Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/b9aad819-313c-3590-a1f8-29719cfeb007.roa
File:                     b9aad819-313c-3590-a1f8-29719cfeb007.roa (raw, json)
Hash identifier:          kYk4yaDrrf0n/+9Oe7YdQUEO5o7XQT8I8IJofFgTrb4=
Subject key identifier:   CD:E6:4A:9C:E7:62:27:7A:DC:5D:11:49:A6:35:6A:5B:9A:26:F7:80
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584B1D9C1DD0E68782D7D294AAA0
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/b9aad819-313c-3590-a1f8-29719cfeb007.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     26383
IP address blocks:        2605:e440:28::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:1d:d0:e6:87:82:d7:d2:94:aa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=2ccc682d-bdab-4755-ac9c-52abadacab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:95:99:57:06:fd:c0:46:bd:ec:bf:f6:bf:83:
                    f1:b8:49:1b:f0:80:01:3f:b2:13:cd:2b:4f:b8:e3:
                    46:25:69:33:b7:6b:e9:dc:98:bc:fc:0b:b1:5e:3d:
                    52:ae:fa:61:97:e5:f3:74:ea:c8:66:a0:8f:03:92:
                    55:48:9e:55:d8:cd:65:3a:ea:a1:0a:ed:28:f0:08:
                    e7:6b:81:da:a1:b2:34:17:aa:79:20:b7:79:42:05:
                    68:3c:bb:eb:43:ba:07:a2:d6:36:69:b3:9d:7b:69:
                    31:dc:8f:ff:1e:ff:8a:8e:ac:3d:12:7e:42:72:b0:
                    8d:f7:d7:c0:7d:65:43:b8:a3:1c:2f:b8:7c:86:cc:
                    4a:dc:d6:5d:65:35:b7:35:49:d4:4f:ec:ed:52:7c:
                    62:2b:e8:95:d4:3e:8e:8f:79:d6:87:e9:53:10:d0:
                    69:60:a3:e8:aa:b2:b8:93:75:65:2d:c7:cb:fc:2f:
                    c7:a8:98:24:68:b8:81:d4:20:27:af:22:9b:56:2c:
                    d7:8c:17:ab:51:ba:4b:b1:7f:fe:f6:2e:c5:2f:31:
                    f5:7d:a1:b4:43:bb:a5:60:82:59:36:5d:ee:7a:8c:
                    58:c5:fe:3c:b5:72:20:cf:28:09:5a:58:f6:08:18:
                    65:c6:9b:da:63:f4:47:33:3c:33:82:e6:38:70:25:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E6:4A:9C:E7:62:27:7A:DC:5D:11:49:A6:35:6A:5B:9A:26:F7:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/b9aad819-313c-3590-a1f8-29719cfeb007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:28::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:cb:cc:fe:f1:c9:6f:4b:f2:3f:7b:95:6e:7d:8e:84:59:90:
         99:35:9b:0a:6a:7f:64:d4:bd:a9:bb:b5:50:61:01:cb:ab:36:
         14:fc:d9:3f:4e:d1:04:ed:0c:2f:ec:72:49:ad:7a:2b:7e:7f:
         d6:6e:2e:38:1b:4a:da:49:32:60:c1:e1:fc:c5:17:ab:9e:d9:
         4b:2f:86:52:25:47:12:84:d4:eb:d0:d1:1f:e1:48:43:1b:1c:
         8d:bb:42:94:d3:81:8f:32:ed:67:f8:45:ed:95:07:6a:27:c9:
         90:1c:ac:6a:a7:64:47:cd:5a:17:96:05:37:c0:75:4c:e1:6e:
         2a:38:ae:4c:84:8c:6c:bf:d1:4b:b8:b8:52:5d:09:4f:ef:00:
         0e:4b:2c:21:66:00:e5:06:93:b9:cb:eb:7a:db:af:4d:8f:aa:
         7c:54:36:3b:20:76:95:18:40:39:a3:a7:aa:ed:06:ae:0b:cb:
         3c:1e:f4:93:93:c9:24:a9:0e:04:70:a8:99:fe:1d:ea:b4:75:
         2b:0a:94:e8:43:46:4a:f7:5c:b7:dc:ff:66:5a:d3:62:a9:9a:
         8c:c4:c7:ed:cb:a8:f7:f8:9d:16:d9:7b:2e:f0:89:b6:8c:a1:
         44:89:19:39:f5:95:0c:94:76:b3:9a:27:36:39:19:f4:9d:6d:
         40:e5:be:88
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsdnB3Q5oeC19KUqqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4
ZjgxMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
MmNjYzY4MmQtYmRhYi00NzU1LWFjOWMtNTJhYmFkYWNhYjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJWZVwb9wEa97L/2v4PxuEkb8IABP7ITzStP
uONGJWkzt2vp3Ji8/AuxXj1Srvphl+XzdOrIZqCPA5JVSJ5V2M1lOuqhCu0o8Ajn
a4HaobI0F6p5ILd5QgVoPLvrQ7oHotY2abOde2kx3I//Hv+Kjqw9En5CcrCN99fA
fWVDuKMcL7h8hsxK3NZdZTW3NUnUT+ztUnxiK+iV1D6Oj3nWh+lTENBpYKPoqrK4
k3VlLcfL/C/HqJgkaLiB1CAnryKbVizXjBerUbpLsX/+9i7FLzH1faG0Q7ulYIJZ
Nl3ueoxYxf48tXIgzygJWlj2CBhlxpvaY/RHMzwzguY4cCXAbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM3mSpznYid63F0RSaY1aluaJveAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj
YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvYjlhYWQ4MTktMzEzYy0z
NTkwLWExZjgtMjk3MTljZmViMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh
ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5
OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy
ZDA4OThmODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXkQAAo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFjLzP7xyW9L8j97lW59joRZkJk1mwpqf2TUvam7tVBhAcurNhT8
2T9O0QTtDC/sckmteit+f9ZuLjgbStpJMmDB4fzFF6ue2UsvhlIlRxKE1OvQ0R/h
SEMbHI27QpTTgY8y7Wf4Re2VB2onyZAcrGqnZEfNWheWBTfAdUzhbio4rkyEjGy/
0Uu4uFJdCU/vAA5LLCFmAOUGk7nL63rbr02PqnxUNjsgdpUYQDmjp6rtBq4Lyzwe
9JOTySSpDgRwqJn+Heq0dSsKlOhDRkr3XLfc/2Za02KpmozEx+3LqPf4nRbZey7w
ibaMoUSJGTn1lQyUdrOaJzY5GfSdbUDlvog=
-----END CERTIFICATE-----
Generated at Wed Sep 17 00:22:23 2025 by rpki-client