Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa
File:                     f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa (raw, json)
Hash identifier:          JE9ggPEk4pQjho0uQpU8qMF6t7GTaTCTApEgU16ojkg=
Subject key identifier:   8B:93:66:7C:47:EC:0B:C6:03:F8:32:78:D9:F8:EB:37:93:C3:68:28
Certificate issuer:       /CN=35241669-57c3-4f1d-8e12-d32455951379
Certificate serial:       010D0C9F4328584A89A61EA048107FF0DB4A3D80
Authority key identifier: 8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     62880
IP address blocks:        2602:f8bb::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:1e:a0:48:10:7f:f0:db:4a:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35241669-57c3-4f1d-8e12-d32455951379
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=7469dcef-a44c-45b8-89b1-c3272c918ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:d3:cd:5c:8c:33:ee:fa:50:9c:3c:ab:f3:
                    35:2e:4b:51:30:21:4d:b3:95:de:54:48:f3:d5:67:
                    f3:ad:f6:7c:ae:36:ce:f9:98:50:39:17:76:bb:3b:
                    e2:fa:c1:69:1c:01:fc:4d:18:0f:e9:80:33:75:8a:
                    a3:9e:fc:6e:83:7e:8c:12:b0:04:76:64:25:b8:5c:
                    89:b7:a8:9a:84:8c:ca:b2:c8:bb:69:6e:d9:43:4e:
                    e1:46:05:53:6d:97:ad:15:35:85:98:f9:0d:3f:71:
                    03:38:0e:ea:a5:1f:2a:20:5f:51:02:c6:95:f3:b1:
                    d1:8d:00:e4:a8:dc:ab:cc:00:33:e0:f7:23:a9:69:
                    eb:5c:af:33:d9:44:f4:e5:d8:ab:a6:c6:8d:cd:31:
                    59:d5:90:73:ee:53:30:1b:e6:1f:0d:b2:11:ae:09:
                    76:53:66:50:71:06:64:af:0c:be:1f:aa:af:dc:be:
                    73:e9:fe:3c:eb:80:6c:e5:f1:75:80:aa:16:83:95:
                    b2:d7:b0:19:44:7f:ec:d8:d4:4c:48:49:34:79:64:
                    d4:6d:ab:22:db:55:10:db:49:b4:b8:6e:63:b0:48:
                    b2:8d:e8:e3:8a:37:50:ba:c4:ac:68:12:fb:a8:3c:
                    98:63:69:be:ad:ac:58:cf:d2:14:28:8d:1a:37:02:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:93:66:7C:47:EC:0B:C6:03:F8:32:78:D9:F8:EB:37:93:C3:68:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl

            X509v3 Authority Key Identifier:
                keyid:8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:f3:02:15:ff:da:a7:f6:3a:bb:63:f9:65:76:f7:0a:04:
         ae:16:ff:c0:e0:bb:31:56:44:8b:5b:6e:88:17:be:7d:f4:46:
         73:35:0e:ab:da:c2:03:96:11:99:2e:31:a4:4d:1d:5d:40:c1:
         79:56:73:26:a8:dc:ee:5e:80:19:dc:cd:dd:99:e5:9e:bf:3c:
         47:b0:51:c0:81:be:af:7a:05:bf:d4:e7:c0:da:13:34:b5:89:
         1c:bf:6a:67:48:70:49:f3:1c:73:1a:fa:92:7c:63:d1:6a:af:
         aa:88:09:27:fc:55:78:fd:75:51:08:ea:de:55:b0:0b:d8:26:
         20:be:cb:b5:c0:b0:2b:03:0c:3c:63:15:eb:e4:f7:1e:a2:01:
         a2:f2:50:0d:fa:a6:fd:40:f3:43:f6:22:60:49:89:9d:94:2f:
         f9:d7:9e:64:5f:21:55:bf:32:b0:52:85:26:f9:f6:c5:7f:eb:
         4e:53:f4:2b:28:16:55:74:d5:61:6e:df:ea:69:77:62:81:49:
         5d:d9:89:18:35:65:b0:6d:a4:6a:68:20:97:a2:38:94:2d:d5:
         b7:92:7a:91:8e:67:e3:42:ef:8b:de:be:cb:4a:ec:7e:db:4d:
         72:ad:25:70:e0:d1:cb:d2:e6:21:1d:e9:ae:78:3f:3e:77:be:
         5b:1d:86:db
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqJph6gSBB/8NtKPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzUyNDE2NjktNTdjMy00ZjFkLThlMTItZDMyNDU1OTUx
Mzc5MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
NzQ2OWRjZWYtYTQ0Yy00NWI4LTg5YjEtYzMyNzJjOTE4ZWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/jTzVyMM+76UJw8q/M1LktRMCFNs5XeVEjz
1WfzrfZ8rjbO+ZhQORd2uzvi+sFpHAH8TRgP6YAzdYqjnvxug36MErAEdmQluFyJ
t6iahIzKssi7aW7ZQ07hRgVTbZetFTWFmPkNP3EDOA7qpR8qIF9RAsaV87HRjQDk
qNyrzAAz4PcjqWnrXK8z2UT05dirpsaNzTFZ1ZBz7lMwG+YfDbIRrgl2U2ZQcQZk
rwy+H6qv3L5z6f4864Bs5fF1gKoWg5Wy17AZRH/s2NRMSEk0eWTUbasi21UQ20m0
uG5jsEiyjejjijdQusSsaBL7qDyYY2m+raxYz9IUKI0aNwINMwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIuTZnxH7AvGA/gyeNn46zeTw2goMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zNTI0
MTY2OS01N2MzLTRmMWQtOGUxMi1kMzI0NTU5NTEzNzkvZjI4YjIyZDEtZjIxYS0z
YzgyLWFjOWYtMGFlMzUyNDdiMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzUyNDE2NjktNTdjMy00ZjFkLThl
MTItZDMyNDU1OTUxMzc5LzM1MjQxNjY5LTU3YzMtNGYxZC04ZTEyLWQzMjQ1NTk1
MTM3OS5jcmwwHwYDVR0jBBgwFoAUi0RrrKjIcCAen2k3npvuMSt3udYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zNTI0MTY2OS01N2MzLTRmMWQtOGUxMi1kMzI0
NTU5NTEzNzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4uwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAqjzAhX/2qf2Ortj+WV29woErhb/wOC7MVZEi1tuiBe+ffRGczUO
q9rCA5YRmS4xpE0dXUDBeVZzJqjc7l6AGdzN3Znlnr88R7BRwIG+r3oFv9TnwNoT
NLWJHL9qZ0hwSfMccxr6knxj0WqvqogJJ/xVeP11UQjq3lWwC9gmIL7LtcCwKwMM
PGMV6+T3HqIBovJQDfqm/UDzQ/YiYEmJnZQv+deeZF8hVb8ysFKFJvn2xX/rTlP0
KygWVXTVYW7f6ml3YoFJXdmJGDVlsG2kamggl6I4lC3Vt5J6kY5n40Lvi96+y0rs
fttNcq0lcODRy9LmIR3prng/Pne+Wx2G2w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:57 2025 by rpki-client