Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/15a22f1f-b13f-381f-8b3c-4b59841245a7.roa
File:                     15a22f1f-b13f-381f-8b3c-4b59841245a7.roa (raw, json)
Hash identifier:          tth9VAgAGQN7JdcyLiGMh1AVst95HZPDzxftBcJ/qH8=
Subject key identifier:   ED:BA:CF:9B:A8:79:27:56:B3:89:8E:1F:40:85:3F:E4:22:BA:19:C8
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584A920631C3703E5F89839F2400
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/15a22f1f-b13f-381f-8b3c-4b59841245a7.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     18526
IP address blocks:        2602:fd6f:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:31:c3:70:3e:5f:89:83:9f:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=aa50866d-302b-49ef-a01f-19d65beb2c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:79:b0:30:6f:df:01:66:f4:04:0f:60:96:
                    50:d3:57:04:62:1a:7a:63:f0:4c:f2:57:ad:4d:91:
                    16:ba:c4:eb:6b:66:3f:9c:11:0d:24:a5:f9:91:2d:
                    6a:16:f7:0c:71:43:59:ff:2e:e7:31:dc:56:be:62:
                    b9:62:bb:f8:ed:f5:2a:14:66:6b:2e:e6:1e:e2:74:
                    6c:83:48:5d:e7:3b:ea:25:5f:7e:1d:b5:2d:2f:19:
                    df:49:72:c4:b3:22:3a:68:0b:02:7e:aa:f3:fb:19:
                    58:a4:e4:76:3d:00:ab:4b:d6:9d:dc:3d:b4:f6:e0:
                    0e:d3:54:1d:d5:b1:e4:3e:0d:3e:c1:94:0d:fb:d2:
                    e3:ff:7f:34:7a:01:aa:72:b6:4e:ae:51:01:ce:3c:
                    6f:9d:63:56:0f:33:30:9d:c3:6d:5b:64:f5:00:21:
                    ae:b7:ce:14:b8:c4:e5:a5:0c:7d:28:f0:8f:3d:64:
                    b3:6b:eb:75:13:d4:aa:5b:c2:f2:85:ba:22:3d:49:
                    06:d8:0b:04:11:6e:81:9f:92:f2:da:81:18:ed:41:
                    f0:11:b0:fc:87:ad:52:1a:de:e9:3a:2e:92:a2:f0:
                    2d:84:47:a1:3b:21:84:ac:35:0c:58:f2:7d:9f:30:
                    60:99:e4:e5:12:ea:f9:13:98:c3:f9:cb:7a:4b:00:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BA:CF:9B:A8:79:27:56:B3:89:8E:1F:40:85:3F:E4:22:BA:19:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/15a22f1f-b13f-381f-8b3c-4b59841245a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:1c:ad:74:a2:bb:54:48:f8:a5:3c:48:16:81:b4:91:67:76:
         51:fa:e0:c7:45:7d:56:38:85:dd:32:3e:86:3f:09:2b:f5:3b:
         d6:ac:7e:ae:8b:48:69:9b:61:e3:10:21:a2:28:69:55:f5:30:
         76:48:a7:b2:02:87:10:c8:24:3d:3f:c2:fd:fb:f3:d4:2f:03:
         dd:fe:2e:6c:ee:ca:70:52:5b:c8:1f:d5:b6:f1:86:e2:b2:2b:
         d6:3f:d3:a3:c5:3a:56:76:7c:d1:f4:a9:5a:43:53:71:05:15:
         1e:45:3b:2d:9f:2b:67:cc:5c:e6:b8:88:20:b1:16:a2:c1:74:
         81:53:a1:df:ab:c5:f7:ed:f3:13:c2:f0:73:78:b6:0f:d1:07:
         72:ab:3c:0b:7b:97:82:53:fc:9e:c1:22:4f:a4:c7:1a:1f:6f:
         82:1e:b9:2d:9d:a0:e8:9c:30:70:bb:d4:4e:7a:1d:c5:4e:32:
         f0:49:40:70:4b:ff:a3:f3:09:f6:85:0f:18:09:f0:9c:ab:c7:
         10:e5:89:be:52:d5:7c:0f:e3:72:7d:fe:90:1a:0e:39:97:70:
         2b:de:eb:77:30:5d:2e:3a:f4:9b:2f:60:c6:1e:1b:28:59:e3:
         35:fc:8f:03:15:85:3e:fc:9c:74:0e:ac:69:c7:3a:50:14:09:
         47:37:ed:30
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqSBjHDcD5fiYOfJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk
YWE1MDg2NmQtMzAyYi00OWVmLWEwMWYtMTlkNjViZWIyYzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuN5sDBv3wFm9AQPYJZQ01cEYhp6Y/BM8let
TZEWusTra2Y/nBENJKX5kS1qFvcMcUNZ/y7nMdxWvmK5Yrv47fUqFGZrLuYe4nRs
g0hd5zvqJV9+HbUtLxnfSXLEsyI6aAsCfqrz+xlYpOR2PQCrS9ad3D209uAO01Qd
1bHkPg0+wZQN+9Lj/380egGqcrZOrlEBzjxvnWNWDzMwncNtW2T1ACGut84UuMTl
pQx9KPCPPWSza+t1E9SqW8LyhboiPUkG2AsEEW6Bn5Ly2oEY7UHwEbD8h61SGt7p
Oi6SovAthEehOyGErDUMWPJ9nzBgmeTlEur5E5jD+ct6SwAdlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO26z5uoeSdWs4mOH0CFP+QiuhnIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvMTVhMjJmMWYtYjEzZi0z
ODFmLThiM2MtNGI1OTg0MTI0NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9bwCA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFMcrXSiu1RI+KU8SBaBtJFndlH64MdFfVY4hd0yPoY/CSv1O9as
fq6LSGmbYeMQIaIoaVX1MHZIp7IChxDIJD0/wv3789QvA93+LmzuynBSW8gf1bbx
huKyK9Y/06PFOlZ2fNH0qVpDU3EFFR5FOy2fK2fMXOa4iCCxFqLBdIFTod+rxfft
8xPC8HN4tg/RB3KrPAt7l4JT/J7BIk+kxxofb4IeuS2doOicMHC71E56HcVOMvBJ
QHBL/6PzCfaFDxgJ8JyrxxDlib5S1XwP43J9/pAaDjmXcCve63cwXS469JsvYMYe
GyhZ4zX8jwMVhT78nHQOrGnHOlAUCUc37TA=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:51 2025 by rpki-client