Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e37b5869-b2c1-3651-acaf-85d0925faaea.roa
File:                     e37b5869-b2c1-3651-acaf-85d0925faaea.roa (raw, json)
Hash identifier:          6XHIw7SkX3fCHiZ1flNlF6JN8Iql9vhjkpVZjBhHIa8=
Subject key identifier:   9B:62:FA:24:48:CD:E6:34:A0:11:4F:EA:0E:18:F9:64:62:51:E7:FD
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584B5141B61EED9CA60A2B3128C0
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e37b5869-b2c1-3651-acaf-85d0925faaea.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     47720
IP address blocks:        2607:6b80:3d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:b6:1e:ed:9c:a6:0a:2b:31:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=39e88703-63d0-4807-932e-1935b3cca4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:11:ca:5b:3e:b0:f6:b2:d9:25:7e:f5:28:
                    e5:9a:94:e2:0c:c7:7e:6a:5d:b9:0e:6f:91:11:99:
                    e6:6f:e1:a2:d1:e8:f6:d3:4e:0b:82:00:4a:db:b8:
                    ed:60:d9:8b:36:37:86:e3:5a:f5:12:c4:aa:b8:99:
                    81:e9:4f:48:48:74:b5:3c:32:48:9e:38:64:ea:3f:
                    5b:51:97:f7:4c:7b:9b:a1:8e:08:e5:86:16:66:68:
                    5a:be:8a:ed:2b:3a:5c:c9:29:de:d8:14:04:2b:8d:
                    74:fc:89:27:f4:46:09:81:c0:dd:4e:e7:f2:28:9d:
                    63:0f:84:94:ec:f3:44:e2:73:54:70:eb:78:1a:40:
                    6a:10:4b:11:50:ba:7c:09:29:db:39:e8:64:ff:56:
                    db:84:99:24:e8:77:aa:a6:e5:6d:3d:9f:ff:cf:11:
                    99:28:b7:64:86:67:01:b2:94:1e:c6:88:e8:00:cd:
                    aa:16:0b:47:95:e6:e7:ca:f3:ce:21:e4:b8:cb:49:
                    17:46:00:0c:0e:31:a5:2e:2e:f8:81:38:a1:7b:df:
                    a0:9c:11:32:ef:04:fa:6e:47:1d:ae:7a:d4:2f:c9:
                    4c:a5:e5:50:f7:00:61:dc:1f:a6:5b:88:5f:e5:94:
                    86:6b:62:47:43:04:a1:ef:e9:22:1d:14:43:24:76:
                    c3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:62:FA:24:48:CD:E6:34:A0:11:4F:EA:0E:18:F9:64:62:51:E7:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e37b5869-b2c1-3651-acaf-85d0925faaea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:3d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:fd:f3:48:83:75:32:5a:55:dd:69:c6:3a:06:b3:72:34:65:
         2b:97:66:0b:17:3b:40:88:b9:a5:36:5a:97:e1:57:eb:a4:df:
         d2:26:22:72:96:dc:40:aa:05:62:f9:85:c6:87:c5:20:3a:bc:
         a4:be:c5:e6:ed:22:20:c5:29:7b:41:a9:d8:fe:d5:ec:4b:be:
         68:b8:36:92:da:3e:38:df:93:9c:be:db:77:f1:15:3d:a8:4e:
         e4:70:71:02:24:bc:40:eb:2d:49:16:68:77:93:a8:29:a2:cf:
         e9:45:db:c0:91:6e:44:45:1a:26:61:fe:44:16:78:21:7f:19:
         d3:a5:c5:52:63:1c:d7:46:d3:39:7b:06:79:92:aa:c0:48:ed:
         8b:06:6e:b5:e1:b2:50:6f:db:0e:6e:f9:a3:c1:00:af:c9:04:
         3e:1b:c5:f8:a4:3f:1a:3d:2c:83:57:78:e4:45:31:49:73:9b:
         f3:b7:2a:11:b5:ee:1d:ae:e8:69:af:2f:f7:3d:3d:37:48:9e:
         3b:99:a3:a3:be:1c:ef:e6:9d:86:bb:62:1a:d8:eb:38:bc:54:
         c7:de:38:58:0b:5a:be:3c:40:93:f1:90:18:74:80:ae:98:35:
         cb:53:73:33:22:53:e1:35:9c:7a:5b:2a:8e:18:f4:73:38:40:
         ce:65:04:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtRQbYe7ZymCisxKMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
MzllODg3MDMtNjNkMC00ODA3LTkzMmUtMTkzNWIzY2NhNGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqucRyls+sPay2SV+9SjlmpTiDMd+al25Dm+R
EZnmb+Gi0ej2004LggBK27jtYNmLNjeG41r1EsSquJmB6U9ISHS1PDJInjhk6j9b
UZf3THuboY4I5YYWZmhavortKzpcySne2BQEK410/Ikn9EYJgcDdTufyKJ1jD4SU
7PNE4nNUcOt4GkBqEEsRULp8CSnbOehk/1bbhJkk6HeqpuVtPZ//zxGZKLdkhmcB
spQexojoAM2qFgtHlebnyvPOIeS4y0kXRgAMDjGlLi74gTihe9+gnBEy7wT6bkcd
rnrUL8lMpeVQ9wBh3B+mW4hf5ZSGa2JHQwSh7+kiHRRDJHbDYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJti+iRIzeY0oBFP6g4Y+WRiUef9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvZTM3YjU4NjktYjJjMS0z
NjUxLWFjYWYtODVkMDkyNWZhYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdrgAA9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHb980iDdTJaVd1pxjoGs3I0ZSuXZgsXO0CIuaU2WpfhV+uk39Im
InKW3ECqBWL5hcaHxSA6vKS+xebtIiDFKXtBqdj+1exLvmi4NpLaPjjfk5y+23fx
FT2oTuRwcQIkvEDrLUkWaHeTqCmiz+lF28CRbkRFGiZh/kQWeCF/GdOlxVJjHNdG
0zl7BnmSqsBI7YsGbrXhslBv2w5u+aPBAK/JBD4bxfikPxo9LINXeORFMUlzm/O3
KhG17h2u6GmvL/c9PTdInjuZo6O+HO/mnYa7YhrY6zi8VMfeOFgLWr48QJPxkBh0
gK6YNctTczMiU+E1nHpbKo4Y9HM4QM5lBBQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:50:35 2025 by rpki-client