Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa
File:                     ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa (raw, json)
Hash identifier:          y1JSAvL8xinKOBzSQLseYWyxBGQ5vycp+Lm3ZzgVwBU=
Subject key identifier:   19:1B:E2:52:40:32:B7:0E:D4:6D:86:35:63:63:0A:B2:13:9B:89:B3
Certificate issuer:       /CN=8461abaf-8773-4e40-ad91-9135219be7a4
Certificate serial:       010D0C9F4328584AFC1C0BA7C94DB16269F36E4C
Authority key identifier: 1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     7324
IP address blocks:        2620:c::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:0b:a7:c9:4d:b1:62:69:f3:6e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8461abaf-8773-4e40-ad91-9135219be7a4
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=d0c6b991-827d-4a44-a73b-5e7a29a2f0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:e8:75:38:88:e6:a7:d3:d2:af:d6:31:7e:
                    22:d5:e8:30:08:d2:27:85:11:88:a3:a8:35:9f:4f:
                    27:25:2a:62:5e:c5:0f:4f:60:55:e3:39:0e:fe:17:
                    b1:7b:b7:88:e2:29:0c:b7:c9:9e:ab:38:42:92:ac:
                    64:d9:37:02:10:a0:18:85:77:55:95:b5:02:c1:85:
                    0f:2c:c0:f5:86:5f:d7:77:41:6a:5a:77:85:72:72:
                    07:f9:71:69:2c:83:2a:4e:a4:2d:85:55:0c:38:61:
                    69:95:88:90:01:29:4f:8d:a3:04:a8:76:c1:5b:9e:
                    f0:3e:27:be:93:20:85:21:d5:d6:84:65:3b:9c:0c:
                    b0:db:ac:1c:02:05:94:ed:11:0e:f6:54:40:7a:69:
                    f1:1c:5c:c6:17:d1:92:5e:a0:93:99:24:66:0f:ca:
                    d5:8a:a3:f6:f9:d8:66:2c:94:7d:59:ad:b8:a7:f7:
                    88:e6:de:63:26:eb:ff:99:28:32:51:ad:ed:bd:fb:
                    e2:1c:7a:35:24:46:90:dd:c9:94:cd:db:bc:cf:25:
                    f5:99:a0:54:f0:b7:b3:cf:66:53:87:24:28:35:65:
                    34:83:7d:b7:48:4d:88:84:54:5f:b7:e8:d4:4d:59:
                    0a:72:03:75:22:7e:4c:a1:82:10:4e:e2:89:43:6f:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1B:E2:52:40:32:B7:0E:D4:6D:86:35:63:63:0A:B2:13:9B:89:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl

            X509v3 Authority Key Identifier:
                keyid:1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:42:73:29:74:b1:18:a7:d4:b2:0d:d7:19:6b:c9:4c:ef:ed:
         01:ae:db:7f:b4:d2:fa:5d:fa:6c:4f:78:63:5f:5f:5d:12:d0:
         a6:7a:c8:6d:89:dd:e7:62:6e:e4:4b:ca:47:08:52:ef:48:83:
         3f:07:67:64:99:48:82:95:d9:7a:8f:9d:9c:f4:4f:fc:60:b6:
         92:58:05:5e:8f:e9:c3:e1:67:9e:3c:b7:06:8b:95:50:96:58:
         13:60:76:45:cc:da:fa:84:13:a1:62:f8:bd:16:f2:19:a9:6b:
         9f:91:cd:96:7b:21:a1:56:4b:19:82:0f:70:e5:6b:97:04:1c:
         03:e7:a3:4b:42:ec:28:4b:90:0e:ee:1b:43:0b:f2:31:9d:ad:
         8a:8b:a1:a6:91:99:18:a7:f0:d7:5f:24:73:c4:93:1d:f6:06:
         c0:3d:2b:da:7e:f0:b3:4d:39:fe:e3:5e:7e:64:be:b7:62:01:
         2e:4f:40:fb:38:fb:6a:94:47:3b:34:b9:9d:e3:43:5d:19:ec:
         4a:8e:b3:a5:78:dc:87:dc:bb:c1:06:26:69:6b:1d:cc:e4:79:
         36:4c:77:90:f7:55:e7:27:07:32:93:1f:c2:cc:1e:a8:4d:5e:
         3f:9d:6d:cf:07:a4:64:03:e8:c1:7c:19:94:d0:de:b6:ed:ab:
         49:49:c8:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8HAunyU2xYmnzbkwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ2MWFiYWYtODc3My00ZTQwLWFkOTEtOTEzNTIxOWJl
N2E0MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDBjNmI5OTEtODI3ZC00YTQ0LWE3M2ItNWU3YTI5YTJmMGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQLodTiI5qfT0q/WMX4i1egwCNInhRGIo6g1
n08nJSpiXsUPT2BV4zkO/hexe7eI4ikMt8meqzhCkqxk2TcCEKAYhXdVlbUCwYUP
LMD1hl/Xd0FqWneFcnIH+XFpLIMqTqQthVUMOGFplYiQASlPjaMEqHbBW57wPie+
kyCFIdXWhGU7nAyw26wcAgWU7REO9lRAemnxHFzGF9GSXqCTmSRmD8rViqP2+dhm
LJR9Wa24p/eI5t5jJuv/mSgyUa3tvfviHHo1JEaQ3cmUzdu8zyX1maBU8Lezz2ZT
hyQoNWU0g323SE2IhFRft+jUTVkKcgN1In5MoYIQTuKJQ2/AZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBkb4lJAMrcO1G2GNWNjCrITm4mzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84NDYx
YWJhZi04NzczLTRlNDAtYWQ5MS05MTM1MjE5YmU3YTQvYWI0YWUxOWEtMWJjMy0z
Y2U3LWI4MTMtMzU5MzlmY2I3N2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODQ2MWFiYWYtODc3My00ZTQwLWFk
OTEtOTEzNTIxOWJlN2E0Lzg0NjFhYmFmLTg3NzMtNGU0MC1hZDkxLTkxMzUyMTli
ZTdhNC5jcmwwHwYDVR0jBBgwFoAUGrrgEwxUIn6Nzinkc5jEZR5d38gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84NDYxYWJhZi04NzczLTRlNDAtYWQ5MS05MTM1
MjE5YmU3YTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAADAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA9Ccyl0sRin1LIN1xlryUzv7QGu23+00vpd+mxPeGNfX10S0KZ6
yG2J3edibuRLykcIUu9Igz8HZ2SZSIKV2XqPnZz0T/xgtpJYBV6P6cPhZ548twaL
lVCWWBNgdkXM2vqEE6Fi+L0W8hmpa5+RzZZ7IaFWSxmCD3Dla5cEHAPno0tC7ChL
kA7uG0ML8jGdrYqLoaaRmRin8NdfJHPEkx32BsA9K9p+8LNNOf7jXn5kvrdiAS5P
QPs4+2qURzs0uZ3jQ10Z7EqOs6V43Ifcu8EGJmlrHczkeTZMd5D3VecnBzKTH8LM
HqhNXj+dbc8HpGQD6MF8GZTQ3rbtq0lJyBM=
-----END CERTIFICATE-----
Generated at Wed Sep 17 18:15:30 2025 by rpki-client