Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/3d6be999-7586-38e6-b66f-36e5c652c5a9.roa
File:                     3d6be999-7586-38e6-b66f-36e5c652c5a9.roa (raw, json)
Hash identifier:          RwPKUoGiidMsCLxHt/Yu8FSgsQloouuFUYjkyId0cGM=
Subject key identifier:   79:C5:0F:C5:47:10:B2:D2:5E:9A:03:5D:F9:39:0B:A1:27:3F:5B:59
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584BA9325C0DE63338A2F8658450
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/3d6be999-7586-38e6-b66f-36e5c652c5a9.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        2605:a7c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:5c:0d:e6:33:38:a2:f8:65:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=370e735a-5185-4206-afb3-1e0e8e79c305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:98:be:ac:ed:dd:e8:01:50:8a:0f:a1:2c:
                    6d:f2:d7:ce:97:aa:fd:bf:0c:c3:f3:a2:49:f3:ea:
                    1b:ca:d9:2c:e1:0d:2f:28:4d:34:6b:99:3b:2b:e0:
                    ae:8f:33:6e:6b:6b:a3:be:01:e5:a5:36:44:21:ef:
                    81:4d:cf:d6:24:0a:f8:68:dd:36:e5:ae:5b:84:a2:
                    28:5c:f2:d3:aa:3b:d9:08:e6:9e:36:c4:99:80:34:
                    6b:52:95:52:76:60:b0:5c:90:77:eb:a0:1d:3c:72:
                    55:26:f3:a7:97:7f:c5:c3:61:2b:3d:f7:b1:c3:25:
                    82:37:61:3d:16:ce:b9:61:8e:29:d7:ee:58:59:73:
                    55:de:91:7a:ec:4d:55:79:64:bd:1d:31:8e:c9:c9:
                    68:fb:c5:8b:bb:de:a5:dd:07:2b:b7:88:e0:7b:6b:
                    1d:54:75:72:42:35:9e:45:8d:9c:49:09:f9:60:a9:
                    47:6b:8d:d8:96:20:4d:cb:98:57:6f:4b:40:2e:cc:
                    ae:07:26:b2:cd:6b:20:a1:8c:fe:28:b2:81:4a:9f:
                    ae:64:e2:19:69:02:9d:2b:68:46:4e:70:00:f8:c0:
                    f0:10:ba:31:6e:37:15:ec:d5:9c:52:aa:c1:24:7b:
                    4a:39:e7:38:9f:25:f3:a7:88:0c:a4:21:65:5e:b8:
                    60:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C5:0F:C5:47:10:B2:D2:5E:9A:03:5D:F9:39:0B:A1:27:3F:5B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/3d6be999-7586-38e6-b66f-36e5c652c5a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c8:7f:76:99:cf:79:18:de:4b:09:a6:e0:10:44:e7:44:0e:
         c6:27:0e:f6:8c:77:5b:aa:d1:17:9f:41:57:17:a2:a0:2d:09:
         6a:9f:b1:d2:4c:e6:0d:7f:cf:89:aa:17:1e:4a:ff:8a:9e:6b:
         3b:b0:44:57:40:a7:99:b9:aa:9d:12:28:81:6f:81:93:c0:f1:
         01:15:3c:5a:cd:aa:43:7a:4f:97:a9:a8:4a:38:58:85:94:41:
         fc:4f:5a:e5:1c:96:a6:c5:07:2a:b8:bd:bc:fa:73:fc:f3:44:
         bb:e1:23:b1:e7:53:1c:e0:12:1e:32:c3:ba:1a:e2:00:41:1c:
         b3:6c:51:b4:8c:8d:7b:01:f3:30:bc:be:16:5f:e4:4e:0b:fb:
         2c:b7:cd:41:fb:92:de:7b:b7:f5:26:26:e3:f7:bd:4d:6b:07:
         da:fb:96:a1:80:66:ab:49:8f:07:5c:80:ee:2b:d1:45:c8:d0:
         f9:0c:91:67:86:e6:4d:a5:b0:83:7b:04:f3:89:bb:25:fa:26:
         dd:f5:b6:c1:bb:0c:03:89:77:b5:33:d7:bd:b6:6c:d8:f0:84:
         da:59:85:aa:05:33:b1:7d:38:42:88:a6:0b:d9:0f:7d:f3:b5:
         6e:c9:da:85:eb:f1:07:75:6a:b0:20:15:5d:f9:19:8d:4c:c2:
         24:c5:76:cb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEupMlwN5jM4ovhlhFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli
Njc2MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
MzcwZTczNWEtNTE4NS00MjA2LWFmYjMtMWUwZThlNzljMzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRyYvqzt3egBUIoPoSxt8tfOl6r9vwzD86JJ
8+obytks4Q0vKE00a5k7K+CujzNua2ujvgHlpTZEIe+BTc/WJAr4aN025a5bhKIo
XPLTqjvZCOaeNsSZgDRrUpVSdmCwXJB366AdPHJVJvOnl3/Fw2ErPfexwyWCN2E9
Fs65YY4p1+5YWXNV3pF67E1VeWS9HTGOyclo+8WLu96l3Qcrt4jge2sdVHVyQjWe
RY2cSQn5YKlHa43YliBNy5hXb0tALsyuByayzWsgoYz+KLKBSp+uZOIZaQKdK2hG
TnAA+MDwELoxbjcV7NWcUqrBJHtKOec4nyXzp4gMpCFlXrhgkwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHnFD8VHELLSXpoDXfk5C6EnP1tZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5
MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvM2Q2YmU5OTktNzU4Ni0z
OGU2LWI2NmYtMzZlNWM2NTJjNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3
ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5
YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy
Y2ZjOWI2NzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWnwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAUyH92mc95GN5LCabgEETnRA7GJw72jHdbqtEXn0FXF6KgLQlqn7HS
TOYNf8+JqhceSv+Knms7sERXQKeZuaqdEiiBb4GTwPEBFTxazapDek+XqahKOFiF
lEH8T1rlHJamxQcquL28+nP880S74SOx51Mc4BIeMsO6GuIAQRyzbFG0jI17AfMw
vL4WX+ROC/sst81B+5Lee7f1Jibj971Nawfa+5ahgGarSY8HXIDuK9FFyND5DJFn
huZNpbCDewTzibsl+ibd9bbBuwwDiXe1M9e9tmzY8ITaWYWqBTOxfThCiKYL2Q99
87VuydqF6/EHdWqwIBVd+RmNTMIkxXbL
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:43:21 2025 by rpki-client