Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/b79e1104-f404-36e6-ab93-bdeb89ca908f.roa
File:                     b79e1104-f404-36e6-ab93-bdeb89ca908f.roa (raw, json)
Hash identifier:          mlUrkjiohXlaHEoi/Rr1FC0eA/B/B/EfZQandwsGO98=
Subject key identifier:   95:8B:08:A5:6A:C5:DD:FA:73:99:1A:62:05:37:FB:DA:81:47:A0:C6
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F4328584B047C0A62B35764FD4ED7B600
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/b79e1104-f404-36e6-ab93-bdeb89ca908f.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     23428
IP address blocks:        2602:fb68:180::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:0a:62:b3:57:64:fd:4e:d7:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=b480f282-b2ff-4ea1-9aa7-f7150de16e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:e1:cd:fd:15:cb:9e:e0:3e:e2:9e:d6:9b:
                    bc:f6:d5:c2:6f:5e:a2:7c:30:8e:30:50:3e:27:21:
                    4c:19:93:7c:78:eb:d8:3d:ff:26:fa:93:94:4f:ba:
                    00:1b:16:b9:cf:28:6c:e1:88:81:e6:4f:dd:2f:0d:
                    e7:cf:b7:ec:2b:f5:e2:25:c0:1a:73:61:d2:b2:0e:
                    40:e9:1a:8f:85:0a:b1:b3:12:84:2f:9a:b1:09:19:
                    e2:d2:9b:ce:f9:62:7a:fb:df:ec:51:cd:5d:d2:01:
                    44:ac:02:44:34:85:71:4e:a1:1f:26:f7:c8:f1:dc:
                    e2:e2:cd:5a:82:96:bc:c7:77:b4:72:6b:6f:44:02:
                    72:1b:91:c7:af:8c:68:16:75:ef:63:5b:79:93:42:
                    c8:a8:32:79:93:4e:de:8c:29:4a:8b:f1:98:02:1f:
                    9d:d5:3d:f3:06:4f:3d:5a:29:93:10:af:8c:c6:c8:
                    69:d5:42:93:6c:21:cf:0b:16:31:c9:35:42:7c:e7:
                    e2:4e:19:f9:5a:2c:f3:56:c2:a7:94:fd:6b:d7:27:
                    e1:ad:ca:ce:60:b0:df:4b:3f:ea:3c:88:85:10:5a:
                    0a:a8:03:c3:29:c5:c6:94:2f:52:ce:82:f8:b2:c5:
                    78:9e:6b:40:63:b7:36:e4:28:88:92:37:9c:80:32:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8B:08:A5:6A:C5:DD:FA:73:99:1A:62:05:37:FB:DA:81:47:A0:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/b79e1104-f404-36e6-ab93-bdeb89ca908f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68:180::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e2:91:f4:36:a3:79:c0:e7:69:68:2e:f8:f5:2a:9e:e6:a6:
         f7:88:06:6e:bc:5a:23:c9:9a:71:a1:07:c8:c7:5c:a7:05:b1:
         27:33:a1:42:c4:bb:8a:37:8b:a3:9e:8e:3b:86:40:17:1d:dd:
         b7:c4:bd:72:95:eb:bc:91:49:f6:8a:8f:c7:5b:9e:10:79:5c:
         ba:df:8b:7f:2c:94:95:d9:ca:43:6a:12:32:81:b1:91:68:d5:
         20:87:c1:66:ef:f2:aa:44:0d:af:00:24:b4:b7:0c:cd:ad:06:
         c1:d1:9c:16:2d:c5:e6:f6:4b:13:cb:8f:83:40:69:86:44:2e:
         2d:92:b0:ad:6c:55:63:c6:5c:4e:96:d8:25:60:2b:ff:3e:7f:
         af:c9:01:7e:ff:c7:d7:ff:b1:7e:59:de:3d:4e:c8:8e:8a:bb:
         c8:7e:0a:4e:b4:63:2f:6f:5c:93:e4:6e:3e:78:f0:03:b6:3f:
         ea:06:e6:67:9d:6a:b4:dd:ca:c3:8f:89:9f:39:8a:17:e5:5f:
         76:e2:19:76:14:fa:64:0a:a5:27:3a:15:46:07:0d:c8:66:c9:
         14:b3:72:d0:36:6d:dc:68:be:50:26:a6:d1:0b:e6:05:c0:31:
         32:75:4b:25:b8:d4:8e:e0:2f:09:d7:9b:03:58:e9:eb:ab:9f:
         04:a4:f6:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsEfApis1dk/U7XtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl
NTRkMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk
YjQ4MGYyODItYjJmZi00ZWExLTlhYTctZjcxNTBkZTE2ZTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkebhzf0Vy57gPuKe1pu89tXCb16ifDCOMFA+
JyFMGZN8eOvYPf8m+pOUT7oAGxa5zyhs4YiB5k/dLw3nz7fsK/XiJcAac2HSsg5A
6RqPhQqxsxKEL5qxCRni0pvO+WJ6+9/sUc1d0gFErAJENIVxTqEfJvfI8dzi4s1a
gpa8x3e0cmtvRAJyG5HHr4xoFnXvY1t5k0LIqDJ5k07ejClKi/GYAh+d1T3zBk89
WimTEK+Mxshp1UKTbCHPCxYxyTVCfOfiThn5WizzVsKnlP1r1yfhrcrOYLDfSz/q
PIiFEFoKqAPDKcXGlC9SzoL4ssV4nmtAY7c25CiIkjecgDJ43wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJWLCKVqxd36c5kaYgU3+9qBR6DGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw
NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvYjc5ZTExMDQtZjQwNC0z
NmU2LWFiOTMtYmRlYjg5Y2E5MDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli
MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj
ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk
MjkxY2U1NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL7aAGA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF3ikfQ2o3nA52loLvj1Kp7mpveIBm68WiPJmnGhB8jHXKcFsScz
oULEu4o3i6OejjuGQBcd3bfEvXKV67yRSfaKj8dbnhB5XLrfi38slJXZykNqEjKB
sZFo1SCHwWbv8qpEDa8AJLS3DM2tBsHRnBYtxeb2SxPLj4NAaYZELi2SsK1sVWPG
XE6W2CVgK/8+f6/JAX7/x9f/sX5Z3j1OyI6Ku8h+Ck60Yy9vXJPkbj548AO2P+oG
5medarTdysOPiZ85ihflX3biGXYU+mQKpSc6FUYHDchmyRSzctA2bdxovlAmptEL
5gXAMTJ1SyW41I7gLwnXmwNY6eurnwSk9mI=
-----END CERTIFICATE-----
Generated at Tue Sep 16 04:26:45 2025 by rpki-client