Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/bfcdd663-08b3-346e-ada1-b6829e7360ce.roa
File:                     bfcdd663-08b3-346e-ada1-b6829e7360ce.roa (raw, json)
Hash identifier:          y0pa7ZOA7Gq6YFCj9s7x2gnj82yDX4YGle3jW1CnOoI=
Subject key identifier:   07:B2:F1:85:1D:F5:4E:54:DB:07:A9:B7:0A:E8:61:70:EF:CE:56:C6
Certificate issuer:       /CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
Certificate serial:       010D0C9F4328584A74B5DEBBA6AAAEC948462100
Authority key identifier: CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/bfcdd663-08b3-346e-ada1-b6829e7360ce.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     852
IP address blocks:        2602:812:2003::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:de:bb:a6:aa:ae:c9:48:46:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=1a12a52d-b1c7-45dc-a8ef-be71b16113fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:71:96:59:f8:db:6b:b4:e5:b6:f6:ef:14:06:
                    2a:6a:bf:2a:a3:a7:96:66:36:2f:0d:a5:be:03:3d:
                    0a:f8:fe:e5:ef:fb:b4:56:37:5a:17:a3:f4:26:ed:
                    05:56:2c:28:1f:e3:89:f8:ea:52:38:92:1f:de:d0:
                    6f:cc:5e:f3:18:ed:46:3b:e0:fe:01:22:fb:5f:5c:
                    ef:bd:d0:fc:47:bd:41:1b:01:e4:ce:90:a0:d7:52:
                    a5:b4:7f:00:3d:85:95:ec:4d:af:e3:8b:f3:f3:61:
                    32:d7:65:d3:16:d9:ac:05:e3:21:8e:5d:85:72:d8:
                    5c:f8:9b:94:d6:51:0a:5d:41:1f:c2:32:ef:91:4d:
                    6d:0a:07:bd:a1:6e:95:a1:f2:46:c5:7e:50:9a:0a:
                    53:bf:34:3d:17:52:c4:c8:61:d9:ca:27:0a:a6:1f:
                    1f:d2:23:c0:9a:64:fd:44:11:c7:16:08:1a:02:29:
                    b6:16:08:40:ed:d1:d7:d7:20:db:75:dc:84:b9:48:
                    49:26:ce:a9:f0:d8:99:5d:39:b8:50:67:a2:7f:b4:
                    3c:6e:b7:e8:5f:c6:55:ad:0a:4d:35:73:60:97:ad:
                    35:98:75:20:e5:db:ab:f6:46:26:22:b9:38:eb:e8:
                    11:42:55:07:7e:ed:3d:4a:97:ad:1f:ea:30:1c:51:
                    f5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B2:F1:85:1D:F5:4E:54:DB:07:A9:B7:0A:E8:61:70:EF:CE:56:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/bfcdd663-08b3-346e-ada1-b6829e7360ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:2003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f5:8a:ae:cf:43:42:27:c6:5d:f6:43:d3:7d:14:20:89:56:
         af:c6:59:79:e8:4a:d9:53:ef:55:bc:6f:db:03:ce:b9:01:05:
         a2:f6:b4:74:b2:19:ef:73:7b:da:55:85:6f:c2:da:97:f2:2a:
         4b:1c:da:5a:1f:b5:14:11:d8:f8:1d:83:88:2a:d7:ee:ef:dd:
         26:81:f8:6e:4d:e8:94:5a:ad:2c:ec:bf:a1:95:0d:3d:86:19:
         89:ad:6b:15:b5:35:94:12:e4:57:29:8c:42:8b:ce:e6:84:f8:
         f9:51:72:27:f6:fd:78:a0:6b:92:ca:e5:52:b8:27:4f:79:93:
         19:dc:d8:99:8b:52:ca:88:bc:aa:a5:40:62:77:cb:e3:60:cf:
         1a:c6:ff:f4:1e:5e:1a:00:51:e4:49:13:0f:0e:78:7e:60:f9:
         2d:cb:ed:cf:42:87:17:26:e7:62:7b:82:80:1d:7a:8b:a4:e8:
         95:9a:14:c2:8f:0b:e9:33:0c:53:db:7b:2c:83:4e:d6:66:27:
         2e:1d:3d:36:eb:8e:e4:be:0f:94:8a:af:4b:41:52:e7:d2:52:
         8c:ce:6a:2e:a7:88:58:fb:7b:13:4a:a0:61:b4:e4:86:0f:49:
         13:36:bb:08:67:b6:55:0b:70:49:f2:b1:4a:81:0d:2d:21:19:
         1d:f1:c2:f0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp0td67pqquyUhGIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBmMzQzZGYtNTViZS00YjQ4LWI1NTktMTVmYjJmZTZj
MWM1MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
MWExMmE1MmQtYjFjNy00NWRjLWE4ZWYtYmU3MWIxNjExM2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHGWWfjba7TltvbvFAYqar8qo6eWZjYvDaW+
Az0K+P7l7/u0VjdaF6P0Ju0FViwoH+OJ+OpSOJIf3tBvzF7zGO1GO+D+ASL7X1zv
vdD8R71BGwHkzpCg11KltH8APYWV7E2v44vz82Ey12XTFtmsBeMhjl2Fcthc+JuU
1lEKXUEfwjLvkU1tCge9oW6VofJGxX5QmgpTvzQ9F1LEyGHZyicKph8f0iPAmmT9
RBHHFggaAim2FghA7dHX1yDbddyEuUhJJs6p8NiZXTm4UGeif7Q8brfoX8ZVrQpN
NXNgl601mHUg5dur9kYmIrk46+gRQlUHfu09SpetH+owHFH1DwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAey8YUd9U5U2weptwroYXDvzlbGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MGYz
NDNkZi01NWJlLTRiNDgtYjU1OS0xNWZiMmZlNmMxYzUvYmZjZGQ2NjMtMDhiMy0z
NDZlLWFkYTEtYjY4MjllNzM2MGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODBmMzQzZGYtNTViZS00YjQ4LWI1
NTktMTVmYjJmZTZjMWM1LzgwZjM0M2RmLTU1YmUtNGI0OC1iNTU5LTE1ZmIyZmU2
YzFjNS5jcmwwHwYDVR0jBBgwFoAUyiU32R6vtskYiRlTgmPIT03wg4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MGYzNDNkZi01NWJlLTRiNDgtYjU1OS0xNWZi
MmZlNmMxYzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIEiAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEj1iq7PQ0Inxl32Q9N9FCCJVq/GWXnoStlT71W8b9sDzrkBBaL2
tHSyGe9ze9pVhW/C2pfyKksc2loftRQR2Pgdg4gq1+7v3SaB+G5N6JRarSzsv6GV
DT2GGYmtaxW1NZQS5FcpjEKLzuaE+PlRcif2/Xiga5LK5VK4J095kxnc2JmLUsqI
vKqlQGJ3y+NgzxrG//QeXhoAUeRJEw8OeH5g+S3L7c9Chxcm52J7goAdeouk6JWa
FMKPC+kzDFPbeyyDTtZmJy4dPTbrjuS+D5SKr0tBUufSUozOai6niFj7exNKoGG0
5IYPSRM2uwhntlULcEnysUqBDS0hGR3xwvA=
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:35:35 2025 by rpki-client