Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa
File:                     c8b738ed-fedf-3c78-8f42-d6417729ca05.roa (raw, json)
Hash identifier:          sqLr2ugm+CEIKDBs3VR04aMyBrpp7pp2AfpLYPtTAQU=
Subject key identifier:   59:8E:D8:53:F7:15:D2:3F:A8:6C:2F:BA:5F:75:91:0D:ED:90:15:DE
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584A90A0AD732A42672EE22A24A0
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     206216
IP address blocks:        2602:fb54::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:ad:73:2a:42:67:2e:e2:2a:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=91ed59b3-3a2f-43d1-a9af-fa86ad95d334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:68:6e:14:8a:cc:df:f1:15:34:3a:6b:ff:
                    a7:71:f7:59:8d:f2:4d:bb:cd:e7:f9:03:79:c0:9f:
                    68:d2:b4:8a:11:2c:b1:26:ab:2f:f8:f0:1d:a1:ab:
                    69:f3:74:46:cb:c3:ef:0d:3f:0f:96:b9:ad:25:53:
                    11:23:dc:2b:df:ce:e1:22:ca:0e:39:13:a3:09:6f:
                    15:11:b0:8c:c2:40:08:f3:01:cc:6a:44:c9:45:95:
                    e3:a1:5d:b4:8d:ac:c6:c9:1b:85:50:eb:5a:04:be:
                    df:54:1b:c0:ba:15:2b:61:f8:2f:04:fb:8f:15:2e:
                    42:80:df:28:05:ff:f7:49:9b:1a:92:60:a9:4e:bb:
                    50:3b:e9:8f:44:30:1b:14:27:bf:0b:58:2b:d2:82:
                    eb:81:66:04:14:0b:69:13:1c:01:ba:62:0f:39:21:
                    da:83:02:4d:22:d2:b2:a8:87:0e:1c:42:c8:d8:ef:
                    ea:e4:cf:89:63:d2:05:96:4a:16:f9:c9:c6:8e:8d:
                    ca:27:d9:fa:f4:4c:37:4e:72:5d:56:5f:c9:80:b7:
                    74:48:cd:0a:98:8e:2d:d5:88:32:93:d2:bb:b7:a6:
                    a9:40:90:43:d2:65:58:a8:95:1e:38:6a:40:8f:8b:
                    00:f2:e7:38:b9:de:82:e4:cf:dc:a4:59:94:f6:6f:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:D8:53:F7:15:D2:3F:A8:6C:2F:BA:5F:75:91:0D:ED:90:15:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d4:62:37:1a:13:80:52:f8:b1:46:f9:c4:82:98:42:88:39:
         2f:f4:72:11:57:7b:c1:cf:7c:94:4e:53:72:7d:c9:06:88:98:
         d6:92:46:ae:ea:a7:3a:ed:b6:12:f7:71:f4:04:86:43:c5:6a:
         d8:b4:82:44:25:d1:ef:57:df:d0:f6:5f:34:dc:f9:34:8e:e8:
         76:12:e5:c1:5e:1b:3a:2c:8b:e8:98:0e:02:c3:b8:b6:20:c6:
         74:03:38:ab:9a:e9:ba:f5:86:e9:f2:09:69:f0:ad:a0:43:8a:
         36:6f:1c:c8:e9:d9:69:f6:99:dd:7e:88:58:3f:e1:5b:0e:72:
         07:4e:67:32:d8:b2:24:03:f3:a0:5d:7a:8f:c1:e8:34:02:54:
         e4:44:6d:10:59:36:e8:67:ec:ec:73:1f:8b:95:08:c1:6b:c0:
         56:6b:8b:83:b1:12:49:c8:9a:7c:00:d1:33:c6:f8:90:0b:66:
         70:9f:e7:1d:cc:50:c7:9a:9c:09:6e:5f:5d:d1:06:f5:be:f8:
         65:64:4d:96:89:3d:55:10:c0:1e:47:95:84:cd:9e:9f:b0:7a:
         99:d8:31:f9:e2:be:fd:ed:1f:77:3e:ef:f7:2f:32:7a:04:4b:
         48:b6:ca:18:e6:f5:db:39:ae:9a:50:56:de:9d:6e:3f:d4:d5:
         54:b3:78:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoK1zKkJnLuIqJKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
OTFlZDU5YjMtM2EyZi00M2QxLWE5YWYtZmE4NmFkOTVkMzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0VobhSKzN/xFTQ6a/+ncfdZjfJNu83n+QN5
wJ9o0rSKESyxJqsv+PAdoatp83RGy8PvDT8PlrmtJVMRI9wr387hIsoOOROjCW8V
EbCMwkAI8wHMakTJRZXjoV20jazGyRuFUOtaBL7fVBvAuhUrYfgvBPuPFS5CgN8o
Bf/3SZsakmCpTrtQO+mPRDAbFCe/C1gr0oLrgWYEFAtpExwBumIPOSHagwJNItKy
qIcOHELI2O/q5M+JY9IFlkoW+cnGjo3KJ9n69Ew3TnJdVl/JgLd0SM0KmI4t1Ygy
k9K7t6apQJBD0mVYqJUeOGpAj4sA8uc4ud6C5M/cpFmU9m9cMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFmO2FP3FdI/qGwvul91kQ3tkBXeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvYzhiNzM4ZWQtZmVkZi0z
Yzc4LThmNDItZDY0MTc3MjljYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7VAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABjUYjcaE4BS+LFG+cSCmEKIOS/0chFXe8HPfJROU3J9yQaImNaS
Rq7qpzrtthL3cfQEhkPFati0gkQl0e9X39D2XzTc+TSO6HYS5cFeGzosi+iYDgLD
uLYgxnQDOKua6br1hunyCWnwraBDijZvHMjp2Wn2md1+iFg/4VsOcgdOZzLYsiQD
86Bdeo/B6DQCVOREbRBZNuhn7OxzH4uVCMFrwFZri4OxEknImnwA0TPG+JALZnCf
5x3MUMeanAluX13RBvW++GVkTZaJPVUQwB5HlYTNnp+wepnYMfnivv3tH3c+7/cv
MnoES0i2yhjm9ds5rppQVt6dbj/U1VSzeBM=
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:07:12 2025 by rpki-client