Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/802afb7f-3fde-318e-99b4-b1f707ca1b2b.roa
File:                     802afb7f-3fde-318e-99b4-b1f707ca1b2b.roa (raw, json)
Hash identifier:          ffQUa26uWhRm8+jhSn7FF6DBxmN8k7dysLi0Rm3cYMc=
Subject key identifier:   68:BD:20:C4:66:13:70:E0:E2:2B:CB:F1:FD:19:45:46:A9:6E:59:3B
Certificate issuer:       /CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6
Certificate serial:       010D0C9F4328584B290D5F176F826471BE00B680
Authority key identifier: 9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/802afb7f-3fde-318e-99b4-b1f707ca1b2b.roa
Signing time:             Thu 11 Sep 2025 15:22:47 +0000
ROA not before:           Thu 11 Sep 2025 15:22:47 +0000
ROA not after:            Wed 10 Dec 2025 16:22:47 +0000
asID:                     15329
IP address blocks:        2602:f70f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:0d:5f:17:6f:82:64:71:be:00:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6
        Validity
            Not Before: Sep 11 15:22:47 2025 GMT
            Not After : Dec 10 16:22:47 2025 GMT
        Subject: CN=4acac0b0-99a3-46ee-830a-2fd23722f79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:d0:2b:85:94:e5:82:eb:8b:68:e4:c4:71:
                    c7:7d:1b:36:e7:cd:cc:b6:fb:50:b4:b3:52:f3:15:
                    c4:7f:5c:8b:a8:51:31:d7:2e:59:86:10:dd:69:11:
                    01:5e:b2:bc:1f:c9:8b:dc:12:c3:2e:e8:3a:f5:0b:
                    d0:e7:63:86:7e:be:42:79:3d:c2:a3:75:b5:4c:75:
                    43:f6:32:09:a7:50:35:1f:50:6f:7b:c0:88:b3:2d:
                    a2:05:7e:ca:60:dc:9d:1b:c8:f4:f6:95:b2:ee:e4:
                    13:79:26:7c:90:a3:e2:ed:10:5b:ba:a4:34:64:db:
                    33:10:35:8c:86:eb:74:dd:83:dd:e7:e0:5e:f3:f4:
                    97:c2:7f:2f:83:9b:e4:42:62:aa:8d:ec:1b:58:34:
                    75:59:26:a8:a6:02:13:5a:9c:8b:6a:80:c6:cf:5b:
                    9d:d4:48:d1:99:6d:bf:eb:ed:8a:c6:c6:b8:5f:5f:
                    83:26:52:90:75:a1:24:05:67:10:c0:39:5c:3e:58:
                    3e:68:b5:23:68:db:38:a5:6f:50:ef:3d:ab:7e:13:
                    2b:d8:73:0e:39:d6:25:92:75:ff:81:f8:26:7a:50:
                    f9:94:bf:59:99:20:57:e7:6d:e7:9a:14:0c:8a:6c:
                    e7:47:4d:fb:42:42:4b:af:a9:f9:d8:27:7d:4e:66:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:20:C4:66:13:70:E0:E2:2B:CB:F1:FD:19:45:46:A9:6E:59:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/802afb7f-3fde-318e-99b4-b1f707ca1b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl

            X509v3 Authority Key Identifier:
                keyid:9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f70f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b3:e8:5c:0c:76:1d:a6:b3:54:a3:3a:0d:6f:4b:40:73:6c:
         68:d2:68:6c:03:c2:2b:38:27:02:ac:cb:5e:8d:95:5f:a0:9b:
         70:78:d3:b9:e9:b1:33:fb:45:2e:f8:97:98:21:b2:a7:dd:18:
         4f:4f:4b:ab:3d:82:a6:fd:a6:db:28:84:82:08:5b:ad:34:3c:
         ad:04:50:d3:c8:7d:23:99:95:66:9f:23:2c:97:a6:57:24:b6:
         ff:6b:84:a2:d5:75:61:b7:ae:6a:b8:b2:74:d2:23:8a:e5:6f:
         f7:77:e1:0e:4d:da:3a:07:9c:d7:69:e2:ef:e0:23:6d:14:45:
         c7:3b:81:1e:0b:56:15:c2:bd:36:45:33:50:5f:64:b0:c5:12:
         40:6d:07:e5:19:d0:75:bf:e9:be:e0:3f:55:d4:c7:16:16:0d:
         67:1b:cd:d2:4b:88:8d:e9:a9:b9:dd:fc:fc:2f:a7:52:77:d9:
         56:a4:bd:c8:0b:41:8a:e9:40:22:75:e4:8d:aa:75:1c:de:f3:
         46:e3:8d:c4:54:5a:2c:98:79:3d:cf:1e:11:37:f6:08:23:4a:
         d2:c3:9c:21:7f:53:f8:60:0e:50:6a:87:bc:e3:2c:bc:84:f1:
         34:d0:41:5a:1d:7e:cf:d9:7c:9d:5e:b2:a6:cf:6e:8a:b2:0f:
         db:20:07:3e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEspDV8Xb4Jkcb4AtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmE2Mzk1NDctNjlkOS00Mjg0LWI5YjEtZWY2Y2Q2NTQy
YWE2MB4XDTI1MDkxMTE1MjI0N1oXDTI1MTIxMDE2MjI0N1owLzEtMCsGA1UEAxMk
NGFjYWMwYjAtOTlhMy00NmVlLTgzMGEtMmZkMjM3MjJmNzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkvQK4WU5YLri2jkxHHHfRs2583MtvtQtLNS
8xXEf1yLqFEx1y5ZhhDdaREBXrK8H8mL3BLDLug69QvQ52OGfr5CeT3Co3W1THVD
9jIJp1A1H1Bve8CIsy2iBX7KYNydG8j09pWy7uQTeSZ8kKPi7RBbuqQ0ZNszEDWM
hut03YPd5+Be8/SXwn8vg5vkQmKqjewbWDR1WSaopgITWpyLaoDGz1ud1EjRmW2/
6+2Kxsa4X1+DJlKQdaEkBWcQwDlcPlg+aLUjaNs4pW9Q7z2rfhMr2HMOOdYlknX/
gfgmelD5lL9ZmSBX523nmhQMimznR037QkJLr6n52Cd9TmYyuwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGi9IMRmE3Dg4ivL8f0ZRUapblk7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTYz
OTU0Ny02OWQ5LTQyODQtYjliMS1lZjZjZDY1NDJhYTYvODAyYWZiN2YtM2ZkZS0z
MThlLTk5YjQtYjFmNzA3Y2ExYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmE2Mzk1NDctNjlkOS00Mjg0LWI5
YjEtZWY2Y2Q2NTQyYWE2L2JhNjM5NTQ3LTY5ZDktNDI4NC1iOWIxLWVmNmNkNjU0
MmFhNi5jcmwwHwYDVR0jBBgwFoAUnarYqyjXxlnFqljk14iVlj+1WYkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTYzOTU0Ny02OWQ5LTQyODQtYjliMS1lZjZj
ZDY1NDJhYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3DwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARLPoXAx2HaazVKM6DW9LQHNsaNJobAPCKzgnAqzLXo2VX6CbcHjT
uemxM/tFLviXmCGyp90YT09Lqz2Cpv2m2yiEgghbrTQ8rQRQ08h9I5mVZp8jLJem
VyS2/2uEotV1YbeuariydNIjiuVv93fhDk3aOgec12ni7+AjbRRFxzuBHgtWFcK9
NkUzUF9ksMUSQG0H5RnQdb/pvuA/VdTHFhYNZxvN0kuIjempud38/C+nUnfZVqS9
yAtBiulAInXkjap1HN7zRuONxFRaLJh5Pc8eETf2CCNK0sOcIX9T+GAOUGqHvOMs
vITxNNBBWh1+z9l8nV6yps9uirIP2yAHPg==
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:31 2025 by rpki-client