Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/7ee4040b-476b-3b66-afe2-15449fe49f17.roa
File:                     7ee4040b-476b-3b66-afe2-15449fe49f17.roa (raw, json)
Hash identifier:          55Ewoshrl2mCcErpiA/IRIc3eyxQl3DfINSzglkHNbU=
Subject key identifier:   AF:AB:57:9F:35:E2:A3:5E:96:0C:9C:44:A2:A5:8E:1B:A4:3F:98:2A
Certificate issuer:       /CN=5abd481c-a75f-4f76-a08e-be7629dc5c9d
Certificate serial:       010D0C9F4328584B4DAB3C55BB48BF46C87916E0
Authority key identifier: 9E:F1:29:BA:15:89:35:A6:0D:BE:AC:19:3D:61:1E:86:19:E5:D8:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/7ee4040b-476b-3b66-afe2-15449fe49f17.roa
Signing time:             Wed 24 Sep 2025 18:09:58 +0000
ROA not before:           Wed 24 Sep 2025 18:09:58 +0000
ROA not after:            Tue 23 Dec 2025 19:09:58 +0000
asID:                     401997
IP address blocks:        2602:f556::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/5abd481c-a75f-4f76-a08e-be7629dc5c9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/5abd481c-a75f-4f76-a08e-be7629dc5c9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:ab:3c:55:bb:48:bf:46:c8:79:16:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abd481c-a75f-4f76-a08e-be7629dc5c9d
        Validity
            Not Before: Sep 24 18:09:58 2025 GMT
            Not After : Dec 23 19:09:58 2025 GMT
        Subject: CN=3344bc25-575f-45b9-97a7-a3ed7392cf2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:2a:92:81:f7:f9:ad:b7:aa:0e:14:65:2c:
                    23:ed:62:26:ca:28:db:44:dc:4b:7b:3e:b5:43:6e:
                    d3:9a:f1:4f:2d:fc:21:ee:80:19:a4:26:5b:3e:d4:
                    1e:41:1a:8c:bd:02:de:96:97:8c:0e:5e:f4:36:78:
                    09:a3:f5:73:aa:45:44:82:d9:55:69:6f:d5:c3:69:
                    7a:42:c6:52:01:dc:51:b6:6c:31:28:eb:0d:15:0c:
                    d0:45:cc:51:00:f8:0a:1f:5d:76:de:f4:74:a6:58:
                    45:e8:de:4e:75:80:a3:1b:60:aa:1d:a8:a6:25:12:
                    18:a9:79:39:cb:89:e7:4e:36:d1:62:f4:d9:d1:fb:
                    61:d9:3c:71:52:39:fa:e6:05:ad:59:1f:27:61:1b:
                    44:96:28:c3:78:ea:4c:f3:22:07:09:0a:2b:85:3f:
                    95:3a:40:8d:c5:07:f5:01:1f:30:b3:17:3a:c1:44:
                    67:03:bb:59:bd:2d:0b:d6:6a:6a:ef:dc:f2:59:95:
                    dd:59:d1:fb:61:95:ed:0a:75:d2:6a:f6:32:ad:bd:
                    5d:ae:9a:80:d1:69:9d:26:50:53:8c:7f:03:8f:e1:
                    70:5f:ab:0b:ff:14:30:20:c7:10:a5:48:87:46:35:
                    0f:c2:ea:18:e8:aa:7f:e5:0c:c5:59:42:d7:5a:e4:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AB:57:9F:35:E2:A3:5E:96:0C:9C:44:A2:A5:8E:1B:A4:3F:98:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/7ee4040b-476b-3b66-afe2-15449fe49f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d/5abd481c-a75f-4f76-a08e-be7629dc5c9d.crl

            X509v3 Authority Key Identifier:
                keyid:9E:F1:29:BA:15:89:35:A6:0D:BE:AC:19:3D:61:1E:86:19:E5:D8:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5abd481c-a75f-4f76-a08e-be7629dc5c9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f556::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:0a:e3:2f:c0:53:8b:aa:fd:62:8c:6a:8a:69:40:37:ba:90:
         ac:4d:e8:65:c4:86:ec:73:45:38:38:f4:6f:81:d6:ba:3b:13:
         15:af:2b:fa:f3:c6:29:27:47:93:26:d4:05:9c:91:43:93:99:
         e3:12:37:f1:0e:f7:36:8e:21:42:9c:68:a4:ea:30:2b:1f:f3:
         f6:f0:79:34:a9:9c:35:d6:78:c6:07:d6:11:3e:78:00:05:e6:
         29:71:18:61:bc:c8:51:d1:22:27:f8:9e:22:bb:3f:7a:5f:5a:
         3c:4a:16:bf:ba:52:3b:3e:bc:cb:f3:32:a4:f6:1c:fe:ff:14:
         5b:3d:20:07:70:ce:91:38:67:64:20:55:1f:ed:47:7c:cb:30:
         34:2b:6b:0a:83:84:71:f1:5a:c0:0a:3f:b5:ea:1c:3d:55:8d:
         c7:73:4c:d3:fd:99:4f:69:0e:ca:6a:6a:16:41:e7:d9:24:9b:
         9d:e0:0c:06:7b:50:1f:42:ca:fb:7b:21:a1:83:9d:5e:e1:37:
         53:3d:59:06:dd:20:65:64:6b:64:1b:bc:1b:ee:83:31:4c:ca:
         fb:5f:e5:0e:f0:ac:ed:5e:04:fa:db:af:ac:8b:c7:d1:b0:97:
         60:50:d1:16:d6:43:d3:ae:b6:95:0c:8b:1d:45:b3:64:f3:e5:
         eb:ac:2e:2a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtNqzxVu0i/Rsh5FuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFiZDQ4MWMtYTc1Zi00Zjc2LWEwOGUtYmU3NjI5ZGM1
YzlkMB4XDTI1MDkyNDE4MDk1OFoXDTI1MTIyMzE5MDk1OFowLzEtMCsGA1UEAxMk
MzM0NGJjMjUtNTc1Zi00NWI5LTk3YTctYTNlZDczOTJjZjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB4qkoH3+a23qg4UZSwj7WImyijbRNxLez61
Q27TmvFPLfwh7oAZpCZbPtQeQRqMvQLelpeMDl70NngJo/VzqkVEgtlVaW/Vw2l6
QsZSAdxRtmwxKOsNFQzQRcxRAPgKH1123vR0plhF6N5OdYCjG2CqHaimJRIYqXk5
y4nnTjbRYvTZ0fth2TxxUjn65gWtWR8nYRtElijDeOpM8yIHCQorhT+VOkCNxQf1
AR8wsxc6wURnA7tZvS0L1mpq79zyWZXdWdH7YZXtCnXSavYyrb1drpqA0WmdJlBT
jH8Dj+FwX6sL/xQwIMcQpUiHRjUPwuoY6Kp/5QzFWULXWuRkFwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFK+rV5814qNelgycRKKljhukP5gqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81YWJk
NDgxYy1hNzVmLTRmNzYtYTA4ZS1iZTc2MjlkYzVjOWQvN2VlNDA0MGItNDc2Yi0z
YjY2LWFmZTItMTU0NDlmZTQ5ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWFiZDQ4MWMtYTc1Zi00Zjc2LWEw
OGUtYmU3NjI5ZGM1YzlkLzVhYmQ0ODFjLWE3NWYtNGY3Ni1hMDhlLWJlNzYyOWRj
NWM5ZC5jcmwwHwYDVR0jBBgwFoAUnvEpuhWJNaYNvqwZPWEehhnl2OwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81YWJkNDgxYy1hNzVmLTRmNzYtYTA4ZS1iZTc2
MjlkYzVjOWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1VgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEArwrjL8BTi6r9YoxqimlAN7qQrE3oZcSG7HNFODj0b4HWujsTFa8r
+vPGKSdHkybUBZyRQ5OZ4xI38Q73No4hQpxopOowKx/z9vB5NKmcNdZ4xgfWET54
AAXmKXEYYbzIUdEiJ/ieIrs/el9aPEoWv7pSOz68y/MypPYc/v8UWz0gB3DOkThn
ZCBVH+1HfMswNCtrCoOEcfFawAo/teocPVWNx3NM0/2ZT2kOympqFkHn2SSbneAM
BntQH0LK+3shoYOdXuE3Uz1ZBt0gZWRrZBu8G+6DMUzK+1/lDvCs7V4E+tuvrIvH
0bCXYFDRFtZD0662lQyLHUWzZPPl66wuKg==
-----END CERTIFICATE-----
Generated at Wed Oct 8 20:58:47 2025 by rpki-client