Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/2c0a15c6-fc43-369f-8434-b2046445ad33.roa
File:                     2c0a15c6-fc43-369f-8434-b2046445ad33.roa (raw, json)
Hash identifier:          IU0uiUWnX3gqqcklG4FOzyPIezh8k9p8T+9/bquR2DE=
Subject key identifier:   BC:CD:B6:E2:8A:68:F8:EC:F3:BE:1D:30:88:76:44:04:16:70:17:C4
Certificate issuer:       /CN=c23acc72-dfd4-42de-ae0b-b8b0fd597ee7
Certificate serial:       010D0C9F4328584B4D11CF515ADDBAD8CDDB8780
Authority key identifier: 4D:FF:96:52:7E:44:83:36:D6:48:C3:A8:EF:3A:95:FA:14:6A:A4:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/2c0a15c6-fc43-369f-8434-b2046445ad33.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     398933
IP address blocks:        2607:540::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:cf:51:5a:dd:ba:d8:cd:db:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23acc72-dfd4-42de-ae0b-b8b0fd597ee7
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=65d52ee9-4b4b-400c-be14-78314f5728c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:c6:74:5f:f7:ef:8d:51:a6:15:d8:44:66:
                    50:d1:8b:fb:0d:0a:52:35:3f:fa:c4:c2:b4:b8:70:
                    0b:a9:a8:64:d0:1d:e4:5d:93:1f:12:33:78:b8:2c:
                    20:05:66:ec:aa:28:5e:53:7a:7e:5a:64:5d:f0:55:
                    c4:54:8f:cc:1a:5c:56:8a:07:89:b7:e5:e0:76:c7:
                    cc:f6:a1:4e:c8:0f:79:df:b1:08:ac:95:3d:3e:12:
                    31:e0:96:dc:d0:fc:b0:5f:65:32:57:6e:4a:6f:cb:
                    aa:64:f8:94:e2:4e:d2:c1:49:af:bc:02:50:ee:ac:
                    08:3d:46:83:4f:79:5c:83:a7:02:fc:ea:7f:91:0b:
                    00:95:d4:4c:16:09:fc:be:2b:4a:67:09:80:e7:0c:
                    58:0d:b4:0c:cc:6e:4d:a4:ce:e0:64:04:c9:e0:b5:
                    c3:4e:fd:ea:0f:78:7f:34:ab:76:66:ee:bd:dd:10:
                    fc:06:c9:ab:b9:b4:45:50:35:a9:35:c7:b9:ee:12:
                    db:30:42:f9:16:6d:80:4f:34:22:e2:aa:16:ad:ef:
                    e0:eb:0c:ad:af:ae:15:68:4a:61:47:27:88:db:1c:
                    10:25:b4:ee:14:00:c7:ea:b0:84:4e:83:87:a0:da:
                    6b:81:55:e1:03:49:60:8b:fc:50:de:a2:fe:f2:ec:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CD:B6:E2:8A:68:F8:EC:F3:BE:1D:30:88:76:44:04:16:70:17:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/2c0a15c6-fc43-369f-8434-b2046445ad33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.crl

            X509v3 Authority Key Identifier:
                keyid:4D:FF:96:52:7E:44:83:36:D6:48:C3:A8:EF:3A:95:FA:14:6A:A4:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:1f:ab:2f:2a:9a:84:7d:de:5a:da:4f:14:2b:9d:8a:8b:34:
         10:9b:e1:ef:31:67:e2:69:9c:7f:c3:c9:9a:1a:b3:b3:de:15:
         3a:20:88:eb:e0:4e:bb:fb:d4:3d:95:96:a7:68:16:0f:b9:bf:
         bf:58:ba:51:a8:58:07:44:bb:25:17:37:f0:0d:1b:0a:49:8a:
         b3:e2:cd:8b:90:f2:d8:4c:48:cb:1d:c0:e9:8a:c3:4b:9b:96:
         8b:77:38:be:5f:7f:32:9e:ea:8d:d7:97:1a:86:d8:51:b8:a1:
         55:0c:54:3d:38:94:cf:a2:71:c5:70:03:be:f4:e2:2b:b1:5b:
         f8:80:d0:3c:d6:8f:19:bd:e0:b6:9f:71:33:0e:42:f6:c5:25:
         13:eb:86:96:63:b7:aa:8a:1a:10:87:f2:3b:ca:a6:2e:fa:f0:
         f6:e5:c6:45:e8:70:94:44:3a:ad:a0:c7:bb:5e:b2:c2:29:e8:
         30:c3:d7:a9:ce:c4:c8:31:6a:6e:8b:f1:30:7b:18:b3:2f:3e:
         62:64:f4:a0:52:df:db:7e:28:58:1b:4a:c3:56:58:72:45:07:
         a4:9a:07:cf:32:2a:8e:07:7d:10:25:3c:b3:04:0f:a3:16:e1:
         36:35:c5:00:7a:7f:73:84:38:f0:5a:68:77:ff:db:d1:13:df:
         fe:91:2d:26
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtNEc9RWt262M3bh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIzYWNjNzItZGZkNC00MmRlLWFlMGItYjhiMGZkNTk3
ZWU3MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk
NjVkNTJlZTktNGI0Yi00MDBjLWJlMTQtNzgzMTRmNTcyOGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWjGdF/3741RphXYRGZQ0Yv7DQpSNT/6xMK0
uHALqahk0B3kXZMfEjN4uCwgBWbsqiheU3p+WmRd8FXEVI/MGlxWigeJt+XgdsfM
9qFOyA9537EIrJU9PhIx4Jbc0PywX2UyV25Kb8uqZPiU4k7SwUmvvAJQ7qwIPUaD
T3lcg6cC/Op/kQsAldRMFgn8vitKZwmA5wxYDbQMzG5NpM7gZATJ4LXDTv3qD3h/
NKt2Zu693RD8BsmrubRFUDWpNce57hLbMEL5Fm2ATzQi4qoWre/g6wytr64VaEph
RyeI2xwQJbTuFADH6rCEToOHoNprgVXhA0lgi/xQ3qL+8uxRGQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLzNtuKKaPjs874dMIh2RAQWcBfEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMjNh
Y2M3Mi1kZmQ0LTQyZGUtYWUwYi1iOGIwZmQ1OTdlZTcvMmMwYTE1YzYtZmM0My0z
NjlmLTg0MzQtYjIwNDY0NDVhZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzIzYWNjNzItZGZkNC00MmRlLWFl
MGItYjhiMGZkNTk3ZWU3L2MyM2FjYzcyLWRmZDQtNDJkZS1hZTBiLWI4YjBmZDU5
N2VlNy5jcmwwHwYDVR0jBBgwFoAUTf+WUn5EgzbWSMOo7zqV+hRqpLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jMjNhY2M3Mi1kZmQ0LTQyZGUtYWUwYi1iOGIw
ZmQ1OTdlZTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcFQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBTH6svKpqEfd5a2k8UK52KizQQm+HvMWfiaZx/w8maGrOz3hU6IIjr
4E67+9Q9lZanaBYPub+/WLpRqFgHRLslFzfwDRsKSYqz4s2LkPLYTEjLHcDpisNL
m5aLdzi+X38ynuqN15cahthRuKFVDFQ9OJTPonHFcAO+9OIrsVv4gNA81o8ZveC2
n3EzDkL2xSUT64aWY7eqihoQh/I7yqYu+vD25cZF6HCURDqtoMe7XrLCKegww9ep
zsTIMWpui/EwexizLz5iZPSgUt/bfihYG0rDVlhyRQekmgfPMiqOB30QJTyzBA+j
FuE2NcUAen9zhDjwWmh3/9vRE9/+kS0m
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:21:14 2025 by rpki-client