Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/1fcdad26-1561-35db-94b0-e3732674b9bc.roa
File:                     1fcdad26-1561-35db-94b0-e3732674b9bc.roa (raw, json)
Hash identifier:          ZlfQ4fXnIxi2GfU8Kj9afKB7zv9wtLLDX9wgNWd5RYk=
Subject key identifier:   20:46:3E:E8:2D:95:CE:71:4E:5F:0A:BA:CC:03:C4:D9:A4:19:C0:28
Certificate issuer:       /CN=8785615b-4ba8-49c9-a63b-755d5560474a
Certificate serial:       010D0C9F4328584B1806C0A2AA712C7E1AE6D800
Authority key identifier: 9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/1fcdad26-1561-35db-94b0-e3732674b9bc.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     20473
IP address blocks:        2602:f6ac::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c0:a2:aa:71:2c:7e:1a:e6:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8785615b-4ba8-49c9-a63b-755d5560474a
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=e4881bee-81ff-43d2-9c53-ee12398ef84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:b9:fc:60:1c:72:fc:ea:cc:ca:e5:d7:bc:
                    12:f5:c3:75:28:11:c0:27:ec:8c:cb:77:d2:49:ab:
                    0a:05:eb:0b:2d:be:f2:bb:c2:ac:46:d8:a8:65:29:
                    84:99:fc:17:50:f9:15:a7:67:7a:07:64:12:15:4d:
                    cf:f4:b7:23:2b:db:55:c8:aa:91:56:91:0d:fd:75:
                    21:0c:c6:3b:c3:cf:0b:53:8b:00:38:55:8b:d1:67:
                    08:8f:7d:d2:5a:7b:74:23:2b:a7:6e:f2:38:c1:e9:
                    6b:84:de:60:a5:b4:87:97:ac:7f:6f:78:de:42:dd:
                    cc:a0:3e:fb:fd:d9:55:b9:47:8c:3d:3e:06:32:c6:
                    09:8d:65:8d:3d:27:89:d8:0c:ee:c3:ed:0b:9a:29:
                    0c:64:54:d2:56:b5:ea:2b:5c:89:7f:dd:23:d1:1e:
                    9a:42:c0:cf:48:69:b8:94:74:08:22:f7:a1:6a:e3:
                    b3:76:4a:69:a5:00:a3:16:db:b9:5a:64:c0:55:40:
                    00:b7:38:e1:a3:29:85:8a:bf:1f:dd:34:8f:6e:b9:
                    d5:91:ac:4b:bc:b2:0d:f6:82:9c:d3:dc:36:79:f6:
                    57:50:c0:4a:99:d8:8b:24:d8:c8:dc:55:6b:a5:99:
                    cb:11:65:3b:83:d5:52:5c:d0:7a:20:0d:1c:4c:a6:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:46:3E:E8:2D:95:CE:71:4E:5F:0A:BA:CC:03:C4:D9:A4:19:C0:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/1fcdad26-1561-35db-94b0-e3732674b9bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.crl

            X509v3 Authority Key Identifier:
                keyid:9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6ac::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a1:fc:ef:64:18:85:4a:dd:6d:be:59:e0:8b:81:50:06:29:
         b1:6d:fa:2c:30:40:29:0f:88:74:f3:af:00:a4:3b:82:35:08:
         c0:89:a6:93:2c:b6:12:cd:65:ab:3a:0a:c2:c2:b3:e7:b1:44:
         9b:d9:73:4e:e7:89:31:a0:ea:fb:ed:f8:f7:70:16:1c:58:91:
         6d:9e:1e:42:3c:6a:25:93:e4:03:0b:a6:5f:74:2f:aa:92:04:
         b6:0b:12:4b:05:ff:64:5b:95:f0:cb:26:61:d1:fd:a3:f5:e6:
         fa:5a:73:86:0a:ad:9a:ec:33:21:cd:ae:e1:f2:06:58:a6:7d:
         e1:fe:8b:e2:83:e3:4f:21:48:b0:61:f6:6c:e5:c5:d2:9a:69:
         54:68:0d:dd:73:07:f7:9c:30:34:79:06:47:d0:a8:3e:07:8d:
         d2:8e:a3:3f:28:b4:2a:f1:f7:d9:13:1c:3f:ca:94:5d:f8:bb:
         d2:f2:af:1d:5b:ff:2c:0f:71:07:9c:23:92:68:78:5d:56:1b:
         40:cb:0d:d3:58:0d:c4:2d:15:b4:12:c7:3c:0a:54:24:9f:79:
         33:a2:81:d4:7a:b9:7a:fd:21:23:ed:e9:95:9f:72:92:82:65:
         a0:ea:62:48:7d:cd:a5:9a:98:51:11:03:58:f6:89:fc:02:3d:
         49:dc:04:fc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsYBsCiqnEsfhrm2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc4NTYxNWItNGJhOC00OWM5LWE2M2ItNzU1ZDU1NjA0
NzRhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTQ4ODFiZWUtODFmZi00M2QyLTljNTMtZWUxMjM5OGVmODRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWu5/GAccvzqzMrl17wS9cN1KBHAJ+yMy3fS
SasKBesLLb7yu8KsRtioZSmEmfwXUPkVp2d6B2QSFU3P9LcjK9tVyKqRVpEN/XUh
DMY7w88LU4sAOFWL0WcIj33SWnt0IyunbvI4welrhN5gpbSHl6x/b3jeQt3MoD77
/dlVuUeMPT4GMsYJjWWNPSeJ2Azuw+0LmikMZFTSVrXqK1yJf90j0R6aQsDPSGm4
lHQIIvehauOzdkpppQCjFtu5WmTAVUAAtzjhoymFir8f3TSPbrnVkaxLvLIN9oKc
09w2efZXUMBKmdiLJNjI3FVrpZnLEWU7g9VSXNB6IA0cTKbQ0QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCBGPugtlc5xTl8KuswDxNmkGcAoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84Nzg1
NjE1Yi00YmE4LTQ5YzktYTYzYi03NTVkNTU2MDQ3NGEvMWZjZGFkMjYtMTU2MS0z
NWRiLTk0YjAtZTM3MzI2NzRiOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODc4NTYxNWItNGJhOC00OWM5LWE2
M2ItNzU1ZDU1NjA0NzRhLzg3ODU2MTViLTRiYTgtNDljOS1hNjNiLTc1NWQ1NTYw
NDc0YS5jcmwwHwYDVR0jBBgwFoAUmg99x0tzXdaagfvPbADI0sQo2VYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84Nzg1NjE1Yi00YmE4LTQ5YzktYTYzYi03NTVk
NTU2MDQ3NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL2rAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAaH872QYhUrdbb5Z4IuBUAYpsW36LDBAKQ+IdPOvAKQ7gjUIwImm
kyy2Es1lqzoKwsKz57FEm9lzTueJMaDq++3493AWHFiRbZ4eQjxqJZPkAwumX3Qv
qpIEtgsSSwX/ZFuV8MsmYdH9o/Xm+lpzhgqtmuwzIc2u4fIGWKZ94f6L4oPjTyFI
sGH2bOXF0pppVGgN3XMH95wwNHkGR9CoPgeN0o6jPyi0KvH32RMcP8qUXfi70vKv
HVv/LA9xB5wjkmh4XVYbQMsN01gNxC0VtBLHPApUJJ95M6KB1Hq5ev0hI+3plZ9y
koJloOpiSH3NpZqYUREDWPaJ/AI9SdwE/A==
-----END CERTIFICATE-----
Generated at Mon Oct 13 22:12:30 2025 by rpki-client