Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fd2d2464-423b-3706-b730-60bbb4c77770.roa
File:                     fd2d2464-423b-3706-b730-60bbb4c77770.roa (raw, json)
Hash identifier:          proNYJbI1exyOi1WkraBzW+33+oMAn/ZZ0gv99KbSgg=
Subject key identifier:   C9:32:32:7C:25:B1:AA:6F:25:C1:09:5E:24:3C:E6:F4:93:7E:0E:16
Certificate issuer:       /CN=fcd38c98-f51b-46ff-8d72-e170b174f3dc
Certificate serial:       010D0C9F4328584ACB40EDB0D6A05995137F0150
Authority key identifier: 9B:0D:F6:56:33:4A:4B:06:E1:A2:DD:D5:25:EB:11:FC:E0:95:42:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fd2d2464-423b-3706-b730-60bbb4c77770.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     400370
IP address blocks:        2602:815:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:ed:b0:d6:a0:59:95:13:7f:01:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd38c98-f51b-46ff-8d72-e170b174f3dc
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=40a7d999-d3e8-41ba-a86b-560b558d555d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:77:33:d5:6c:f5:ff:b7:ab:eb:06:19:38:74:
                    86:d5:e2:29:b4:df:eb:cd:6e:ba:bd:cd:e5:d2:79:
                    0a:df:0d:6f:e7:20:9f:aa:da:d6:70:80:d6:f9:63:
                    48:34:7b:16:fc:f3:58:26:03:9e:b9:e5:68:7e:f2:
                    cd:d8:d3:ac:12:c4:2c:49:c3:aa:4a:7e:98:df:50:
                    7c:8b:10:06:c1:f1:bd:62:6a:66:ae:d1:f8:fe:83:
                    2b:17:9d:9e:0c:3b:18:e5:ff:e9:78:32:b9:fc:5a:
                    3b:88:b5:2b:b6:07:66:33:6d:f5:08:04:83:fa:0a:
                    d7:fe:b1:64:88:9e:14:4f:a4:fe:8e:f6:51:65:18:
                    b5:cc:0c:d2:f1:1b:8f:3b:e5:e1:fd:60:ce:3b:a8:
                    5c:08:1b:fb:9b:a3:aa:21:d5:ca:a9:fd:80:5a:48:
                    76:e5:10:86:f2:04:d4:97:83:28:e3:bf:21:04:7f:
                    87:d5:7f:10:3c:8e:e8:17:fc:af:fd:b8:6e:07:28:
                    32:64:4f:44:5f:fb:2a:aa:ff:3b:53:d7:3f:0b:0e:
                    d1:ae:3f:87:9b:85:b6:1b:53:04:0b:af:9f:f6:50:
                    28:20:ce:64:93:7e:89:50:23:b0:ed:2b:d2:62:9e:
                    b6:f1:82:f3:6a:14:be:f0:ca:07:c7:ea:ec:53:85:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:32:32:7C:25:B1:AA:6F:25:C1:09:5E:24:3C:E6:F4:93:7E:0E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fd2d2464-423b-3706-b730-60bbb4c77770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.crl

            X509v3 Authority Key Identifier:
                keyid:9B:0D:F6:56:33:4A:4B:06:E1:A2:DD:D5:25:EB:11:FC:E0:95:42:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:26:37:b3:69:aa:30:77:de:de:9a:68:8f:08:0d:1c:95:90:
         f5:15:c1:9f:71:e6:10:78:43:06:24:d7:ad:1f:40:be:36:29:
         80:74:20:67:0b:a0:7e:77:22:1a:12:e3:18:86:0e:6f:5c:97:
         19:38:00:95:1b:5f:9b:7f:ea:a7:99:7b:63:98:4e:0b:17:e7:
         1e:bd:51:91:7f:c7:77:8b:ba:e6:fb:4b:fa:80:fc:cd:79:a7:
         61:5e:83:74:32:ef:fe:02:30:f5:74:13:7d:65:83:42:c8:37:
         ec:5a:47:a7:e0:8c:ba:0a:66:f7:73:ed:d0:39:8c:e8:1b:73:
         d5:34:62:42:29:4a:7b:61:12:e3:2b:61:4f:3f:10:fa:ee:0b:
         bd:72:9a:d7:c4:cc:4f:d2:35:2a:7b:f6:52:f9:eb:3f:b0:2c:
         a7:2d:9f:7d:e4:81:2f:38:61:28:ef:eb:7e:7b:c9:30:4f:ea:
         b6:b5:87:8b:d2:bb:65:b3:2f:df:99:bb:b1:79:af:26:64:e7:
         bb:08:e3:4f:a1:88:81:8b:5b:24:33:b8:3f:57:5a:71:c7:42:
         8d:53:b4:ad:98:4b:00:e1:8b:af:10:db:91:d9:14:99:13:f7:
         4d:58:88:b7:39:73:be:12:43:f5:2b:c7:03:72:51:8c:7a:0e:
         27:a3:01:6b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErLQO2w1qBZlRN/AVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmNkMzhjOTgtZjUxYi00NmZmLThkNzItZTE3MGIxNzRm
M2RjMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
NDBhN2Q5OTktZDNlOC00MWJhLWE4NmItNTYwYjU1OGQ1NTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3cz1Wz1/7er6wYZOHSG1eIptN/rzW66vc3l
0nkK3w1v5yCfqtrWcIDW+WNINHsW/PNYJgOeueVofvLN2NOsEsQsScOqSn6Y31B8
ixAGwfG9YmpmrtH4/oMrF52eDDsY5f/peDK5/Fo7iLUrtgdmM231CASD+grX/rFk
iJ4UT6T+jvZRZRi1zAzS8RuPO+Xh/WDOO6hcCBv7m6OqIdXKqf2AWkh25RCG8gTU
l4Mo478hBH+H1X8QPI7oF/yv/bhuBygyZE9EX/sqqv87U9c/Cw7Rrj+Hm4W2G1ME
C6+f9lAoIM5kk36JUCOw7SvSYp628YLzahS+8MoHx+rsU4We7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMkyMnwlsapvJcEJXiQ85vSTfg4WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mY2Qz
OGM5OC1mNTFiLTQ2ZmYtOGQ3Mi1lMTcwYjE3NGYzZGMvZmQyZDI0NjQtNDIzYi0z
NzA2LWI3MzAtNjBiYmI0Yzc3NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmNkMzhjOTgtZjUxYi00NmZmLThk
NzItZTE3MGIxNzRmM2RjL2ZjZDM4Yzk4LWY1MWItNDZmZi04ZDcyLWUxNzBiMTc0
ZjNkYy5jcmwwHwYDVR0jBBgwFoAUmw32VjNKSwbhot3VJesR/OCVQtUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mY2QzOGM5OC1mNTFiLTQ2ZmYtOGQ3Mi1lMTcw
YjE3NGYzZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFaAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFYmN7NpqjB33t6aaI8IDRyVkPUVwZ9x5hB4QwYk160fQL42KYB0
IGcLoH53IhoS4xiGDm9clxk4AJUbX5t/6qeZe2OYTgsX5x69UZF/x3eLuub7S/qA
/M15p2Feg3Qy7/4CMPV0E31lg0LIN+xaR6fgjLoKZvdz7dA5jOgbc9U0YkIpSnth
EuMrYU8/EPruC71ymtfEzE/SNSp79lL56z+wLKctn33kgS84YSjv6357yTBP6ra1
h4vSu2WzL9+Zu7F5ryZk57sI40+hiIGLWyQzuD9XWnHHQo1TtK2YSwDhi68Q25HZ
FJkT901YiLc5c74SQ/UrxwNyUYx6DiejAWs=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:54:48 2025 by rpki-client