Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa
File:                     a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa (raw, json)
Hash identifier:          e9bfuKq7/R6X7yAMjEcLAWGFS/ea2KvJ0MuxHxwdbbU=
Subject key identifier:   18:41:2A:2D:56:B2:21:83:39:E3:7E:23:24:79:AA:6D:72:BA:87:83
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C1759F786A2AF317E59C0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     4922
IP address blocks:        2606:a800::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:17:59:f7:86:a2:af:31:7e:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=6932589c-1034-4233-bbf5-d8dce324174c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:61:ff:f2:0c:3d:8d:1f:90:c2:fc:1e:fa:
                    44:28:91:13:a2:28:2f:1e:86:d5:05:0f:f8:2f:51:
                    e8:cd:7d:3e:ff:76:ad:29:d0:2c:6e:95:83:74:bd:
                    eb:24:7a:29:5f:e1:c0:fd:10:88:e9:bd:55:78:e4:
                    b3:cc:25:25:70:93:0b:85:6e:42:3e:f6:78:53:f2:
                    44:13:aa:93:88:ef:e0:e3:aa:83:ca:64:0c:bf:88:
                    07:e3:92:82:f1:7a:0f:dd:a8:2a:14:ec:8a:a8:95:
                    92:fa:ac:6d:79:30:a7:00:dc:63:5f:5d:d9:c6:33:
                    25:cc:6c:62:24:ea:06:c0:46:b4:7b:90:6c:cb:79:
                    47:67:32:cc:6f:1a:79:7b:d8:bf:56:54:f8:0c:aa:
                    4c:75:02:b7:f2:32:6b:34:e8:33:9a:b6:90:42:b7:
                    b1:28:c2:b6:ed:a9:34:fc:69:32:fb:c4:d8:06:1e:
                    2e:5b:3b:a8:f2:5e:c9:3c:40:7d:9f:da:25:7e:27:
                    49:87:9e:f7:fc:c0:c3:40:07:20:5a:d2:cc:e7:5e:
                    57:18:d0:8a:14:64:14:78:57:5b:02:b9:9c:ec:98:
                    3f:20:f4:15:b8:81:e8:2e:d0:ee:f1:d2:f8:09:94:
                    76:98:bd:09:95:dc:a0:3a:be:19:86:81:60:52:de:
                    96:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:41:2A:2D:56:B2:21:83:39:E3:7E:23:24:79:AA:6D:72:BA:87:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a800::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:14:aa:ec:27:3a:ef:4c:90:7f:11:c4:51:07:17:f4:3d:
         ad:a5:25:e7:0d:13:5f:89:38:e8:53:c8:24:67:67:b2:92:bd:
         7e:0c:79:ec:d3:75:2b:71:a1:c3:11:22:b6:a4:60:2d:ac:cb:
         26:30:64:a0:12:e2:a5:38:0d:91:78:87:31:e8:17:f2:76:41:
         87:01:87:49:fb:9d:b2:f7:8f:9d:c1:0a:4f:82:ca:a7:01:b6:
         80:82:d6:d8:d9:d1:a9:d6:3b:3a:23:9e:d2:d9:88:68:15:f3:
         46:5b:09:9f:86:d9:c5:f1:a9:da:ed:ce:14:18:7e:66:64:a4:
         9f:b1:0b:a0:0c:f9:ba:67:63:d4:0c:7c:d0:93:fe:73:e1:d0:
         59:f5:19:d7:93:55:ea:30:d9:8a:96:e7:ce:bb:8a:4e:3d:6d:
         03:c3:43:a7:b2:df:80:48:8f:a7:0a:5d:c5:10:53:18:ff:af:
         32:fb:95:05:81:62:9c:ff:5d:d9:66:1b:35:5c:4b:07:c6:1c:
         cd:67:14:9a:4a:0b:0d:d3:ee:56:bd:7d:22:9a:0b:54:3d:69:
         09:7a:e9:69:8e:3b:74:d0:fc:3a:11:d6:95:7c:cc:06:84:68:
         c2:68:b2:28:8b:3c:64:30:f6:3f:8f:c7:cb:3a:d5:48:cc:37:
         11:2a:8d:0b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsEfBdZ94airzF+WcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
NjkzMjU4OWMtMTAzNC00MjMzLWJiZjUtZDhkY2UzMjQxNzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq59h//IMPY0fkML8HvpEKJEToigvHobVBQ/4
L1HozX0+/3atKdAsbpWDdL3rJHopX+HA/RCI6b1VeOSzzCUlcJMLhW5CPvZ4U/JE
E6qTiO/g46qDymQMv4gH45KC8XoP3agqFOyKqJWS+qxteTCnANxjX13ZxjMlzGxi
JOoGwEa0e5Bsy3lHZzLMbxp5e9i/VlT4DKpMdQK38jJrNOgzmraQQrexKMK27ak0
/Gky+8TYBh4uWzuo8l7JPEB9n9olfidJh573/MDDQAcgWtLM515XGNCKFGQUeFdb
Armc7Jg/IPQVuIHoLtDu8dL4CZR2mL0JldygOr4ZhoFgUt6WgwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBhBKi1WsiGDOeN+IyR5qm1yuoeDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYTI0MzBhNjItMmRkOC0z
NWExLWE2Y2YtMGM1YTBjZDUyOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJgaoAAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAxwUquwnOu9MkH8RxFEHF/Q9raUl5w0TX4k46FPIJGdnspK9fgx5
7NN1K3GhwxEitqRgLazLJjBkoBLipTgNkXiHMegX8nZBhwGHSfudsvePncEKT4LK
pwG2gILW2NnRqdY7OiOe0tmIaBXzRlsJn4bZxfGp2u3OFBh+ZmSkn7ELoAz5umdj
1Ax80JP+c+HQWfUZ15NV6jDZipbnzruKTj1tA8NDp7LfgEiPpwpdxRBTGP+vMvuV
BYFinP9d2WYbNVxLB8YczWcUmkoLDdPuVr19IpoLVD1pCXrpaY47dND8OhHWlXzM
BoRowmiyKIs8ZDD2P4/HyzrVSMw3ESqNCw==
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:33:17 2025 by rpki-client