Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/51efdb6f-a2bd-35bb-b42b-231a30fa7fa8.roa
File:                     51efdb6f-a2bd-35bb-b42b-231a30fa7fa8.roa (raw, json)
Hash identifier:          9d9cONOnJZenj84t35iZUKdpeRPmJd2bJgDJ4SqVD1w=
Subject key identifier:   4C:14:29:6E:3A:34:5E:16:F8:60:D9:BA:A5:1F:7D:8E:5E:D6:B1:EC
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584B9872445DB271FB7C39C10800
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/51efdb6f-a2bd-35bb-b42b-231a30fa7fa8.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        2620:1f7:c024::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:44:5d:b2:71:fb:7c:39:c1:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=692a26dc-bc4e-40c5-9118-13648209e2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:2f:ef:80:e2:21:dd:51:8c:4e:ab:37:0b:
                    20:d3:fd:06:98:33:2b:e6:41:c0:1f:94:4c:40:37:
                    84:a9:eb:39:45:dc:e0:87:b6:4b:55:42:b9:b9:8d:
                    45:c8:1d:ef:c8:e4:0a:7a:c5:bb:5c:9e:04:a4:ef:
                    9d:fe:b4:f6:42:7b:08:35:b2:2c:5d:3f:81:c9:8d:
                    08:d3:b1:66:61:a0:31:e5:32:95:ca:dd:f9:2b:9a:
                    8b:77:ae:59:52:38:93:3f:92:d0:09:ba:a7:39:84:
                    35:f4:44:c8:61:05:d6:8c:7e:c5:57:81:2a:f6:f9:
                    97:23:15:78:fc:67:6c:9f:4f:b6:fd:2b:85:40:a3:
                    09:24:6e:dd:43:77:8e:c3:c4:ed:2d:05:ec:81:e1:
                    6c:5a:8d:8a:c8:ba:8c:85:fe:f8:93:1c:71:fa:54:
                    e9:94:b2:9a:98:cd:0c:a2:ab:9c:fd:08:26:bb:0a:
                    af:36:8b:8d:b3:b5:ce:56:79:1a:38:d4:3b:51:9d:
                    62:e7:45:80:16:d6:0e:17:ce:71:76:ed:8c:da:8c:
                    41:62:85:d4:f6:4c:01:b1:55:75:d3:7a:19:f1:bd:
                    6f:80:01:95:a0:7a:8d:fb:1b:38:c2:07:27:ce:06:
                    e6:4e:21:0e:a5:4a:36:60:bf:82:1c:1c:73:bb:7b:
                    93:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:14:29:6E:3A:34:5E:16:F8:60:D9:BA:A5:1F:7D:8E:5E:D6:B1:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/51efdb6f-a2bd-35bb-b42b-231a30fa7fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c024::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:65:de:47:a2:2b:db:6c:ac:07:37:20:60:95:4e:be:4c:41:
         42:92:9c:cc:5a:eb:e5:ca:e6:2c:96:8e:74:89:90:7e:9b:ad:
         b2:f2:e0:b4:2e:43:24:8f:a7:d7:9b:b3:6b:bc:62:b3:b2:68:
         77:ec:7d:c3:c0:d6:ea:c6:8d:67:5f:5e:70:51:2c:d5:11:81:
         07:f9:9e:77:15:c9:79:e9:b3:22:2a:1c:bf:b4:8c:91:a5:47:
         7e:0a:ca:a6:3c:ea:b4:7a:d9:dd:30:64:a8:a1:0e:97:ce:f8:
         73:52:a3:bb:73:4c:f7:52:99:93:da:3c:8a:6d:5c:02:f4:2f:
         aa:46:b4:1c:e2:f6:b3:03:74:90:19:22:b3:cc:62:d4:f6:6f:
         67:98:29:a2:f9:5b:73:c8:22:ce:83:64:b9:04:06:34:84:32:
         0b:9e:1f:55:9b:67:31:cf:99:31:8b:10:58:2a:17:6d:28:be:
         cd:07:7f:e2:e3:63:3f:90:bc:f0:d7:cf:7a:0d:88:06:a8:19:
         f9:c3:94:dd:f5:24:15:0e:cf:7c:57:01:f4:08:44:4b:3a:d0:
         f8:9e:0c:33:92:68:ba:fe:a9:58:c4:9c:44:f5:bd:db:51:5b:
         df:a2:17:aa:71:64:93:06:e5:be:f9:9d:73:b6:56:10:90:eb:
         63:da:03:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYckRdsnH7fDnBCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5
OTNkMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk
NjkyYTI2ZGMtYmM0ZS00MGM1LTkxMTgtMTM2NDgyMDllMmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBkv74DiId1RjE6rNwsg0/0GmDMr5kHAH5RM
QDeEqes5Rdzgh7ZLVUK5uY1FyB3vyOQKesW7XJ4EpO+d/rT2QnsINbIsXT+ByY0I
07FmYaAx5TKVyt35K5qLd65ZUjiTP5LQCbqnOYQ19ETIYQXWjH7FV4Eq9vmXIxV4
/Gdsn0+2/SuFQKMJJG7dQ3eOw8TtLQXsgeFsWo2KyLqMhf74kxxx+lTplLKamM0M
oquc/QgmuwqvNouNs7XOVnkaONQ7UZ1i50WAFtYOF85xdu2M2oxBYoXU9kwBsVV1
03oZ8b1vgAGVoHqN+xs4wgcnzgbmTiEOpUo2YL+CHBxzu3uTiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEwUKW46NF4W+GDZuqUffY5e1rHsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi
OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvNTFlZmRiNmYtYTJiZC0z
NWJiLWI0MmItMjMxYTMwZmE3ZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky
NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk
OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy
NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98Ak
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACFl3keiK9tsrAc3IGCVTr5MQUKSnMxa6+XK5iyWjnSJkH6brbLy
4LQuQySPp9ebs2u8YrOyaHfsfcPA1urGjWdfXnBRLNURgQf5nncVyXnpsyIqHL+0
jJGlR34KyqY86rR62d0wZKihDpfO+HNSo7tzTPdSmZPaPIptXAL0L6pGtBzi9rMD
dJAZIrPMYtT2b2eYKaL5W3PIIs6DZLkEBjSEMgueH1WbZzHPmTGLEFgqF20ovs0H
f+LjYz+QvPDXz3oNiAaoGfnDlN31JBUOz3xXAfQIREs60PieDDOSaLr+qVjEnET1
vdtRW9+iF6pxZJMG5b75nXO2VhCQ62PaA68=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:43:57 2025 by rpki-client