Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa
File:                     205510ec-fe65-33cc-a2dc-11dde1186393.roa (raw, json)
Hash identifier:          K9DHiBrtzWXgpZWdJxneJfZpyzFhPSf5P8ys2SuF2ZI=
Subject key identifier:   34:C1:F9:6D:C7:AF:0B:0F:CC:56:F0:68:5D:7B:DF:BC:03:5C:96:CE
Certificate issuer:       /CN=068fe099-ec29-42a6-8cc8-92597523d41f
Certificate serial:       010D0C9F4328584B110C0EE8DBF2E034F33B2300
Authority key identifier: 9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     33263
IP address blocks:        2602:f9d8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:0e:e8:db:f2:e0:34:f3:3b:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068fe099-ec29-42a6-8cc8-92597523d41f
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=e67d23dc-4abe-43d7-b6ae-9cae7b0b7e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c9:88:94:f3:82:5e:8c:e3:dc:94:d5:08:dd:
                    c4:e7:94:cb:c4:d4:10:f5:e9:4f:33:6d:a4:92:d7:
                    79:02:0c:d3:6b:8b:c2:c1:ae:08:31:56:20:0c:18:
                    e6:12:de:4b:57:39:02:83:df:48:e4:6e:a9:41:ef:
                    71:71:90:68:af:8a:57:1b:b0:5c:55:7e:b3:7a:bc:
                    41:a0:80:c7:26:f1:ad:e9:ad:5a:7b:3e:ba:75:ad:
                    16:06:f3:63:71:44:87:fb:0e:28:df:f7:24:81:ad:
                    e5:e5:20:70:2d:e0:5b:cd:fb:14:5f:73:88:62:72:
                    88:38:2f:62:90:9f:07:7b:b1:9c:f8:d7:d8:4c:88:
                    84:b0:7e:1a:fb:d4:b7:6a:4d:97:55:be:05:84:d9:
                    e4:04:01:1e:7f:a4:36:28:02:cb:10:89:d2:1b:19:
                    37:85:95:68:f4:6f:6f:1f:17:55:5a:fc:54:41:fd:
                    3f:16:e6:5b:40:0b:5f:4a:b2:be:98:74:5a:93:71:
                    aa:d1:d0:d4:8f:bc:a0:4d:39:13:71:d9:99:e2:4d:
                    e0:3d:98:58:c0:21:2d:dd:41:28:fc:b3:0e:f5:8a:
                    04:d2:06:5b:5b:3b:03:74:1f:3b:24:af:be:1b:37:
                    d9:1a:7d:5c:1a:a6:24:44:99:d8:11:9a:16:1c:63:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C1:F9:6D:C7:AF:0B:0F:CC:56:F0:68:5D:7B:DF:BC:03:5C:96:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/205510ec-fe65-33cc-a2dc-11dde1186393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f/068fe099-ec29-42a6-8cc8-92597523d41f.crl

            X509v3 Authority Key Identifier:
                keyid:9D:FC:DC:61:99:3A:69:27:BD:44:35:85:72:72:08:04:68:94:A2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/068fe099-ec29-42a6-8cc8-92597523d41f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:01:46:5e:39:8d:b7:89:44:b2:31:a4:e9:00:ed:b5:88:a4:
         cb:3f:f7:25:60:97:09:f8:5a:d3:43:91:b8:51:20:7d:90:b5:
         3e:87:c2:75:ea:74:a8:49:11:70:8b:70:95:2f:c6:ac:76:6c:
         bb:31:cb:6f:27:f3:a7:23:26:a3:7c:3f:f0:ef:92:98:29:df:
         ff:e7:30:00:ca:49:9c:7f:37:f7:3b:25:89:c5:0e:d3:52:03:
         c3:ff:5b:90:ca:70:36:f8:b0:ff:88:30:8f:5a:3f:41:ba:03:
         d4:33:8f:c1:fc:2c:fd:c5:62:31:14:90:e7:42:a0:63:fe:ae:
         7b:20:de:49:bc:74:f4:1f:26:44:74:49:fa:63:99:5c:b7:a5:
         b6:91:68:bd:34:d1:6c:fd:cd:82:4a:48:95:8d:c1:a7:25:31:
         4f:a0:c2:7b:82:ca:88:48:ae:35:c3:9e:ae:6e:27:25:fe:21:
         44:3f:de:3e:b8:50:cf:23:ea:bd:e5:73:f8:ca:a1:21:80:a9:
         6f:0a:f0:52:4f:76:ee:b1:fd:71:ef:a8:39:71:29:c5:a2:89:
         10:dc:fe:b0:0e:a7:64:19:fd:2b:60:00:a4:41:2a:c5:e2:55:
         d3:46:3f:07:67:34:36:7f:3e:8d:b7:98:b7:68:53:37:56:88:
         3e:41:6b:fb
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsRDA7o2/LgNPM7IwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY4ZmUwOTktZWMyOS00MmE2LThjYzgtOTI1OTc1MjNk
NDFmMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZTY3ZDIzZGMtNGFiZS00M2Q3LWI2YWUtOWNhZTdiMGI3ZTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MmIlPOCXozj3JTVCN3E55TLxNQQ9elPM22k
ktd5AgzTa4vCwa4IMVYgDBjmEt5LVzkCg99I5G6pQe9xcZBor4pXG7BcVX6zerxB
oIDHJvGt6a1aez66da0WBvNjcUSH+w4o3/ckga3l5SBwLeBbzfsUX3OIYnKIOC9i
kJ8He7Gc+NfYTIiEsH4a+9S3ak2XVb4FhNnkBAEef6Q2KALLEInSGxk3hZVo9G9v
HxdVWvxUQf0/FuZbQAtfSrK+mHRak3Gq0dDUj7ygTTkTcdmZ4k3gPZhYwCEt3UEo
/LMO9YoE0gZbWzsDdB87JK++GzfZGn1cGqYkRJnYEZoWHGNQ6QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDTB+W3HrwsPzFbwaF1737wDXJbOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjhm
ZTA5OS1lYzI5LTQyYTYtOGNjOC05MjU5NzUyM2Q0MWYvMjA1NTEwZWMtZmU2NS0z
M2NjLWEyZGMtMTFkZGUxMTg2MzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY4ZmUwOTktZWMyOS00MmE2LThj
YzgtOTI1OTc1MjNkNDFmLzA2OGZlMDk5LWVjMjktNDJhNi04Y2M4LTkyNTk3NTIz
ZDQxZi5jcmwwHwYDVR0jBBgwFoAUnfzcYZk6aSe9RDWFcnIIBGiUojEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjhmZTA5OS1lYzI5LTQyYTYtOGNjOC05MjU5
NzUyM2Q0MWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL52AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWAFGXjmNt4lEsjGk6QDttYikyz/3JWCXCfha00ORuFEgfZC1PofC
dep0qEkRcItwlS/GrHZsuzHLbyfzpyMmo3w/8O+SmCnf/+cwAMpJnH839zslicUO
01IDw/9bkMpwNviw/4gwj1o/QboD1DOPwfws/cViMRSQ50KgY/6ueyDeSbx09B8m
RHRJ+mOZXLeltpFovTTRbP3NgkpIlY3BpyUxT6DCe4LKiEiuNcOerm4nJf4hRD/e
PrhQzyPqveVz+MqhIYCpbwrwUk927rH9ce+oOXEpxaKJENz+sA6nZBn9K2AApEEq
xeJV00Y/B2c0Nn8+jbeYt2hTN1aIPkFr+w==
-----END CERTIFICATE-----
Generated at Wed Sep 10 09:09:37 2025 by rpki-client