Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8bf89bc7-7a54-34e4-a1aa-46db2e5a66a0.roa
File:                     8bf89bc7-7a54-34e4-a1aa-46db2e5a66a0.roa (raw, json)
Hash identifier:          ld0uTLl87aCWNXdTpsZSzoGUkZOOh7WVDvzCLJXR2cU=
Subject key identifier:   4F:3C:02:BD:78:EB:0B:3C:4A:08:1A:22:34:F6:EB:99:8B:24:8A:CC
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F4328584AF5212A7EF24AF3E9028BB7C0
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8bf89bc7-7a54-34e4-a1aa-46db2e5a66a0.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     11427
IP address blocks:        2602:80a:2014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2a:7e:f2:4a:f3:e9:02:8b:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=7eec9c62-07aa-465e-9b39-1ec71f796394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:89:eb:ef:be:3a:b9:7b:6f:89:1e:5d:24:
                    8a:99:be:4b:cf:f1:e0:a0:18:43:99:ff:95:84:48:
                    fa:a5:ca:16:a3:67:a8:b5:01:e8:20:6f:5a:ea:a0:
                    eb:64:b2:4a:1e:a2:a5:1b:81:fd:b9:55:85:76:30:
                    3b:1e:80:f3:10:55:bb:2b:7f:0d:f9:72:9c:33:e2:
                    2a:9c:00:a3:5c:2a:1e:7a:2b:1a:02:6f:ed:d8:4c:
                    1b:8f:b9:9d:ff:2d:44:dd:0f:79:60:31:52:dc:89:
                    81:e7:6e:69:80:73:8c:7a:b7:f1:73:b8:23:7f:56:
                    2a:10:f2:b6:63:5c:31:87:4d:39:69:6a:79:11:83:
                    90:29:a9:c3:b8:8a:e2:fb:0a:92:73:ba:7d:1d:9e:
                    58:55:ac:ed:75:2f:ce:f0:fa:7c:1c:37:13:5a:18:
                    1c:d2:1b:3d:26:7a:48:73:c4:ee:06:59:6a:ea:cf:
                    19:fa:ca:07:8a:c3:ee:81:0a:15:7e:89:1b:ec:b0:
                    2f:51:03:e6:6f:24:93:ea:9c:2d:f8:2a:95:4d:05:
                    c6:50:9c:98:73:51:6e:17:c8:49:ae:29:e3:56:25:
                    c2:ea:c1:b6:fa:52:6b:05:81:4d:02:3d:c0:3f:f4:
                    73:1a:a0:48:51:b0:95:27:ac:04:0c:84:a6:c8:ab:
                    a1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3C:02:BD:78:EB:0B:3C:4A:08:1A:22:34:F6:EB:99:8B:24:8A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/8bf89bc7-7a54-34e4-a1aa-46db2e5a66a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:1e:a3:72:24:e0:d3:57:c7:f5:26:f1:8a:b6:9a:6b:1e:37:
         78:b9:21:05:73:bc:69:af:3b:42:f5:67:7a:9d:86:61:4f:7f:
         5b:62:ac:52:c3:75:98:ac:e7:56:b9:31:6e:34:3b:94:9e:48:
         69:85:80:ae:77:30:4b:29:d5:0d:18:d8:b8:3d:f7:39:7a:b8:
         88:f6:0d:bd:4d:6d:5d:66:d2:01:0e:5e:94:af:da:96:84:5d:
         2b:65:2d:fe:71:05:25:75:28:6f:17:d3:8e:16:04:b9:e0:26:
         67:e8:a8:ab:f1:2a:ce:1d:79:4a:54:f2:5e:a8:78:f0:f9:b5:
         c0:fa:e9:f5:b8:84:f4:50:1a:4e:08:1d:30:1c:85:71:3b:79:
         5e:73:2b:52:db:f5:75:d1:9c:1e:f2:9e:03:5e:f8:35:3b:07:
         42:2f:80:35:f9:4e:d8:d3:cd:9f:c7:5a:05:df:d5:68:27:fe:
         3c:eb:84:a0:58:c4:90:0f:a8:02:74:e3:9e:34:90:b5:77:b2:
         70:2e:32:a9:c4:1f:bf:7e:01:97:f7:e8:af:cc:83:ac:21:fe:
         52:cc:f6:0f:d6:a1:1c:6e:2f:07:e4:77:0c:e9:9d:18:76:d4:
         4f:9b:0c:17:19:dc:82:77:a7:31:94:09:d5:6a:c1:ca:12:78:
         19:20:59:7d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1ISp+8krz6QKLt8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkxOGVlNTYtMzQzYy00MGRjLWIwMWQtZmI1ZWZkNTFl
MjZhMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
N2VlYzljNjItMDdhYS00NjVlLTliMzktMWVjNzFmNzk2Mzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPSJ6+++Orl7b4keXSSKmb5Lz/HgoBhDmf+V
hEj6pcoWo2eotQHoIG9a6qDrZLJKHqKlG4H9uVWFdjA7HoDzEFW7K38N+XKcM+Iq
nACjXCoeeisaAm/t2Ewbj7md/y1E3Q95YDFS3ImB525pgHOMerfxc7gjf1YqEPK2
Y1wxh005aWp5EYOQKanDuIri+wqSc7p9HZ5YVaztdS/O8Pp8HDcTWhgc0hs9JnpI
c8TuBllq6s8Z+soHisPugQoVfokb7LAvUQPmbyST6pwt+CqVTQXGUJyYc1FuF8hJ
rinjViXC6sG2+lJrBYFNAj3AP/RzGqBIUbCVJ6wEDISmyKuhdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE88Ar146ws8SggaIjT265mLJIrMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOTE4
ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVlZmQ1MWUyNmEvOGJmODliYzctN2E1NC0z
NGU0LWExYWEtNDZkYjJlNWE2NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTkxOGVlNTYtMzQzYy00MGRjLWIw
MWQtZmI1ZWZkNTFlMjZhLzE5MThlZTU2LTM0M2MtNDBkYy1iMDFkLWZiNWVmZDUx
ZTI2YS5jcmwwHwYDVR0jBBgwFoAUFzlJxoOm8qM5Fg81AM2BgXVrf+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOTE4ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVl
ZmQ1MWUyNmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIICiAU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKQeo3Ik4NNXx/Um8Yq2mmseN3i5IQVzvGmvO0L1Z3qdhmFPf1ti
rFLDdZis51a5MW40O5SeSGmFgK53MEsp1Q0Y2Lg99zl6uIj2Db1NbV1m0gEOXpSv
2paEXStlLf5xBSV1KG8X044WBLngJmfoqKvxKs4deUpU8l6oePD5tcD66fW4hPRQ
Gk4IHTAchXE7eV5zK1Lb9XXRnB7yngNe+DU7B0IvgDX5TtjTzZ/HWgXf1Wgn/jzr
hKBYxJAPqAJ04540kLV3snAuMqnEH79+AZf36K/Mg6wh/lLM9g/WoRxuLwfkdwzp
nRh21E+bDBcZ3IJ3pzGUCdVqwcoSeBkgWX0=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:41 2025 by rpki-client