Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa
File:                     8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa (raw, json)
Hash identifier:          VUYDhwK+38fKL8On6WCk9CbxtYeyNyaqnu+YA6OwoTo=
Subject key identifier:   5A:CF:2E:6E:2F:F8:1E:D5:FE:11:4B:53:9A:51:0B:FA:8A:BB:FD:27
Certificate issuer:       /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial:       010D0C9F4328584AD0D6664793FA99B9BC15A080
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     40124
IP address blocks:        2602:299:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:66:47:93:fa:99:b9:bc:15:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=1c52dceb-5420-4075-9daf-8c189c93ae16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:96:a0:9e:89:33:fa:7c:1c:c0:28:9c:5b:5f:
                    73:6b:41:03:d2:c5:96:6b:ba:b0:f6:96:14:37:be:
                    98:68:00:c9:90:09:32:20:a0:cf:ee:b4:ae:68:1e:
                    69:0e:6b:67:6f:c7:c7:b9:12:77:74:ec:aa:54:46:
                    74:90:c2:4f:ba:d6:1d:48:71:44:fc:64:73:ed:c9:
                    d6:80:46:4f:18:04:b2:c7:69:3f:02:51:1e:2d:05:
                    27:6d:af:6f:45:ce:4f:67:58:bb:9d:2d:d2:b3:9f:
                    8e:49:dd:db:80:16:c0:0d:1e:db:fb:ed:25:a7:30:
                    5b:19:98:a6:1b:98:32:e4:a4:e7:07:ca:63:55:06:
                    37:89:ee:00:b0:51:c4:64:bc:47:a2:d2:12:b4:af:
                    9c:44:2e:8a:60:c4:9e:b9:b2:7a:a9:54:96:4d:a2:
                    13:a1:09:3e:0c:6d:8d:14:20:bf:37:b5:3e:4b:8d:
                    62:a3:82:5d:4b:79:b6:b9:06:ba:ec:04:f7:a0:0b:
                    c3:ae:cd:27:ce:54:77:db:86:28:cb:07:c2:3e:4e:
                    fd:ab:90:bc:7c:7a:68:ae:62:df:23:10:47:a7:8e:
                    08:55:81:6d:26:96:46:0b:66:5f:b1:aa:44:2b:f9:
                    60:05:20:46:8f:69:7c:0b:57:91:91:64:1d:04:f8:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CF:2E:6E:2F:F8:1E:D5:FE:11:4B:53:9A:51:0B:FA:8A:BB:FD:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:299:50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:cc:d8:30:ea:36:35:1d:e0:28:19:d4:ca:dc:0c:10:82:91:
         92:d1:0c:96:b0:3b:1d:bf:5c:97:ca:5d:fa:2c:5c:37:77:6c:
         a3:a9:38:9f:1e:0a:9f:79:ac:fe:d5:17:c3:49:ef:9a:c8:2c:
         b3:f9:8a:c2:41:70:92:6c:36:46:61:25:09:f6:9d:cc:0e:c8:
         4c:90:db:40:ce:1b:7d:0d:54:41:b2:9f:b6:74:9b:4c:2b:29:
         69:e9:52:e7:14:67:0b:67:50:88:f7:d1:4b:69:77:9c:3e:15:
         12:ed:a9:57:d9:4e:c9:31:cf:c9:b7:31:2a:b5:75:63:91:d0:
         89:b5:68:ce:06:f2:3f:32:e6:9a:c4:1f:68:31:41:79:2e:5d:
         05:09:4c:21:23:38:2b:45:67:59:8f:87:9d:ab:a4:81:71:a3:
         66:02:b5:6e:06:06:0e:29:7b:ab:92:6f:2e:bd:96:ef:16:c3:
         72:ce:f9:95:36:b1:cd:f9:fa:64:a7:32:92:88:69:41:e6:f9:
         9e:49:07:1f:fa:d3:15:33:82:87:4d:f7:c7:b6:ff:88:a5:b8:
         12:ec:39:68:90:8d:11:80:7e:69:1a:ad:ff:99:d4:e3:d0:57:
         e4:9f:06:59:cd:47:83:58:ae:75:3d:b2:ba:67:0e:e8:ec:79:
         f2:91:76:e1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErQ1mZHk/qZubwVoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ4YzkxNjctZTgxNi00ODM0LThmY2MtZjhiMGY5M2Zl
NmEwMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk
MWM1MmRjZWItNTQyMC00MDc1LTlkYWYtOGMxODljOTNhZTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpagnokz+nwcwCicW19za0ED0sWWa7qw9pYU
N76YaADJkAkyIKDP7rSuaB5pDmtnb8fHuRJ3dOyqVEZ0kMJPutYdSHFE/GRz7cnW
gEZPGASyx2k/AlEeLQUnba9vRc5PZ1i7nS3Ss5+OSd3bgBbADR7b++0lpzBbGZim
G5gy5KTnB8pjVQY3ie4AsFHEZLxHotIStK+cRC6KYMSeubJ6qVSWTaIToQk+DG2N
FCC/N7U+S41io4JdS3m2uQa67AT3oAvDrs0nzlR324YoywfCPk79q5C8fHpormLf
IxBHp44IVYFtJpZGC2ZfsapEK/lgBSBGj2l8C1eRkWQdBPiUOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFrPLm4v+B7V/hFLU5pRC/qKu/0nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDhj
OTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIwZjkzZmU2YTAvOGNkMGZmYWMtZWMyZC0z
ZTA2LWE5OGUtNGFlZTUwZWU5OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQ4YzkxNjctZTgxNi00ODM0LThm
Y2MtZjhiMGY5M2ZlNmEwLzFkOGM5MTY3LWU4MTYtNDgzNC04ZmNjLWY4YjBmOTNm
ZTZhMC5jcmwwHwYDVR0jBBgwFoAUimZZZr5AkQJF+JSyyEvT4ZHHDMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xZDhjOTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIw
ZjkzZmU2YTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgICmQBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGPM2DDqNjUd4CgZ1MrcDBCCkZLRDJawOx2/XJfKXfosXDd3bKOp
OJ8eCp95rP7VF8NJ75rILLP5isJBcJJsNkZhJQn2ncwOyEyQ20DOG30NVEGyn7Z0
m0wrKWnpUucUZwtnUIj30Utpd5w+FRLtqVfZTskxz8m3MSq1dWOR0Im1aM4G8j8y
5prEH2gxQXkuXQUJTCEjOCtFZ1mPh52rpIFxo2YCtW4GBg4pe6uSby69lu8Ww3LO
+ZU2sc35+mSnMpKIaUHm+Z5JBx/60xUzgodN98e2/4iluBLsOWiQjRGAfmkarf+Z
1OPQV+SfBlnNR4NYrnU9srpnDujsefKRduE=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:51:47 2025 by rpki-client