Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/ce465ca3-6dd8-3a23-a263-8fe98ed65dc9.roa
File:                     ce465ca3-6dd8-3a23-a263-8fe98ed65dc9.roa (raw, json)
Hash identifier:          Zx2As0BqLc2V5GK4bUI0xY6x6uYeYaK3lrGzopIUAGQ=
Subject key identifier:   72:D4:00:81:5C:04:A5:D0:E3:F6:1C:A5:1B:1C:6F:A1:9C:D2:60:BD
Certificate issuer:       /CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
Certificate serial:       010D0C9F4328584B7B941D5610C5322D22A20280
Authority key identifier: C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/ce465ca3-6dd8-3a23-a263-8fe98ed65dc9.roa
Signing time:             Sat 11 Oct 2025 04:50:34 +0000
ROA not before:           Sat 11 Oct 2025 04:50:34 +0000
ROA not after:            Fri 09 Jan 2026 05:50:34 +0000
asID:                     401746
IP address blocks:        2602:f75c:f40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:94:1d:56:10:c5:32:2d:22:a2:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
        Validity
            Not Before: Oct 11 04:50:34 2025 GMT
            Not After : Jan  9 05:50:34 2026 GMT
        Subject: CN=c71b46c7-e5d6-4516-974a-86df618a2cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:7f:a9:71:f1:9d:c8:b3:2c:9b:ad:e6:44:
                    bb:0b:15:b6:91:0d:f7:7c:fc:fa:9b:3f:76:e4:53:
                    a5:19:5d:72:6c:dd:ec:b3:82:af:4b:82:c7:3b:f5:
                    e1:c2:64:f8:4a:aa:e1:a6:20:0f:a0:af:b7:64:f5:
                    ac:05:da:77:e0:26:3b:5d:e0:95:a0:7f:06:e5:61:
                    eb:75:03:f1:7f:5c:0b:ac:6b:12:20:95:c0:93:3b:
                    07:44:41:a2:85:88:49:81:b0:db:15:64:10:d3:95:
                    b4:00:d5:dc:b2:54:ff:98:ab:e3:ac:94:a8:b2:e1:
                    6b:bc:ca:70:ed:71:1d:e9:c3:81:4e:c8:49:ba:58:
                    c9:bc:d1:b5:8b:2e:94:58:d0:a0:79:5b:1f:9c:be:
                    f1:cd:4e:65:19:85:1b:66:d7:5c:27:04:77:67:15:
                    13:f5:9e:32:1e:26:66:c4:e3:e5:7c:80:75:e5:46:
                    2b:fc:7f:4b:e5:b5:5f:d8:57:e7:ed:9a:5a:98:5d:
                    d2:1d:e5:69:13:ec:2a:8f:a8:0a:1c:95:b9:cf:da:
                    7f:b4:b1:55:a7:c4:e1:5c:4a:36:c9:48:08:ef:da:
                    d2:14:9d:ef:01:5c:45:7a:88:ae:da:ed:4f:31:47:
                    2a:16:cd:f9:9a:17:04:8e:27:6f:dd:b6:97:1d:f3:
                    f7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D4:00:81:5C:04:A5:D0:E3:F6:1C:A5:1B:1C:6F:A1:9C:D2:60:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/ce465ca3-6dd8-3a23-a263-8fe98ed65dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl

            X509v3 Authority Key Identifier:
                keyid:C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f75c:f40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c0:8b:60:07:2a:54:08:1a:1b:62:fe:e6:df:d6:4d:87:ab:
         2f:29:ac:27:58:a0:ba:f5:a2:b3:d9:e3:ae:f0:44:9c:9e:4e:
         96:0c:98:72:1b:66:97:a3:4c:8f:ef:da:d5:43:3b:5e:0b:a6:
         c3:75:75:1f:52:d7:99:f9:9f:a6:d0:25:52:2e:a3:64:13:aa:
         5f:78:32:de:b5:e1:d5:7f:c4:11:d5:00:61:a0:14:a9:f1:dc:
         4a:b4:aa:12:80:c2:4d:b5:e2:6d:21:95:dd:4e:1f:f4:7e:36:
         8d:82:bd:6d:37:6a:d7:7e:f8:87:31:25:da:51:56:ae:9d:11:
         3f:e9:a9:6f:e9:e7:6b:a2:15:d3:b9:45:cf:c7:bb:17:c7:29:
         79:a2:14:66:26:46:16:71:1d:e9:03:47:47:7a:3f:30:52:ff:
         b5:f2:be:a4:1e:d9:b1:08:90:a4:11:02:74:a4:bb:0c:57:a7:
         d3:c5:ed:f2:45:eb:fd:51:df:f4:d9:4b:c3:fb:bf:7c:8c:fe:
         4e:cd:5e:f8:d6:ff:d0:f6:24:84:aa:5e:5f:d6:8d:77:db:5d:
         4a:d8:34:36:66:73:8d:33:72:7b:08:17:c6:b3:9e:93:32:8a:
         f5:f1:ec:a9:e2:64:b1:36:c5:e6:52:dd:1e:5c:49:3c:0c:7d:
         8e:8a:67:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt7lB1WEMUyLSKiAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzUyMTBiMWYtNDhmMi00MGVlLTliMTItY2RkYmFlMjBl
MTJhMB4XDTI1MTAxMTA0NTAzNFoXDTI2MDEwOTA1NTAzNFowLzEtMCsGA1UEAxMk
YzcxYjQ2YzctZTVkNi00NTE2LTk3NGEtODZkZjYxOGEyY2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC5/qXHxncizLJut5kS7CxW2kQ33fPz6mz92
5FOlGV1ybN3ss4KvS4LHO/XhwmT4SqrhpiAPoK+3ZPWsBdp34CY7XeCVoH8G5WHr
dQPxf1wLrGsSIJXAkzsHREGihYhJgbDbFWQQ05W0ANXcslT/mKvjrJSosuFrvMpw
7XEd6cOBTshJuljJvNG1iy6UWNCgeVsfnL7xzU5lGYUbZtdcJwR3ZxUT9Z4yHiZm
xOPlfIB15UYr/H9L5bVf2Ffn7ZpamF3SHeVpE+wqj6gKHJW5z9p/tLFVp8ThXEo2
yUgI79rSFJ3vAVxFeoiu2u1PMUcqFs35mhcEjidv3baXHfP3HwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHLUAIFcBKXQ4/YcpRscb6Gc0mC9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NTIx
MGIxZi00OGYyLTQwZWUtOWIxMi1jZGRiYWUyMGUxMmEvY2U0NjVjYTMtNmRkOC0z
YTIzLWEyNjMtOGZlOThlZDY1ZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzUyMTBiMWYtNDhmMi00MGVlLTli
MTItY2RkYmFlMjBlMTJhLzc1MjEwYjFmLTQ4ZjItNDBlZS05YjEyLWNkZGJhZTIw
ZTEyYS5jcmwwHwYDVR0jBBgwFoAUxnqbNxG5kFsCtGVECy+knYcrdFUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83NTIxMGIxZi00OGYyLTQwZWUtOWIxMi1jZGRi
YWUyMGUxMmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL3XA9A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACjAi2AHKlQIGhti/ubf1k2Hqy8prCdYoLr1orPZ467wRJyeTpYM
mHIbZpejTI/v2tVDO14LpsN1dR9S15n5n6bQJVIuo2QTql94Mt614dV/xBHVAGGg
FKnx3Eq0qhKAwk214m0hld1OH/R+No2CvW03atd++IcxJdpRVq6dET/pqW/p52ui
FdO5Rc/HuxfHKXmiFGYmRhZxHekDR0d6PzBS/7XyvqQe2bEIkKQRAnSkuwxXp9PF
7fJF6/1R3/TZS8P7v3yM/k7NXvjW/9D2JISqXl/WjXfbXUrYNDZmc40zcnsIF8az
npMyivXx7KniZLE2xeZS3R5cSTwMfY6KZwU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:51 2025 by rpki-client