Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/7546c2cf-27b0-39f9-8545-90287647c03f.roa
File:                     7546c2cf-27b0-39f9-8545-90287647c03f.roa (raw, json)
Hash identifier:          fAjwZsjqnQPiAHR1XwbnGjMlqMbrDRcD/5FXeTQr8hM=
Subject key identifier:   61:EA:F7:F6:1A:96:B0:C4:A1:64:B1:5B:BB:C8:4B:0C:A1:DE:3D:BF
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584A9C841C38023EF482CFA2FF80
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/7546c2cf-27b0-39f9-8545-90287647c03f.roa
Signing time:             Wed 23 Jul 2025 07:13:03 +0000
ROA not before:           Wed 23 Jul 2025 07:13:03 +0000
ROA not after:            Tue 21 Oct 2025 07:13:03 +0000
asID:                     38047
IP address blocks:        2602:f83b:355::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9c:84:1c:38:02:3e:f4:82:cf:a2:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Jul 23 07:13:03 2025 GMT
            Not After : Oct 21 07:13:03 2025 GMT
        Subject: CN=fb238902-8c19-4707-838d-980babcc188d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:75:eb:80:f4:5b:c1:91:44:9c:bc:16:a2:
                    a1:6b:a4:8b:8e:a6:10:a8:e8:0f:0c:ee:32:d0:8b:
                    13:70:d3:4f:13:fe:0f:00:2c:df:13:a9:f0:f9:43:
                    b4:eb:48:60:88:35:b3:21:33:f4:56:48:c4:4a:c3:
                    b3:1f:2d:95:94:19:98:88:e7:d8:1b:00:c5:7c:5c:
                    c7:cb:70:80:e6:95:54:18:96:8c:9e:9d:b1:fb:cd:
                    2a:b6:89:2d:09:9e:58:a4:5b:27:0f:64:1f:a2:07:
                    82:15:2f:fc:78:24:12:e6:86:44:2d:5c:37:23:53:
                    07:2a:57:c2:1f:d5:37:86:dc:01:63:03:3c:12:f0:
                    aa:49:eb:64:43:83:1b:cf:b7:d0:bf:a6:32:df:fd:
                    34:12:94:cc:6a:7a:f2:1d:a7:ad:84:50:4d:e6:0f:
                    c0:8c:d7:83:f8:45:13:44:07:e1:f2:b7:4d:92:e9:
                    ef:07:a0:ad:a7:6f:66:41:0f:90:ba:75:cf:27:85:
                    67:29:21:b1:f9:c3:83:16:ac:48:8d:6f:51:d1:94:
                    4f:ff:d9:3e:9d:5c:2a:5f:fb:23:9a:08:51:c2:68:
                    eb:11:01:bb:7e:c2:a1:eb:2a:fa:67:fb:03:2f:d5:
                    d6:2a:a3:cc:19:5b:59:fe:6d:2f:d7:61:42:41:49:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EA:F7:F6:1A:96:B0:C4:A1:64:B1:5B:BB:C8:4B:0C:A1:DE:3D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/7546c2cf-27b0-39f9-8545-90287647c03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:355::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:34:6b:33:40:6a:d6:0e:32:ec:a5:ce:2c:e2:a6:25:11:f2:
         90:84:61:71:ea:5b:7a:5b:45:e7:28:4a:8e:cb:c3:c6:7d:57:
         f6:06:9a:72:0e:d2:6c:db:7c:99:a7:5a:1d:ea:97:36:f4:bf:
         a1:f7:a1:55:a8:29:bd:55:7c:e6:bf:50:93:6d:e0:8f:fc:eb:
         cd:42:38:8d:d3:51:fc:d2:1b:1b:06:f2:35:bf:e0:44:8e:20:
         58:e1:5d:56:26:c4:42:b7:7d:e8:65:ca:4c:f8:ab:94:2d:23:
         e5:0f:ec:19:4d:9b:b8:7a:f3:b0:aa:73:21:d9:63:58:db:d1:
         7f:84:77:be:45:94:d9:bf:e3:b1:d6:5f:49:aa:ab:d8:96:0b:
         43:80:71:8d:b7:af:36:99:35:a2:aa:73:cf:c7:50:11:61:b9:
         66:f0:ec:dd:4f:71:76:24:fd:2b:2e:37:b4:d1:47:6f:28:b4:
         4a:cd:01:24:ee:1d:4c:39:13:a8:2b:8c:7a:c6:35:b4:b0:c7:
         32:68:e0:fd:81:7d:ac:df:e0:21:ab:a5:99:ce:cc:9a:66:c1:
         12:25:68:cb:ee:1e:97:ab:2d:5e:ce:d6:76:73:5f:24:1b:28:
         5a:aa:03:d3:ea:5a:96:a6:23:88:ab:8c:ed:c1:37:e6:0b:88:
         25:0b:03:e8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqchBw4Aj70gs+i/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk
MjYxMB4XDTI1MDcyMzA3MTMwM1oXDTI1MTAyMTA3MTMwM1owLzEtMCsGA1UEAxMk
ZmIyMzg5MDItOGMxOS00NzA3LTgzOGQtOTgwYmFiY2MxODhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqat164D0W8GRRJy8FqKha6SLjqYQqOgPDO4y
0IsTcNNPE/4PACzfE6nw+UO060hgiDWzITP0VkjESsOzHy2VlBmYiOfYGwDFfFzH
y3CA5pVUGJaMnp2x+80qtoktCZ5YpFsnD2QfogeCFS/8eCQS5oZELVw3I1MHKlfC
H9U3htwBYwM8EvCqSetkQ4Mbz7fQv6Yy3/00EpTManryHaethFBN5g/AjNeD+EUT
RAfh8rdNkunvB6Ctp29mQQ+QunXPJ4VnKSGx+cODFqxIjW9R0ZRP/9k+nVwqX/sj
mghRwmjrEQG7fsKh6yr6Z/sDL9XWKqPMGVtZ/m0v12FCQUl/KwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGHq9/YalrDEoWSxW7vISwyh3j2/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4
YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvNzU0NmMyY2YtMjdiMC0z
OWY5LTg1NDUtOTAyODc2NDdjMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1
YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk
ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm
MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4OwNV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEA0azNAatYOMuylzizipiUR8pCEYXHqW3pbRecoSo7Lw8Z9V/YG
mnIO0mzbfJmnWh3qlzb0v6H3oVWoKb1VfOa/UJNt4I/8681COI3TUfzSGxsG8jW/
4ESOIFjhXVYmxEK3fehlykz4q5QtI+UP7BlNm7h687CqcyHZY1jb0X+Ed75FlNm/
47HWX0mqq9iWC0OAcY23rzaZNaKqc8/HUBFhuWbw7N1PcXYk/SsuN7TRR28otErN
ASTuHUw5E6grjHrGNbSwxzJo4P2Bfazf4CGrpZnOzJpmwRIlaMvuHperLV7O1nZz
XyQbKFqqA9PqWpamI4irjO3BN+YLiCULA+g=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:17:06 2025 by rpki-client