Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/65a3526d-1700-3a96-baa2-f234370ebb96.roa
File:                     65a3526d-1700-3a96-baa2-f234370ebb96.roa (raw, json)
Hash identifier:          dKJVFmEHe2lDAuUv3aGxQRIIXbqxn3D11KgmQmAntvQ=
Subject key identifier:   8B:68:0F:79:27:80:7D:FB:6A:C7:69:98:2F:25:D9:A1:90:28:F9:CD
Certificate issuer:       /CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
Certificate serial:       010D0C9F4328584BBB759D36875891E0075F0DF0
Authority key identifier: CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/65a3526d-1700-3a96-baa2-f234370ebb96.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     152726
IP address blocks:        2607:b740:234::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:9d:36:87:58:91:e0:07:5f:0d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2882ac67-96bc-43ba-b06e-c2f533c852f4
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=d9b5ebce-36d3-41fc-b66e-43b77d7f33eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:5f:94:0a:37:e8:2e:9d:13:2e:6e:0c:ec:
                    0a:d2:03:a0:30:0d:d6:31:ba:89:8d:ee:8b:8d:44:
                    01:de:31:5b:d7:80:fc:f0:84:0a:9f:97:41:2f:11:
                    7c:a9:08:a4:08:1c:db:fe:27:cc:8e:66:e6:d2:24:
                    d9:6e:b6:60:88:71:fa:ce:09:96:51:6e:66:91:df:
                    be:3a:50:8b:fd:4a:58:12:88:ab:ef:d6:7d:7c:15:
                    f1:bb:2f:ba:c9:36:92:71:94:51:03:89:5f:44:24:
                    f2:93:cd:0c:a1:09:f8:64:1b:8c:6e:b0:65:14:83:
                    c9:20:4f:21:ba:64:2f:83:bc:4a:b0:1a:80:7b:4e:
                    80:0a:c7:1e:2e:99:57:75:2e:5f:33:70:65:06:8c:
                    00:4a:24:37:14:93:04:63:80:79:17:79:d5:d6:be:
                    81:17:9f:a7:09:70:d1:33:dc:da:5b:75:f3:92:70:
                    9d:90:0d:8c:8d:2e:dc:b2:86:b2:17:85:93:b2:8d:
                    6b:88:57:24:7a:56:67:c7:5f:e3:0d:25:d4:a2:5f:
                    35:23:28:a1:2e:39:0d:14:b9:c5:85:20:ca:62:ae:
                    c1:54:91:bc:54:f2:b4:65:26:9e:a2:b5:ce:c9:c4:
                    14:99:1c:26:83:66:97:79:c1:05:c6:7e:1a:da:ba:
                    b8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:68:0F:79:27:80:7D:FB:6A:C7:69:98:2F:25:D9:A1:90:28:F9:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/65a3526d-1700-3a96-baa2-f234370ebb96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4/2882ac67-96bc-43ba-b06e-c2f533c852f4.crl

            X509v3 Authority Key Identifier:
                keyid:CC:C8:29:5C:F6:D2:6E:6D:51:E2:87:93:45:67:F5:86:8B:4B:1E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2882ac67-96bc-43ba-b06e-c2f533c852f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b740:234::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:6f:ee:ec:91:8a:52:16:94:da:8c:77:e6:8c:88:97:90:eb:
         39:96:85:3c:55:81:a5:f0:11:f6:36:dd:0f:6f:5f:33:69:6c:
         e1:77:5a:1a:0c:71:77:36:5b:6a:8a:64:13:3c:5d:e7:45:64:
         63:66:54:3c:a2:f0:eb:ac:ac:af:26:f6:49:5a:ba:1e:68:3a:
         67:c1:4c:4f:31:e7:1b:f2:8a:74:82:cb:40:b5:15:5d:07:d9:
         75:ca:6f:94:1b:f8:a6:44:d3:df:31:52:c0:cf:9b:fe:ab:c0:
         71:bd:f5:f2:04:e9:d7:89:35:83:29:13:95:0e:45:5b:31:ed:
         f4:c3:c7:fd:e9:3b:6d:e2:f9:cd:e9:a5:db:fd:11:65:8f:80:
         86:ab:2b:71:63:17:9e:d4:db:d0:f0:a9:ce:11:30:21:0a:74:
         4a:68:74:cf:bf:7a:9a:ca:75:29:4e:b1:fb:57:65:30:95:88:
         5a:db:0f:b6:60:5c:0c:c5:6d:12:6d:a2:59:f7:69:e3:4c:b3:
         05:6a:89:54:96:72:89:17:34:a1:34:d2:84:ac:03:93:4a:bb:
         ba:e4:28:86:4f:f5:5e:06:67:e2:27:75:2c:29:1c:d8:bc:0e:
         21:84:12:0b:b2:d8:54:23:c4:34:21:53:77:cb:db:54:0b:94:
         1a:06:ae:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu7dZ02h1iR4AdfDfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg4MmFjNjctOTZiYy00M2JhLWIwNmUtYzJmNTMzYzg1
MmY0MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZDliNWViY2UtMzZkMy00MWZjLWI2NmUtNDNiNzdkN2YzM2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bRflAo36C6dEy5uDOwK0gOgMA3WMbqJje6L
jUQB3jFb14D88IQKn5dBLxF8qQikCBzb/ifMjmbm0iTZbrZgiHH6zgmWUW5mkd++
OlCL/UpYEoir79Z9fBXxuy+6yTaScZRRA4lfRCTyk80MoQn4ZBuMbrBlFIPJIE8h
umQvg7xKsBqAe06ACsceLplXdS5fM3BlBowASiQ3FJMEY4B5F3nV1r6BF5+nCXDR
M9zaW3XzknCdkA2MjS7csoayF4WTso1riFckelZnx1/jDSXUol81IyihLjkNFLnF
hSDKYq7BVJG8VPK0ZSaeorXOycQUmRwmg2aXecEFxn4a2rq4twIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFItoD3kngH37asdpmC8l2aGQKPnNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yODgy
YWM2Ny05NmJjLTQzYmEtYjA2ZS1jMmY1MzNjODUyZjQvNjVhMzUyNmQtMTcwMC0z
YTk2LWJhYTItZjIzNDM3MGViYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjg4MmFjNjctOTZiYy00M2JhLWIw
NmUtYzJmNTMzYzg1MmY0LzI4ODJhYzY3LTk2YmMtNDNiYS1iMDZlLWMyZjUzM2M4
NTJmNC5jcmwwHwYDVR0jBBgwFoAUzMgpXPbSbm1R4oeTRWf1hotLHrIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yODgyYWM2Ny05NmJjLTQzYmEtYjA2ZS1jMmY1
MzNjODUyZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJge3QAI0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFRv7uyRilIWlNqMd+aMiJeQ6zmWhTxVgaXwEfY23Q9vXzNpbOF3
WhoMcXc2W2qKZBM8XedFZGNmVDyi8OusrK8m9klauh5oOmfBTE8x5xvyinSCy0C1
FV0H2XXKb5Qb+KZE098xUsDPm/6rwHG99fIE6deJNYMpE5UORVsx7fTDx/3pO23i
+c3ppdv9EWWPgIarK3FjF57U29Dwqc4RMCEKdEpodM+/eprKdSlOsftXZTCViFrb
D7ZgXAzFbRJtoln3aeNMswVqiVSWcokXNKE00oSsA5NKu7rkKIZP9V4GZ+IndSwp
HNi8DiGEEguy2FQjxDQhU3fL21QLlBoGrvs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:54:57 2025 by rpki-client