Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa
File:                     2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa (raw, json)
Hash identifier:          YQF4nB95vw0/0HgEkQRjKWHIQhbGH9efCkGRjSmPZds=
Subject key identifier:   CF:D6:7A:16:D8:19:5F:2C:BF:1A:BA:ED:94:35:1D:38:E7:B7:47:1C
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584B5C6C7755B9EA8DD855BACB40
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     26768
IP address blocks:        2602:2a4:9b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:77:55:b9:ea:8d:d8:55:ba:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=e909401b-6a46-4f33-96b8-9d459ff1f380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:90:59:bd:98:8c:7f:6b:01:c5:33:cd:64:3f:
                    1d:60:ce:ae:29:59:e0:97:a7:b3:45:e1:04:c5:db:
                    29:24:c8:af:fd:f6:0c:67:6c:49:be:71:c3:2e:d5:
                    80:40:20:c1:97:56:1d:c3:8e:ee:fe:61:1e:fa:08:
                    28:19:c0:c6:6b:6b:ad:34:1a:fc:84:bb:be:5d:96:
                    e7:76:3c:dc:4f:e5:06:ed:b0:bd:cb:6f:c1:0d:e4:
                    3f:d3:a2:55:0c:70:75:30:23:96:d0:b0:cd:00:d0:
                    19:a1:7f:55:c5:41:a5:68:d1:22:0c:66:8b:53:88:
                    84:1e:1f:a1:3e:ae:b8:75:49:4e:52:30:74:27:af:
                    22:4e:48:03:41:c5:7c:32:51:17:4e:d7:cc:d7:d7:
                    54:0c:67:11:33:5a:50:b3:15:1f:f5:07:64:af:9e:
                    d4:54:af:14:d3:b1:c9:f0:d5:7c:76:a9:01:7f:04:
                    a2:1b:97:81:f7:d8:b1:b3:4c:8e:fa:12:0a:e1:8e:
                    2e:f7:d2:91:88:ac:f6:5a:5d:08:40:62:c7:a7:1c:
                    54:68:48:63:17:71:26:b4:e1:c6:68:a6:b0:17:83:
                    30:b0:53:30:f2:9c:d0:d1:d0:27:31:1b:e4:d6:5f:
                    3e:17:51:f6:f2:a0:68:b9:16:5b:60:c5:13:82:c5:
                    53:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D6:7A:16:D8:19:5F:2C:BF:1A:BA:ED:94:35:1D:38:E7:B7:47:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4:9b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fb:e1:8b:41:d4:64:83:83:18:ae:67:dc:01:25:5c:02:47:
         71:3c:7c:67:e4:15:90:de:cf:26:9e:42:0b:30:a9:f6:62:85:
         eb:0d:4d:4a:df:e0:51:d1:49:41:59:97:58:0a:6d:eb:e6:40:
         6a:e9:62:b9:ed:c7:7f:56:f2:7e:1d:57:fd:81:57:a4:37:c8:
         dc:8a:2c:07:b6:3e:78:59:f6:f6:35:cd:fb:0a:6d:23:34:06:
         90:4a:94:e2:72:b8:b6:b0:7a:aa:76:be:2f:8a:17:26:a5:64:
         4d:42:97:29:b0:66:4f:8c:94:f9:ce:7d:f2:39:63:82:6d:9f:
         78:d9:c4:46:88:34:01:1b:b3:63:86:8c:19:36:66:be:30:62:
         b6:aa:be:c6:e5:56:7e:df:e3:2a:b9:ed:08:01:47:bc:fd:d1:
         ac:3c:ea:f9:c7:d9:88:20:f0:a9:d4:05:ae:09:1b:04:bf:b2:
         ac:c7:15:9a:ff:24:20:61:25:06:1b:43:4e:fd:52:53:4c:a2:
         4d:f5:d0:65:30:f6:22:f9:a4:c3:26:05:f3:6b:4b:71:87:e2:
         bd:e7:cf:03:fb:2a:68:35:14:fa:e4:79:da:91:2f:4e:2b:ba:
         be:ed:2b:af:dc:e3:3c:02:e2:55:e5:cd:82:7a:6b:06:04:b2:
         bb:84:2c:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtcbHdVueqN2FW6y0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl
ZmIwMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZTkwOTQwMWItNmE0Ni00ZjMzLTk2YjgtOWQ0NTlmZjFmMzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZBZvZiMf2sBxTPNZD8dYM6uKVngl6ezReEE
xdspJMiv/fYMZ2xJvnHDLtWAQCDBl1Ydw47u/mEe+ggoGcDGa2utNBr8hLu+XZbn
djzcT+UG7bC9y2/BDeQ/06JVDHB1MCOW0LDNANAZoX9VxUGlaNEiDGaLU4iEHh+h
Pq64dUlOUjB0J68iTkgDQcV8MlEXTtfM19dUDGcRM1pQsxUf9Qdkr57UVK8U07HJ
8NV8dqkBfwSiG5eB99ixs0yO+hIK4Y4u99KRiKz2Wl0IQGLHpxxUaEhjF3EmtOHG
aKawF4MwsFMw8pzQ0dAnMRvk1l8+F1H28qBouRZbYMUTgsVT9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM/WehbYGV8svxq67ZQ1HTjnt0ccMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy
MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvMmJjMmUwMjYtZWQzYi0z
YjZhLWI1NGUtYjExNWUyMzQzMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy
YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3
ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4
ZjgwN2VmYjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICpACb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFv74YtB1GSDgxiuZ9wBJVwCR3E8fGfkFZDezyaeQgswqfZihesN
TUrf4FHRSUFZl1gKbevmQGrpYrntx39W8n4dV/2BV6Q3yNyKLAe2PnhZ9vY1zfsK
bSM0BpBKlOJyuLaweqp2vi+KFyalZE1ClymwZk+MlPnOffI5Y4Jtn3jZxEaINAEb
s2OGjBk2Zr4wYraqvsblVn7f4yq57QgBR7z90aw86vnH2Ygg8KnUBa4JGwS/sqzH
FZr/JCBhJQYbQ079UlNMok310GUw9iL5pMMmBfNrS3GH4r3nzwP7Kmg1FPrkedqR
L04rur7tK6/c4zwC4lXlzYJ6awYEsruELBM=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:34:29 2025 by rpki-client