB:1C:D8:C4:85
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584B1C36D2ACDEB865636C065F80
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/06428e3c-5113-3803-9d85-2f26395b0d1e.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     61112
IP address blocks:        2602:fa4f:500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d2:ac:de:b8:65:63:6c:06:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=963f4775-39e7-4320-9eff-cf49a6dfeca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:15:c7:ba:10:dc:25:09:27:a1:f7:e6:7b:8a:
                    2e:67:87:68:69:67:c2:ba:93:3e:48:fb:4b:5e:6e:
                    7a:be:7a:ea:cb:15:05:25:2b:a7:12:d1:f2:38:e7:
                    07:58:89:27:83:f8:c0:8f:a9:88:38:ec:43:81:2a:
                    d4:ba:e0:31:03:b8:9e:02:39:ba:f6:4e:92:8e:26:
                    b3:e6:bf:5e:79:33:bc:69:ae:e8:ec:f8:b2:dc:c4:
                    29:59:35:64:6d:07:a3:b4:1c:ba:59:7c:73:f4:b4:
                    ad:61:db:49:64:6e:e1:9e:f4:9c:90:ff:07:3b:97:
                    73:7d:f0:83:77:06:7c:2f:4c:da:1b:1e:0d:2e:95:
                    dd:ea:f0:b9:28:22:6e:5e:ce:a3:83:61:ed:0d:36:
                    cd:24:ac:0c:7b:02:07:3d:37:f3:89:d0:13:1c:f1:
                    2c:52:73:97:e4:20:e7:ca:9c:fd:64:47:6a:76:b6:
                    02:96:78:bc:f1:49:df:16:14:a2:4a:ff:f6:e3:b4:
                    85:99:44:12:cd:95:ad:9b:d8:6a:a2:59:a7:c9:ed:
                    04:1f:6d:44:04:1f:3d:8b:8f:2a:16:1d:08:d1:76:
                    25:15:6f:98:54:b4:4f:66:8c:67:3a:83:cd:d9:b9:
                    8d:37:ee:0c:3a:42:d4:0a:b4:32:88:d3:ed:be:85:
                    cb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3A:F1:5C:5E:08:17:29:D3:11:C5:13:3D:D9:BA:EB:1C:D8:C4:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/06428e3c-5113-3803-9d85-2f26395b0d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d5:5e:97:d0:19:61:24:f3:46:ea:cc:43:b7:ca:ac:10:0d:
         c2:c1:af:b0:ed:cb:f7:73:24:a9:f9:88:c4:9d:83:d5:0c:0e:
         ca:6a:77:4f:02:bc:de:7b:a4:e6:1d:8a:6a:de:d8:6a:28:bf:
         2e:40:77:4c:76:f2:86:df:75:5a:1a:3b:43:a9:ac:67:aa:6d:
         32:5c:48:ac:9a:09:a2:45:f6:b1:74:c7:69:75:e6:3f:9a:90:
         c9:90:1b:7c:dc:54:c8:86:84:72:42:bf:ec:de:a9:c7:00:38:
         16:18:20:2c:06:53:66:f8:cb:a5:d8:00:7c:99:12:81:61:4f:
         0f:cf:31:d6:21:28:b3:77:f6:b7:55:d9:2a:7c:cc:3b:85:92:
         45:92:8c:bb:ef:5d:fc:e1:8e:c6:85:b5:b9:8d:b4:e6:ae:f8:
         b9:82:fb:ed:4f:ff:eb:0e:c0:80:60:18:d6:83:79:ef:bc:d4:
         7e:ae:bb:a9:55:4f:4a:0e:66:4a:52:60:78:b4:18:18:98:14:
         21:50:89:76:79:53:19:24:6f:87:a2:56:bd:d6:e5:d6:cf:a2:
         fb:fc:dc:c8:9e:32:a0:f5:18:b5:79:d9:a8:33:25:19:9b:c9:
         25:de:71:93:57:cc:da:c1:43:4d:d7:bf:b5:27:f1:45:39:22:
         64:80:04:2b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEscNtKs3rhlY2wGX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2
YmY3MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
OTYzZjQ3NzUtMzllNy00MzIwLTllZmYtY2Y0OWE2ZGZlY2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hXHuhDcJQknoffme4ouZ4doaWfCupM+SPtL
Xm56vnrqyxUFJSunEtHyOOcHWIkng/jAj6mIOOxDgSrUuuAxA7ieAjm69k6Sjiaz
5r9eeTO8aa7o7Piy3MQpWTVkbQejtBy6WXxz9LStYdtJZG7hnvSckP8HO5dzffCD
dwZ8L0zaGx4NLpXd6vC5KCJuXs6jg2HtDTbNJKwMewIHPTfzidATHPEsUnOX5CDn
ypz9ZEdqdrYClni88UnfFhSiSv/247SFmUQSzZWtm9hqolmnye0EH21EBB89i48q
Fh0I0XYlFW+YVLRPZoxnOoPN2bmNN+4MOkLUCrQyiNPtvoXL2QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMM68VxeCBcp0xHFEz3Zuusc2MSFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4
ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvMDY0MjhlM2MtNTExMy0z
ODAzLTlkODUtMmYyNjM5NWIwZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1
ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2
NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4
ZTU2NjZiZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6TwUw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAT9Vel9AZYSTzRurMQ7fKrBANwsGvsO3L93MkqfmIxJ2D1QwOymp3
TwK83nuk5h2Kat7Yaii/LkB3THbyht91Who7Q6msZ6ptMlxIrJoJokX2sXTHaXXm
P5qQyZAbfNxUyIaEckK/7N6pxwA4FhggLAZTZvjLpdgAfJkSgWFPD88x1iEos3f2
t1XZKnzMO4WSRZKMu+9d/OGOxoW1uY205q74uYL77U//6w7AgGAY1oN577zUfq67
qVVPSg5mSlJgeLQYGJgUIVCJdnlTGSRvh6JWvdbl1s+i+/zcyJ4yoPUYtXnZqDMl
GZvJJd5xk1fM2sFDTde/tSfxRTkiZIAEKw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:22:33 2025 by rpki-client