Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa
File:                     bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa (raw, json)
Hash identifier:          46oj5LEEIWiSmA9Wvlc3tbrkXtZXAPFUlYFnJFwA3jU=
Subject key identifier:   E6:5D:F3:5A:1B:08:15:F2:C4:18:16:BD:84:3E:BF:2E:D6:25:38:A6
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F4328584B1AD173DA85DC50A5A3A167A0
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     50842
IP address blocks:        2602:fb68:80::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:73:da:85:dc:50:a5:a3:a1:67:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=6ad106ee-1658-4c4d-ac69-74b792ab9a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f4:e7:08:78:43:90:8c:17:ec:5d:25:36:cf:
                    a0:2a:66:05:6d:47:73:d8:71:35:58:3f:15:9d:e6:
                    cb:82:83:68:99:ea:ee:37:dc:d0:06:58:dd:ad:59:
                    bf:10:a0:c7:34:70:ec:d5:c3:f5:62:92:18:c5:60:
                    01:4f:67:22:b5:4b:31:38:3c:c9:7b:ae:bf:28:77:
                    42:b8:61:3e:e0:50:e3:6e:8a:d8:1a:94:ed:b5:50:
                    6c:b4:23:9e:d7:50:b6:c9:43:e4:a6:5e:78:89:2e:
                    3b:15:96:6e:ad:4f:ef:80:3b:df:25:cf:08:4a:f8:
                    e1:2b:5c:80:90:6b:8d:51:e6:60:73:e3:47:ca:9a:
                    74:ed:da:92:79:4c:a0:e4:2f:3b:19:7a:b2:a6:0b:
                    fe:55:31:2f:2b:92:42:6a:42:85:80:d9:09:a2:29:
                    1e:bf:94:77:d4:ad:a0:f6:ce:fb:70:50:9b:2a:87:
                    c5:9d:f0:d1:9f:5b:50:36:6d:35:a8:e2:26:c8:fc:
                    fa:b6:bb:b7:4d:ba:1c:3f:13:5c:e1:5d:e4:c2:b7:
                    b5:3f:12:69:c7:82:c1:fa:64:c0:f5:81:a2:05:41:
                    16:41:2e:1e:83:aa:3b:4b:0a:20:23:f6:6a:fa:67:
                    27:c3:9f:a5:05:16:2a:92:fb:00:73:81:0d:d8:20:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5D:F3:5A:1B:08:15:F2:C4:18:16:BD:84:3E:BF:2E:D6:25:38:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68:80::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:f0:3e:6f:5c:40:4e:0f:22:bb:73:ba:af:65:7b:6d:92:
         80:37:cf:02:d6:47:d3:88:fe:cf:b1:51:fe:32:0d:2f:d3:80:
         e7:2d:ff:5b:b6:f3:36:b3:d7:36:89:67:8f:94:f7:05:3d:96:
         51:71:bd:16:b5:0b:d4:09:77:0f:c0:e1:42:87:ad:95:7d:ac:
         59:73:23:a2:4a:1f:d3:62:33:76:60:e6:9a:37:4d:10:08:3c:
         05:15:61:cd:94:3a:cf:b2:36:f0:d5:0e:ea:a3:46:cf:3f:e0:
         d1:7b:f5:93:43:c2:3e:56:50:a0:76:98:cb:75:35:b8:3c:a3:
         59:01:b2:3a:20:bd:dc:a9:32:9d:42:a4:25:e6:1a:c8:9f:9f:
         35:43:89:88:4a:34:38:a4:e7:00:48:b1:dc:14:98:d6:aa:63:
         c5:8f:56:be:be:fa:1e:f3:c3:8b:5a:92:10:12:47:e8:4f:19:
         bc:aa:be:68:c3:22:c6:74:2d:82:b4:60:96:49:8e:3c:22:d5:
         a5:6e:d8:ce:88:e1:a2:94:59:ee:b8:36:40:b4:6d:63:cf:3b:
         dc:e9:86:24:60:ac:f2:aa:2f:2d:ca:01:ed:6d:71:38:79:63:
         88:fe:7d:2a:25:f5:3b:c7:7b:61:79:70:92:95:20:ad:c0:26:
         56:e6:c2:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0XPahdxQpaOhZ6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl
NTRkMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
NmFkMTA2ZWUtMTY1OC00YzRkLWFjNjktNzRiNzkyYWI5YTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPTnCHhDkIwX7F0lNs+gKmYFbUdz2HE1WD8V
nebLgoNomeruN9zQBljdrVm/EKDHNHDs1cP1YpIYxWABT2citUsxODzJe66/KHdC
uGE+4FDjborYGpTttVBstCOe11C2yUPkpl54iS47FZZurU/vgDvfJc8ISvjhK1yA
kGuNUeZgc+NHypp07dqSeUyg5C87GXqypgv+VTEvK5JCakKFgNkJoikev5R31K2g
9s77cFCbKofFnfDRn1tQNm01qOImyPz6tru3TbocPxNc4V3kwre1PxJpx4LB+mTA
9YGiBUEWQS4eg6o7SwogI/Zq+mcnw5+lBRYqkvsAc4EN2CBA/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOZd81obCBXyxBgWvYQ+vy7WJTimMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw
NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvYmM3ZGE3YTYtNDNjYi0z
MjQ3LWE1YzYtNjA3NWMzNmVjNWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli
MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj
ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk
MjkxY2U1NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL7aACA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFuP8D5vXEBODyK7c7qvZXttkoA3zwLWR9OI/s+xUf4yDS/TgOct
/1u28zaz1zaJZ4+U9wU9llFxvRa1C9QJdw/A4UKHrZV9rFlzI6JKH9NiM3Zg5po3
TRAIPAUVYc2UOs+yNvDVDuqjRs8/4NF79ZNDwj5WUKB2mMt1Nbg8o1kBsjogvdyp
Mp1CpCXmGsifnzVDiYhKNDik5wBIsdwUmNaqY8WPVr6++h7zw4takhASR+hPGbyq
vmjDIsZ0LYK0YJZJjjwi1aVu2M6I4aKUWe64NkC0bWPPO9zphiRgrPKqLy3KAe1t
cTh5Y4j+fSol9TvHe2F5cJKVIK3AJlbmwos=
-----END CERTIFICATE-----
Generated at Tue Sep 16 02:24:48 2025 by rpki-client