Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/7a1afb00-3b48-3239-b40b-55c2034d9a94.roa
File:                     7a1afb00-3b48-3239-b40b-55c2034d9a94.roa (raw, json)
Hash identifier:          2mHUxhTwnmasa1vL5BYJUq42FQNz2KoLLEKj1WXbK1k=
Subject key identifier:   0A:FE:A8:80:14:2E:0F:1E:52:27:0F:55:47:78:DC:CC:A7:36:D6:6D
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584B047C1B2E1C6F41F0ADF34D00
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/7a1afb00-3b48-3239-b40b-55c2034d9a94.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2607:f380:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:1b:2e:1c:6f:41:f0:ad:f3:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=a982d691-373a-4f30-87f5-18e46374e412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:3a:8d:82:71:a8:4e:1a:3c:3b:56:59:08:
                    0b:7a:4d:d5:55:c9:52:05:48:4e:bb:27:7a:a5:35:
                    d4:6e:a8:9d:bf:3e:51:e4:b5:88:c4:69:c5:09:fe:
                    20:0a:ee:ed:4b:75:d4:81:03:f4:26:ba:5b:33:e8:
                    5e:a8:d2:93:9c:cf:3d:70:d6:69:87:12:26:e2:c6:
                    11:27:50:d2:0f:b3:88:34:27:26:1f:ea:df:89:17:
                    13:79:20:b0:4b:57:a8:12:9b:f4:a5:f7:75:a3:35:
                    b8:2a:58:14:c1:3c:49:f3:65:d1:d5:b0:fd:85:4f:
                    08:65:ab:6e:7a:a3:fc:88:84:73:35:8d:07:48:0c:
                    e9:7b:71:a8:86:c5:5b:a8:96:b1:b6:62:5c:8c:66:
                    de:d2:90:e9:a1:bd:9b:3c:ff:28:8d:5d:19:07:d2:
                    f1:e6:f1:1f:b2:98:8c:e4:9d:d6:ec:6b:d5:f9:47:
                    84:04:84:e1:dc:39:24:e4:5c:f0:7b:00:c1:f5:57:
                    dd:1e:e3:7e:0f:e9:35:97:29:80:be:fc:d9:88:fc:
                    7a:fb:b8:83:16:d6:8d:ad:6c:d6:1a:0f:7b:18:e0:
                    ea:44:d5:72:2c:96:70:65:3f:4f:68:ef:3a:9b:90:
                    a6:1b:57:00:ee:54:9e:3e:5e:35:cc:ab:76:26:0e:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FE:A8:80:14:2E:0F:1E:52:27:0F:55:47:78:DC:CC:A7:36:D6:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/7a1afb00-3b48-3239-b40b-55c2034d9a94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f380:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:40:f2:ea:49:a4:b0:0e:65:4b:f8:2e:93:90:21:2a:ff:92:
         14:cc:c7:e6:3a:c3:87:d5:4a:95:fa:b7:9c:6a:81:75:ab:b2:
         78:87:c3:47:c4:39:c4:bb:0b:05:a5:69:0e:d1:7e:d7:3e:68:
         d8:20:d8:29:b0:63:76:a5:64:22:6b:aa:01:68:6b:5e:60:48:
         0a:29:d9:45:84:53:b0:17:16:9e:98:24:c4:5f:40:8d:25:75:
         77:cb:6e:2e:0d:fd:c6:58:ac:02:e0:fb:16:1c:70:91:88:ef:
         08:72:fd:8d:c3:5b:91:c2:3a:39:6a:ba:26:bd:17:a0:7e:d7:
         29:8a:c2:c2:6e:c3:38:6f:2b:19:ef:f8:54:5f:e0:e7:a4:de:
         68:af:61:62:3f:45:8e:61:ad:a3:cd:61:ce:63:76:d7:ae:cf:
         cd:33:bc:05:0d:59:f1:a1:0c:9d:06:a7:3a:65:c7:bf:c6:c5:
         46:a1:8f:7a:e0:29:34:fc:b9:98:72:50:2d:45:d2:6a:d3:71:
         0a:ce:32:90:83:d5:85:f5:e9:2b:1d:c4:8e:89:ca:ca:3b:cc:
         c0:a4:83:47:35:30:69:59:2f:55:11:5b:67:7c:67:8b:db:00:
         41:a9:fd:fd:f0:c6:a9:41:c0:ab:52:16:91:ef:c5:b6:cf:3d:
         50:eb:6d:e3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsEfBsuHG9B8K3zTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
YTk4MmQ2OTEtMzczYS00ZjMwLTg3ZjUtMThlNDYzNzRlNDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLQ6jYJxqE4aPDtWWQgLek3VVclSBUhOuyd6
pTXUbqidvz5R5LWIxGnFCf4gCu7tS3XUgQP0JrpbM+heqNKTnM89cNZphxIm4sYR
J1DSD7OINCcmH+rfiRcTeSCwS1eoEpv0pfd1ozW4KlgUwTxJ82XR1bD9hU8IZatu
eqP8iIRzNY0HSAzpe3GohsVbqJaxtmJcjGbe0pDpob2bPP8ojV0ZB9Lx5vEfspiM
5J3W7GvV+UeEBITh3Dkk5FzwewDB9VfdHuN+D+k1lymAvvzZiPx6+7iDFtaNrWzW
Gg97GODqRNVyLJZwZT9PaO86m5CmG1cA7lSePl41zKt2Jg62SQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAr+qIAULg8eUicPVUd43MynNtZtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvN2ExYWZiMDAtM2I0OC0z
MjM5LWI0MGItNTVjMjAzNGQ5YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfzgAEB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKNA8upJpLAOZUv4LpOQISr/khTMx+Y6w4fVSpX6t5xqgXWrsniH
w0fEOcS7CwWlaQ7Rftc+aNgg2CmwY3alZCJrqgFoa15gSAop2UWEU7AXFp6YJMRf
QI0ldXfLbi4N/cZYrALg+xYccJGI7why/Y3DW5HCOjlquia9F6B+1ymKwsJuwzhv
Kxnv+FRf4Oek3mivYWI/RY5hraPNYc5jdteuz80zvAUNWfGhDJ0Gpzplx7/GxUah
j3rgKTT8uZhyUC1F0mrTcQrOMpCD1YX16SsdxI6Jyso7zMCkg0c1MGlZL1URW2d8
Z4vbAEGp/f3wxqlBwKtSFpHvxbbPPVDrbeM=
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:17:58 2025 by rpki-client