Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bb8cca25-c470-319d-94a9-304db5760ead.roa
File:                     bb8cca25-c470-319d-94a9-304db5760ead.roa (raw, json)
Hash identifier:          BYsgXhwU3ldaLgwpCsnmipo3Dr+g20G4Kbboi+uZgVc=
Subject key identifier:   87:D0:FA:67:EB:71:B1:7F:21:B5:EF:A3:FD:7B:D6:00:40:37:5B:40
Certificate issuer:       /CN=932105b1-ce56-44a7-9670-6f4e56578ef8
Certificate serial:       010D0C9F4328584A7D16114846E7EBF2E88B2BC0
Authority key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bb8cca25-c470-319d-94a9-304db5760ead.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     53724
IP address blocks:        2602:f7f8:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:16:11:48:46:e7:eb:f2:e8:8b:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932105b1-ce56-44a7-9670-6f4e56578ef8
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=b32bad11-e650-41d2-9ab0-15ca95f432ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:ae:ce:da:e7:cd:fa:2e:98:23:8a:57:bb:
                    a5:ee:8a:00:11:99:64:73:12:9c:b3:d8:6b:79:66:
                    69:a8:49:a8:c2:fa:e1:d8:45:6a:5a:bd:88:cb:51:
                    41:1c:d3:71:c9:73:50:c9:63:1a:52:7e:eb:95:92:
                    53:9e:1a:ee:b4:b0:74:7b:10:be:c7:54:c5:a3:59:
                    ee:a7:d6:af:47:4f:05:cf:7b:c8:85:1c:08:83:90:
                    de:d7:a3:87:90:dd:1d:6a:18:c3:1f:92:26:3a:ea:
                    dd:65:77:56:df:11:b4:7f:5f:bf:98:6a:97:a6:e0:
                    6e:fa:78:0b:24:68:15:63:ff:37:07:8b:9d:6b:ae:
                    b8:62:4f:a8:5b:78:be:d2:de:0c:a1:08:dd:10:b9:
                    7e:8a:8e:21:56:c6:22:01:1e:84:25:21:85:d4:f7:
                    67:7d:67:bc:fd:e2:ab:b1:17:89:39:8f:84:53:2f:
                    80:4c:ae:fd:cf:94:fb:9c:6b:97:75:c3:11:18:77:
                    86:64:ae:78:fa:3f:f7:9d:47:22:6c:7f:c6:a4:65:
                    d1:af:39:c3:b2:dd:91:1a:ef:83:6f:3c:bf:06:64:
                    a1:1f:3d:2d:84:e6:40:6f:0d:46:4b:7b:fb:5e:95:
                    84:f6:da:8d:bc:0e:33:19:a1:27:47:86:40:a7:f0:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D0:FA:67:EB:71:B1:7F:21:B5:EF:A3:FD:7B:D6:00:40:37:5B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bb8cca25-c470-319d-94a9-304db5760ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7f8:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:45:be:cc:f4:97:78:cb:a1:f5:c4:24:91:62:da:f6:3f:
         b1:85:fc:0e:53:cf:a2:ce:5f:0d:7e:ff:cf:24:48:2e:d5:97:
         bd:47:d1:26:28:57:9e:8b:ca:77:f3:8e:4f:7e:b1:74:b6:70:
         f4:1a:56:58:32:e2:cf:58:77:33:3b:a0:12:45:78:c1:b2:cb:
         23:93:37:d8:81:37:ee:98:a2:cb:16:74:15:cb:b8:00:6b:95:
         07:eb:89:33:ce:62:59:da:fc:1f:15:cc:77:0a:0b:b3:f0:28:
         c6:1e:4e:5b:19:18:1a:34:c8:6f:a3:7b:46:07:d6:e7:2f:df:
         04:c5:d7:36:dd:80:01:74:e9:fa:6f:27:5d:55:70:b0:df:02:
         55:37:44:95:01:33:12:bb:69:79:01:86:f5:34:53:7c:46:33:
         28:3c:e5:c9:7c:b5:1d:3a:d0:cc:7a:73:5b:d7:e6:71:86:36:
         24:0f:27:62:d6:df:53:ed:b9:77:79:cd:80:b5:80:23:02:9b:
         35:65:3c:6c:2b:de:f4:f1:d0:b1:89:86:b6:62:54:ca:01:01:
         86:85:23:d9:1d:84:3f:f4:4b:01:cd:af:0f:0f:03:4e:82:dc:
         39:67:15:9c:96:2a:58:3b:a4:fe:6f:4e:bf:0b:7e:36:54:b4:
         da:c7:a9:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp9FhFIRufr8uiLK8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMyMTA1YjEtY2U1Ni00NGE3LTk2NzAtNmY0ZTU2NTc4
ZWY4MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
YjMyYmFkMTEtZTY1MC00MWQyLTlhYjAtMTVjYTk1ZjQzMmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcOuztrnzfoumCOKV7ul7ooAEZlkcxKcs9hr
eWZpqEmowvrh2EVqWr2Iy1FBHNNxyXNQyWMaUn7rlZJTnhrutLB0exC+x1TFo1nu
p9avR08Fz3vIhRwIg5De16OHkN0dahjDH5ImOurdZXdW3xG0f1+/mGqXpuBu+ngL
JGgVY/83B4uda664Yk+oW3i+0t4MoQjdELl+io4hVsYiAR6EJSGF1PdnfWe8/eKr
sReJOY+EUy+ATK79z5T7nGuXdcMRGHeGZK54+j/3nUcibH/GpGXRrznDst2RGu+D
bzy/BmShHz0thOZAbw1GS3v7XpWE9tqNvA4zGaEnR4ZAp/BHVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIfQ+mfrcbF/IbXvo/171gBAN1tAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MzIx
MDViMS1jZTU2LTQ0YTctOTY3MC02ZjRlNTY1NzhlZjgvYmI4Y2NhMjUtYzQ3MC0z
MTlkLTk0YTktMzA0ZGI1NzYwZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTMyMTA1YjEtY2U1Ni00NGE3LTk2
NzAtNmY0ZTU2NTc4ZWY4LzkzMjEwNWIxLWNlNTYtNDRhNy05NjcwLTZmNGU1NjU3
OGVmOC5jcmwwHwYDVR0jBBgwFoAU2oXXhzBPtQ/DehLEbjKC7ia9QuYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MzIxMDViMS1jZTU2LTQ0YTctOTY3MC02ZjRl
NTY1NzhlZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3+AAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA11Rb7M9Jd4y6H1xCSRYtr2P7GF/A5Tz6LOXw1+/88kSC7Vl71H
0SYoV56Lynfzjk9+sXS2cPQaVlgy4s9YdzM7oBJFeMGyyyOTN9iBN+6YossWdBXL
uABrlQfriTPOYlna/B8VzHcKC7PwKMYeTlsZGBo0yG+je0YH1ucv3wTF1zbdgAF0
6fpvJ11VcLDfAlU3RJUBMxK7aXkBhvU0U3xGMyg85cl8tR060Mx6c1vX5nGGNiQP
J2LW31PtuXd5zYC1gCMCmzVlPGwr3vTx0LGJhrZiVMoBAYaFI9kdhD/0SwHNrw8P
A06C3DlnFZyWKlg7pP5vTr8LfjZUtNrHqfI=
-----END CERTIFICATE-----
Generated at Thu Aug 21 16:04:07 2025 by rpki-client