Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/c13bb1be-e0a0-3b1f-ab6b-cda7e7772694.roa
File:                     c13bb1be-e0a0-3b1f-ab6b-cda7e7772694.roa (raw, json)
Hash identifier:          pSaqrcl+J3sYsmoDTaZsWpPaKeJTwYPp7JAe+9ORvck=
Subject key identifier:   64:6C:33:0E:49:E9:AA:A1:21:EF:F6:EE:E9:DE:1A:3A:F1:D5:2B:3F
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584B1C36D253F9F7FADF4CD69640
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/c13bb1be-e0a0-3b1f-ab6b-cda7e7772694.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     26383
IP address blocks:        2605:e440:26::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d2:53:f9:f7:fa:df:4c:d6:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=d92bff69-eb36-4df1-8f87-c18e2d7705de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:d6:60:58:36:19:01:e6:22:8b:82:f0:18:
                    5d:a3:23:19:58:e3:f1:a6:67:a2:61:92:a2:19:b4:
                    34:fb:dd:b2:c9:cb:de:ab:2d:73:16:a3:78:ec:d5:
                    c6:23:78:97:2d:4d:10:c1:18:01:88:86:74:28:99:
                    f6:29:44:c2:12:6b:57:76:1e:55:c3:15:b4:47:0e:
                    80:76:40:45:83:e6:23:e7:ad:b9:9b:78:94:7c:36:
                    cc:8a:da:8b:31:97:e2:25:96:66:7f:6a:45:b6:7f:
                    ae:0c:f3:58:fe:b4:90:28:61:19:b9:d6:a0:03:eb:
                    0b:65:e7:5d:49:75:09:ad:ec:2e:a7:d9:37:db:12:
                    ca:ff:2e:80:16:07:fe:4d:79:c8:5e:12:a3:16:6d:
                    17:c4:c2:bb:60:a1:c1:a5:39:e3:6d:fa:e9:2d:c4:
                    a8:2c:c4:61:bc:ff:65:3b:2a:01:f3:a1:18:f6:85:
                    0d:90:42:dc:bc:44:cf:f8:a9:4c:97:50:f6:8a:09:
                    90:4c:2c:25:ca:88:e5:0c:d6:51:e9:e9:65:c9:7e:
                    5e:64:54:28:03:44:0e:fe:6f:51:c5:4d:d0:65:3a:
                    1e:56:19:73:d0:03:66:04:27:70:0d:c7:ea:de:76:
                    40:10:b4:96:fa:e3:83:e4:ad:ca:93:07:df:bc:82:
                    73:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6C:33:0E:49:E9:AA:A1:21:EF:F6:EE:E9:DE:1A:3A:F1:D5:2B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/c13bb1be-e0a0-3b1f-ab6b-cda7e7772694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:44:5f:31:68:13:0d:8a:a9:4b:52:4f:59:90:8e:9c:df:24:
         5d:7d:ba:e7:b1:2e:5c:1f:67:4d:7f:5f:6b:56:14:d2:22:49:
         21:94:15:24:42:e7:89:5f:64:a2:4f:aa:bd:fd:d0:d0:d7:eb:
         2a:7c:71:9d:95:6e:ff:aa:76:15:74:e3:57:2b:d9:68:fb:8e:
         28:ff:4f:f2:8a:3e:d0:27:f4:56:20:b9:5e:84:f8:ea:1f:ac:
         0d:bf:a1:83:25:d9:f0:02:36:61:c0:2e:4a:b5:e4:69:ba:70:
         cf:64:8c:96:17:a9:82:27:9f:ee:c5:47:ad:14:90:a0:d5:f3:
         bd:58:db:ee:f1:fe:72:76:fb:b3:db:d3:62:78:b6:0a:57:1d:
         bd:4e:e2:26:6c:be:91:5c:bc:ca:54:42:d6:c2:78:46:2c:a9:
         d2:bc:53:95:46:01:76:be:47:3a:c9:c5:65:fe:85:bc:29:cb:
         24:9f:d8:f0:ef:8b:2a:bf:01:e2:7a:ce:a7:83:35:2e:bf:65:
         5a:87:98:c0:2e:d2:4c:60:74:9c:51:14:47:4b:ed:b9:cd:72:
         be:b6:b9:6a:b3:05:af:79:35:25:42:8a:cb:c4:20:c2:60:52:
         c2:de:58:c7:45:c7:7c:d3:83:19:51:9b:a1:31:4d:50:de:00:
         37:fa:fd:85
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNtJT+ff630zWlkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4
ZjgxMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZDkyYmZmNjktZWIzNi00ZGYxLThmODctYzE4ZTJkNzcwNWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUzWYFg2GQHmIouC8BhdoyMZWOPxpmeiYZKi
GbQ0+92yycveqy1zFqN47NXGI3iXLU0QwRgBiIZ0KJn2KUTCEmtXdh5VwxW0Rw6A
dkBFg+Yj5625m3iUfDbMitqLMZfiJZZmf2pFtn+uDPNY/rSQKGEZudagA+sLZedd
SXUJrewup9k32xLK/y6AFgf+TXnIXhKjFm0XxMK7YKHBpTnjbfrpLcSoLMRhvP9l
OyoB86EY9oUNkELcvETP+KlMl1D2igmQTCwlyojlDNZR6ellyX5eZFQoA0QO/m9R
xU3QZToeVhlz0ANmBCdwDcfq3nZAELSW+uOD5K3KkwffvIJz1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGRsMw5J6aqhIe/27uneGjrx1Ss/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj
YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvYzEzYmIxYmUtZTBhMC0z
YjFmLWFiNmItY2RhN2U3NzcyNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh
ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5
OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy
ZDA4OThmODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXkQAAm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAENEXzFoEw2KqUtST1mQjpzfJF19uuexLlwfZ01/X2tWFNIiSSGU
FSRC54lfZKJPqr390NDX6yp8cZ2Vbv+qdhV041cr2Wj7jij/T/KKPtAn9FYguV6E
+OofrA2/oYMl2fACNmHALkq15Gm6cM9kjJYXqYInn+7FR60UkKDV871Y2+7x/nJ2
+7Pb02J4tgpXHb1O4iZsvpFcvMpUQtbCeEYsqdK8U5VGAXa+RzrJxWX+hbwpyySf
2PDviyq/AeJ6zqeDNS6/ZVqHmMAu0kxgdJxRFEdL7bnNcr62uWqzBa95NSVCisvE
IMJgUsLeWMdFx3zTgxlRm6ExTVDeADf6/YU=
-----END CERTIFICATE-----
Generated at Wed Sep 17 00:19:31 2025 by rpki-client