Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c967a983-4816-3b7c-b4d6-367640f11653.roa
File:                     c967a983-4816-3b7c-b4d6-367640f11653.roa (raw, json)
Hash identifier:          9cmt3IAYS4rIvRhInr6DMRqCjhduBHJI0GipI0CZP/s=
Subject key identifier:   AD:E0:78:63:58:83:29:A7:1D:0C:92:C3:A0:0C:89:7D:AD:EB:D9:21
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584B0746AF2DCA62534453312820
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c967a983-4816-3b7c-b4d6-367640f11653.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        2605:84c0:50::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:af:2d:ca:62:53:44:53:31:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=d2dc3306-b95f-4d3b-9255-508411d0a638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:54:f1:7a:8d:71:59:ae:65:92:92:8a:82:eb:
                    f4:77:72:70:d2:15:06:8e:1c:5b:b1:26:0d:5c:5c:
                    13:8b:ac:82:4a:72:f9:c0:4f:12:fe:ae:05:b7:90:
                    7f:4b:11:35:46:30:c2:87:b8:b4:14:b7:60:08:76:
                    a3:15:49:62:df:d2:c1:b6:00:43:9a:53:0e:83:8a:
                    76:e6:02:1b:6f:37:d1:39:10:26:54:3d:36:1d:3b:
                    bc:60:64:20:81:01:45:a6:86:da:69:55:aa:b4:17:
                    4f:21:c6:8d:5d:63:61:10:61:88:46:42:0e:01:6a:
                    6e:0e:fa:28:b8:e1:40:a4:db:8d:7c:7c:38:2d:97:
                    c5:e9:ce:cf:63:e8:a4:09:8c:d4:91:99:c8:5a:69:
                    b3:9b:62:e4:2a:f9:fd:1b:cc:f4:b3:87:fd:a4:4a:
                    c8:5e:10:60:60:52:11:63:3b:4a:ac:6b:ef:1f:e2:
                    f5:45:f2:95:22:6d:7c:1c:b8:3f:0b:24:87:c8:a3:
                    bd:eb:6b:6e:29:55:71:6c:4e:62:e2:ce:18:b2:82:
                    b6:f7:4a:46:a2:22:f0:ba:97:ae:f6:d6:17:c5:2b:
                    1a:24:59:79:36:27:96:d8:a6:87:ba:fb:06:64:5b:
                    f6:44:9f:e0:89:f7:81:0a:0c:84:9a:18:ce:90:55:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E0:78:63:58:83:29:A7:1D:0C:92:C3:A0:0C:89:7D:AD:EB:D9:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c967a983-4816-3b7c-b4d6-367640f11653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:50::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a7:55:9b:04:e9:d9:93:c2:a6:34:bc:b9:eb:95:67:a1:52:
         ca:1e:70:35:7d:05:18:42:3a:a7:98:70:e4:42:44:a5:ae:65:
         79:6d:05:c7:7d:b9:f0:31:56:8a:96:e0:db:ee:56:8d:84:87:
         bd:99:a5:a1:98:72:20:85:a1:f3:ac:81:d0:5b:1c:94:cf:72:
         b9:c3:84:09:5b:c7:72:d2:e8:1d:88:57:c8:03:c2:9c:57:b8:
         ec:d1:8b:74:6a:ec:59:66:cf:8a:84:e6:86:4f:45:d0:67:5b:
         1f:16:f3:d9:d3:4b:bf:b5:75:e3:cd:c0:ca:4f:43:ad:1e:3d:
         42:b0:0a:ce:86:33:86:2e:8e:1e:06:cf:8c:17:9f:14:82:c3:
         29:51:75:ce:79:6a:07:70:7f:b0:69:0c:3a:81:ab:dc:f8:c0:
         22:44:94:a8:c0:dd:4c:4b:8f:46:f6:8e:ea:84:43:77:c0:5a:
         50:81:c1:76:bd:8e:16:cb:9c:41:10:e2:9e:7f:85:1b:9c:13:
         c2:76:23:ea:c4:7b:b5:c0:e1:3f:7c:32:d1:9a:51:f4:0e:dd:
         f8:7c:f7:0b:43:83:e5:2f:4f:51:af:59:df:ee:e5:54:2a:a3:
         09:b1:08:1f:59:00:61:f6:1b:24:a7:d9:53:ad:d0:74:e6:b9:
         c5:7f:e8:0b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsHRq8tymJTRFMxKCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3
MDBjMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
ZDJkYzMzMDYtYjk1Zi00ZDNiLTkyNTUtNTA4NDExZDBhNjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilTxeo1xWa5lkpKKguv0d3Jw0hUGjhxbsSYN
XFwTi6yCSnL5wE8S/q4Ft5B/SxE1RjDCh7i0FLdgCHajFUli39LBtgBDmlMOg4p2
5gIbbzfRORAmVD02HTu8YGQggQFFpobaaVWqtBdPIcaNXWNhEGGIRkIOAWpuDvoo
uOFApNuNfHw4LZfF6c7PY+ikCYzUkZnIWmmzm2LkKvn9G8z0s4f9pErIXhBgYFIR
YztKrGvvH+L1RfKVIm18HLg/CySHyKO962tuKVVxbE5i4s4YsoK290pGoiLwupeu
9tYXxSsaJFl5NieW2KaHuvsGZFv2RJ/gifeBCgyEmhjOkFVvUwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK3geGNYgymnHQySw6AMiX2t69khMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3
MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvYzk2N2E5ODMtNDgxNi0z
YjdjLWI0ZDYtMzY3NjQwZjExNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0
MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2
NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy
N2E5NjcwMGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWEwABQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFWnVZsE6dmTwqY0vLnrlWehUsoecDV9BRhCOqeYcORCRKWuZXlt
Bcd9ufAxVoqW4NvuVo2Eh72ZpaGYciCFofOsgdBbHJTPcrnDhAlbx3LS6B2IV8gD
wpxXuOzRi3Rq7Flmz4qE5oZPRdBnWx8W89nTS7+1dePNwMpPQ60ePUKwCs6GM4Yu
jh4Gz4wXnxSCwylRdc55agdwf7BpDDqBq9z4wCJElKjA3UxLj0b2juqEQ3fAWlCB
wXa9jhbLnEEQ4p5/hRucE8J2I+rEe7XA4T98MtGaUfQO3fh89wtDg+UvT1GvWd/u
5VQqowmxCB9ZAGH2GySn2VOt0HTmucV/6As=
-----END CERTIFICATE-----
Generated at Sun Aug 31 22:06:50 2025 by rpki-client