Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/201265b1-4951-3820-8e93-60eae579759f.roa
File:                     201265b1-4951-3820-8e93-60eae579759f.roa (raw, json)
Hash identifier:          T2vdosNnQdlHiFN3kMwD6gLp/XQfPC0fjaxawbvEDWg=
Subject key identifier:   B8:D1:33:0E:34:CE:12:DB:6F:D8:32:D5:BA:D9:EE:53:F6:D3:33:48
Certificate issuer:       /CN=7dc57bd2-7481-40bc-917b-dbf3aa49d0fb
Certificate serial:       010D0C9F4328584BB2F832CFF2EC54ED31FE8580
Authority key identifier: FC:36:F1:64:1D:12:EA:D6:4B:0B:C9:56:98:B7:EC:53:4B:A7:43:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/201265b1-4951-3820-8e93-60eae579759f.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     23026
IP address blocks:        2602:809:f000::/44 maxlen: 44
                          2602:809:f000::/48 maxlen: 48
                          2602:809:f001::/48 maxlen: 48
                          2602:809:f002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:32:cf:f2:ec:54:ed:31:fe:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc57bd2-7481-40bc-917b-dbf3aa49d0fb
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=ff7a89bd-4252-4686-9251-b03a06b0df29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fa:ca:12:0c:8c:b3:dc:0f:37:49:2c:af:fd:
                    69:40:d5:b3:a1:52:be:e2:d0:62:eb:6e:26:f4:79:
                    3d:16:0b:10:bf:a1:a3:88:6e:9d:c7:2e:11:59:c6:
                    cd:ce:46:f6:f8:5e:a9:cf:9c:d9:47:7d:e1:cb:78:
                    23:96:fd:4d:8f:fe:f3:31:03:16:45:43:f4:c7:56:
                    24:2e:60:3c:46:08:fa:03:cd:26:64:30:b6:e6:d1:
                    2a:44:fb:d9:3f:ca:e5:3d:2b:aa:2a:7a:79:39:4e:
                    fd:4f:2e:20:1b:fc:b5:3f:90:c4:25:86:45:92:ae:
                    ef:2a:0a:42:06:92:7a:04:63:88:be:65:af:3a:73:
                    2a:e2:da:fa:5f:49:ec:38:e1:1a:73:8c:b8:76:b4:
                    57:17:b3:b2:b1:6a:f4:c0:92:49:0f:59:03:a6:e3:
                    32:87:6e:a7:ce:b1:42:7b:64:bb:3b:d1:56:a1:b5:
                    25:d3:f3:43:28:63:af:6a:2f:62:80:71:67:7a:6f:
                    3b:8f:22:ee:b8:6a:86:ba:92:2d:be:ae:28:40:5e:
                    82:eb:cb:ce:56:72:09:ed:0f:05:c6:7a:ab:7e:1c:
                    4f:8f:ba:4d:90:12:c8:28:5b:5f:c2:ef:21:be:c7:
                    30:83:1e:44:7c:1f:c3:e2:3c:8a:8c:fd:81:26:46:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D1:33:0E:34:CE:12:DB:6F:D8:32:D5:BA:D9:EE:53:F6:D3:33:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/201265b1-4951-3820-8e93-60eae579759f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.crl

            X509v3 Authority Key Identifier:
                keyid:FC:36:F1:64:1D:12:EA:D6:4B:0B:C9:56:98:B7:EC:53:4B:A7:43:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7dc57bd2-7481-40bc-917b-dbf3aa49d0fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:809:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e3:0d:0b:6b:a6:84:a2:be:b1:70:72:c6:1c:68:fa:f3:2f:
         4a:8d:dd:72:d9:e3:5a:80:52:f1:74:70:3f:df:33:07:21:33:
         0a:53:5f:71:f1:d7:e1:9d:54:02:78:1c:70:3c:ed:43:f8:7a:
         6f:79:e3:29:13:56:1d:a9:d3:84:9e:ae:01:00:ee:55:8b:83:
         ae:e8:ae:15:c0:38:dd:09:b0:6f:be:7e:07:82:3a:ba:41:37:
         05:56:da:0b:99:87:4d:9e:ea:e6:8c:cb:6b:f5:f9:87:e6:e2:
         29:9f:4e:c6:8b:fb:fe:6b:fe:f9:66:c4:96:5f:c1:c0:7f:11:
         84:87:f1:f4:20:21:5a:e7:1c:0c:a5:b5:ad:1f:3b:0c:24:23:
         20:79:9c:2e:a5:35:3b:1a:2b:b7:36:eb:29:c6:97:16:fe:d3:
         31:ef:8a:45:63:06:1a:26:64:1b:22:5d:47:d1:20:ad:aa:b3:
         d5:75:52:24:2e:b3:f7:dd:4e:72:ae:5f:9b:56:37:a6:8e:4a:
         b5:6e:23:9c:50:f7:d4:8f:68:1d:0e:db:34:dd:54:11:25:88:
         6a:eb:3a:e8:c2:eb:a2:f6:87:42:85:ce:ff:d6:4b:29:4e:0f:
         aa:6f:64:80:74:93:e3:a3:62:b7:77:c3:6f:2a:0e:e9:f5:2e:
         4a:0f:cd:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuy+DLP8uxU7TH+hYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2RjNTdiZDItNzQ4MS00MGJjLTkxN2ItZGJmM2FhNDlk
MGZiMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
ZmY3YTg5YmQtNDI1Mi00Njg2LTkyNTEtYjAzYTA2YjBkZjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/rKEgyMs9wPN0ksr/1pQNWzoVK+4tBi624m
9Hk9FgsQv6GjiG6dxy4RWcbNzkb2+F6pz5zZR33hy3gjlv1Nj/7zMQMWRUP0x1Yk
LmA8Rgj6A80mZDC25tEqRPvZP8rlPSuqKnp5OU79Ty4gG/y1P5DEJYZFkq7vKgpC
BpJ6BGOIvmWvOnMq4tr6X0nsOOEac4y4drRXF7OysWr0wJJJD1kDpuMyh26nzrFC
e2S7O9FWobUl0/NDKGOvai9igHFnem87jyLuuGqGupItvq4oQF6C68vOVnIJ7Q8F
xnqrfhxPj7pNkBLIKFtfwu8hvscwgx5EfB/D4jyKjP2BJkbmywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLjRMw40zhLbb9gy1brZ7lP20zNIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83ZGM1
N2JkMi03NDgxLTQwYmMtOTE3Yi1kYmYzYWE0OWQwZmIvMjAxMjY1YjEtNDk1MS0z
ODIwLThlOTMtNjBlYWU1Nzk3NTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2RjNTdiZDItNzQ4MS00MGJjLTkx
N2ItZGJmM2FhNDlkMGZiLzdkYzU3YmQyLTc0ODEtNDBiYy05MTdiLWRiZjNhYTQ5
ZDBmYi5jcmwwHwYDVR0jBBgwFoAU/DbxZB0S6tZLC8lWmLfsU0unQ5AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC83ZGM1N2JkMi03NDgxLTQwYmMtOTE3Yi1kYmYz
YWE0OWQwZmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIICfAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADbjDQtrpoSivrFwcsYcaPrzL0qN3XLZ41qAUvF0cD/fMwchMwpT
X3Hx1+GdVAJ4HHA87UP4em954ykTVh2p04SergEA7lWLg67orhXAON0JsG++fgeC
OrpBNwVW2guZh02e6uaMy2v1+Yfm4imfTsaL+/5r/vlmxJZfwcB/EYSH8fQgIVrn
HAylta0fOwwkIyB5nC6lNTsaK7c26ynGlxb+0zHvikVjBhomZBsiXUfRIK2qs9V1
UiQus/fdTnKuX5tWN6aOSrVuI5xQ99SPaB0O2zTdVBEliGrrOujC66L2h0KFzv/W
SylOD6pvZIB0k+OjYrd3w28qDun1LkoPzeI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:14:44 2025 by rpki-client