Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa
File:                     49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa (raw, json)
Hash identifier:          sbM31qVULJY0hlHy+1vHJbJ0WgrgMB/OC9keMxgl18I=
Subject key identifier:   BE:28:0E:9D:42:17:AC:AA:46:8E:E3:3D:45:8D:AE:A6:C8:D2:04:6C
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F4328584B9E07C1EB0F4F77CCA8407380
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     54613
IP address blocks:        2602:fd9a:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c1:eb:0f:4f:77:cc:a8:40:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=fa5baacb-5c72-460c-b2ae-3305bb1cc23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:32:75:21:1a:c6:eb:f4:78:a2:aa:f4:31:
                    96:a7:c6:74:d4:73:59:de:a6:f1:8a:ff:4e:64:d1:
                    d1:9f:68:66:e7:a3:e4:00:2b:4a:63:4b:a7:e6:ec:
                    ed:5f:b9:d5:cf:62:b7:de:5e:8b:fa:f7:c3:d6:bf:
                    49:cd:61:63:77:7d:18:83:a5:9e:6a:6e:20:80:f0:
                    e8:5a:e4:7c:2c:fa:c7:b9:17:bb:1e:09:b2:f2:73:
                    b8:0b:84:d7:e4:9b:ec:a2:44:dc:23:6b:c1:ee:52:
                    9e:0c:ec:45:21:4f:59:c7:a3:0c:b5:34:a7:be:4b:
                    54:c2:03:fb:72:57:ef:cf:7e:59:3a:6f:c9:79:80:
                    c7:87:cb:fa:de:f5:ba:f6:e6:89:41:82:62:64:4b:
                    93:1f:50:79:7e:e4:f4:03:44:e0:e2:24:93:d1:47:
                    78:bf:5d:e1:a9:16:12:b3:7c:49:ae:19:2b:fc:f8:
                    7d:1a:3f:48:70:27:c8:ee:9c:15:26:6b:6a:8e:d1:
                    92:4c:a3:63:31:70:cf:d9:e1:fb:77:fc:fb:e9:ee:
                    31:85:1a:dc:b8:91:cc:14:60:8d:1b:f8:e1:44:3a:
                    c8:cf:3a:1b:ef:79:7d:61:69:6a:08:0e:32:f8:24:
                    49:51:42:b2:44:f0:ee:00:1a:bf:b2:a7:da:0c:e8:
                    17:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:28:0E:9D:42:17:AC:AA:46:8E:E3:3D:45:8D:AE:A6:C8:D2:04:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/49abf5bf-669f-3c5f-8fd7-939e9926cb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b7:bf:4b:89:af:79:e4:df:d9:7a:e7:85:c2:b3:d1:b1:8f:
         19:47:55:8d:79:35:dd:16:da:3e:f5:6b:58:df:f1:e1:e9:a1:
         3f:ee:4b:6e:84:65:fe:07:7d:df:23:ca:14:9f:97:0d:14:25:
         01:a8:f0:e2:10:f8:20:d0:41:04:35:63:05:de:d9:96:99:39:
         19:bb:f5:01:b5:ba:59:08:12:7a:34:3f:f1:9f:27:66:f9:32:
         6a:ff:92:d1:20:01:58:fd:af:50:e1:16:ca:4e:63:14:0c:12:
         3a:7a:73:50:5c:41:70:66:3f:e6:09:e0:11:92:8d:7d:3f:84:
         a4:33:9a:d7:f1:9d:5f:88:3a:3b:cf:67:da:7c:d4:85:85:26:
         a7:f1:e7:08:a5:9f:de:dd:8c:90:cc:d5:9d:2b:14:31:a1:77:
         e9:8c:ae:e0:e0:80:b1:83:49:2b:90:10:b5:9f:07:98:71:0b:
         c9:ef:02:6d:d2:0a:6c:35:34:51:cb:91:b7:40:c0:93:ac:15:
         e8:14:60:6b:94:e8:6e:46:4f:fd:f8:5a:79:df:51:66:1e:11:
         68:c7:1b:e6:27:52:51:6f:10:0a:cf:60:b8:bb:d7:79:37:b6:
         35:b9:02:08:48:c8:65:1d:b6:e1:59:66:1d:fa:76:1e:07:ba:
         48:c5:b9:4b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB8HrD093zKhAc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4
OTc2MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
ZmE1YmFhY2ItNWM3Mi00NjBjLWIyYWUtMzMwNWJiMWNjMjNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEwydSEaxuv0eKKq9DGWp8Z01HNZ3qbxiv9O
ZNHRn2hm56PkACtKY0un5uztX7nVz2K33l6L+vfD1r9JzWFjd30Yg6Weam4ggPDo
WuR8LPrHuRe7Hgmy8nO4C4TX5JvsokTcI2vB7lKeDOxFIU9Zx6MMtTSnvktUwgP7
clfvz35ZOm/JeYDHh8v63vW69uaJQYJiZEuTH1B5fuT0A0Tg4iST0Ud4v13hqRYS
s3xJrhkr/Ph9Gj9IcCfI7pwVJmtqjtGSTKNjMXDP2eH7d/z76e4xhRrcuJHMFGCN
G/jhRDrIzzob73l9YWlqCA4y+CRJUUKyRPDuABq/sqfaDOgXMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL4oDp1CF6yqRo7jPUWNrqbI0gRsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh
ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvNDlhYmY1YmYtNjY5Zi0z
YzVmLThmZDctOTM5ZTk5MjZjYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy
NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4
ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj
YTU2ODg5NzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9mg//
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFO3v0uJr3nk39l654XCs9GxjxlHVY15Nd0W2j71a1jf8eHpoT/u
S26EZf4Hfd8jyhSflw0UJQGo8OIQ+CDQQQQ1YwXe2ZaZORm79QG1ulkIEno0P/Gf
J2b5Mmr/ktEgAVj9r1DhFspOYxQMEjp6c1BcQXBmP+YJ4BGSjX0/hKQzmtfxnV+I
OjvPZ9p81IWFJqfx5wiln97djJDM1Z0rFDGhd+mMruDggLGDSSuQELWfB5hxC8nv
Am3SCmw1NFHLkbdAwJOsFegUYGuU6G5GT/34WnnfUWYeEWjHG+YnUlFvEArPYLi7
13k3tjW5AghIyGUdtuFZZh36dh4HukjFuUs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:10:12 2025 by rpki-client