Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa
File:                     4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa (raw, json)
Hash identifier:          RY8qAFE3ErQv8mIgnGFYiYZPgiZbiOpxv/RlQULx/EE=
Subject key identifier:   59:CA:75:C3:C4:65:4D:EE:81:86:36:B5:94:D5:02:95:4E:C2:F1:26
Certificate issuer:       /CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3
Certificate serial:       010D0C9F4328584AFEE6976A2E270DE99EDD8B00
Authority key identifier: 91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     6304
IP address blocks:        2602:f714::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:97:6a:2e:27:0d:e9:9e:dd:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=3c546c24-d009-457c-9e4b-af65f5c46c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:28:8c:2b:d4:d8:2f:a4:97:3f:94:0d:de:6b:
                    7f:85:39:f2:09:cc:8e:9d:20:a6:f8:e6:3a:d1:5f:
                    81:16:ee:3c:71:33:24:a1:e1:f7:5f:78:1a:b9:0f:
                    e1:de:7b:10:7e:fd:f7:e5:8d:a7:9a:43:b9:26:ca:
                    b1:0c:f2:94:22:8e:b9:67:d4:90:8d:12:6f:bf:7b:
                    3a:4e:66:4f:1b:e9:6e:48:4b:ac:5a:76:e2:5f:26:
                    0f:3b:72:c1:e9:b8:a7:39:40:a1:fc:ff:56:9c:b4:
                    de:5d:79:b1:8b:ce:d6:f8:d2:4c:9b:cb:82:77:15:
                    c9:83:76:bb:1a:b1:c8:53:f9:2b:b0:ba:4a:e8:c8:
                    0e:ed:bf:a4:59:f2:3d:76:9c:ba:53:5b:64:d8:2f:
                    84:83:bd:54:32:36:88:50:55:12:13:88:34:f3:79:
                    16:8b:70:be:87:e4:9d:1e:bf:12:41:31:ec:fe:e5:
                    0d:2c:8d:65:63:99:a4:a0:d1:00:1d:37:3f:50:37:
                    a3:3c:49:4b:d7:ce:58:af:8f:c5:e4:51:69:16:6a:
                    3a:79:71:30:be:46:79:70:e2:74:52:fb:2d:91:2b:
                    30:35:73:fb:53:84:f9:c7:ed:9b:b1:36:f4:28:0a:
                    b0:44:a9:90:75:6d:8f:79:f2:26:ce:19:07:b0:4b:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CA:75:C3:C4:65:4D:EE:81:86:36:B5:94:D5:02:95:4E:C2:F1:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl

            X509v3 Authority Key Identifier:
                keyid:91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f714::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:be:ea:05:e3:4d:d3:21:6c:32:6f:27:2a:2b:bd:eb:f9:d9:
         c1:28:81:ac:a4:e0:0b:e3:79:21:d4:6c:c9:17:0d:ad:dd:82:
         53:a1:d6:b8:7f:37:6f:8f:a4:bc:d0:07:58:16:09:5f:8e:c8:
         7d:15:f7:05:4a:46:fc:e7:f2:39:e2:a2:f7:25:66:7a:2d:6f:
         31:49:99:56:8c:20:85:47:47:e0:b8:37:b4:66:6e:87:eb:2e:
         dd:ab:f7:c1:08:2d:9f:a6:da:7d:1d:29:74:f9:47:56:7d:a5:
         b7:88:9f:bb:e6:a9:16:b4:75:d6:7a:b9:1b:d1:95:dd:81:71:
         91:c9:f9:ab:56:c2:08:4e:6f:7a:ad:1e:c8:d1:a5:25:5f:b3:
         6a:2e:bd:14:fe:d9:20:10:29:69:6f:bb:32:22:32:a8:f7:35:
         a3:4f:72:5e:9e:b8:4a:4a:2b:f8:f7:de:df:65:1d:89:1c:38:
         1c:f2:72:f1:e4:ba:b6:06:d8:1a:90:f0:fe:ae:cc:25:66:04:
         82:63:14:f3:31:f7:5b:8c:60:c4:e4:db:28:ad:c5:9a:92:90:
         ac:b8:68:c9:43:12:1c:77:64:11:c6:66:58:90:e3:20:5e:f0:
         60:4f:53:60:1f:d0:51:b4:e8:34:a1:22:15:ba:59:ad:c3:cb:
         13:9d:90:12
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr+5pdqLicN6Z7diwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWNmNGQ0ZTAtMjRiZS00ZDNiLTkwMjgtYzE0ODQ2ZjZi
MGYzMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
M2M1NDZjMjQtZDAwOS00NTdjLTllNGItYWY2NWY1YzQ2YzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiiMK9TYL6SXP5QN3mt/hTnyCcyOnSCm+OY6
0V+BFu48cTMkoeH3X3gauQ/h3nsQfv335Y2nmkO5JsqxDPKUIo65Z9SQjRJvv3s6
TmZPG+luSEusWnbiXyYPO3LB6binOUCh/P9WnLTeXXmxi87W+NJMm8uCdxXJg3a7
GrHIU/krsLpK6MgO7b+kWfI9dpy6U1tk2C+Eg71UMjaIUFUSE4g083kWi3C+h+Sd
Hr8SQTHs/uUNLI1lY5mkoNEAHTc/UDejPElL185Yr4/F5FFpFmo6eXEwvkZ5cOJ0
UvstkSswNXP7U4T5x+2bsTb0KAqwRKmQdW2PefImzhkHsEv62wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFnKdcPEZU3ugYY2tZTVApVOwvEmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xY2Y0
ZDRlMC0yNGJlLTRkM2ItOTAyOC1jMTQ4NDZmNmIwZjMvNDU0MGU1ZDMtNDZlMy0z
ZWQ3LTg2OWEtZjJmZWI1NDMxZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWNmNGQ0ZTAtMjRiZS00ZDNiLTkw
MjgtYzE0ODQ2ZjZiMGYzLzFjZjRkNGUwLTI0YmUtNGQzYi05MDI4LWMxNDg0NmY2
YjBmMy5jcmwwHwYDVR0jBBgwFoAUkY+KVxILPKPC4AbhQVcQMWfvJbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xY2Y0ZDRlMC0yNGJlLTRkM2ItOTAyOC1jMTQ4
NDZmNmIwZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3FAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAr7qBeNN0yFsMm8nKiu96/nZwSiBrKTgC+N5IdRsyRcNrd2CU6HW
uH83b4+kvNAHWBYJX47IfRX3BUpG/OfyOeKi9yVmei1vMUmZVowghUdH4Lg3tGZu
h+su3av3wQgtn6bafR0pdPlHVn2lt4ifu+apFrR11nq5G9GV3YFxkcn5q1bCCE5v
eq0eyNGlJV+zai69FP7ZIBApaW+7MiIyqPc1o09yXp64Skor+Pfe32UdiRw4HPJy
8eS6tgbYGpDw/q7MJWYEgmMU8zH3W4xgxOTbKK3FmpKQrLhoyUMSHHdkEcZmWJDj
IF7wYE9TYB/QUbToNKEiFbpZrcPLE52QEg==
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:23:37 2025 by rpki-client