Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/6b1686d9-67b7-3c91-956b-3820802adc55.roa
File:                     6b1686d9-67b7-3c91-956b-3820802adc55.roa (raw, json)
Hash identifier:          DtapqxeQ75JhFJEw5GgQ9VS+H8uCEDTGWgceMG+BSdA=
Subject key identifier:   E6:96:46:61:57:4A:46:21:3B:D8:13:59:CD:93:DD:63:72:CA:B4:41
Certificate issuer:       /CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4
Certificate serial:       010D0C9F4328584B609C88B75DB3B3D6269297E0
Authority key identifier: C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/6b1686d9-67b7-3c91-956b-3820802adc55.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     398862
IP address blocks:        2602:f98e::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:88:b7:5d:b3:b3:d6:26:92:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=31a2d414-0214-4b54-ba43-21f45861b6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4f:c2:d4:ea:35:a5:57:32:4e:f3:08:a4:a4:
                    1b:b4:0d:90:e7:b2:fb:f4:7e:96:85:fb:66:89:9e:
                    c4:cb:63:34:88:99:d3:2f:46:79:ae:21:1e:53:8d:
                    7a:79:0e:43:0f:e6:5e:a4:3d:43:00:9e:76:65:ff:
                    d8:7f:3c:12:08:20:4d:99:d1:64:3b:f6:cc:ea:b1:
                    6c:bd:03:b7:7e:17:66:15:84:41:36:58:29:8c:a0:
                    4a:7d:32:32:03:b1:b3:63:82:0f:84:42:67:c5:da:
                    12:58:d4:67:21:63:51:9e:d6:e3:fe:95:a8:40:75:
                    9f:d9:6b:d9:88:12:76:04:9c:08:3c:d8:fc:a5:48:
                    0f:46:3a:a7:39:48:6b:d7:8a:3d:65:69:a7:0a:25:
                    6f:34:24:31:85:3b:67:0e:41:e3:22:65:c8:cb:50:
                    dc:3e:77:cd:88:d8:66:19:48:b8:09:79:c6:1f:b8:
                    29:a1:bc:32:35:3c:3d:78:a4:0c:18:65:9f:79:33:
                    f5:4b:b2:a1:0a:44:bc:8e:e6:a0:c2:1e:c6:6d:eb:
                    d8:0c:88:9e:45:30:d8:f2:d6:f7:c2:60:1a:4c:51:
                    5b:51:55:e1:7a:cb:43:e9:62:c5:2f:a3:1c:ea:cf:
                    ab:90:0c:89:2e:f7:54:53:0e:df:1e:0e:65:5a:f3:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:96:46:61:57:4A:46:21:3B:D8:13:59:CD:93:DD:63:72:CA:B4:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/6b1686d9-67b7-3c91-956b-3820802adc55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.crl

            X509v3 Authority Key Identifier:
                keyid:C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f8:f8:d0:38:64:94:19:73:e2:e4:86:cd:37:20:28:a4:e7:
         67:e7:15:1c:1f:d8:cb:59:41:5c:f6:c0:1f:1a:c7:82:48:62:
         fb:8a:32:17:f2:9a:b8:30:cf:d6:4f:c4:01:0d:6a:52:aa:63:
         26:93:67:06:f0:3b:b7:37:94:c2:66:8b:df:e9:0f:9e:92:e5:
         12:de:55:99:be:ea:26:48:d3:35:2b:69:49:c5:4a:65:d9:ec:
         a8:74:50:2e:0d:3e:6f:18:30:91:e4:b3:a0:a6:55:1b:b5:5a:
         70:26:aa:37:97:b0:8d:d2:d2:a7:b5:86:13:70:5e:18:ae:a8:
         e9:ca:93:e3:dc:69:03:6c:98:f1:32:26:82:f4:8c:d3:5c:c8:
         74:fe:f9:54:38:06:ad:bb:4a:74:6f:1e:00:45:19:7e:7e:3f:
         74:30:eb:c3:49:f9:5c:7b:36:b3:0f:f6:7a:40:81:2f:8a:55:
         ff:7a:ba:d2:d1:06:37:b2:f9:47:ea:14:91:cc:a3:d9:23:4a:
         86:61:c9:cf:03:ca:a9:70:2d:3c:ff:fe:27:2e:f9:0b:db:ca:
         37:d7:0d:13:6f:df:15:b2:50:e3:9f:33:38:8c:eb:7a:31:4e:
         7f:93:dc:3b:9b:42:f4:f2:fb:e0:a3:db:3f:5e:09:de:07:c0:
         9e:d3:ee:f2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtgnIi3XbOz1iaSl+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdkZjdiNmItNGIwYi00OWFlLWI2NzQtYTVhODhkOTI4
MGY0MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk
MzFhMmQ0MTQtMDIxNC00YjU0LWJhNDMtMjFmNDU4NjFiNmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU/C1Oo1pVcyTvMIpKQbtA2Q57L79H6Whftm
iZ7Ey2M0iJnTL0Z5riEeU416eQ5DD+ZepD1DAJ52Zf/YfzwSCCBNmdFkO/bM6rFs
vQO3fhdmFYRBNlgpjKBKfTIyA7GzY4IPhEJnxdoSWNRnIWNRntbj/pWoQHWf2WvZ
iBJ2BJwIPNj8pUgPRjqnOUhr14o9ZWmnCiVvNCQxhTtnDkHjImXIy1DcPnfNiNhm
GUi4CXnGH7gpobwyNTw9eKQMGGWfeTP1S7KhCkS8juagwh7GbevYDIieRTDY8tb3
wmAaTFFbUVXhestD6WLFL6Mc6s+rkAyJLvdUUw7fHg5lWvOvxwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOaWRmFXSkYhO9gTWc2T3WNyyrRBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zN2Rm
N2I2Yi00YjBiLTQ5YWUtYjY3NC1hNWE4OGQ5MjgwZjQvNmIxNjg2ZDktNjdiNy0z
YzkxLTk1NmItMzgyMDgwMmFkYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzdkZjdiNmItNGIwYi00OWFlLWI2
NzQtYTVhODhkOTI4MGY0LzM3ZGY3YjZiLTRiMGItNDlhZS1iNjc0LWE1YTg4ZDky
ODBmNC5jcmwwHwYDVR0jBBgwFoAUwodHxVa/2lkzCCu2G4oUaxXzI+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8zN2RmN2I2Yi00YjBiLTQ5YWUtYjY3NC1hNWE4
OGQ5MjgwZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5jgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAA/j40DhklBlz4uSGzTcgKKTnZ+cVHB/Yy1lBXPbAHxrHgkhi+4oy
F/KauDDP1k/EAQ1qUqpjJpNnBvA7tzeUwmaL3+kPnpLlEt5Vmb7qJkjTNStpScVK
ZdnsqHRQLg0+bxgwkeSzoKZVG7VacCaqN5ewjdLSp7WGE3BeGK6o6cqT49xpA2yY
8TImgvSM01zIdP75VDgGrbtKdG8eAEUZfn4/dDDrw0n5XHs2sw/2ekCBL4pV/3q6
0tEGN7L5R+oUkcyj2SNKhmHJzwPKqXAtPP/+Jy75C9vKN9cNE2/fFbJQ458zOIzr
ejFOf5PcO5tC9PL74KPbP14J3gfAntPu8g==
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:33 2025 by rpki-client