Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/f24af868-6ba2-35b6-bcf6-77f4b9abeab4.roa
File:                     f24af868-6ba2-35b6-bcf6-77f4b9abeab4.roa (raw, json)
Hash identifier:          ZeGUZ6Hqe16oy8KiH0/YSygaM9aHgiUV+0ICjRaj3Hk=
Subject key identifier:   82:E6:1D:D9:E1:C5:97:DA:25:93:8F:BF:93:29:B3:5E:50:F9:45:3F
Certificate issuer:       /CN=3c79d01a-3026-45da-a74e-6fc6517ec213
Certificate serial:       010D0C9F4328584B5E6F59E487708F363B232580
Authority key identifier: 38:03:85:35:02:D3:9A:24:CF:76:A2:21:15:88:E3:F8:53:B7:4B:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/f24af868-6ba2-35b6-bcf6-77f4b9abeab4.roa
Signing time:             Tue 30 Sep 2025 18:18:03 +0000
ROA not before:           Tue 30 Sep 2025 18:18:03 +0000
ROA not after:            Mon 29 Dec 2025 19:18:03 +0000
asID:                     397954
IP address blocks:        2602:f541::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/3c79d01a-3026-45da-a74e-6fc6517ec213.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/3c79d01a-3026-45da-a74e-6fc6517ec213.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:6f:59:e4:87:70:8f:36:3b:23:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c79d01a-3026-45da-a74e-6fc6517ec213
        Validity
            Not Before: Sep 30 18:18:03 2025 GMT
            Not After : Dec 29 19:18:03 2025 GMT
        Subject: CN=494a0079-2c0f-4624-a111-479e5eb47da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b9:51:e4:ef:1f:28:e7:6d:62:c0:ac:d7:09:
                    b1:5d:74:bb:35:60:95:d1:45:ff:d5:21:9b:73:14:
                    95:68:a7:18:c3:88:64:82:51:a1:50:3d:f3:10:6b:
                    fc:5d:36:5f:2f:c8:84:50:fe:18:79:a7:c9:f4:a3:
                    6c:11:b2:67:9f:f2:32:24:5a:2c:36:fb:2b:c9:a5:
                    b6:ed:96:b0:cf:21:c5:7e:d3:5e:c5:f5:19:5f:ba:
                    1d:9a:77:d9:0f:b4:4d:01:43:f8:9f:27:a9:c2:3c:
                    44:35:d5:eb:3a:f6:cc:5b:e3:34:63:bc:a0:4d:77:
                    96:1c:45:e3:3a:a0:51:32:f6:27:8b:bf:82:b6:4e:
                    b3:eb:94:a3:5a:a0:17:4b:f2:74:1f:9f:4e:1f:af:
                    18:dc:22:4b:13:bc:f7:58:bf:31:c3:dd:5b:ac:b2:
                    4c:05:c4:9a:b0:cc:5f:0a:fe:d2:f9:a7:20:55:a6:
                    5d:be:19:88:f6:7b:f4:96:6c:43:50:99:b3:23:5f:
                    96:b8:eb:20:ba:77:12:e3:2a:c0:db:f2:b1:39:b2:
                    b6:97:50:c1:2e:cc:90:6d:c4:80:b0:fb:ef:60:50:
                    d3:cb:f2:dc:57:c2:20:cf:bc:49:62:ab:6c:5f:f6:
                    4f:39:fb:6a:9d:3b:d6:9b:69:20:d2:3e:03:c9:9f:
                    a2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E6:1D:D9:E1:C5:97:DA:25:93:8F:BF:93:29:B3:5E:50:F9:45:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/f24af868-6ba2-35b6-bcf6-77f4b9abeab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/3c79d01a-3026-45da-a74e-6fc6517ec213.crl

            X509v3 Authority Key Identifier:
                keyid:38:03:85:35:02:D3:9A:24:CF:76:A2:21:15:88:E3:F8:53:B7:4B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f541::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:51:6b:d9:69:ab:f9:d1:13:12:91:9d:cf:0b:dd:bd:a4:85:
         13:22:36:ba:c2:05:b2:d0:4b:01:03:39:07:ee:d6:be:6c:47:
         a1:f0:28:e0:59:bf:a9:0a:f4:b5:3b:60:eb:99:c4:46:1b:99:
         c5:b9:b5:3c:85:74:46:11:34:98:47:d3:f8:ad:c7:1f:bb:bc:
         62:6e:0e:8a:49:6b:be:02:ec:68:92:3e:65:4f:36:66:d5:b1:
         78:31:f4:d0:e6:c2:3c:12:c5:2c:b7:f4:42:5e:29:ab:b3:a0:
         cf:fd:d4:e3:19:df:10:84:a2:d0:c0:c7:b1:57:66:c4:0d:ca:
         a0:33:aa:89:49:e9:55:24:a6:73:7c:9e:31:e0:50:a5:65:43:
         ff:5e:bd:97:dd:c5:93:10:43:4f:68:18:4d:9d:3a:4d:cd:fd:
         5d:53:f5:0f:6d:bc:26:d8:05:06:4a:5b:f0:67:2b:b3:40:59:
         be:66:30:80:78:09:d2:74:95:9a:1f:cc:b4:28:cd:63:07:6a:
         48:00:54:b0:42:8f:73:fc:2c:d8:82:4a:f0:13:3c:74:6c:6a:
         3e:52:88:c6:1f:13:15:e2:1f:ab:be:27:21:26:58:b4:a6:ee:
         0f:84:37:53:0e:bd:a0:9b:3a:32:a0:f0:b1:6e:b9:93:ac:75:
         e7:86:87:74
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEteb1nkh3CPNjsjJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M3OWQwMWEtMzAyNi00NWRhLWE3NGUtNmZjNjUxN2Vj
MjEzMB4XDTI1MDkzMDE4MTgwM1oXDTI1MTIyOTE5MTgwM1owLzEtMCsGA1UEAxMk
NDk0YTAwNzktMmMwZi00NjI0LWExMTEtNDc5ZTVlYjQ3ZGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiblR5O8fKOdtYsCs1wmxXXS7NWCV0UX/1SGb
cxSVaKcYw4hkglGhUD3zEGv8XTZfL8iEUP4YeafJ9KNsEbJnn/IyJFosNvsryaW2
7ZawzyHFftNexfUZX7odmnfZD7RNAUP4nyepwjxENdXrOvbMW+M0Y7ygTXeWHEXj
OqBRMvYni7+Ctk6z65SjWqAXS/J0H59OH68Y3CJLE7z3WL8xw91brLJMBcSasMxf
Cv7S+acgVaZdvhmI9nv0lmxDUJmzI1+WuOsguncS4yrA2/KxObK2l1DBLsyQbcSA
sPvvYFDTy/LcV8Igz7xJYqtsX/ZPOftqnTvWm2kg0j4DyZ+iywIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFILmHdnhxZfaJZOPv5Mps15Q+UU/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYzc5
ZDAxYS0zMDI2LTQ1ZGEtYTc0ZS02ZmM2NTE3ZWMyMTMvZjI0YWY4NjgtNmJhMi0z
NWI2LWJjZjYtNzdmNGI5YWJlYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2M3OWQwMWEtMzAyNi00NWRhLWE3
NGUtNmZjNjUxN2VjMjEzLzNjNzlkMDFhLTMwMjYtNDVkYS1hNzRlLTZmYzY1MTdl
YzIxMy5jcmwwHwYDVR0jBBgwFoAUOAOFNQLTmiTPdqIhFYjj+FO3SygwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYzc5ZDAxYS0zMDI2LTQ1ZGEtYTc0ZS02ZmM2
NTE3ZWMyMTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL1QQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAm1Fr2Wmr+dETEpGdzwvdvaSFEyI2usIFstBLAQM5B+7WvmxHofAo
4Fm/qQr0tTtg65nERhuZxbm1PIV0RhE0mEfT+K3HH7u8Ym4OiklrvgLsaJI+ZU82
ZtWxeDH00ObCPBLFLLf0Ql4pq7Ogz/3U4xnfEISi0MDHsVdmxA3KoDOqiUnpVSSm
c3yeMeBQpWVD/169l93FkxBDT2gYTZ06Tc39XVP1D228JtgFBkpb8Gcrs0BZvmYw
gHgJ0nSVmh/MtCjNYwdqSABUsEKPc/ws2IJK8BM8dGxqPlKIxh8TFeIfq74nISZY
tKbuD4Q3Uw69oJs6MqDwsW65k6x154aHdA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 22:55:05 2025 by rpki-client