Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
File:                     84a6cb81-8bd5-38db-b496-fd0e590df645.roa (raw, json)
Hash identifier:          Zy23nQgEq2XuiyONnM/CevEdg9UDdB1cci7Qgd5Dhug=
Subject key identifier:   82:DA:D6:17:5B:6A:57:5A:65:ED:B2:D8:D3:15:15:9B:3E:D9:C3:4B
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F4328584B6D2C972EB58CEA1576050700
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     401170
IP address blocks:        2602:f8bf::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:97:2e:b5:8c:ea:15:76:05:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=17f4f248-a2b4-4734-8e0f-5d7a0e932c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c5:d9:26:92:5c:d3:dd:94:eb:80:14:a4:de:
                    e1:b0:a1:e1:49:44:1c:47:66:4f:59:35:6c:89:33:
                    89:9b:32:85:70:7e:82:d4:8e:c2:b9:c3:dc:ad:56:
                    bb:b0:e2:f8:27:69:73:98:5d:32:90:53:b5:96:07:
                    fd:8a:37:4e:5a:85:35:90:48:2e:40:c8:dc:6b:f9:
                    9a:b3:ce:2b:a6:19:72:c6:45:ed:cb:14:3c:6b:59:
                    27:d1:b4:7e:ac:01:77:f4:a9:57:f2:80:58:b2:7a:
                    27:71:a4:6c:ac:6e:08:ff:f7:6e:e0:77:27:22:8f:
                    7f:76:da:41:0e:28:2f:5e:59:8e:88:5a:41:ee:f5:
                    73:6a:8e:89:70:2c:c3:86:59:6e:ed:ae:0c:36:08:
                    b6:99:2e:d8:ad:62:ae:3e:44:9a:20:97:93:64:2e:
                    28:d0:17:78:cf:81:75:2c:c0:f8:24:b3:ab:f0:77:
                    a1:39:ac:b3:67:bc:ab:0d:cf:cc:04:c1:89:72:75:
                    9a:f9:70:40:2e:6e:81:4c:d9:38:be:45:3c:ee:ca:
                    1e:8a:2b:19:a9:44:a7:d8:3a:1e:70:66:18:69:ed:
                    26:6f:ea:45:c0:0d:91:57:83:ff:ef:64:45:77:92:
                    b9:dc:d5:84:54:cc:d7:72:9b:df:3e:a1:ce:0f:2c:
                    15:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DA:D6:17:5B:6A:57:5A:65:ED:B2:D8:D3:15:15:9B:3E:D9:C3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:83:4b:ac:25:f3:fe:20:4e:8f:51:87:c7:47:48:83:f6:b0:
         87:96:9c:94:09:da:7d:ab:87:4f:cb:07:e4:d7:46:6e:4e:d1:
         3a:c7:59:32:08:2e:a5:8d:fe:ac:06:8b:c2:e9:d2:96:bf:80:
         da:c5:a4:b3:a1:6f:fb:77:bb:9c:7c:a7:67:1f:d9:ea:e0:ca:
         1e:03:7c:6b:d9:dd:5a:ed:91:00:02:43:24:45:a0:e8:5d:40:
         3e:1d:29:89:98:71:87:16:0b:dd:f4:f2:a2:26:c8:a9:3f:c7:
         10:13:d9:7c:b8:d9:b3:e5:37:3b:61:77:6f:77:71:4d:39:78:
         67:c7:7b:75:8b:0b:40:93:ff:49:7c:b0:4b:5d:0f:e9:8b:89:
         e4:8e:98:54:34:0c:81:e6:01:49:a6:6e:ab:2b:42:71:8a:19:
         24:a7:75:49:04:b1:9d:3d:4a:32:77:c4:ce:d1:56:03:95:65:
         7e:4f:33:cd:ac:63:b5:01:3b:9c:be:6c:4a:d0:9e:fe:f1:60:
         00:83:7d:2e:f6:f2:45:19:87:21:4c:4f:ed:80:4b:fe:68:62:
         86:5a:83:a2:57:1e:46:7e:14:9c:98:e1:f2:04:e7:47:3f:90:
         42:4a:4e:02:4b:fc:4b:08:5e:92:99:ab:65:7e:0f:f5:00:70:
         fd:a9:3f:7f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEttLJcutYzqFXYFBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE2OTRkOWEtOGExZi00NzhkLThkNWYtYzNkNGM4NGRk
ZWE4MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
MTdmNGYyNDgtYTJiNC00NzM0LThlMGYtNWQ3YTBlOTMyYzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8XZJpJc092U64AUpN7hsKHhSUQcR2ZPWTVs
iTOJmzKFcH6C1I7CucPcrVa7sOL4J2lzmF0ykFO1lgf9ijdOWoU1kEguQMjca/ma
s84rphlyxkXtyxQ8a1kn0bR+rAF39KlX8oBYsnoncaRsrG4I//du4HcnIo9/dtpB
DigvXlmOiFpB7vVzao6JcCzDhllu7a4MNgi2mS7YrWKuPkSaIJeTZC4o0Bd4z4F1
LMD4JLOr8HehOayzZ7yrDc/MBMGJcnWa+XBALm6BTNk4vkU87soeiisZqUSn2Doe
cGYYae0mb+pFwA2RV4P/72RFd5K53NWEVMzXcpvfPqHODywVLwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFILa1hdbaldaZe2y2NMVFZs+2cNLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MTY5
NGQ5YS04YTFmLTQ3OGQtOGQ1Zi1jM2Q0Yzg0ZGRlYTgvODRhNmNiODEtOGJkNS0z
OGRiLWI0OTYtZmQwZTU5MGRmNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzE2OTRkOWEtOGExZi00NzhkLThk
NWYtYzNkNGM4NGRkZWE4LzcxNjk0ZDlhLThhMWYtNDc4ZC04ZDVmLWMzZDRjODRk
ZGVhOC5jcmwwHwYDVR0jBBgwFoAULdfzSZhsWGvHv+DBnb+PvC7kvNwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83MTY5NGQ5YS04YTFmLTQ3OGQtOGQ1Zi1jM2Q0
Yzg0ZGRlYTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4vwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAjoNLrCXz/iBOj1GHx0dIg/awh5aclAnafauHT8sH5NdGbk7ROsdZ
MggupY3+rAaLwunSlr+A2sWks6Fv+3e7nHynZx/Z6uDKHgN8a9ndWu2RAAJDJEWg
6F1APh0piZhxhxYL3fTyoibIqT/HEBPZfLjZs+U3O2F3b3dxTTl4Z8d7dYsLQJP/
SXywS10P6YuJ5I6YVDQMgeYBSaZuqytCcYoZJKd1SQSxnT1KMnfEztFWA5Vlfk8z
zaxjtQE7nL5sStCe/vFgAIN9LvbyRRmHIUxP7YBL/mhihlqDolceRn4UnJjh8gTn
Rz+QQkpOAkv8SwhekpmrZX4P9QBw/ak/fw==
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:30:40 2025 by rpki-client