Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa
File:                     f8cef0a4-a68f-347b-bee6-17972ce290a9.roa (raw, json)
Hash identifier:          qqdZr7uPtN/Sb4VA3L10aSOhK6WVgWuasYA6Gk9NkhE=
Subject key identifier:   53:19:E5:7B:FD:A3:C6:89:26:6D:69:4C:63:AD:42:DF:76:DD:3C:D1
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F4328584A7085F1B07E3291CB9858C780
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     3477
IP address blocks:        2602:810:d000::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:f1:b0:7e:32:91:cb:98:58:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=52018890-5ab0-4ecc-b7a8-2cd1436fe618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:88:38:d9:f5:57:6d:6a:ab:66:03:0b:4e:
                    92:65:08:1d:64:38:de:40:d9:ab:08:cf:84:70:53:
                    60:35:3e:2e:71:f5:a5:c4:de:12:23:f7:00:f6:f5:
                    94:dc:8d:4c:ec:ba:49:8f:bd:0a:da:93:f2:51:d2:
                    6a:66:0f:03:da:dc:a4:cd:65:23:8f:3a:6e:9d:57:
                    eb:d0:1c:1c:9a:99:c8:ac:35:82:4a:30:fd:22:59:
                    fd:ac:c4:5f:a4:69:e2:da:19:02:61:3f:03:c5:fa:
                    64:83:b9:84:87:ff:be:67:db:7b:9e:0f:ef:1b:a4:
                    8d:ce:b8:31:87:a0:03:53:9b:e1:db:d8:a7:15:71:
                    43:56:a1:55:02:fd:ad:2a:2a:8a:90:17:52:f6:df:
                    36:ed:86:ae:42:25:c5:cd:96:da:74:51:33:99:2a:
                    c8:f8:6e:ec:fa:25:a5:09:88:fa:20:89:29:9a:9a:
                    4b:5f:64:5b:0c:68:ee:cc:c7:58:ca:5c:c7:8e:b1:
                    dd:01:df:6f:e3:43:41:bf:fb:61:a7:07:52:a5:72:
                    20:53:41:a5:a4:74:d9:a7:a4:66:31:53:47:9a:3a:
                    ee:de:51:99:8f:55:a5:8a:20:ce:48:c3:1b:16:b3:
                    ce:8e:21:45:5d:d7:13:5e:00:19:a3:83:18:54:c7:
                    0c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:19:E5:7B:FD:A3:C6:89:26:6D:69:4C:63:AD:42:DF:76:DD:3C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/f8cef0a4-a68f-347b-bee6-17972ce290a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:d000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:2c:db:e9:ac:d7:a9:8c:b7:33:f6:69:7d:3d:41:7e:3d:
         47:98:f9:aa:ef:00:1c:1c:31:b0:ed:b9:28:bb:81:42:a4:62:
         9a:50:6e:17:e0:97:1d:2d:e5:25:fb:21:24:d2:36:be:d0:2d:
         63:c6:b5:1a:02:8d:3e:7b:e6:9b:8f:67:40:9a:40:41:f2:7a:
         eb:c3:67:97:23:3d:04:d4:10:8b:99:47:72:54:27:96:bd:e7:
         ed:e6:35:78:57:71:bc:25:1e:f3:37:f4:47:24:66:2f:64:c1:
         52:a1:46:84:69:4c:01:24:5a:70:d6:25:24:e9:e9:54:b6:7a:
         77:c9:83:32:be:ea:2d:6e:3f:c6:6c:d5:ed:3b:ae:be:af:55:
         36:d8:05:66:9a:15:59:e7:66:9b:92:08:3d:03:5c:46:08:b9:
         e0:62:ee:fd:ea:97:d1:86:96:da:33:8a:48:5f:ed:0b:99:a9:
         3d:08:05:23:39:7b:e6:b0:16:94:df:d8:d8:fc:d8:24:d0:36:
         84:d4:74:37:1b:f4:4c:41:9f:e4:6b:ea:5f:13:c2:ef:b3:25:
         f5:1d:02:3a:7d:32:40:38:b8:67:bd:c3:ae:7b:cb:12:4e:8f:
         db:8a:06:00:59:96:21:67:bc:53:49:a7:32:75:25:55:cb:07:
         11:dd:60:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpwhfGwfjKRy5hYx4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5
Y2I1MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
NTIwMTg4OTAtNWFiMC00ZWNjLWI3YTgtMmNkMTQzNmZlNjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdCIONn1V21qq2YDC06SZQgdZDjeQNmrCM+E
cFNgNT4ucfWlxN4SI/cA9vWU3I1M7LpJj70K2pPyUdJqZg8D2tykzWUjjzpunVfr
0BwcmpnIrDWCSjD9Iln9rMRfpGni2hkCYT8Dxfpkg7mEh/++Z9t7ng/vG6SNzrgx
h6ADU5vh29inFXFDVqFVAv2tKiqKkBdS9t827YauQiXFzZbadFEzmSrI+G7s+iWl
CYj6IIkpmppLX2RbDGjuzMdYylzHjrHdAd9v40NBv/thpwdSpXIgU0GlpHTZp6Rm
MVNHmjru3lGZj1WliiDOSMMbFrPOjiFFXdcTXgAZo4MYVMcMdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFMZ5Xv9o8aJJm1pTGOtQt923TzRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl
NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvZjhjZWYwYTQtYTY4Zi0z
NDdiLWJlZTYtMTc5NzJjZTI5MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2
ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi
OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl
YzgzYjljYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgIIENAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG38LNvprNepjLcz9ml9PUF+PUeY+arvABwcMbDtuSi7gUKkYppQ
bhfglx0t5SX7ISTSNr7QLWPGtRoCjT575puPZ0CaQEHyeuvDZ5cjPQTUEIuZR3JU
J5a95+3mNXhXcbwlHvM39EckZi9kwVKhRoRpTAEkWnDWJSTp6VS2enfJgzK+6i1u
P8Zs1e07rr6vVTbYBWaaFVnnZpuSCD0DXEYIueBi7v3ql9GGltozikhf7QuZqT0I
BSM5e+awFpTf2Nj82CTQNoTUdDcb9ExBn+Rr6l8Twu+zJfUdAjp9MkA4uGe9w657
yxJOj9uKBgBZliFnvFNJpzJ1JVXLBxHdYFU=
-----END CERTIFICATE-----
Generated at Wed Jul 9 20:38:03 2025 by rpki-client