Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/ee8291b8-7a30-37ee-bfce-d3f432829ca9.roa
File:                     ee8291b8-7a30-37ee-bfce-d3f432829ca9.roa (raw, json)
Hash identifier:          x1jKqbxFHyQQofNhJZXl6RQ+2o7jz0bNBYeQfn/fNqg=
Subject key identifier:   45:D7:45:38:D8:86:B1:BE:C8:EE:6F:50:DB:16:A0:E4:F5:37:63:35
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F4328584B2496C6D48436418029D89080
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/ee8291b8-7a30-37ee-bfce-d3f432829ca9.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     12097
IP address blocks:        2606:fc00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:c6:d4:84:36:41:80:29:d8:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=72494c8a-1818-42a5-83c5-fea653a64942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:38:51:c7:43:1e:7a:66:c6:45:30:c8:da:a5:
                    8f:a2:d9:74:fe:10:23:1f:b3:d0:4c:2e:e2:ba:27:
                    c9:42:73:04:ed:5a:8c:8b:9e:db:90:7a:9e:6c:60:
                    d4:0e:04:b6:f2:44:df:88:63:3a:c1:3e:60:b4:9d:
                    8d:96:cd:1c:ad:d0:8d:3f:af:df:7e:fb:9b:fd:c8:
                    74:25:32:58:90:e3:90:ac:09:c5:a2:a5:3f:78:fd:
                    cd:3e:a2:58:4d:9c:08:a0:8e:18:5f:01:95:37:20:
                    07:cd:11:85:61:a0:bc:d9:f4:b3:dd:84:98:b7:48:
                    23:05:33:b9:3a:de:41:58:be:f1:6d:ae:cd:e0:6e:
                    1b:ce:e2:4c:5d:cc:71:55:7a:c3:66:fd:82:ab:df:
                    1f:0c:8e:34:3f:8e:1d:96:d8:82:5b:29:88:0f:f2:
                    ee:17:a0:99:6d:79:84:bd:2f:a0:c6:11:7c:1e:bc:
                    19:c2:90:ce:c8:2c:67:da:65:16:d1:01:ec:f7:a5:
                    63:f0:d2:82:01:a6:0c:02:d7:0a:fe:f8:fd:39:55:
                    3e:50:d3:bf:7b:85:4c:9f:51:3d:c2:ed:37:a5:c4:
                    4b:45:f0:a2:09:d4:e6:eb:16:a8:fe:38:42:20:10:
                    17:2f:37:7c:c9:a3:62:18:d2:97:78:3a:cd:e9:c9:
                    c4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D7:45:38:D8:86:B1:BE:C8:EE:6F:50:DB:16:A0:E4:F5:37:63:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/ee8291b8-7a30-37ee-bfce-d3f432829ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:96:84:36:52:e0:3b:c6:1a:79:87:64:ba:c7:86:0d:52:9c:
         37:7c:72:a1:70:4c:28:6f:6f:87:21:22:46:9d:6d:67:07:98:
         9d:9e:9b:86:d5:21:ce:f4:9e:52:23:0c:9a:4f:10:c6:c4:d2:
         81:7f:02:ee:6f:d8:41:c6:cc:64:a8:4d:d5:42:ff:b0:3e:32:
         49:2b:9d:10:5a:3b:ff:0d:5e:4e:07:d0:80:54:a2:a9:6b:19:
         ba:7d:ed:a3:7f:65:e1:c8:6a:d9:58:d2:f8:0e:f7:be:ed:a7:
         1c:10:89:5d:a4:2d:fd:28:db:33:03:e3:a2:4f:aa:81:2b:95:
         f3:9f:88:cb:f5:e5:95:ab:13:ab:3b:89:df:33:36:d1:33:57:
         89:57:f6:e0:75:49:78:e4:11:f5:5f:4b:d5:90:aa:e8:4c:f5:
         1a:1c:00:13:06:e9:63:e1:db:bc:60:da:35:bd:6f:98:7d:8a:
         99:f5:17:ba:27:ee:af:46:b0:18:b9:78:b6:0f:a9:e2:e7:a1:
         7c:d1:9e:07:91:c9:9b:88:3a:d8:63:ab:94:0e:40:80:1c:41:
         df:13:a9:8c:bf:8a:2f:e1:b6:4b:75:70:4b:62:99:7c:17:be:
         97:4b:c1:9a:ff:b4:4d:8d:aa:23:df:1c:c5:07:c7:dc:60:ad:
         20:b1:b8:7b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsklsbUhDZBgCnYkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJhZDVhNTgtM2FkZi00MWNiLTk1OTgtYjMyNjA1OTEz
OThjMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk
NzI0OTRjOGEtMTgxOC00MmE1LTgzYzUtZmVhNjUzYTY0OTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijhRx0MeembGRTDI2qWPotl0/hAjH7PQTC7i
uifJQnME7VqMi57bkHqebGDUDgS28kTfiGM6wT5gtJ2Nls0crdCNP6/ffvub/ch0
JTJYkOOQrAnFoqU/eP3NPqJYTZwIoI4YXwGVNyAHzRGFYaC82fSz3YSYt0gjBTO5
Ot5BWL7xba7N4G4bzuJMXcxxVXrDZv2Cq98fDI40P44dltiCWymID/LuF6CZbXmE
vS+gxhF8HrwZwpDOyCxn2mUW0QHs96Vj8NKCAaYMAtcK/vj9OVU+UNO/e4VMn1E9
wu03pcRLRfCiCdTm6xao/jhCIBAXLzd8yaNiGNKXeDrN6cnELwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEXXRTjYhrG+yO5vUNsWoOT1N2M1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFk
NWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2MDU5MTM5OGMvZWU4MjkxYjgtN2EzMC0z
N2VlLWJmY2UtZDNmNDMyODI5Y2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJhZDVhNTgtM2FkZi00MWNiLTk1
OTgtYjMyNjA1OTEzOThjLzAyYWQ1YTU4LTNhZGYtNDFjYi05NTk4LWIzMjYwNTkx
Mzk4Yy5jcmwwHwYDVR0jBBgwFoAUKNX25nvuh76t7kX/XRlWfFoxRZAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmFkNWE1OC0zYWRmLTQxY2ItOTU5OC1iMzI2
MDU5MTM5OGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb8ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCQloQ2UuA7xhp5h2S6x4YNUpw3fHKhcEwob2+HISJGnW1nB5idnpuG
1SHO9J5SIwyaTxDGxNKBfwLub9hBxsxkqE3VQv+wPjJJK50QWjv/DV5OB9CAVKKp
axm6fe2jf2XhyGrZWNL4Dve+7accEIldpC39KNszA+OiT6qBK5Xzn4jL9eWVqxOr
O4nfMzbRM1eJV/bgdUl45BH1X0vVkKroTPUaHAATBulj4du8YNo1vW+YfYqZ9Re6
J+6vRrAYuXi2D6ni56F80Z4HkcmbiDrYY6uUDkCAHEHfE6mMv4ov4bZLdXBLYpl8
F76XS8Ga/7RNjaoj3xzFB8fcYK0gsbh7
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:45:46 2025 by rpki-client