Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa
File:                     72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa (raw, json)
Hash identifier:          tmET4pgDE9GSoSUBZSq+nF9kaF1BhqPdZ+YeRfW+KdA=
Subject key identifier:   2A:E6:FE:E5:49:50:0F:53:BD:0F:B9:7C:42:2D:1B:63:7F:15:00:D4
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF52150C685815B7EA2E38100
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:2000::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:50:c6:85:81:5b:7e:a2:e3:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=984f1967-418a-42ac-93ff-08854cd1e7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a6:1c:d4:89:c8:b1:8d:94:f0:8f:cb:0c:d6:
                    d3:9f:72:0d:0b:67:92:61:46:10:57:5d:dd:35:08:
                    62:f1:c4:f3:ef:1c:79:e8:ac:c7:7b:54:5b:a7:12:
                    84:c5:21:dd:a3:63:af:74:00:7c:63:9d:87:ee:75:
                    8e:dd:d0:ce:a3:ae:93:9d:a8:60:b1:57:76:bb:54:
                    5c:8d:5c:dd:41:2c:a6:2d:ba:e9:4f:0f:8e:9d:bc:
                    c7:47:44:39:b8:83:9c:35:cf:1b:7a:7d:0b:c6:a3:
                    36:7a:5d:a7:5f:23:4f:9b:44:05:1c:cf:fb:d7:f7:
                    79:88:b4:3d:61:5d:84:c3:ba:c5:57:24:fa:f8:79:
                    46:0d:d0:cc:b9:84:5d:22:78:ba:e7:44:cd:3f:c6:
                    76:82:10:82:2c:81:0c:50:7e:46:e4:7c:17:13:56:
                    91:a5:78:dd:02:d1:9b:6b:0a:85:e2:b1:af:1b:3e:
                    a8:ad:72:18:9a:c7:78:9b:ca:34:8b:66:45:05:58:
                    f6:34:0e:59:89:58:61:d2:fb:dc:b2:63:b3:2e:90:
                    de:1c:f4:22:67:e5:e9:31:74:1f:b5:51:ed:ca:3f:
                    83:1d:ab:eb:d7:91:e7:24:27:9e:a9:75:e4:09:0d:
                    e0:48:20:09:ae:69:ee:0a:59:cb:fc:21:8a:d5:6d:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E6:FE:E5:49:50:0F:53:BD:0F:B9:7C:42:2D:1B:63:7F:15:00:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:92:e6:03:dc:ab:af:13:6f:6d:1e:ec:cd:22:ed:7b:9a:
         b5:6b:2a:32:5d:f1:2b:f2:ac:d3:c8:20:92:cb:0a:6b:d1:d1:
         5b:18:55:44:7a:31:31:55:af:d5:cc:d4:14:2c:f5:d4:a3:40:
         f9:e7:08:bc:70:59:88:11:d1:8c:aa:2d:b2:01:8f:84:e0:d7:
         45:48:2d:2e:16:95:87:ff:9a:ac:e3:b2:ed:e7:36:90:fe:b2:
         7f:e3:a3:ad:21:c3:0d:ad:11:dd:5c:d4:72:ec:23:c6:37:8a:
         13:c6:f8:3b:84:45:ef:14:9d:47:e2:00:63:13:f0:9e:76:8d:
         0e:15:3e:db:b4:5c:26:22:4d:61:e6:44:3b:78:9a:40:5f:c9:
         fd:c6:79:08:99:fc:6a:7c:ef:17:0c:44:6e:7b:ee:df:a4:76:
         01:1f:6b:fd:1e:c4:3e:15:6a:64:71:fa:fc:2e:0a:84:23:f1:
         df:b2:b5:e4:a2:55:99:13:0e:1e:d5:6d:4e:73:54:29:bf:09:
         63:48:f0:6b:1d:8d:02:75:13:bf:f8:47:61:b4:59:17:80:8f:
         5b:a4:30:1e:58:ac:d4:91:49:6f:b1:03:a9:72:07:3e:75:a9:
         ac:5f:43:4b:57:19:5c:ec:85:48:9c:40:b4:7f:6d:51:45:5b:
         72:31:a6:4d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr1IVDGhYFbfqLjgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
OTg0ZjE5NjctNDE4YS00MmFjLTkzZmYtMDg4NTRjZDFlN2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6Yc1InIsY2U8I/LDNbTn3INC2eSYUYQV13d
NQhi8cTz7xx56KzHe1RbpxKExSHdo2OvdAB8Y52H7nWO3dDOo66TnahgsVd2u1Rc
jVzdQSymLbrpTw+OnbzHR0Q5uIOcNc8ben0LxqM2el2nXyNPm0QFHM/71/d5iLQ9
YV2Ew7rFVyT6+HlGDdDMuYRdIni650TNP8Z2ghCCLIEMUH5G5HwXE1aRpXjdAtGb
awqF4rGvGz6orXIYmsd4m8o0i2ZFBVj2NA5ZiVhh0vvcsmOzLpDeHPQiZ+XpMXQf
tVHtyj+DHavr15HnJCeeqXXkCQ3gSCAJrmnuClnL/CGK1W0KnQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCrm/uVJUA9TvQ+5fEItG2N/FQDUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvNzJhYWRjNDItYTZiNi0z
ZjFlLWE5YjItYzNkNDZlYzYzMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIIDCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABPCS5gPcq68Tb20e7M0i7XuatWsqMl3xK/Ks08ggkssKa9HRWxhV
RHoxMVWv1czUFCz11KNA+ecIvHBZiBHRjKotsgGPhODXRUgtLhaVh/+arOOy7ec2
kP6yf+OjrSHDDa0R3VzUcuwjxjeKE8b4O4RF7xSdR+IAYxPwnnaNDhU+27RcJiJN
YeZEO3iaQF/J/cZ5CJn8anzvFwxEbnvu36R2AR9r/R7EPhVqZHH6/C4KhCPx37K1
5KJVmRMOHtVtTnNUKb8JY0jwax2NAnUTv/hHYbRZF4CPW6QwHlis1JFJb7EDqXIH
PnWprF9DS1cZXOyFSJxAtH9tUUVbcjGmTQ==
-----END CERTIFICATE-----
Generated at Mon Aug 25 19:28:01 2025 by rpki-client