Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/1db987fa-f8dc-31cb-95b1-3953903e18b5.roa
File:                     1db987fa-f8dc-31cb-95b1-3953903e18b5.roa (raw, json)
Hash identifier:          zf6ZsWEw8g0B74pGuqU861dwM82tAb0lbtB5fmcplJ8=
Subject key identifier:   D2:1A:34:E4:43:97:EA:FA:3F:0B:40:F5:B4:C3:92:B1:37:DA:F6:D2
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F4328584B9E07C6B2094A3D9E254FD580
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/1db987fa-f8dc-31cb-95b1-3953903e18b5.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     399883
IP address blocks:        2602:fc06:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c6:b2:09:4a:3d:9e:25:4f:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=8fc63f5a-ff27-4353-9eb8-de7b5f8e2a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:98:f9:25:ff:ad:5c:91:9a:6e:c6:58:a4:69:
                    9f:6a:55:37:62:85:96:24:24:5a:dc:e8:90:49:b7:
                    a9:9f:bc:2f:1b:0e:d0:b9:b5:9d:3d:4e:2f:3d:b5:
                    16:64:f5:a2:1d:d7:07:bd:2a:46:15:13:2b:7c:ce:
                    74:03:e8:f4:3e:77:85:59:69:67:2b:7b:2e:7f:eb:
                    5e:4b:77:fd:97:9a:c1:81:e7:8b:ce:58:20:c3:21:
                    09:cf:e9:4a:58:75:1e:7c:b3:8e:4d:9b:6e:82:fc:
                    ff:dc:41:9e:a6:10:9b:8d:d7:82:e9:e3:5b:7d:9b:
                    a4:31:cd:fd:1a:04:2b:d5:16:d1:dc:29:db:20:09:
                    f0:a4:fb:eb:d5:d6:a4:28:eb:ce:b3:ae:56:be:08:
                    96:fe:62:5d:d9:c8:16:9d:59:96:e9:1b:12:df:bc:
                    d7:6f:61:34:11:80:03:b6:c9:7e:d0:9f:91:df:8f:
                    98:aa:27:20:23:c9:95:cc:5e:76:e2:c1:fc:50:7b:
                    cf:1c:71:7f:3c:08:1a:dc:9e:0e:33:69:10:a8:77:
                    f6:27:5f:d7:8b:48:b2:fe:68:fd:ae:93:24:63:da:
                    d3:73:dd:68:35:36:77:db:00:b3:a8:a4:35:be:f1:
                    42:26:2f:50:70:3e:7b:59:62:47:9c:86:1b:5c:64:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1A:34:E4:43:97:EA:FA:3F:0B:40:F5:B4:C3:92:B1:37:DA:F6:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/1db987fa-f8dc-31cb-95b1-3953903e18b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc06:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:93:43:8b:f3:ed:01:88:78:0a:54:9b:fd:07:94:6d:62:b0:
         a9:ca:1e:62:18:46:44:b4:62:9d:43:dc:c4:ad:e1:b9:48:0b:
         4a:ce:bb:ee:52:1a:ed:5f:ed:89:e5:ef:1e:79:19:be:6e:c5:
         55:56:c5:44:78:7e:47:3e:34:71:6e:a8:03:56:99:f6:4a:f5:
         98:22:e9:ca:5c:15:19:e0:de:a2:df:f3:f4:c7:dd:54:bb:e8:
         6c:28:71:9f:c1:9e:0c:54:5d:d3:b4:69:5c:0f:ff:39:08:5a:
         33:2e:9f:c2:7f:3a:7c:69:73:d3:ba:3a:f3:51:fb:44:be:c5:
         ca:c1:3b:dd:a4:ce:46:16:a1:ac:f4:fa:d6:39:d6:be:69:ed:
         93:24:71:0b:13:61:03:62:33:f7:3a:a7:4d:30:44:82:80:a4:
         6a:e7:3b:4f:f6:99:dc:6c:45:66:4c:b0:0a:45:77:33:75:1b:
         d6:22:5e:dd:92:37:52:d4:ec:87:6e:8e:af:b6:d6:78:c9:5d:
         69:97:a6:a2:64:e8:76:5f:c4:ba:d1:47:d7:9d:d6:25:f0:1b:
         fe:30:6f:62:2f:bf:9a:7e:f4:89:a4:c3:0c:a4:c0:3f:59:15:
         b3:cd:5e:db:f5:80:71:c3:b6:28:6f:17:49:2f:4f:8b:ef:25:
         71:35:3d:b6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB8ayCUo9niVP1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUwOGUwZGUtYWI1ZS00ODgzLThmMDktN2Q5NTcwZjIw
MTg2MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
OGZjNjNmNWEtZmYyNy00MzUzLTllYjgtZGU3YjVmOGUyYTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5j5Jf+tXJGabsZYpGmfalU3YoWWJCRa3OiQ
Sbepn7wvGw7QubWdPU4vPbUWZPWiHdcHvSpGFRMrfM50A+j0PneFWWlnK3suf+te
S3f9l5rBgeeLzlggwyEJz+lKWHUefLOOTZtugvz/3EGephCbjdeC6eNbfZukMc39
GgQr1RbR3CnbIAnwpPvr1dakKOvOs65WvgiW/mJd2cgWnVmW6RsS37zXb2E0EYAD
tsl+0J+R34+YqicgI8mVzF524sH8UHvPHHF/PAga3J4OM2kQqHf2J1/Xi0iy/mj9
rpMkY9rTc91oNTZ32wCzqKQ1vvFCJi9QcD57WWJHnIYbXGQIUwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNIaNORDl+r6PwtA9bTDkrE32vbSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZTA4
ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1NzBmMjAxODYvMWRiOTg3ZmEtZjhkYy0z
MWNiLTk1YjEtMzk1MzkwM2UxOGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmUwOGUwZGUtYWI1ZS00ODgzLThm
MDktN2Q5NTcwZjIwMTg2LzZlMDhlMGRlLWFiNWUtNDg4My04ZjA5LTdkOTU3MGYy
MDE4Ni5jcmwwHwYDVR0jBBgwFoAU62igpaUyYfOMs5A+D0fqSS+zhlkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZTA4ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1
NzBmMjAxODYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8BgAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABKTQ4vz7QGIeApUm/0HlG1isKnKHmIYRkS0Yp1D3MSt4blIC0rO
u+5SGu1f7Ynl7x55Gb5uxVVWxUR4fkc+NHFuqANWmfZK9Zgi6cpcFRng3qLf8/TH
3VS76GwocZ/BngxUXdO0aVwP/zkIWjMun8J/Onxpc9O6OvNR+0S+xcrBO92kzkYW
oaz0+tY51r5p7ZMkcQsTYQNiM/c6p00wRIKApGrnO0/2mdxsRWZMsApFdzN1G9Yi
Xt2SN1LU7Idujq+21njJXWmXpqJk6HZfxLrRR9ed1iXwG/4wb2Ivv5p+9Imkwwyk
wD9ZFbPNXtv1gHHDtihvF0kvT4vvJXE1PbY=
-----END CERTIFICATE-----
Generated at Wed Oct 29 08:17:18 2025 by rpki-client