Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
File:                     2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa (raw, json)
Hash identifier:          lqevu5YqgYjZc3YOr0YLuwIYT9vm2tP/c2f0YWlofnM=
Subject key identifier:   C6:FA:C0:1F:66:A3:6E:54:2A:45:EE:57:A7:73:B5:86:DB:91:2D:16
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584B944221E8902D7D952B29EE00
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     27281
IP address blocks:        2620:116:8083::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:21:e8:90:2d:7d:95:2b:29:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=cf4a8806-16f4-4247-8752-b841b3f1a30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:09:c5:fb:84:a9:4a:2e:73:4b:30:97:cf:ed:
                    29:07:39:3c:dc:23:91:2f:d6:70:89:b6:ba:51:df:
                    1e:b2:5e:80:37:28:41:7c:b4:0a:a1:77:b3:99:ce:
                    c4:5d:e7:ed:d4:7e:e7:62:0c:2b:15:cd:ef:fb:9a:
                    9e:fe:44:b1:c2:90:40:2c:e8:9c:99:3d:a0:37:ae:
                    e6:cf:68:a3:a6:4a:15:35:b7:1f:84:a3:c6:c4:e4:
                    90:70:45:6d:70:b2:af:33:21:27:5f:a7:47:4f:4c:
                    33:b4:6e:fa:cd:3a:b9:d3:3c:d7:89:01:86:ce:2a:
                    7c:26:b0:a9:83:7e:d8:67:27:d8:2c:63:c4:e0:9a:
                    1d:49:18:6e:b7:af:26:39:36:a2:0c:85:79:81:c7:
                    4e:64:9e:69:e5:15:4e:b3:ba:cb:34:b0:5a:74:fc:
                    61:f9:28:a0:67:79:09:59:82:e9:a4:f9:df:33:1f:
                    1e:2b:2f:d9:a2:2f:ce:0a:e7:cf:fd:78:38:9e:b4:
                    c0:6a:33:7c:d4:45:a8:13:df:b4:33:b3:47:c8:7c:
                    f9:30:ce:3a:4a:a0:1a:f1:94:16:06:45:e9:5f:a0:
                    fb:f4:0d:95:7d:eb:82:13:e3:b6:96:29:21:d8:3c:
                    05:f6:b8:df:c2:31:fb:82:b8:38:94:c5:e1:98:58:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FA:C0:1F:66:A3:6E:54:2A:45:EE:57:A7:73:B5:86:DB:91:2D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2cb1c383-0a30-379e-8a81-31f53f94e1ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:8083::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e9:46:7d:49:00:c0:48:d9:44:c8:e3:c5:4f:70:b2:50:01:
         66:c5:52:37:77:8a:1b:49:a4:a0:66:eb:33:e2:ce:ed:1e:85:
         a9:a8:7a:ee:1a:93:e7:10:a2:f7:27:f9:bd:73:6c:44:cc:6d:
         5d:dd:c7:4e:2d:e4:a7:3b:07:35:b7:4a:6e:69:c5:76:88:06:
         1e:c4:48:53:3c:e3:31:67:11:99:a3:c4:5d:08:fc:ec:ae:d2:
         47:51:24:2c:2f:5b:1d:7f:67:72:0e:db:6f:d7:8b:12:42:30:
         a2:27:8c:df:7e:5f:fe:c5:d2:40:5c:7b:06:ef:d7:55:e7:15:
         24:dd:cf:05:f2:77:a5:9d:94:2f:d2:81:de:80:e9:63:74:4f:
         80:9b:47:a2:c3:cb:b0:f9:88:e1:6c:83:cb:3f:57:5a:c9:ff:
         6d:c3:60:f8:fc:8d:a9:70:aa:08:86:5c:03:ca:df:a2:85:16:
         38:59:41:42:7a:8e:e2:91:ae:51:75:d8:62:c6:ee:fc:6f:9b:
         f5:aa:ef:e0:09:2c:be:df:59:f2:ac:41:e9:6f:36:23:e5:a5:
         6b:19:ec:85:75:45:9b:4c:b4:41:18:cd:d7:dc:37:ea:ff:66:
         a0:57:ee:c6:15:4c:39:94:f1:fe:1a:ba:1e:c7:ac:1b:42:4f:
         c4:e5:67:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuUQiHokC19lSsp7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5
Mzc4MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk
Y2Y0YTg4MDYtMTZmNC00MjQ3LTg3NTItYjg0MWIzZjFhMzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwnF+4SpSi5zSzCXz+0pBzk83CORL9Zwiba6
Ud8esl6ANyhBfLQKoXezmc7EXeft1H7nYgwrFc3v+5qe/kSxwpBALOicmT2gN67m
z2ijpkoVNbcfhKPGxOSQcEVtcLKvMyEnX6dHT0wztG76zTq50zzXiQGGzip8JrCp
g37YZyfYLGPE4JodSRhut68mOTaiDIV5gcdOZJ5p5RVOs7rLNLBadPxh+SigZ3kJ
WYLppPnfMx8eKy/Zoi/OCufP/Xg4nrTAajN81EWoE9+0M7NHyHz5MM46SqAa8ZQW
BkXpX6D79A2VfeuCE+O2likh2DwF9rjfwjH7grg4lMXhmFjJ1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMb6wB9mo25UKkXuV6dztYbbkS0WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy
MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMmNiMWMzODMtMGEzMC0z
NzllLThhODEtMzFmNTNmOTRlMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz
MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0
OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi
MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoCD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABzpRn1JAMBI2UTI48VPcLJQAWbFUjd3ihtJpKBm6zPizu0ehamo
eu4ak+cQovcn+b1zbETMbV3dx04t5Kc7BzW3Sm5pxXaIBh7ESFM84zFnEZmjxF0I
/Oyu0kdRJCwvWx1/Z3IO22/XixJCMKInjN9+X/7F0kBcewbv11XnFSTdzwXyd6Wd
lC/Sgd6A6WN0T4CbR6LDy7D5iOFsg8s/V1rJ/23DYPj8jalwqgiGXAPK36KFFjhZ
QUJ6juKRrlF12GLG7vxvm/Wq7+AJLL7fWfKsQelvNiPlpWsZ7IV1RZtMtEEYzdfc
N+r/ZqBX7sYVTDmU8f4auh7HrBtCT8TlZ68=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:04:40 2025 by rpki-client