Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/9fc1f393-c693-381b-a240-c84e6af7781a.roa
File:                     9fc1f393-c693-381b-a240-c84e6af7781a.roa (raw, json)
Hash identifier:          Uqq49ErNQEGD3rt0+lzJ842x9izXHcydRlcl5n+JHzs=
Subject key identifier:   8F:19:AD:43:6C:4D:35:E3:30:C0:0B:EC:9F:AB:07:52:D1:91:B9:8E
Certificate issuer:       /CN=1611a391-6eb0-4dd1-aebb-1afecce05d9c
Certificate serial:       010D0C9F4328584ACA6830BFB54B1814088AE910
Authority key identifier: C2:E2:AA:67:FB:0B:CF:64:AF:2A:C4:E4:90:84:81:6E:B3:3B:D2:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/9fc1f393-c693-381b-a240-c84e6af7781a.roa
Signing time:             Fri 08 Aug 2025 17:36:39 +0000
ROA not before:           Fri 08 Aug 2025 17:36:39 +0000
ROA not after:            Thu 06 Nov 2025 18:36:39 +0000
asID:                     399970
IP address blocks:        2602:fc3b:1100::/40 maxlen: 40
                          2602:fc3b:1200::/40 maxlen: 40
                          2602:fc3b:1300::/40 maxlen: 40
                          2602:fc3b:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/1611a391-6eb0-4dd1-aebb-1afecce05d9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/1611a391-6eb0-4dd1-aebb-1afecce05d9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ca:68:30:bf:b5:4b:18:14:08:8a:e9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1611a391-6eb0-4dd1-aebb-1afecce05d9c
        Validity
            Not Before: Aug  8 17:36:39 2025 GMT
            Not After : Nov  6 18:36:39 2025 GMT
        Subject: CN=275515ee-a7c0-44bd-acbb-598511bc446e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b9:23:3f:a4:c1:e7:d0:f6:30:9f:85:cd:8f:
                    86:46:88:c4:89:f6:8b:e3:b8:6f:13:fe:9f:d9:68:
                    25:ef:9d:7c:cf:8e:6f:bb:a1:0f:d0:68:60:57:3a:
                    3c:e1:b3:6f:4b:24:7c:f8:6c:b5:3f:14:e6:ce:8e:
                    98:49:32:0c:5b:de:82:74:24:ca:a2:0b:81:97:0a:
                    d6:7a:3a:c1:20:55:dd:41:5c:b0:ef:cc:d2:2b:44:
                    13:24:34:6b:21:60:ac:79:80:54:83:99:bb:5c:d8:
                    c8:c1:f8:30:78:aa:45:14:78:34:25:e3:ce:3d:e0:
                    b2:0e:f6:73:f5:5e:21:c5:e8:50:9d:d6:1b:5c:98:
                    7c:d1:fe:87:c4:51:00:5d:3c:d7:c7:dc:50:18:55:
                    85:6a:2a:0c:b2:6c:78:d9:54:07:1b:74:dd:94:4b:
                    7a:e3:7b:a6:de:91:65:17:de:9b:6b:c2:4e:0e:99:
                    59:82:58:f0:99:fe:9f:83:6a:ae:ca:1c:8c:1f:a9:
                    10:6a:cb:66:a9:63:36:bd:d0:36:1b:2c:e3:37:fa:
                    d4:e2:0f:4d:41:4a:41:fc:3f:85:44:90:3d:c3:90:
                    a7:c5:6d:5b:5f:dd:af:3c:91:b7:7a:7d:b4:e3:d3:
                    b2:a6:8a:f3:19:cf:8c:21:f9:b5:47:4b:72:ff:94:
                    8c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:19:AD:43:6C:4D:35:E3:30:C0:0B:EC:9F:AB:07:52:D1:91:B9:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/9fc1f393-c693-381b-a240-c84e6af7781a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c/1611a391-6eb0-4dd1-aebb-1afecce05d9c.crl

            X509v3 Authority Key Identifier:
                keyid:C2:E2:AA:67:FB:0B:CF:64:AF:2A:C4:E4:90:84:81:6E:B3:3B:D2:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1611a391-6eb0-4dd1-aebb-1afecce05d9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:1100::-2602:fc3b:14ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:22:70:ac:2d:b8:3d:de:32:d6:8d:c3:31:47:7a:d1:a4:0a:
         06:16:2a:52:23:28:aa:5c:4a:15:58:9e:42:78:28:40:95:9d:
         ec:4a:88:0f:8c:1e:3b:10:96:58:92:8a:89:26:7d:c0:05:90:
         9e:76:a1:13:57:e8:3a:1a:13:66:30:c1:eb:5a:33:d5:84:48:
         d7:2a:cf:14:01:57:e0:dc:5d:88:c1:bb:5b:b4:52:9e:a1:53:
         c6:02:32:9b:cd:4e:b4:27:01:64:bb:13:49:a3:31:43:1d:46:
         bd:ec:97:ae:b7:2c:38:9f:ce:6b:ec:c4:bd:2a:fb:3e:d1:07:
         e1:61:41:52:7b:14:0b:c0:57:eb:da:ab:0e:09:d8:35:b0:22:
         ce:be:2c:5b:55:d0:ea:a4:07:5a:83:14:6a:d8:a7:c6:83:66:
         e3:5f:00:c4:44:be:2d:78:43:fe:cb:de:ab:a6:3c:e8:b6:04:
         21:9d:dc:38:c1:56:8f:3e:40:55:77:25:90:df:89:68:27:3c:
         4a:9e:7a:46:26:5d:7c:d8:57:52:8f:07:2e:9b:41:fd:c7:5b:
         bf:1e:64:e2:44:33:48:fa:1a:f2:91:7d:9c:a6:dc:02:8b:8a:
         b6:e4:83:29:fe:6d:ec:03:72:3c:fd:2c:92:39:b2:08:50:08:
         e5:02:94:22
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErKaDC/tUsYFAiK6RAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTYxMWEzOTEtNmViMC00ZGQxLWFlYmItMWFmZWNjZTA1
ZDljMB4XDTI1MDgwODE3MzYzOVoXDTI1MTEwNjE4MzYzOVowLzEtMCsGA1UEAxMk
Mjc1NTE1ZWUtYTdjMC00NGJkLWFjYmItNTk4NTExYmM0NDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLkjP6TB59D2MJ+FzY+GRojEifaL47hvE/6f
2Wgl7518z45vu6EP0GhgVzo84bNvSyR8+Gy1PxTmzo6YSTIMW96CdCTKoguBlwrW
ejrBIFXdQVyw78zSK0QTJDRrIWCseYBUg5m7XNjIwfgweKpFFHg0JePOPeCyDvZz
9V4hxehQndYbXJh80f6HxFEAXTzXx9xQGFWFaioMsmx42VQHG3TdlEt643um3pFl
F96ba8JODplZgljwmf6fg2quyhyMH6kQastmqWM2vdA2GyzjN/rU4g9NQUpB/D+F
RJA9w5CnxW1bX92vPJG3en2049OyporzGc+MIfm1R0ty/5SM5wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFI8ZrUNsTTXjMMAL7J+rB1LRkbmOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xNjEx
YTM5MS02ZWIwLTRkZDEtYWViYi0xYWZlY2NlMDVkOWMvOWZjMWYzOTMtYzY5My0z
ODFiLWEyNDAtYzg0ZTZhZjc3ODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTYxMWEzOTEtNmViMC00ZGQxLWFl
YmItMWFmZWNjZTA1ZDljLzE2MTFhMzkxLTZlYjAtNGRkMS1hZWJiLTFhZmVjY2Uw
NWQ5Yy5jcmwwHwYDVR0jBBgwFoAUwuKqZ/sLz2SvKsTkkISBbrM70howDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8xNjExYTM5MS02ZWIwLTRkZDEtYWViYi0xYWZl
Y2NlMDVkOWMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgAmAvw7
EQMGACYC/DsUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBALcicKwtuD3eMtaNwzFHetGkCgYWKlIjKKpcShVY
nkJ4KECVnexKiA+MHjsQlliSiokmfcAFkJ52oRNX6DoaE2YwwetaM9WESNcqzxQB
V+DcXYjBu1u0Up6hU8YCMpvNTrQnAWS7E0mjMUMdRr3sl663LDifzmvsxL0q+z7R
B+FhQVJ7FAvAV+vaqw4J2DWwIs6+LFtV0OqkB1qDFGrYp8aDZuNfAMREvi14Q/7L
3qumPOi2BCGd3DjBVo8+QFV3JZDfiWgnPEqeekYmXXzYV1KPBy6bQf3HW78eZOJE
M0j6GvKRfZym3AKLirbkgyn+bewDcjz9LJI5sghQCOUClCI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:46:20 2025 by rpki-client