Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa
File:                     3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa (raw, json)
Hash identifier:          ISjUHe9nxmtd0oucsGEUS1TeODMeKOA2PO21aq6A5jE=
Subject key identifier:   BE:EA:B0:B1:FA:8D:C8:A8:69:50:7E:3C:04:CE:EA:C7:2E:5A:30:49
Certificate issuer:       /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
Certificate serial:       010D0C9F4328584A7085F3B5125EDF61BB937DE0
Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     32002
IP address blocks:        2602:f964:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f3:b5:12:5e:df:61:bb:93:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=c980b43e-1cca-48da-ab70-0770635fbab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:6e:b9:60:a4:34:c8:29:b4:a6:0b:6f:a1:
                    5c:9c:0e:d7:c6:0c:7b:a8:21:ba:23:4c:2e:19:96:
                    22:07:8f:97:0d:e1:d6:eb:a9:92:74:5d:0b:5b:43:
                    9a:f1:01:c5:ca:28:bd:2b:6b:a9:fc:95:79:44:ab:
                    bb:63:f3:bc:29:a9:33:0c:64:fc:e7:c7:c5:92:74:
                    be:3b:fb:10:03:2d:2a:9b:3b:b6:e9:98:d7:68:1c:
                    29:75:41:2a:e5:34:76:65:33:59:34:16:e6:44:f2:
                    69:ba:81:73:68:9d:17:6f:a0:9a:b9:12:71:4a:b6:
                    3b:c2:44:7d:59:49:e5:6a:e8:ee:a4:44:30:4d:80:
                    89:21:fb:a2:1c:df:8e:b5:82:ec:69:83:ae:91:a9:
                    d4:fc:10:7e:91:b1:3d:54:19:50:b0:cf:c6:68:e9:
                    89:99:55:36:b3:e4:34:98:fa:f6:94:9f:8a:b3:c5:
                    34:f2:4e:d1:c9:8d:c8:f1:89:73:44:ec:b5:d5:2f:
                    75:64:03:c7:9e:82:74:3c:51:5d:e9:97:23:52:c5:
                    28:3a:3c:c4:ef:e2:67:12:02:f3:8a:58:b7:9c:1f:
                    e3:41:29:18:6e:8c:fb:48:45:ff:53:6f:e5:49:f9:
                    d9:30:10:aa:57:ad:d1:12:02:62:bd:7d:f1:1a:39:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EA:B0:B1:FA:8D:C8:A8:69:50:7E:3C:04:CE:EA:C7:2E:5A:30:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl

            X509v3 Authority Key Identifier:
                keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f964:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f9:05:a4:d2:fc:74:8e:97:a8:70:de:d7:d9:1f:a9:84:36:
         b6:cf:7d:0c:a3:24:84:ea:22:ed:e9:16:1e:fc:a5:19:d1:73:
         28:77:4a:90:9b:cc:b1:e7:0d:08:9a:a8:e4:ff:08:61:1c:3a:
         32:c3:72:3a:98:55:eb:2a:f8:63:8b:72:d7:c9:7c:56:ba:f1:
         98:0f:b1:28:03:a7:e9:b9:c2:9c:9f:74:3e:dc:94:9d:44:d9:
         1b:a3:0a:9d:8c:e3:16:97:ed:24:29:95:93:d9:c1:51:f7:21:
         6e:3c:a4:a4:ef:5d:33:49:5d:d0:56:65:5a:5a:6b:19:32:22:
         0c:1c:db:ba:7d:9b:11:7e:51:4a:34:5f:d0:1e:aa:6d:ae:61:
         c1:c8:6c:d1:ca:76:8e:c9:b4:ad:90:0b:36:17:33:bd:9f:94:
         7e:92:62:60:18:0a:11:6c:2d:28:a0:af:8d:10:d6:9f:21:71:
         bc:fa:bc:6e:59:e6:bf:dc:fb:be:15:bc:2d:67:0c:61:82:b4:
         7a:3c:1c:f2:63:01:85:a8:99:b0:cf:43:80:b2:a5:4d:7a:5d:
         ff:3f:e6:00:62:e0:52:75:f9:22:e6:ba:e4:3d:1d:77:d7:99:
         0a:7b:2e:c9:0c:7a:06:c2:e8:bd:d4:e9:8c:cb:c5:59:e0:bb:
         3e:7c:66:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpwhfO1El7fYbuTfeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYThiODRlMmItYWZiZS00YjM1LWIwMDUtZTBkZmNhMmUy
M2Q4MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
Yzk4MGI0M2UtMWNjYS00OGRhLWFiNzAtMDc3MDYzNWZiYWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AtuuWCkNMgptKYLb6FcnA7Xxgx7qCG6I0wu
GZYiB4+XDeHW66mSdF0LW0Oa8QHFyii9K2up/JV5RKu7Y/O8KakzDGT858fFknS+
O/sQAy0qmzu26ZjXaBwpdUEq5TR2ZTNZNBbmRPJpuoFzaJ0Xb6CauRJxSrY7wkR9
WUnlaujupEQwTYCJIfuiHN+OtYLsaYOukanU/BB+kbE9VBlQsM/GaOmJmVU2s+Q0
mPr2lJ+Ks8U08k7RyY3I8YlzROy11S91ZAPHnoJ0PFFd6ZcjUsUoOjzE7+JnEgLz
ili3nB/jQSkYboz7SEX/U2/lSfnZMBCqV63REgJivX3xGjlUNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL7qsLH6jcioaVB+PATO6scuWjBJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOGI4
NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRmY2EyZTIzZDgvM2JjZmIzM2UtY2JkNi0z
ZTQ1LTk1NGQtNjFhYzMwMTI2YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYThiODRlMmItYWZiZS00YjM1LWIw
MDUtZTBkZmNhMmUyM2Q4L2E4Yjg0ZTJiLWFmYmUtNGIzNS1iMDA1LWUwZGZjYTJl
MjNkOC5jcmwwHwYDVR0jBBgwFoAUJyaHnCMjdlLoJfSaxiQ6/6bmTi8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hOGI4NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRm
Y2EyZTIzZDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ZAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF/5BaTS/HSOl6hw3tfZH6mENrbPfQyjJITqIu3pFh78pRnRcyh3
SpCbzLHnDQiaqOT/CGEcOjLDcjqYVesq+GOLctfJfFa68ZgPsSgDp+m5wpyfdD7c
lJ1E2RujCp2M4xaX7SQplZPZwVH3IW48pKTvXTNJXdBWZVpaaxkyIgwc27p9mxF+
UUo0X9Aeqm2uYcHIbNHKdo7JtK2QCzYXM72flH6SYmAYChFsLSigr40Q1p8hcbz6
vG5Z5r/c+74VvC1nDGGCtHo8HPJjAYWombDPQ4CypU16Xf8/5gBi4FJ1+SLmuuQ9
HXfXmQp7LskMegbC6L3U6YzLxVnguz58ZnI=
-----END CERTIFICATE-----
Generated at Wed Jul 23 01:30:14 2025 by rpki-client