Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af79b73a-73f7-3c02-92d3-7fb92b438d04.roa
File:                     af79b73a-73f7-3c02-92d3-7fb92b438d04.roa (raw, json)
Hash identifier:          H0ikIZT06q1386a2Iedu9GR1tfSTJ32HrnxdYpBnq8M=
Subject key identifier:   CB:C6:FC:51:2B:31:17:4A:56:B6:25:40:93:68:37:8E:4F:C7:C3:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4BAC6075AAC84C617759F200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af79b73a-73f7-3c02-92d3-7fb92b438d04.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     35994
IP address blocks:        2600:1408:9400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:60:75:aa:c8:4c:61:77:59:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=9cfaa974-bc71-41e2-8309-2a14d63bf99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8b:eb:12:2b:6e:70:aa:b2:ef:6f:8a:01:da:
                    82:a8:3b:d5:90:59:8b:30:eb:3b:91:33:2c:3a:1d:
                    a0:26:f6:fd:3e:5f:22:89:e6:30:60:91:7a:3a:82:
                    3c:fc:9f:b5:1e:a0:1b:a3:23:61:6a:4e:f7:6b:dc:
                    91:82:9f:ca:e9:e5:31:68:04:65:50:71:85:24:49:
                    3e:84:2f:ad:53:4d:10:3f:d3:c5:0a:21:9e:73:d0:
                    ea:c3:9b:66:6a:5b:3b:f8:03:02:5e:86:14:b2:a2:
                    11:48:69:3d:fa:03:35:41:2b:2e:dd:e8:f7:4b:d7:
                    bf:32:d9:4a:70:a2:23:5d:ed:55:bb:71:2a:0c:d6:
                    52:ff:7a:02:ec:4c:01:0e:e2:53:19:c7:94:7e:89:
                    74:c9:d3:9c:88:b3:c0:77:42:d5:bb:c1:38:dc:fe:
                    63:ad:42:d1:46:24:b6:85:ba:7e:05:31:97:98:93:
                    1d:c4:66:f0:d8:be:3f:0b:f7:fd:cd:80:02:d5:9b:
                    a0:69:db:94:66:14:3a:6f:9a:ea:41:e8:41:a4:6d:
                    53:f3:aa:29:8a:60:7f:c1:0c:d7:b9:13:f0:15:bd:
                    de:33:a6:81:f8:b2:c1:7c:14:b6:9e:9a:dd:ff:01:
                    88:e4:0a:24:51:bc:7a:be:5a:92:05:9b:22:cd:7b:
                    8f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C6:FC:51:2B:31:17:4A:56:B6:25:40:93:68:37:8E:4F:C7:C3:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af79b73a-73f7-3c02-92d3-7fb92b438d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:9400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:27:80:71:6f:7c:4c:e2:19:b4:38:7d:09:5b:e4:40:06:9f:
         df:42:48:86:bd:e8:30:40:80:33:3f:11:9b:4f:30:cd:14:9b:
         5d:95:13:a6:d4:05:1a:97:8a:d4:38:8d:3a:88:91:f6:f5:18:
         fd:45:d3:6e:08:f3:5a:f4:e0:5c:96:0d:17:f4:bf:e2:ef:65:
         83:ba:be:20:b1:cf:89:91:65:ed:7c:ae:58:0e:31:16:9d:44:
         f4:79:00:93:f7:81:8e:d2:c0:e5:c5:c5:2b:02:ea:56:5e:1e:
         82:3f:be:2f:48:3e:98:05:b6:a2:31:6b:c3:11:9e:46:88:56:
         9f:f2:79:b0:0d:3b:d6:71:54:9c:55:61:5c:b0:12:3f:e4:a2:
         63:a3:67:a3:f5:c1:ea:e3:db:e0:a8:9a:53:8e:51:9d:ba:d9:
         07:a1:46:8a:17:27:55:4c:eb:53:e1:6d:82:25:b1:75:36:17:
         fc:92:9b:bd:87:e8:58:e3:19:34:54:72:70:da:38:9f:eb:58:
         45:09:59:fb:9d:b1:0d:5b:fc:dc:39:56:50:91:78:ad:b0:16:
         04:7e:0f:b1:9c:c9:ec:5f:53:5b:3b:52:1b:dc:c0:9f:33:04:
         05:b1:f6:9f:21:74:f7:76:44:d0:3a:78:5a:a1:2b:eb:7c:50:
         dc:4d:6a:b4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtLrGB1qshMYXdZ8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
OWNmYWE5NzQtYmM3MS00MWUyLTgzMDktMmExNGQ2M2JmOTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYvrEitucKqy72+KAdqCqDvVkFmLMOs7kTMs
Oh2gJvb9Pl8iieYwYJF6OoI8/J+1HqAboyNhak73a9yRgp/K6eUxaARlUHGFJEk+
hC+tU00QP9PFCiGec9Dqw5tmals7+AMCXoYUsqIRSGk9+gM1QSsu3ej3S9e/MtlK
cKIjXe1Vu3EqDNZS/3oC7EwBDuJTGceUfol0ydOciLPAd0LVu8E43P5jrULRRiS2
hbp+BTGXmJMdxGbw2L4/C/f9zYAC1ZugaduUZhQ6b5rqQehBpG1T86opimB/wQzX
uRPwFb3eM6aB+LLBfBS2nprd/wGI5AokUbx6vlqSBZsizXuP9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMvG/FErMRdKVrYlQJNoN45Px8McMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWY3OWI3M2EtNzNmNy0z
YzAyLTkyZDMtN2ZiOTJiNDM4ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCJQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA0ngHFvfEziGbQ4fQlb5EAGn99CSIa96DBAgDM/EZtPMM0Um12V
E6bUBRqXitQ4jTqIkfb1GP1F024I81r04FyWDRf0v+LvZYO6viCxz4mRZe18rlgO
MRadRPR5AJP3gY7SwOXFxSsC6lZeHoI/vi9IPpgFtqIxa8MRnkaIVp/yebANO9Zx
VJxVYVywEj/komOjZ6P1werj2+ComlOOUZ262QehRooXJ1VM61PhbYIlsXU2F/yS
m72H6FjjGTRUcnDaOJ/rWEUJWfudsQ1b/Nw5VlCReK2wFgR+D7GcyexfU1s7Uhvc
wJ8zBAWx9p8hdPd2RNA6eFqhK+t8UNxNarQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:29:55 2025 by rpki-client