Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa
File:                     8dde01f3-144b-3f64-9c50-533507cff3ae.roa (raw, json)
Hash identifier:          h9GVZnmk8YHcJdrLVYlmwmFd4bTiPs4pjoDNKx9Pv10=
Subject key identifier:   ED:F9:5D:EA:AE:EF:24:B2:8D:FB:70:EF:A1:45:0E:65:14:35:FB:C0
Certificate issuer:       /CN=603ec9c3-6a7f-4455-baee-5999e253e735
Certificate serial:       010D0C9F4328584A9FFB9B95130D415F93A58C24
Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     3677
IP address blocks:        2620:0:e58::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9b:95:13:0d:41:5f:93:a5:8c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=02a3c785-2ba5-4397-b96a-e1e96b115e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:83:44:2e:d5:12:2a:ff:6c:3f:2d:44:0e:
                    be:92:c4:a5:d7:56:d5:ea:1c:99:2d:fd:88:df:fc:
                    94:d8:b3:44:98:a6:22:f2:7e:f3:7a:8f:6f:0f:55:
                    4d:ec:cb:59:cf:1c:82:ef:42:ea:af:26:74:c7:af:
                    0f:60:ac:ed:3d:bd:2a:b8:5a:2f:56:86:7a:f5:2e:
                    55:b4:ed:6e:08:e5:08:59:e6:55:e5:2e:4a:dd:c9:
                    22:54:12:62:e2:86:55:8a:68:08:83:3a:62:e4:73:
                    75:97:6a:b1:04:94:9f:2c:d8:94:8c:cc:a5:70:9a:
                    51:bc:0c:9f:6b:6c:96:ba:8b:ff:99:24:04:88:ea:
                    f7:84:2a:4e:cb:aa:d2:07:19:7f:b4:8b:76:ce:1c:
                    4a:2a:3a:da:e9:0e:b6:7b:82:7e:9f:5b:c6:eb:bb:
                    2b:7c:36:8b:1f:92:db:e7:2c:d0:d6:f9:9a:1b:c3:
                    89:ad:a5:b5:04:97:32:76:96:13:29:d3:0c:97:b3:
                    56:38:6c:1f:49:97:36:d6:0f:c2:01:b9:a9:d1:11:
                    dc:67:db:79:e3:1f:0d:4b:a8:c8:3e:27:55:73:35:
                    01:e3:50:a9:03:7f:79:5b:19:64:33:a6:31:cb:ed:
                    5d:16:1b:41:0d:16:ec:4b:f5:95:88:39:fa:b0:60:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F9:5D:EA:AE:EF:24:B2:8D:FB:70:EF:A1:45:0E:65:14:35:FB:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/8dde01f3-144b-3f64-9c50-533507cff3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl

            X509v3 Authority Key Identifier:
                keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:e58::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d5:d5:d8:04:e0:c2:e8:d8:96:f7:ee:34:28:56:a7:60:52:
         a2:b6:07:f5:50:9e:20:83:6b:4e:45:ba:73:03:52:93:0d:26:
         6a:24:ea:9a:8c:23:44:98:bb:0a:19:07:17:bc:f8:f1:cb:77:
         d6:dc:c6:4f:88:5c:86:9d:da:22:55:8d:75:1d:3f:ae:9a:62:
         bf:a5:4f:10:2b:df:8c:73:51:4e:d2:ca:30:96:4b:c0:73:0d:
         c7:e7:94:c9:f3:5b:50:4e:31:73:15:aa:65:5d:09:60:0b:26:
         a3:e2:f5:a5:09:ec:6a:21:50:8c:55:d6:92:99:98:8d:ff:81:
         42:b1:85:0a:41:82:c4:68:a2:17:ca:02:df:68:a8:ae:4e:23:
         f3:44:b6:8d:f5:55:3c:05:c8:4c:18:e5:61:e4:d8:65:e6:b4:
         a8:a4:c9:19:95:0d:ed:88:f9:58:d7:24:27:67:7a:29:12:b4:
         20:00:d9:d2:72:73:e7:d4:2b:c8:94:0a:6c:45:7b:91:49:2d:
         e5:83:f3:83:e9:ff:da:a8:55:e4:17:fb:84:3d:e0:74:55:85:
         bc:2c:2b:ea:82:0f:33:ab:c3:87:dd:f9:39:06:41:c5:26:dd:
         bc:53:1c:e4:02:36:e9:14:54:72:29:65:3a:2d:e9:1b:65:fb:
         d6:b8:b4:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf+5uVEw1BX5OljCQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl
NzM1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
MDJhM2M3ODUtMmJhNS00Mzk3LWI5NmEtZTFlOTZiMTE1ZThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgCDRC7VEir/bD8tRA6+ksSl11bV6hyZLf2I
3/yU2LNEmKYi8n7zeo9vD1VN7MtZzxyC70LqryZ0x68PYKztPb0quFovVoZ69S5V
tO1uCOUIWeZV5S5K3ckiVBJi4oZVimgIgzpi5HN1l2qxBJSfLNiUjMylcJpRvAyf
a2yWuov/mSQEiOr3hCpOy6rSBxl/tIt2zhxKKjra6Q62e4J+n1vG67srfDaLH5Lb
5yzQ1vmaG8OJraW1BJcydpYTKdMMl7NWOGwfSZc21g/CAbmp0RHcZ9t54x8NS6jI
PidVczUB41CpA395WxlkM6Yxy+1dFhtBDRbsS/WViDn6sGBhUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO35Xequ7ySyjftw76FFDmUUNfvAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl
YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvOGRkZTAxZjMtMTQ0Yi0z
ZjY0LTljNTAtNTMzNTA3Y2ZmM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh
ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz
ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5
ZTI1M2U3MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAA5Y
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACPV1dgE4MLo2Jb37jQoVqdgUqK2B/VQniCDa05FunMDUpMNJmok
6pqMI0SYuwoZBxe8+PHLd9bcxk+IXIad2iJVjXUdP66aYr+lTxAr34xzUU7SyjCW
S8BzDcfnlMnzW1BOMXMVqmVdCWALJqPi9aUJ7GohUIxV1pKZmI3/gUKxhQpBgsRo
ohfKAt9oqK5OI/NEto31VTwFyEwY5WHk2GXmtKikyRmVDe2I+VjXJCdneikStCAA
2dJyc+fUK8iUCmxFe5FJLeWD84Pp/9qoVeQX+4Q94HRVhbwsK+qCDzOrw4fd+TkG
QcUm3bxTHOQCNukUVHIpZTot6Rtl+9a4tGE=
-----END CERTIFICATE-----
Generated at Mon Aug 11 08:45:51 2025 by rpki-client