Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa
File:                     3d7daaee-632b-306e-bcb0-783ea2fb4061.roa (raw, json)
Hash identifier:          GO7T0wMI5J3K3CA+cqDkpasUsH+fgDpbG5eDiA27tXs=
Subject key identifier:   44:26:36:42:1D:B2:84:BA:D6:68:BB:8E:7D:D8:71:48:CE:47:66:21
Certificate issuer:       /CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
Certificate serial:       010D0C9F4328584B328C43E77FEE6B7C166C7CA7
Authority key identifier: 10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     23368
IP address blocks:        2602:fa60::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:43:e7:7f:ee:6b:7c:16:6c:7c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=9c1c4934-fa36-4817-aec4-7aa4489d7ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:a6:80:8f:32:53:0f:a7:26:82:b0:cb:b3:
                    78:cb:ea:5c:4e:88:e9:3a:03:f9:0e:f6:71:86:07:
                    0d:e9:8b:58:7f:d5:2b:91:fb:d9:2b:41:4d:f5:2e:
                    97:5a:e1:b4:b8:36:57:7f:4e:25:96:9d:06:bc:bc:
                    d1:c5:93:64:0f:67:4a:03:64:27:b3:b0:56:03:a9:
                    85:9d:a5:9e:ff:3b:dd:52:7e:22:d3:df:0e:a0:41:
                    45:f2:01:cf:6f:bd:72:44:3a:60:83:9e:b3:ee:27:
                    2f:bd:c5:0b:f1:de:48:55:66:ed:15:6a:2e:69:1b:
                    74:0d:f6:a9:0e:d3:28:97:b5:23:c3:31:af:57:11:
                    be:de:a8:83:25:57:2c:05:57:ab:2a:52:bb:24:ef:
                    5b:0b:ef:25:78:94:28:0f:79:55:00:43:24:99:10:
                    08:55:a5:75:00:01:4b:38:8f:a7:3f:53:7c:7b:e5:
                    b8:85:8a:16:8b:55:c3:bf:fd:52:6a:b5:c6:fc:c5:
                    75:2a:e9:10:12:5a:1c:0b:44:fd:b4:af:24:bf:ab:
                    bc:b7:bc:93:22:ec:89:c0:fb:7e:84:8b:f4:db:d8:
                    8f:e9:48:84:b3:de:78:89:0e:6c:c4:ed:93:93:2d:
                    78:fd:00:bb:f9:69:d3:bb:db:86:33:f9:89:7d:ef:
                    5c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:26:36:42:1D:B2:84:BA:D6:68:BB:8E:7D:D8:71:48:CE:47:66:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/3d7daaee-632b-306e-bcb0-783ea2fb4061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.crl

            X509v3 Authority Key Identifier:
                keyid:10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa60::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a1:2e:45:ef:97:cf:8f:28:f4:45:ca:73:cd:74:d5:2a:28:
         af:0f:18:67:c7:c0:62:24:02:d7:3b:b5:00:a7:10:ef:cb:87:
         ad:9e:c0:0a:1d:aa:07:ef:1e:b4:a6:55:93:a6:84:27:08:08:
         17:a6:58:f3:c2:bb:d0:a2:ef:a3:5e:41:43:1e:fd:0c:10:7f:
         a6:65:02:20:98:33:3d:70:53:72:a3:fa:9a:a0:75:64:4b:e4:
         7b:25:ee:99:61:cb:f4:48:6d:7d:3c:f1:a6:c7:2b:5e:db:5c:
         3f:21:4f:e0:a1:ee:4e:b1:77:2d:29:dd:7f:ca:5d:c5:5c:19:
         8f:97:b7:54:a2:26:b8:65:5a:e3:80:06:dd:ae:cc:42:f6:78:
         c6:e3:65:d6:08:7f:d1:7d:1f:65:eb:d4:b0:ae:6e:32:92:b4:
         4f:b1:af:2f:dc:02:bb:6a:8d:f9:d6:cf:45:0b:7a:b3:70:fe:
         ad:c3:39:c7:2f:83:06:ce:24:df:6e:d7:28:d2:39:3f:05:43:
         06:eb:f8:a7:21:14:23:ce:ac:a6:94:1d:11:92:99:4c:18:a0:
         62:a9:56:0c:76:62:71:87:0e:29:66:da:dc:d7:7c:9e:17:c4:
         83:b5:c1:d1:4b:f7:e3:69:30:c8:ca:a2:57:5a:84:03:39:a8:
         95:4c:ed:39
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsyjEPnf+5rfBZsfKcwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIzZjNhZTgtMWRiNy00MTNlLTk3MTMtYWIwNWMzZmE1
ZDc1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
OWMxYzQ5MzQtZmEzNi00ODE3LWFlYzQtN2FhNDQ4OWQ3YWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXGmgI8yUw+nJoKwy7N4y+pcTojpOgP5DvZx
hgcN6YtYf9UrkfvZK0FN9S6XWuG0uDZXf04llp0GvLzRxZNkD2dKA2Qns7BWA6mF
naWe/zvdUn4i098OoEFF8gHPb71yRDpgg56z7icvvcUL8d5IVWbtFWouaRt0Dfap
DtMol7UjwzGvVxG+3qiDJVcsBVerKlK7JO9bC+8leJQoD3lVAEMkmRAIVaV1AAFL
OI+nP1N8e+W4hYoWi1XDv/1SarXG/MV1KukQElocC0T9tK8kv6u8t7yTIuyJwPt+
hIv029iP6UiEs954iQ5sxO2Tky14/QC7+WnTu9uGM/mJfe9cIQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEQmNkIdsoS61mi7jn3YcUjOR2YhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjNm
M2FlOC0xZGI3LTQxM2UtOTcxMy1hYjA1YzNmYTVkNzUvM2Q3ZGFhZWUtNjMyYi0z
MDZlLWJjYjAtNzgzZWEyZmI0MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWIzZjNhZTgtMWRiNy00MTNlLTk3
MTMtYWIwNWMzZmE1ZDc1L2FiM2YzYWU4LTFkYjctNDEzZS05NzEzLWFiMDVjM2Zh
NWQ3NS5jcmwwHwYDVR0jBBgwFoAUEMODAeFAFw4U2b/HfceLs9gbdLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjNmM2FlOC0xZGI3LTQxM2UtOTcxMy1hYjA1
YzNmYTVkNzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL6YAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALKEuRe+Xz48o9EXKc8101Soorw8YZ8fAYiQC1zu1AKcQ78uHrZ7A
Ch2qB+8etKZVk6aEJwgIF6ZY88K70KLvo15BQx79DBB/pmUCIJgzPXBTcqP6mqB1
ZEvkeyXumWHL9EhtfTzxpscrXttcPyFP4KHuTrF3LSndf8pdxVwZj5e3VKImuGVa
44AG3a7MQvZ4xuNl1gh/0X0fZevUsK5uMpK0T7GvL9wCu2qN+dbPRQt6s3D+rcM5
xy+DBs4k327XKNI5PwVDBuv4pyEUI86sppQdEZKZTBigYqlWDHZicYcOKWba3Nd8
nhfEg7XB0Uv342kwyMqiV1qEAzmolUztOQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:03:31 2025 by rpki-client