Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51/8b57e038-1db5-32ed-96e8-71b4f5c15b89.roa
File:                     8b57e038-1db5-32ed-96e8-71b4f5c15b89.roa (raw, json)
Hash identifier:          KUxVD2sBoqDbirr9M+qo80yuNA9//bGI/hOyr4CNHd8=
Subject key identifier:   7E:CA:9C:B3:CA:17:2E:F0:8B:E1:27:3F:41:E2:77:85:0A:8B:8E:AD
Certificate issuer:       /CN=55113823-1e91-4b80-9639-924369210e51
Certificate serial:       010D0C9F4328584B28C6E356DEB2752512E1A0BA
Authority key identifier: 8B:E2:68:25:C1:48:EB:66:50:D0:E9:B4:81:22:B7:90:4A:D8:DC:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51/8b57e038-1db5-32ed-96e8-71b4f5c15b89.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     399915
IP address blocks:        2602:fc3a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51/55113823-1e91-4b80-9639-924369210e51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51/55113823-1e91-4b80-9639-924369210e51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:e3:56:de:b2:75:25:12:e1:a0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55113823-1e91-4b80-9639-924369210e51
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=9208e646-9677-4074-a9ff-09730c0186ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:8c:b1:1d:3f:e4:f6:52:d8:8e:38:5c:6a:
                    2f:a6:9d:c6:99:23:db:a9:b5:f5:e1:81:72:50:39:
                    57:87:00:01:13:2d:cb:18:a2:99:1d:6b:24:bc:d6:
                    a0:39:5a:5e:c5:c7:0f:26:a2:b5:89:92:5c:a7:7a:
                    ae:e8:23:a6:50:ef:1e:6f:0d:cd:e3:af:58:bc:f5:
                    b3:f2:1c:2b:ff:47:62:73:8d:53:24:d4:c6:52:d2:
                    a8:3b:bf:d7:33:f1:8a:9f:27:f0:03:e3:18:2d:7d:
                    cb:fd:5f:f0:ca:67:d1:52:6d:44:e1:6b:c2:f9:01:
                    5a:da:e9:c1:bd:e0:72:af:ae:a1:ea:3f:17:4f:fc:
                    a5:e3:64:2e:41:ee:e4:46:82:2f:b1:5b:3a:0d:9e:
                    57:da:d7:e0:dd:9f:03:7e:0c:e1:e8:e0:7d:79:09:
                    94:bc:8d:cf:40:85:94:4d:e8:48:f3:9f:1e:01:3f:
                    b0:63:61:d0:e3:94:fd:89:48:b8:36:e4:95:31:be:
                    80:9c:b6:4c:2b:d5:02:49:a4:59:49:42:4c:94:82:
                    8d:c7:c3:90:3b:92:3b:10:a0:6d:a6:1c:f4:9a:02:
                    b0:65:67:e3:f3:e4:dc:8b:cf:f4:4d:b0:61:16:f6:
                    f9:15:3d:47:e9:9f:e0:c4:30:37:8d:94:84:c7:ca:
                    42:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CA:9C:B3:CA:17:2E:F0:8B:E1:27:3F:41:E2:77:85:0A:8B:8E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51/8b57e038-1db5-32ed-96e8-71b4f5c15b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51/55113823-1e91-4b80-9639-924369210e51.crl

            X509v3 Authority Key Identifier:
                keyid:8B:E2:68:25:C1:48:EB:66:50:D0:E9:B4:81:22:B7:90:4A:D8:DC:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55113823-1e91-4b80-9639-924369210e51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:8d:4c:fd:19:03:99:68:58:9e:2c:90:9d:ac:73:85:7d:f3:
         16:ac:13:19:44:41:93:0e:9d:a8:42:7e:44:84:8a:64:69:e2:
         60:2e:1f:db:38:91:81:a4:78:cd:f4:83:18:83:32:b6:0d:11:
         77:d6:e2:18:b2:b5:ec:a4:9a:ae:24:ae:19:69:7e:e8:f8:a8:
         36:49:ac:c3:c1:10:a7:5e:76:4a:98:2b:30:25:f2:c0:8b:13:
         4e:17:db:42:37:ca:f7:30:9d:ca:9d:25:8c:56:f2:19:dc:38:
         e4:d0:03:13:95:2e:16:76:d5:ff:7b:bf:88:d2:64:c0:c5:04:
         9b:dd:e4:54:5d:a6:8f:f7:68:38:da:98:27:81:a7:98:b1:b2:
         2a:55:fd:62:25:67:29:77:ac:5e:fd:e0:40:f1:ec:bd:a4:58:
         8c:a2:c6:d9:22:58:1c:0c:2b:63:30:b1:8c:ff:8a:68:24:dc:
         ed:13:a0:66:cc:48:a1:2d:d0:10:3a:62:bc:6c:7b:36:6a:00:
         29:95:eb:2d:16:ba:e9:04:14:07:c2:fb:f6:36:50:71:b8:58:
         60:62:fd:e9:6c:f6:8e:e9:38:c0:65:3e:1b:8a:b8:c0:cd:8f:
         a2:75:b2:7b:d2:37:6e:d2:56:67:5a:31:65:47:be:ce:03:c9:
         88:8f:dc:34
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsoxuNW3rJ1JRLhoLowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUxMTM4MjMtMWU5MS00YjgwLTk2MzktOTI0MzY5MjEw
ZTUxMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk
OTIwOGU2NDYtOTY3Ny00MDc0LWE5ZmYtMDk3MzBjMDE4NmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxWMsR0/5PZS2I44XGovpp3GmSPbqbX14YFy
UDlXhwABEy3LGKKZHWskvNagOVpexccPJqK1iZJcp3qu6COmUO8ebw3N469YvPWz
8hwr/0dic41TJNTGUtKoO7/XM/GKnyfwA+MYLX3L/V/wymfRUm1E4WvC+QFa2unB
veByr66h6j8XT/yl42QuQe7kRoIvsVs6DZ5X2tfg3Z8Dfgzh6OB9eQmUvI3PQIWU
TehI858eAT+wY2HQ45T9iUi4NuSVMb6AnLZMK9UCSaRZSUJMlIKNx8OQO5I7EKBt
phz0mgKwZWfj8+Tci8/0TbBhFvb5FT1H6Z/gxDA3jZSEx8pCOQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFH7KnLPKFy7wi+EnP0Hid4UKi46tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NTEx
MzgyMy0xZTkxLTRiODAtOTYzOS05MjQzNjkyMTBlNTEvOGI1N2UwMzgtMWRiNS0z
MmVkLTk2ZTgtNzFiNGY1YzE1Yjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTUxMTM4MjMtMWU5MS00YjgwLTk2
MzktOTI0MzY5MjEwZTUxLzU1MTEzODIzLTFlOTEtNGI4MC05NjM5LTkyNDM2OTIx
MGU1MS5jcmwwHwYDVR0jBBgwFoAUi+JoJcFI62ZQ0Om0gSK3kErY3K0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NTExMzgyMy0xZTkxLTRiODAtOTYzOS05MjQz
NjkyMTBlNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8OgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEApY1M/RkDmWhYniyQnaxzhX3zFqwTGURBkw6dqEJ+RISKZGniYC4f
2ziRgaR4zfSDGIMytg0Rd9biGLK17KSariSuGWl+6PioNkmsw8EQp152SpgrMCXy
wIsTThfbQjfK9zCdyp0ljFbyGdw45NADE5UuFnbV/3u/iNJkwMUEm93kVF2mj/do
ONqYJ4GnmLGyKlX9YiVnKXesXv3gQPHsvaRYjKLG2SJYHAwrYzCxjP+KaCTc7ROg
ZsxIoS3QEDpivGx7NmoAKZXrLRa66QQUB8L79jZQcbhYYGL96Wz2juk4wGU+G4q4
wM2PonWye9I3btJWZ1oxZUe+zgPJiI/cNA==
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:54:12 2025 by rpki-client