Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa
File:                     0f44003e-48cb-3fe5-97c3-09015e401420.roa (raw, json)
Hash identifier:          RIBhvmUrzmoPYO4HmiN7BXVVSD47GBClARUqtP55U8o=
Subject key identifier:   F3:DF:E1:E4:8C:24:91:23:03:3B:F8:37:59:B9:6F:47:72:2A:D3:63
Certificate issuer:       /CN=ce78c233-fea8-412e-b7ae-1080a457c01e
Certificate serial:       010D0C9F4328584AEBEAF9B48FF6F5B2AB8BB380
Authority key identifier: 4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa
Signing time:             Wed 20 Aug 2025 17:48:19 +0000
ROA not before:           Wed 20 Aug 2025 17:48:19 +0000
ROA not after:            Tue 18 Nov 2025 18:48:19 +0000
asID:                     14618
IP address blocks:        2602:f669::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:ea:f9:b4:8f:f6:f5:b2:ab:8b:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce78c233-fea8-412e-b7ae-1080a457c01e
        Validity
            Not Before: Aug 20 17:48:19 2025 GMT
            Not After : Nov 18 18:48:19 2025 GMT
        Subject: CN=41818be3-b4e0-4055-ad04-e57a731d6868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:0d:db:b5:0a:c8:79:f5:1c:ea:e7:01:60:
                    e7:7e:ce:f3:a6:9f:be:43:21:40:2e:5c:cf:3f:97:
                    da:ac:0c:e6:99:a8:70:b7:13:90:cf:74:81:73:d8:
                    b5:ec:91:9f:d1:3e:ba:c2:ed:64:b3:ff:60:eb:cb:
                    e2:99:da:fb:49:5a:31:a6:04:44:58:67:29:93:10:
                    fd:fa:c4:80:de:7c:93:10:bd:d7:d8:17:40:67:6c:
                    85:75:6d:ef:81:90:15:1e:b4:51:0c:07:32:7a:c6:
                    cd:01:36:80:2c:d8:c3:ed:01:93:44:2e:b2:f6:98:
                    99:2d:56:54:93:e2:fe:33:9d:8d:fc:33:6a:67:09:
                    76:ce:e4:8c:fe:85:99:43:37:33:62:09:a0:de:43:
                    d1:47:d0:9b:98:34:26:f5:db:e7:0c:28:fc:2e:3d:
                    c8:a8:3f:57:fd:82:e4:83:33:50:69:d1:cf:0f:b1:
                    6b:9e:f7:41:64:e8:8a:b6:98:e3:68:f6:4d:6b:17:
                    3d:36:77:13:6a:28:aa:89:cc:c0:7c:09:00:ea:15:
                    b2:e0:9b:20:7b:ba:ef:a0:b1:cd:e2:58:c9:ef:02:
                    08:bb:c0:35:46:70:b7:75:88:91:c6:ca:16:76:74:
                    ce:c4:d7:66:61:07:34:e2:6b:6b:7d:51:42:d4:0d:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DF:E1:E4:8C:24:91:23:03:3B:F8:37:59:B9:6F:47:72:2A:D3:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.crl

            X509v3 Authority Key Identifier:
                keyid:4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f669::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:85:7f:2a:c9:63:e0:a9:84:a4:87:6f:6c:81:13:70:cc:ee:
         d5:82:4b:da:8a:17:1f:82:1c:b3:34:3e:84:64:04:f4:68:2a:
         76:5b:ad:16:d2:39:54:43:f1:08:97:ff:e0:4e:ed:41:38:c0:
         c1:94:e1:d8:41:c7:cd:3f:ed:43:48:4f:e0:c5:87:ad:f7:cf:
         c6:41:59:37:ee:15:1c:9b:e5:7b:9c:a0:bf:6f:1a:16:5c:12:
         9d:de:19:32:d3:38:69:f2:06:bc:96:1c:7c:25:b9:91:b7:53:
         61:59:8c:32:9a:de:c6:7a:44:09:fd:6e:eb:17:7b:82:19:5a:
         0c:98:c7:7b:6a:b9:7f:00:e1:68:4c:4c:72:7a:fc:c3:34:d0:
         33:87:7b:ef:7d:2f:aa:ac:71:b5:77:5c:60:06:b9:08:c6:cb:
         e3:8d:0d:72:48:1a:56:57:16:55:17:ed:47:47:98:40:71:9d:
         f1:94:91:c5:fd:2c:d6:97:cf:20:f3:14:9c:f3:38:77:a5:11:
         5f:06:92:ed:3f:65:6d:cb:05:7d:9e:85:c2:30:2d:2b:9d:58:
         59:7c:2d:ca:5d:d7:a3:b4:ac:4c:0d:4b:bb:f1:42:86:19:06:
         a0:9b:67:62:13:bc:72:57:e5:6c:1d:2e:95:a0:b5:f0:75:cf:
         d7:c3:d3:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErr6vm0j/b1squLs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U3OGMyMzMtZmVhOC00MTJlLWI3YWUtMTA4MGE0NTdj
MDFlMB4XDTI1MDgyMDE3NDgxOVoXDTI1MTExODE4NDgxOVowLzEtMCsGA1UEAxMk
NDE4MThiZTMtYjRlMC00MDU1LWFkMDQtZTU3YTczMWQ2ODY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb4N27UKyHn1HOrnAWDnfs7zpp++QyFALlzP
P5farAzmmahwtxOQz3SBc9i17JGf0T66wu1ks/9g68vimdr7SVoxpgREWGcpkxD9
+sSA3nyTEL3X2BdAZ2yFdW3vgZAVHrRRDAcyesbNATaALNjD7QGTRC6y9piZLVZU
k+L+M52N/DNqZwl2zuSM/oWZQzczYgmg3kPRR9CbmDQm9dvnDCj8Lj3IqD9X/YLk
gzNQadHPD7FrnvdBZOiKtpjjaPZNaxc9NncTaiiqiczAfAkA6hWy4Jsge7rvoLHN
4ljJ7wIIu8A1RnC3dYiRxsoWdnTOxNdmYQc04mtrfVFC1A1ruwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPPf4eSMJJEjAzv4N1m5b0dyKtNjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZTc4
YzIzMy1mZWE4LTQxMmUtYjdhZS0xMDgwYTQ1N2MwMWUvMGY0NDAwM2UtNDhjYi0z
ZmU1LTk3YzMtMDkwMTVlNDAxNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2U3OGMyMzMtZmVhOC00MTJlLWI3
YWUtMTA4MGE0NTdjMDFlL2NlNzhjMjMzLWZlYTgtNDEyZS1iN2FlLTEwODBhNDU3
YzAxZS5jcmwwHwYDVR0jBBgwFoAUTOpqQW3lpZzEcJFyA/LKYL9ylmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jZTc4YzIzMy1mZWE4LTQxMmUtYjdhZS0xMDgw
YTQ1N2MwMWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2aQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHOFfyrJY+CphKSHb2yBE3DM7tWCS9qKFx+CHLM0PoRkBPRoKnZb
rRbSOVRD8QiX/+BO7UE4wMGU4dhBx80/7UNIT+DFh633z8ZBWTfuFRyb5XucoL9v
GhZcEp3eGTLTOGnyBryWHHwluZG3U2FZjDKa3sZ6RAn9busXe4IZWgyYx3tquX8A
4WhMTHJ6/MM00DOHe+99L6qscbV3XGAGuQjGy+ONDXJIGlZXFlUX7UdHmEBxnfGU
kcX9LNaXzyDzFJzzOHelEV8Gku0/ZW3LBX2ehcIwLSudWFl8Lcpd16O0rEwNS7vx
QoYZBqCbZ2ITvHJX5WwdLpWgtfB1z9fD0+0=
-----END CERTIFICATE-----
Generated at Thu Aug 21 18:59:32 2025 by rpki-client