Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/f4d23f6c-e75b-30b2-8021-3628a855e890.roa
File:                     f4d23f6c-e75b-30b2-8021-3628a855e890.roa (raw, json)
Hash identifier:          uxAtMFVi+B0U/ZR4uv8WhZsBw3wS6fgX1h8mhACtyUw=
Subject key identifier:   61:C2:DD:92:A2:E7:87:34:9A:24:2C:7F:F0:C2:D9:ED:6D:8F:75:11
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F4328584B328C4142FAB385A3FBA57180
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/f4d23f6c-e75b-30b2-8021-3628a855e890.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     206216
IP address blocks:        2602:fa08:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:41:42:fa:b3:85:a3:fb:a5:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=d170338a-c551-47f4-a52c-37a502fcc448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c3:0e:4e:be:b0:26:4e:2d:19:60:68:ca:bc:
                    c1:ec:fe:53:21:a9:38:7e:fa:84:b7:79:41:df:2d:
                    dd:6b:b1:30:cf:cb:47:f2:59:8c:2e:c3:b8:9a:66:
                    23:a5:fc:d6:05:62:91:96:0f:b5:5f:08:2e:09:ca:
                    26:68:04:90:4e:a3:f5:f1:e1:5a:0f:96:0f:eb:86:
                    77:0c:8a:58:b6:e0:e5:25:c0:42:a6:cb:47:24:f2:
                    2c:0e:64:fc:e0:17:b3:0e:a1:2f:e2:e7:52:4d:f1:
                    e6:f5:40:b6:2f:b3:48:27:c0:a0:4c:2d:6b:97:78:
                    90:62:71:60:d2:c5:49:9d:3a:fe:04:ea:27:60:84:
                    fe:98:30:b6:73:f7:04:6d:6b:9c:c0:0f:97:22:3e:
                    96:10:4a:c7:ff:3d:6b:19:ec:19:0b:89:bc:32:66:
                    b1:7b:c9:01:53:b2:f7:6f:c0:90:c9:1e:95:5e:27:
                    43:35:66:95:c6:80:28:e0:c6:1b:48:ad:03:6b:0b:
                    48:27:40:45:5f:3e:18:43:8a:49:df:d4:0c:7b:5c:
                    9b:23:a4:be:0a:d0:56:62:d0:d4:2e:bf:d1:bf:dd:
                    5c:b9:81:14:37:51:80:b8:6e:8a:23:f8:5a:a7:68:
                    8d:66:a9:94:39:dd:c1:46:4c:89:7a:62:68:70:60:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C2:DD:92:A2:E7:87:34:9A:24:2C:7F:F0:C2:D9:ED:6D:8F:75:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/f4d23f6c-e75b-30b2-8021-3628a855e890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a5:4a:9e:ff:46:dc:e0:0f:cb:9e:62:a8:4e:f5:ac:c0:8f:
         8c:64:b6:a5:8a:db:fc:37:57:33:c8:c3:f4:c8:2c:e8:31:d2:
         ea:77:66:24:6c:4b:e3:11:fd:8c:03:b8:d0:30:00:95:b6:97:
         38:af:5a:24:ee:21:77:ae:70:84:b4:05:79:d6:d8:7b:a8:52:
         a4:c4:7f:c9:c7:63:b0:83:df:89:b4:78:02:61:25:b3:28:5b:
         77:e6:5a:c4:68:3c:3b:a9:b2:5f:dc:f7:8c:af:10:63:7d:92:
         3e:b0:d0:52:d0:ed:02:39:d8:e1:70:a2:46:cb:9c:21:7e:8e:
         49:fc:19:49:45:0d:c1:c0:08:74:b7:f9:ed:ff:c6:a4:7b:7c:
         59:1c:4c:39:39:9d:23:b8:2b:c3:0a:18:63:0f:67:5e:c8:dd:
         d6:61:62:d5:20:6b:b8:67:3d:e7:1b:8c:6f:12:11:b1:bd:d3:
         15:98:6e:29:cc:f0:f1:70:aa:4c:df:5a:ce:a9:2d:0c:a3:8c:
         b3:3b:63:aa:cc:e1:0e:23:13:3c:e9:c3:d5:d4:da:ef:2e:02:
         6b:fe:5f:30:fa:d4:71:07:1c:c9:6e:ec:bc:92:d7:a9:fd:02:
         e7:da:05:61:1e:33:90:60:d6:dc:94:d6:c9:77:77:71:e1:34:
         e5:03:fb:cb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsyjEFC+rOFo/ulcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU0MWUwMjItNDE0Zi00NWY1LTk0MjYtYTc2NDNkYjFl
YzhkMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZDE3MDMzOGEtYzU1MS00N2Y0LWE1MmMtMzdhNTAyZmNjNDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MMOTr6wJk4tGWBoyrzB7P5TIak4fvqEt3lB
3y3da7Ewz8tH8lmMLsO4mmYjpfzWBWKRlg+1XwguCcomaASQTqP18eFaD5YP64Z3
DIpYtuDlJcBCpstHJPIsDmT84BezDqEv4udSTfHm9UC2L7NIJ8CgTC1rl3iQYnFg
0sVJnTr+BOonYIT+mDC2c/cEbWucwA+XIj6WEErH/z1rGewZC4m8Mmaxe8kBU7L3
b8CQyR6VXidDNWaVxoAo4MYbSK0DawtIJ0BFXz4YQ4pJ39QMe1ybI6S+CtBWYtDU
Lr/Rv91cuYEUN1GAuG6KI/hap2iNZqmUOd3BRkyJemJocGAXQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGHC3ZKi54c0miQsf/DC2e1tj3URMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81NTQx
ZTAyMi00MTRmLTQ1ZjUtOTQyNi1hNzY0M2RiMWVjOGQvZjRkMjNmNmMtZTc1Yi0z
MGIyLTgwMjEtMzYyOGE4NTVlODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTU0MWUwMjItNDE0Zi00NWY1LTk0
MjYtYTc2NDNkYjFlYzhkLzU1NDFlMDIyLTQxNGYtNDVmNS05NDI2LWE3NjQzZGIx
ZWM4ZC5jcmwwHwYDVR0jBBgwFoAU9XJmm/or1eRYLh/qGspnJJZrP6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81NTQxZTAyMi00MTRmLTQ1ZjUtOTQyNi1hNzY0
M2RiMWVjOGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6CAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ6lSp7/RtzgD8ueYqhO9azAj4xktqWK2/w3VzPIw/TILOgx0up3
ZiRsS+MR/YwDuNAwAJW2lzivWiTuIXeucIS0BXnW2HuoUqTEf8nHY7CD34m0eAJh
JbMoW3fmWsRoPDupsl/c94yvEGN9kj6w0FLQ7QI52OFwokbLnCF+jkn8GUlFDcHA
CHS3+e3/xqR7fFkcTDk5nSO4K8MKGGMPZ17I3dZhYtUga7hnPecbjG8SEbG90xWY
binM8PFwqkzfWs6pLQyjjLM7Y6rM4Q4jEzzpw9XU2u8uAmv+XzD61HEHHMlu7LyS
16n9AufaBWEeM5Bg1tyU1sl3d3HhNOUD+8s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:11:31 2025 by rpki-client