Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61f51516-f43f-445a-8a2a-48f9438d2184/4b3a4a93-838d-3ae1-b0ea-b96f08bc6e81.roa
File:                     4b3a4a93-838d-3ae1-b0ea-b96f08bc6e81.roa (raw, json)
Hash identifier:          oTuaOZQss8ns3Atba7gzcqx2PFYh4kONyLl0pHALSZ4=
Subject key identifier:   94:B2:C8:5A:4F:36:38:E7:3B:FD:9E:C8:7B:97:97:4C:A9:3A:73:65
Certificate issuer:       /CN=61f51516-f43f-445a-8a2a-48f9438d2184
Certificate serial:       010D0C9F4328584B944228AF47EE225348D72300
Authority key identifier: 4C:8E:42:AF:6B:74:0C:F1:31:38:66:60:21:5F:89:CE:D2:4C:97:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61f51516-f43f-445a-8a2a-48f9438d2184.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61f51516-f43f-445a-8a2a-48f9438d2184/4b3a4a93-838d-3ae1-b0ea-b96f08bc6e81.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     25848
IP address blocks:        2602:fd25::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61f51516-f43f-445a-8a2a-48f9438d2184/61f51516-f43f-445a-8a2a-48f9438d2184.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61f51516-f43f-445a-8a2a-48f9438d2184/61f51516-f43f-445a-8a2a-48f9438d2184.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61f51516-f43f-445a-8a2a-48f9438d2184.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:28:af:47:ee:22:53:48:d7:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f51516-f43f-445a-8a2a-48f9438d2184
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=c42f6239-15bf-42c9-8a7a-3773b79c5a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:eb:1e:69:6f:c0:58:e4:4c:48:c6:8b:e6:61:
                    c1:af:c2:93:2a:21:62:7a:78:48:39:4c:52:4f:cb:
                    46:cc:da:72:9c:35:cf:d9:09:23:01:80:c8:27:66:
                    31:e7:97:de:65:9f:a1:16:10:19:6c:00:25:e4:89:
                    5c:9e:60:f9:b6:68:c4:b5:5d:4e:ff:d4:9c:f1:f4:
                    71:d9:d7:18:7b:98:f3:15:fd:be:dc:ae:9d:a7:03:
                    b3:db:1b:01:f8:f9:b2:4e:88:27:48:97:e1:83:c0:
                    aa:6e:b8:e0:2e:c5:4f:90:52:18:52:e6:c9:f4:a8:
                    12:83:ed:2e:0c:03:f2:ff:02:5f:5d:c3:b8:9b:9e:
                    b1:8d:32:5d:ad:b2:82:dd:a1:25:7d:ea:20:75:02:
                    61:bf:c3:71:cd:9a:62:9f:9d:bd:cb:f9:40:6d:46:
                    b5:34:3c:7c:74:c0:8c:8c:34:8b:2b:56:b6:74:47:
                    b1:39:8d:11:ef:24:00:a8:a3:a9:b5:0f:0e:03:77:
                    ab:d7:fe:52:15:38:02:85:5c:8d:4d:1b:0e:6a:7a:
                    2f:d3:7a:78:b2:5b:c0:42:7d:14:89:6f:d9:0b:f2:
                    16:c2:58:76:84:13:1b:b9:42:48:30:29:46:de:7e:
                    7f:29:5e:31:e8:13:78:e2:02:a3:7f:22:74:ce:50:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B2:C8:5A:4F:36:38:E7:3B:FD:9E:C8:7B:97:97:4C:A9:3A:73:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61f51516-f43f-445a-8a2a-48f9438d2184/4b3a4a93-838d-3ae1-b0ea-b96f08bc6e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61f51516-f43f-445a-8a2a-48f9438d2184/61f51516-f43f-445a-8a2a-48f9438d2184.crl

            X509v3 Authority Key Identifier:
                keyid:4C:8E:42:AF:6B:74:0C:F1:31:38:66:60:21:5F:89:CE:D2:4C:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/61f51516-f43f-445a-8a2a-48f9438d2184.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd25::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2d:fc:97:37:22:f1:17:2f:49:0c:52:9a:b2:98:0d:0a:fc:
         c5:9b:40:13:dd:3d:c0:69:5a:3f:f3:58:1a:f1:2c:ac:d2:65:
         cf:0b:36:9f:e1:ab:5d:78:17:d6:42:f5:c7:e5:42:a9:58:94:
         3f:5a:0e:0a:ea:0e:72:e7:06:6d:1a:fd:bd:09:86:ab:58:a5:
         45:54:73:46:0b:84:6d:14:07:28:bb:7e:2e:20:aa:50:20:d3:
         88:8d:f8:8c:9f:08:c5:ad:91:d4:7b:81:da:61:b7:94:04:f8:
         a9:ab:7d:5c:0f:9c:56:4c:61:71:e9:1d:e5:e3:51:4d:43:9a:
         29:8c:c1:f1:09:e1:a0:1a:ce:2c:85:6f:af:aa:cf:eb:4e:b5:
         6d:dc:59:05:2e:e9:f4:06:7a:3d:57:a9:a4:8d:f9:e8:51:1e:
         57:8b:fc:c1:b0:5f:9c:e3:11:90:22:46:b3:b6:b4:03:4e:11:
         78:15:54:d8:24:9e:b9:ca:3d:87:e6:c2:97:31:4e:1c:b7:2c:
         8e:18:6f:fe:42:2c:fd:d0:b3:c7:f0:46:32:03:3e:78:ad:33:
         d5:bd:63:83:64:71:35:e8:54:b1:82:f1:06:ce:30:9c:de:0c:
         97:75:f4:74:a0:a1:f1:41:12:ad:84:82:af:f5:46:29:3a:0f:
         2c:9e:f1:29
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuUQiivR+4iU0jXIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmNTE1MTYtZjQzZi00NDVhLThhMmEtNDhmOTQzOGQy
MTg0MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk
YzQyZjYyMzktMTViZi00MmM5LThhN2EtMzc3M2I3OWM1YTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuseaW/AWORMSMaL5mHBr8KTKiFienhIOUxS
T8tGzNpynDXP2QkjAYDIJ2Yx55feZZ+hFhAZbAAl5IlcnmD5tmjEtV1O/9Sc8fRx
2dcYe5jzFf2+3K6dpwOz2xsB+PmyTognSJfhg8CqbrjgLsVPkFIYUubJ9KgSg+0u
DAPy/wJfXcO4m56xjTJdrbKC3aElfeogdQJhv8NxzZpin529y/lAbUa1NDx8dMCM
jDSLK1a2dEexOY0R7yQAqKOptQ8OA3er1/5SFTgChVyNTRsOanov03p4slvAQn0U
iW/ZC/IWwlh2hBMbuUJIMClG3n5/KV4x6BN44gKjfyJ0zlBZQwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJSyyFpPNjjnO/2eyHuXl0ypOnNlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82MWY1
MTUxNi1mNDNmLTQ0NWEtOGEyYS00OGY5NDM4ZDIxODQvNGIzYTRhOTMtODM4ZC0z
YWUxLWIwZWEtYjk2ZjA4YmM2ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjFmNTE1MTYtZjQzZi00NDVhLThh
MmEtNDhmOTQzOGQyMTg0LzYxZjUxNTE2LWY0M2YtNDQ1YS04YTJhLTQ4Zjk0Mzhk
MjE4NC5jcmwwHwYDVR0jBBgwFoAUTI5Cr2t0DPExOGZgIV+JztJMl3QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82MWY1MTUxNi1mNDNmLTQ0NWEtOGEyYS00OGY5
NDM4ZDIxODQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9JQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOS38lzci8RcvSQxSmrKYDQr8xZtAE909wGlaP/NYGvEsrNJlzws2
n+GrXXgX1kL1x+VCqViUP1oOCuoOcucGbRr9vQmGq1ilRVRzRguEbRQHKLt+LiCq
UCDTiI34jJ8Ixa2R1HuB2mG3lAT4qat9XA+cVkxhcekd5eNRTUOaKYzB8QnhoBrO
LIVvr6rP6061bdxZBS7p9AZ6PVeppI356FEeV4v8wbBfnOMRkCJGs7a0A04ReBVU
2CSeuco9h+bClzFOHLcsjhhv/kIs/dCzx/BGMgM+eK0z1b1jg2RxNehUsYLxBs4w
nN4Ml3X0dKCh8UESrYSCr/VGKToPLJ7xKQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:27:51 2025 by rpki-client