Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c12041c-86cf-3b7e-b3a8-161875f3ebee.roa
File:                     9c12041c-86cf-3b7e-b3a8-161875f3ebee.roa (raw, json)
Hash identifier:          yepW9RMRqZUSIZzomNI6b1CwALShr0kJOr2ojvmT/Cc=
Subject key identifier:   0C:A6:58:88:E3:85:92:9D:64:38:42:57:E0:C7:03:E3:2E:88:80:53
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5225355388AC8D02FA1900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c12041c-86cf-3b7e-b3a8-161875f3ebee.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:81f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:25:35:53:88:ac:8d:02:fa:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=4cedb81f-ed21-4881-99ce-3cab76c7804d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:72:4c:48:29:75:d6:be:66:82:2a:15:8d:
                    d6:22:d1:1a:a3:c9:7d:3d:6f:40:64:88:16:71:bc:
                    75:7a:0d:8b:19:19:34:cc:a2:a8:a2:99:bc:e0:c9:
                    fa:3a:d6:56:6a:e1:60:36:7c:ab:56:55:70:1a:28:
                    0f:6d:fb:97:42:90:8d:e0:dc:b1:94:00:cf:5c:f5:
                    1a:96:f7:cf:e4:16:88:50:cd:e1:62:08:5f:fc:fb:
                    47:85:2c:ba:a8:55:b1:91:c0:80:40:d6:a4:79:87:
                    c4:8e:f4:0d:04:02:ab:6b:23:6f:86:98:88:ca:76:
                    01:01:80:2d:32:1d:78:96:1e:ce:3a:27:fe:6e:8d:
                    b3:89:24:3c:58:8a:06:f6:fb:13:22:44:3f:01:99:
                    f5:f7:c9:d9:92:27:b6:82:da:62:45:b5:10:64:0f:
                    f9:60:53:96:a3:a0:3d:92:2e:1a:67:44:e0:59:80:
                    a5:37:18:f7:bc:5e:9c:b2:28:8b:2e:e0:6f:bc:d0:
                    02:5c:4c:19:ca:ed:45:1e:64:4e:c8:d0:1a:6a:3e:
                    eb:07:ea:74:73:be:47:ce:e7:c9:de:01:2f:7a:46:
                    2c:62:08:31:f5:4e:a5:17:69:70:1c:3a:97:51:d7:
                    2d:eb:23:b0:f4:f9:2e:8b:fd:34:a9:36:b9:bd:fc:
                    dc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A6:58:88:E3:85:92:9D:64:38:42:57:E0:C7:03:E3:2E:88:80:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9c12041c-86cf-3b7e-b3a8-161875f3ebee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:f3:0b:d0:17:70:b5:2c:05:20:2c:a7:17:8d:d9:26:d8:
         22:b8:03:11:fc:84:0f:63:b4:aa:5b:dd:f0:e8:fa:9a:8d:76:
         c5:30:e5:6b:4a:ca:d7:21:b4:78:b8:0b:76:7b:d5:9e:9c:d2:
         38:66:8d:65:46:78:d3:6e:74:22:96:d0:8c:22:65:7d:4b:8c:
         4a:66:d8:c2:18:c0:46:81:c6:35:cb:85:9e:1e:19:1c:8c:ee:
         9d:52:67:13:17:4e:bf:df:9b:7b:22:65:12:18:d3:6d:9d:70:
         83:e7:4e:13:b5:de:f9:3d:5f:9f:12:43:5d:9d:3e:ed:ba:44:
         5d:98:17:ea:d4:dc:ed:5f:cd:bc:9c:be:2d:72:2b:e3:eb:c5:
         af:03:46:46:02:51:12:f3:d3:b8:4b:93:1b:fa:ec:44:74:62:
         52:86:b5:43:07:51:71:d9:f1:b5:42:f3:cd:00:ca:f0:d5:51:
         8a:db:e4:ee:44:b6:f3:f9:4d:b8:01:43:59:63:b5:6a:c6:70:
         08:a6:d4:34:66:be:2a:44:cd:c3:36:13:26:a7:a9:aa:70:3b:
         e1:18:f0:02:c8:45:df:93:dd:4d:1d:84:b8:62:85:85:ed:4d:
         7a:3e:26:81:4f:b9:35:a8:1c:ec:4d:79:3f:10:50:e3:db:11:
         78:2f:85:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiU1U4isjQL6GQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
NGNlZGI4MWYtZWQyMS00ODgxLTk5Y2UtM2NhYjc2Yzc4MDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3FyTEgpdda+ZoIqFY3WItEao8l9PW9AZIgW
cbx1eg2LGRk0zKKoopm84Mn6OtZWauFgNnyrVlVwGigPbfuXQpCN4NyxlADPXPUa
lvfP5BaIUM3hYghf/PtHhSy6qFWxkcCAQNakeYfEjvQNBAKrayNvhpiIynYBAYAt
Mh14lh7OOif+bo2ziSQ8WIoG9vsTIkQ/AZn198nZkie2gtpiRbUQZA/5YFOWo6A9
ki4aZ0TgWYClNxj3vF6csiiLLuBvvNACXEwZyu1FHmROyNAaaj7rB+p0c75HzufJ
3gEvekYsYggx9U6lF2lwHDqXUdct6yOw9Pkui/00qTa5vfzc2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAymWIjjhZKdZDhCV+DHA+MuiIBTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOWMxMjA0MWMtODZjZi0z
YjdlLWIzYTgtMTYxODc1ZjNlYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYHw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABLk8wvQF3C1LAUgLKcXjdkm2CK4AxH8hA9jtKpb3fDo+pqNdsUw
5WtKytchtHi4C3Z71Z6c0jhmjWVGeNNudCKW0IwiZX1LjEpm2MIYwEaBxjXLhZ4e
GRyM7p1SZxMXTr/fm3siZRIY022dcIPnThO13vk9X58SQ12dPu26RF2YF+rU3O1f
zbycvi1yK+Prxa8DRkYCURLz07hLkxv67ER0YlKGtUMHUXHZ8bVC880AyvDVUYrb
5O5EtvP5TbgBQ1ljtWrGcAim1DRmvipEzcM2EyanqapwO+EY8ALIRd+T3U0dhLhi
hYXtTXo+JoFPuTWoHOxNeT8QUOPbEXgvhTQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:49 2025 by rpki-client