Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/a96cb05b-0c60-3552-884a-bbc614e95519.roa
File:                     a96cb05b-0c60-3552-884a-bbc614e95519.roa (raw, json)
Hash identifier:          kXuiLKaAQNFqZc8JyJ9LJpf+o2+Eq/rvi83S9ix4oVk=
Subject key identifier:   35:B9:9D:79:67:50:6A:67:57:E1:CA:F7:52:9A:4F:95:EB:48:D3:02
Certificate issuer:       /CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb
Certificate serial:       010D0C9F4328584B2ECEB6D6E6D269BA835DE180
Authority key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/a96cb05b-0c60-3552-884a-bbc614e95519.roa
Signing time:             Sat 13 Sep 2025 16:51:23 +0000
ROA not before:           Sat 13 Sep 2025 16:51:23 +0000
ROA not after:            Fri 12 Dec 2025 17:51:23 +0000
asID:                     40536
IP address blocks:        2602:f629:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:ce:b6:d6:e6:d2:69:ba:83:5d:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb
        Validity
            Not Before: Sep 13 16:51:23 2025 GMT
            Not After : Dec 12 17:51:23 2025 GMT
        Subject: CN=c5bd7d9a-3140-4ad9-b594-fd8e8a1f693a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:61:6e:fd:b2:95:1d:09:99:7b:36:52:57:
                    c8:7b:c2:8b:54:e4:47:0b:0e:76:5a:bd:16:ae:9f:
                    bb:ec:d2:f9:49:8c:2e:2c:3b:db:db:4e:f2:5a:cd:
                    9c:cf:7b:5f:60:e6:66:f4:a1:ae:2a:33:2f:4a:a3:
                    d6:de:ca:b7:ab:7b:a6:c5:72:35:a6:84:75:6a:8a:
                    64:38:e8:aa:31:39:7f:59:e4:16:12:b5:b6:87:7f:
                    dd:5a:54:3f:a9:44:94:55:7c:57:17:19:5e:70:ca:
                    a3:05:d6:a3:28:26:08:67:8d:76:6d:7c:6c:3b:e0:
                    7b:75:42:d1:ec:01:2f:82:fe:34:a7:53:ad:f2:ae:
                    79:e3:96:c9:c9:a1:e1:e6:51:8a:bb:64:53:e8:a8:
                    e0:21:c2:28:15:2f:8e:8a:e8:db:c0:a1:1b:f2:a7:
                    0a:c2:6b:73:49:8f:3d:9f:14:4c:c7:4e:d7:cd:76:
                    8a:c6:56:55:51:2c:44:a8:a6:11:85:dd:c3:2f:b4:
                    58:3e:ef:e2:f7:40:63:ff:1c:c3:6d:64:e8:f3:03:
                    1e:35:11:af:e1:93:50:bf:da:76:52:dd:3b:c0:1a:
                    bc:f7:54:e3:ee:1c:d4:a2:b7:d3:87:19:2e:2d:34:
                    93:a3:62:6e:86:84:98:96:8f:96:8f:3e:04:20:58:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B9:9D:79:67:50:6A:67:57:E1:CA:F7:52:9A:4F:95:EB:48:D3:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/a96cb05b-0c60-3552-884a-bbc614e95519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl

            X509v3 Authority Key Identifier:
                keyid:A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f629:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:eb:1b:b7:07:e3:a9:c2:d5:d5:f4:ba:fe:e5:41:ba:0a:8a:
         6c:f0:ee:ac:e7:d6:ab:cf:eb:1f:03:b7:09:5d:1f:70:42:e7:
         e1:eb:04:2c:84:fa:88:a9:33:13:d4:9d:a0:33:ae:6f:71:97:
         e6:79:04:78:aa:e2:fb:04:0b:06:d1:fe:16:8f:f1:95:e1:1e:
         49:66:1e:07:b0:72:c6:ab:af:ed:fa:2e:fd:b1:92:bc:50:95:
         57:0f:bd:11:b8:49:89:df:f3:b3:fd:ec:51:16:e8:7a:28:4c:
         f5:7c:ec:8c:2c:b6:10:d2:a7:bc:d4:9e:ff:50:54:bc:c2:f4:
         63:66:bb:1b:18:d9:4c:fc:06:9d:03:d7:81:f1:c7:a0:36:a9:
         ba:93:9c:cc:46:da:cf:cc:0c:cd:a9:7f:99:bb:6f:ea:74:70:
         e8:be:e6:8d:e5:06:cc:33:f6:33:71:40:29:66:ae:9f:72:63:
         8f:c6:ae:36:7d:32:50:f9:59:7e:bc:66:73:6e:01:fb:9e:71:
         8a:dd:b0:23:4f:d6:80:04:b0:37:70:b9:d7:00:a3:eb:c5:8d:
         f9:ae:e1:d5:67:07:94:c7:b4:5b:15:f4:04:d9:1b:03:ad:24:
         7f:a0:55:e1:88:fa:fe:ca:f5:cf:03:2c:0b:f4:d6:67:ae:c0:
         b7:b3:c5:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsuzrbW5tJpuoNd4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJlNDU5MTItZTZlMy00MDBjLWIwYmUtNGY2YzcwMDFm
NWNiMB4XDTI1MDkxMzE2NTEyM1oXDTI1MTIxMjE3NTEyM1owLzEtMCsGA1UEAxMk
YzViZDdkOWEtMzE0MC00YWQ5LWI1OTQtZmQ4ZThhMWY2OTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNNhbv2ylR0JmXs2UlfIe8KLVORHCw52Wr0W
rp+77NL5SYwuLDvb207yWs2cz3tfYOZm9KGuKjMvSqPW3sq3q3umxXI1poR1aopk
OOiqMTl/WeQWErW2h3/dWlQ/qUSUVXxXFxlecMqjBdajKCYIZ412bXxsO+B7dULR
7AEvgv40p1Ot8q5545bJyaHh5lGKu2RT6KjgIcIoFS+OiujbwKEb8qcKwmtzSY89
nxRMx07XzXaKxlZVUSxEqKYRhd3DL7RYPu/i90Bj/xzDbWTo8wMeNRGv4ZNQv9p2
Ut07wBq891Tj7hzUorfThxkuLTSTo2JuhoSYlo+Wjz4EIFiUNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDW5nXlnUGpnV+HK91KaT5XrSNMCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0
NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZjNzAwMWY1Y2IvYTk2Y2IwNWItMGM2MC0z
NTUyLTg4NGEtYmJjNjE0ZTk1NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDJlNDU5MTItZTZlMy00MDBjLWIw
YmUtNGY2YzcwMDFmNWNiL2QyZTQ1OTEyLWU2ZTMtNDAwYy1iMGJlLTRmNmM3MDAx
ZjVjYi5jcmwwHwYDVR0jBBgwFoAUqXP9VqxhWYP2vyHMtlE4hrEuIB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZj
NzAwMWY1Y2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2KQAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKfrG7cH46nC1dX0uv7lQboKimzw7qzn1qvP6x8DtwldH3BC5+Hr
BCyE+oipMxPUnaAzrm9xl+Z5BHiq4vsECwbR/haP8ZXhHklmHgewcsarr+36Lv2x
krxQlVcPvRG4SYnf87P97FEW6HooTPV87IwsthDSp7zUnv9QVLzC9GNmuxsY2Uz8
Bp0D14Hxx6A2qbqTnMxG2s/MDM2pf5m7b+p0cOi+5o3lBswz9jNxQClmrp9yY4/G
rjZ9MlD5WX68ZnNuAfuecYrdsCNP1oAEsDdwudcAo+vFjfmu4dVnB5THtFsV9ATZ
GwOtJH+gVeGI+v7K9c8DLAv01meuwLezxQU=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:13:17 2025 by rpki-client