Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/f33826be-7ee5-3be9-b4f2-8c430c3ba69a.roa
File:                     f33826be-7ee5-3be9-b4f2-8c430c3ba69a.roa (raw, json)
Hash identifier:          2HNkPgY6Jo3qUAnO8igLnJYmjgc+qKjn77j14xGGrnM=
Subject key identifier:   88:DA:77:55:07:BF:3F:54:12:7F:98:C6:85:B5:51:E1:B8:DC:EA:07
Certificate issuer:       /CN=fdcd44d1-5710-43a1-847c-fc86cb51a82e
Certificate serial:       010D0C9F4328584B2343BD5CEB054E6EC33F3CE0
Authority key identifier: FD:8A:89:B2:E7:14:FB:DE:FB:09:FF:8B:B4:FE:24:BF:EF:90:F2:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/f33826be-7ee5-3be9-b4f2-8c430c3ba69a.roa
Signing time:             Tue 09 Sep 2025 13:37:29 +0000
ROA not before:           Tue 09 Sep 2025 13:37:29 +0000
ROA not after:            Mon 08 Dec 2025 14:37:29 +0000
asID:                     13335
IP address blocks:        2602:f660:80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:43:bd:5c:eb:05:4e:6e:c3:3f:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcd44d1-5710-43a1-847c-fc86cb51a82e
        Validity
            Not Before: Sep  9 13:37:29 2025 GMT
            Not After : Dec  8 14:37:29 2025 GMT
        Subject: CN=51c93558-74a0-4ac6-a9db-a1252ff61dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:45:e7:56:31:52:a5:19:5c:98:68:7e:4b:
                    11:fd:f6:97:21:05:dc:bf:f7:15:fe:d6:06:e4:97:
                    90:f0:54:cc:44:27:44:fd:d7:bd:78:92:d5:1a:9d:
                    e0:b4:67:af:c0:1d:54:f0:67:cc:71:ef:3b:ed:14:
                    64:7c:99:1d:73:83:86:34:30:a0:ee:b2:23:d4:3c:
                    40:1e:fc:21:7c:e8:33:16:f8:34:ee:84:00:09:f5:
                    18:02:fe:0c:7a:ec:1b:10:71:87:a7:f9:50:76:ef:
                    76:70:d4:0c:f1:f5:33:22:22:2c:db:7a:0b:40:d9:
                    aa:23:22:5a:fa:9c:4a:3e:8b:ca:bc:e2:77:38:07:
                    c3:e8:1b:72:4a:34:69:41:f8:b2:c1:ca:b7:17:18:
                    0e:2b:e1:77:c5:97:de:5c:5f:c3:21:ab:af:e9:ed:
                    ce:0a:d5:51:a9:25:ea:4e:14:65:64:22:39:10:c3:
                    1c:b5:6d:08:c7:73:da:a4:ac:15:cb:df:13:5e:60:
                    69:96:66:cb:d9:f6:99:df:c7:f2:c2:3a:2b:47:70:
                    ac:73:c0:30:18:2a:f7:93:63:47:3a:76:25:de:d0:
                    48:a7:51:0b:dd:a0:95:ab:93:84:13:18:ba:a9:d6:
                    8c:d6:b2:29:2b:35:b0:27:7d:07:6d:15:75:42:b3:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DA:77:55:07:BF:3F:54:12:7F:98:C6:85:B5:51:E1:B8:DC:EA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/f33826be-7ee5-3be9-b4f2-8c430c3ba69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e/fdcd44d1-5710-43a1-847c-fc86cb51a82e.crl

            X509v3 Authority Key Identifier:
                keyid:FD:8A:89:B2:E7:14:FB:DE:FB:09:FF:8B:B4:FE:24:BF:EF:90:F2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdcd44d1-5710-43a1-847c-fc86cb51a82e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f660:80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:69:bf:09:56:cd:fc:1e:03:e5:7c:f4:1a:f1:ec:e4:55:73:
         e6:d9:9b:02:b8:66:da:aa:d6:71:df:bf:d3:b8:7e:b6:ba:2c:
         62:d9:16:60:1b:2d:ff:28:55:17:39:bb:3c:03:6a:b4:88:12:
         9d:4b:70:eb:5b:93:2e:96:cc:fc:3c:48:0a:0b:25:10:29:4b:
         da:66:ae:8c:53:98:6d:9f:40:17:73:ae:14:db:dc:6a:ee:98:
         37:ef:e4:b8:3b:a8:c4:bd:77:65:84:a1:45:3c:32:fe:b9:69:
         68:49:ac:6f:5e:3e:50:31:b7:1c:92:f5:0a:e4:9a:94:1d:b8:
         35:c1:5b:4d:74:49:08:74:91:a0:21:43:56:f0:07:b9:29:98:
         e3:e6:dd:60:e2:b5:d1:bb:61:c1:b6:d7:3c:10:3b:f4:a5:9b:
         cc:ea:32:6b:9e:12:5f:53:5a:74:76:39:60:55:97:c7:46:2f:
         03:14:c7:a8:c5:3d:a0:f8:15:6b:b1:95:d1:64:40:f8:bf:c3:
         b0:28:30:0f:23:c5:a4:28:12:77:93:9f:07:5c:9f:57:6c:45:
         fa:7f:fe:22:eb:37:2b:58:23:6d:ca:e0:a1:29:bd:89:c1:14:
         db:39:0b:5b:c5:69:19:ae:d1:52:59:25:f8:0a:50:37:d1:0c:
         df:df:d4:52
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsjQ71c6wVObsM/POAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRjZDQ0ZDEtNTcxMC00M2ExLTg0N2MtZmM4NmNiNTFh
ODJlMB4XDTI1MDkwOTEzMzcyOVoXDTI1MTIwODE0MzcyOVowLzEtMCsGA1UEAxMk
NTFjOTM1NTgtNzRhMC00YWM2LWE5ZGItYTEyNTJmZjYxZGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32JF51YxUqUZXJhofksR/faXIQXcv/cV/tYG
5JeQ8FTMRCdE/de9eJLVGp3gtGevwB1U8GfMce877RRkfJkdc4OGNDCg7rIj1DxA
HvwhfOgzFvg07oQACfUYAv4MeuwbEHGHp/lQdu92cNQM8fUzIiIs23oLQNmqIyJa
+pxKPovKvOJ3OAfD6BtySjRpQfiywcq3FxgOK+F3xZfeXF/DIauv6e3OCtVRqSXq
ThRlZCI5EMMctW0Ix3PapKwVy98TXmBplmbL2faZ38fywjorR3Csc8AwGCr3k2NH
OnYl3tBIp1EL3aCVq5OEExi6qdaM1rIpKzWwJ30HbRV1QrMC0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIjad1UHvz9UEn+YxoW1UeG43OoHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGNk
NDRkMS01NzEwLTQzYTEtODQ3Yy1mYzg2Y2I1MWE4MmUvZjMzODI2YmUtN2VlNS0z
YmU5LWI0ZjItOGM0MzBjM2JhNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRjZDQ0ZDEtNTcxMC00M2ExLTg0
N2MtZmM4NmNiNTFhODJlL2ZkY2Q0NGQxLTU3MTAtNDNhMS04NDdjLWZjODZjYjUx
YTgyZS5jcmwwHwYDVR0jBBgwFoAU/YqJsucU+977Cf+LtP4kv++Q8lEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGNkNDRkMS01NzEwLTQzYTEtODQ3Yy1mYzg2
Y2I1MWE4MmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgL2YACA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADlpvwlWzfweA+V89Brx7ORVc+bZmwK4Ztqq1nHfv9O4fra6LGLZ
FmAbLf8oVRc5uzwDarSIEp1LcOtbky6WzPw8SAoLJRApS9pmroxTmG2fQBdzrhTb
3GrumDfv5Lg7qMS9d2WEoUU8Mv65aWhJrG9ePlAxtxyS9QrkmpQduDXBW010SQh0
kaAhQ1bwB7kpmOPm3WDitdG7YcG21zwQO/Slm8zqMmueEl9TWnR2OWBVl8dGLwMU
x6jFPaD4FWuxldFkQPi/w7AoMA8jxaQoEneTnwdcn1dsRfp//iLrNytYI23K4KEp
vYnBFNs5C1vFaRmu0VJZJfgKUDfRDN/f1FI=
-----END CERTIFICATE-----
Generated at Thu Sep 18 02:23:59 2025 by rpki-client