Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/7a25de5f-177d-328b-a071-eb84c18ed52d.roa
File:                     7a25de5f-177d-328b-a071-eb84c18ed52d.roa (raw, json)
Hash identifier:          eHe3HXDcwpCoLvqzU1sk32WN6nk+NvpdX04boM2qAb4=
Subject key identifier:   7A:83:23:68:3C:79:B3:5D:FB:7F:DA:F7:D6:64:56:1B:4C:07:CF:3B
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F4328584B84E766DAA46F62B0DD50D400
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/7a25de5f-177d-328b-a071-eb84c18ed52d.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     14439
IP address blocks:        2602:fa02:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:66:da:a4:6f:62:b0:dd:50:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=af92780d-a613-4936-bf43-aa7704365a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:18:19:d2:be:79:17:d6:51:55:04:12:e9:
                    35:9b:75:4b:34:8e:63:77:ab:9e:fb:b0:8a:29:e5:
                    2a:52:a3:84:48:bc:bd:c9:06:a4:2d:60:95:63:2b:
                    c4:8b:5f:3a:77:ff:bb:ca:5f:64:84:df:bf:cd:af:
                    a1:21:9f:77:68:96:76:65:4d:b1:06:5a:c4:fd:8f:
                    60:10:75:21:d3:09:83:33:ce:2b:4c:2e:c8:36:1c:
                    b0:fe:e6:bd:c7:f2:a2:29:15:e1:ba:1e:73:48:33:
                    c0:bd:e2:14:db:dd:16:21:23:7f:c5:f4:3f:9b:81:
                    96:75:ba:7c:c7:60:6f:14:ae:b5:c1:24:2d:fb:a3:
                    57:4e:c8:81:b5:78:10:38:8d:0c:53:df:3d:a2:79:
                    db:1d:39:42:19:24:23:c3:00:62:26:09:ec:f1:e4:
                    3f:eb:f1:0e:27:cc:08:9f:31:b5:9c:4e:06:ce:fa:
                    fb:c8:33:51:c5:69:5a:b4:e7:03:41:d1:c1:b9:97:
                    44:e9:2a:df:a3:34:5e:13:35:c3:8b:51:41:dc:cd:
                    5a:58:63:1f:8e:5d:18:55:42:83:05:97:95:54:05:
                    32:04:ca:59:e9:67:d1:28:e0:87:07:9c:a6:d5:0f:
                    53:df:a3:bb:ed:00:0f:f1:05:ac:b8:eb:36:d5:1e:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:83:23:68:3C:79:B3:5D:FB:7F:DA:F7:D6:64:56:1B:4C:07:CF:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/7a25de5f-177d-328b-a071-eb84c18ed52d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa02:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:33:ad:98:0e:93:42:76:bb:0e:b8:26:25:74:e4:f4:ec:b3:
         2f:1b:a5:b0:b9:d2:39:34:f9:f3:d8:8c:02:76:c5:af:c7:7c:
         29:89:74:a9:2d:fe:4e:5a:0e:c8:dc:63:a8:20:28:58:1f:cd:
         fe:d4:d1:13:e5:89:b4:38:e7:98:b0:3d:55:ac:a2:d1:eb:d3:
         c7:42:7b:16:72:8b:b7:87:2b:02:4a:a5:00:e5:64:9c:41:bd:
         a4:f8:0c:49:bd:08:a7:c1:7f:db:79:8a:ea:34:60:55:c3:90:
         6b:f2:74:e6:f6:a9:39:c8:c0:6a:4a:5c:0d:01:ae:31:65:36:
         a5:89:f3:0a:e8:de:38:85:2f:f3:bb:ed:31:de:b5:a6:72:bd:
         9e:2b:19:3e:2d:df:4d:55:39:65:2c:a2:99:b5:27:86:99:28:
         33:b2:f1:b1:4b:33:bd:14:6c:2a:47:56:4a:14:b2:3a:b9:a6:
         88:50:b2:6e:a2:9c:41:dd:e7:d9:09:03:3c:9e:ba:be:d1:28:
         cc:b1:1e:5b:d1:1e:5b:ac:25:7b:67:a4:f6:53:0b:86:e4:44:
         4f:3a:cd:6d:35:91:f6:19:5a:02:94:dd:41:ca:c9:c6:a3:62:
         85:3c:e9:a5:4e:28:2d:df:cd:bc:85:d0:e6:50:d9:3d:11:2c:
         71:95:ae:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuE52bapG9isN1Q1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVkOTM0MDAtMGE2Zi00OTM4LTk5MjUtODU2YzZhY2Uz
OWRmMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk
YWY5Mjc4MGQtYTYxMy00OTM2LWJmNDMtYWE3NzA0MzY1YTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBoYGdK+eRfWUVUEEuk1m3VLNI5jd6ue+7CK
KeUqUqOESLy9yQakLWCVYyvEi186d/+7yl9khN+/za+hIZ93aJZ2ZU2xBlrE/Y9g
EHUh0wmDM84rTC7INhyw/ua9x/KiKRXhuh5zSDPAveIU290WISN/xfQ/m4GWdbp8
x2BvFK61wSQt+6NXTsiBtXgQOI0MU989onnbHTlCGSQjwwBiJgns8eQ/6/EOJ8wI
nzG1nE4Gzvr7yDNRxWlatOcDQdHBuZdE6SrfozReEzXDi1FB3M1aWGMfjl0YVUKD
BZeVVAUyBMpZ6WfRKOCHB5ym1Q9T36O77QAP8QWsuOs21R4cawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHqDI2g8ebNd+3/a99ZkVhtMB887MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNWQ5
MzQwMC0wYTZmLTQ5MzgtOTkyNS04NTZjNmFjZTM5ZGYvN2EyNWRlNWYtMTc3ZC0z
MjhiLWEwNzEtZWI4NGMxOGVkNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjVkOTM0MDAtMGE2Zi00OTM4LTk5
MjUtODU2YzZhY2UzOWRmL2Y1ZDkzNDAwLTBhNmYtNDkzOC05OTI1LTg1NmM2YWNl
MzlkZi5jcmwwHwYDVR0jBBgwFoAUrA+Cm0QWCz2wP5W2ggDuFayzH2swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNWQ5MzQwMC0wYTZmLTQ5MzgtOTkyNS04NTZj
NmFjZTM5ZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6AgAH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACIzrZgOk0J2uw64JiV05PTssy8bpbC50jk0+fPYjAJ2xa/HfCmJ
dKkt/k5aDsjcY6ggKFgfzf7U0RPlibQ455iwPVWsotHr08dCexZyi7eHKwJKpQDl
ZJxBvaT4DEm9CKfBf9t5iuo0YFXDkGvydOb2qTnIwGpKXA0BrjFlNqWJ8wro3jiF
L/O77THetaZyvZ4rGT4t301VOWUsopm1J4aZKDOy8bFLM70UbCpHVkoUsjq5pohQ
sm6inEHd59kJAzyeur7RKMyxHlvRHlusJXtnpPZTC4bkRE86zW01kfYZWgKU3UHK
ycajYoU86aVOKC3fzbyF0OZQ2T0RLHGVrpI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:13:24 2025 by rpki-client