Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/9375bbd5-9aed-347e-8511-bf5361f8f440.roa
File:                     9375bbd5-9aed-347e-8511-bf5361f8f440.roa (raw, json)
Hash identifier:          D8ZFr4bxojOupZum4YRd8TI9fqke1UCtrCm/FZyq1Fo=
Subject key identifier:   CE:FA:31:55:A1:7B:FC:36:16:E4:D6:74:03:BC:CB:BA:A7:DB:7F:5C
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F4328584B715CBE5FF3E56B33C1704D30
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/9375bbd5-9aed-347e-8511-bf5361f8f440.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     401104
IP address blocks:        2602:fa42:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:be:5f:f3:e5:6b:33:c1:70:4d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=79c62b52-3034-4773-bfd8-875e0c2ee74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:bc:07:21:e4:1c:04:e5:7e:db:5f:9d:b4:
                    2e:0e:80:a6:bc:4b:32:e9:78:c1:62:a6:19:9d:06:
                    0d:70:92:92:17:3f:41:24:28:7a:90:6c:86:d8:a9:
                    f7:13:20:ec:96:39:5b:97:24:1e:b7:83:d5:62:55:
                    d8:b2:62:3f:d8:d4:98:da:d4:2d:50:7d:5d:fe:6a:
                    3b:2a:f0:ad:96:b6:43:e4:46:f4:75:b7:b2:5a:a8:
                    be:a8:2e:95:bf:7b:58:b8:4a:f0:fb:3c:35:86:df:
                    26:0b:4f:f1:6f:a5:71:fc:e8:fe:7a:0a:94:54:0b:
                    68:4d:c0:9c:a9:82:1f:7a:1c:b6:3a:82:5d:a2:af:
                    4f:69:b5:cb:14:d1:6d:ca:16:f2:88:d8:9d:bc:5f:
                    a8:b9:b8:51:c4:ce:31:7d:53:b7:b4:9c:d0:61:ac:
                    32:17:97:5a:20:45:bd:69:d6:bb:44:5f:df:37:72:
                    4c:f7:ec:db:70:73:a3:52:72:2f:7e:64:f0:36:0e:
                    f2:bd:af:be:a9:fd:2e:ca:53:03:42:1c:e1:c2:b7:
                    2c:5b:dc:54:89:f0:88:2d:0d:28:78:72:ea:e3:91:
                    77:02:19:ea:f7:f0:bb:73:9b:78:91:f3:b1:18:94:
                    8b:f2:c9:e8:a2:99:8d:c1:f0:d9:5f:97:44:5f:be:
                    58:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FA:31:55:A1:7B:FC:36:16:E4:D6:74:03:BC:CB:BA:A7:DB:7F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/9375bbd5-9aed-347e-8511-bf5361f8f440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa42:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3a:d3:5a:93:79:c6:b6:53:7e:b1:e0:03:d4:88:5b:69:ae:
         dd:6f:61:14:a7:c5:86:6f:dd:09:60:62:d8:c8:dd:24:bf:c4:
         9f:3c:9f:7d:bb:37:b0:24:d7:a5:6a:7d:3a:99:6e:b9:ad:4f:
         96:22:b9:ee:e0:7b:ea:67:3d:17:5a:75:3e:86:1a:0f:80:fb:
         6a:9a:27:28:6b:c3:6a:48:69:88:c7:be:5a:df:80:eb:9c:0c:
         8e:0b:14:9b:54:6b:45:ff:0f:93:15:69:4f:20:0e:ec:dd:35:
         9b:d4:52:24:14:5a:bc:36:0c:cf:82:3a:74:5b:83:a1:6b:81:
         69:15:80:b0:07:5d:d5:95:ab:5f:11:81:3c:a8:40:99:0e:2e:
         b2:20:97:38:a4:79:6a:ac:16:95:1a:e0:e9:7d:dd:3e:1c:1b:
         21:72:1f:84:77:4b:c5:a3:9b:c5:28:cc:f6:85:07:20:39:97:
         ea:43:f1:e0:57:aa:a4:f3:68:f0:e9:78:5e:d2:f6:6e:11:d3:
         6b:f0:a0:0b:1c:52:32:d6:7b:90:d2:93:e6:82:2e:85:e8:71:
         f4:14:42:25:17:67:45:9b:dd:62:9b:29:0f:b1:fe:e3:4d:dd:
         40:9a:bb:a4:91:bf:55:67:51:98:95:1c:92:9d:5f:e1:77:a1:
         66:71:25:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXL5f8+VrM8FwTTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJiZTY5MTItYTQ4Yi00NDFiLTllZTYtOTRhYTZkYTAz
Mjc1MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
NzljNjJiNTItMzAzNC00NzczLWJmZDgtODc1ZTBjMmVlNzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvS8ByHkHATlfttfnbQuDoCmvEsy6XjBYqYZ
nQYNcJKSFz9BJCh6kGyG2Kn3EyDsljlblyQet4PVYlXYsmI/2NSY2tQtUH1d/mo7
KvCtlrZD5Eb0dbeyWqi+qC6Vv3tYuErw+zw1ht8mC0/xb6Vx/Oj+egqUVAtoTcCc
qYIfehy2OoJdoq9PabXLFNFtyhbyiNidvF+oubhRxM4xfVO3tJzQYawyF5daIEW9
ada7RF/fN3JM9+zbcHOjUnIvfmTwNg7yva++qf0uylMDQhzhwrcsW9xUifCILQ0o
eHLq45F3Ahnq9/C7c5t4kfOxGJSL8snoopmNwfDZX5dEX75Y+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM76MVWhe/w2FuTWdAO8y7qn239cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83MmJl
NjkxMi1hNDhiLTQ0MWItOWVlNi05NGFhNmRhMDMyNzUvOTM3NWJiZDUtOWFlZC0z
NDdlLTg1MTEtYmY1MzYxZjhmNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzJiZTY5MTItYTQ4Yi00NDFiLTll
ZTYtOTRhYTZkYTAzMjc1LzcyYmU2OTEyLWE0OGItNDQxYi05ZWU2LTk0YWE2ZGEw
MzI3NS5jcmwwHwYDVR0jBBgwFoAUoU1WbC8yzneHx9LMOrMYtGeb/IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83MmJlNjkxMi1hNDhiLTQ0MWItOWVlNi05NGFh
NmRhMDMyNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6QgEB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC4601qTeca2U36x4APUiFtprt1vYRSnxYZv3QlgYtjI3SS/xJ88
n327N7Ak16VqfTqZbrmtT5Yiue7ge+pnPRdadT6GGg+A+2qaJyhrw2pIaYjHvlrf
gOucDI4LFJtUa0X/D5MVaU8gDuzdNZvUUiQUWrw2DM+COnRbg6FrgWkVgLAHXdWV
q18RgTyoQJkOLrIglzikeWqsFpUa4Ol93T4cGyFyH4R3S8Wjm8UozPaFByA5l+pD
8eBXqqTzaPDpeF7S9m4R02vwoAscUjLWe5DSk+aCLoXocfQUQiUXZ0Wb3WKbKQ+x
/uNN3UCau6SRv1VnUZiVHJKdX+F3oWZxJQ8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:30 2025 by rpki-client