Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/e3503592-48a9-3e87-b656-be3180e2e3cd.roa
File:                     e3503592-48a9-3e87-b656-be3180e2e3cd.roa (raw, json)
Hash identifier:          PJcXpjZ7TZ6hMLTdWaKq1XRGcG3WxcGZiiEHRXvbQUE=
Subject key identifier:   51:C4:7E:77:B6:C0:F9:4A:D1:A3:48:4C:E7:9B:E2:04:B6:70:7E:E4
Certificate issuer:       /CN=933821cc-14e5-4036-8f32-e54b6facbdbe
Certificate serial:       010D0C9F4328584AB91B9FE3197FA4FE8DC8D800
Authority key identifier: 75:C8:2B:E8:F5:04:21:77:1B:99:A8:A4:D7:3F:86:53:8C:FB:E1:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/e3503592-48a9-3e87-b656-be3180e2e3cd.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     27439
IP address blocks:        2602:f8d6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/933821cc-14e5-4036-8f32-e54b6facbdbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/933821cc-14e5-4036-8f32-e54b6facbdbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:9f:e3:19:7f:a4:fe:8d:c8:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=933821cc-14e5-4036-8f32-e54b6facbdbe
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=2293741a-8b3d-4239-a4c8-cc0a7c3c34d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:a8:bb:67:24:28:64:95:fc:f6:f6:59:c1:
                    e6:17:11:be:14:86:06:42:20:45:32:5f:18:17:a4:
                    70:1d:37:31:86:77:3e:4d:61:10:74:be:83:ae:d2:
                    bc:d5:3c:e8:cb:9e:d0:1a:50:d5:38:1c:49:c1:e6:
                    21:59:35:09:e6:65:57:b0:28:49:a9:cd:be:09:e3:
                    16:e3:35:97:97:c4:96:ed:43:46:b0:ae:26:1b:09:
                    90:97:57:ce:46:47:dd:3e:23:03:98:f3:1e:c5:1a:
                    6b:d9:8e:06:a7:fc:f9:b7:1b:d3:04:7b:d3:7f:5b:
                    72:e9:36:4e:a2:88:44:37:d3:91:47:6c:e7:89:2c:
                    70:95:bd:2a:8e:f9:49:6e:cb:d2:0a:22:ca:66:4e:
                    21:8c:86:db:3e:b9:42:d9:0d:29:0b:37:f6:ba:70:
                    2a:73:88:44:55:70:53:ee:29:f5:88:0a:d6:04:21:
                    17:17:fa:75:d2:2c:45:fb:b5:d1:9b:14:39:b2:ef:
                    06:b0:7d:e3:a9:13:d6:58:1b:7b:87:bc:50:1a:8b:
                    b4:d9:10:de:99:3d:90:d2:0f:01:43:31:b2:62:d0:
                    e3:b5:c9:96:2d:a2:82:22:e2:f6:e0:5c:55:2d:aa:
                    7d:32:d3:17:d5:40:9a:8f:a1:78:2d:1b:2c:8f:35:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C4:7E:77:B6:C0:F9:4A:D1:A3:48:4C:E7:9B:E2:04:B6:70:7E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/e3503592-48a9-3e87-b656-be3180e2e3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe/933821cc-14e5-4036-8f32-e54b6facbdbe.crl

            X509v3 Authority Key Identifier:
                keyid:75:C8:2B:E8:F5:04:21:77:1B:99:A8:A4:D7:3F:86:53:8C:FB:E1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/933821cc-14e5-4036-8f32-e54b6facbdbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2d:2b:5b:49:dc:69:f6:e5:56:a8:17:b0:cc:d1:bd:95:d8:
         b4:4b:30:f3:db:54:5f:b7:bc:be:af:d1:3a:f7:bc:a2:cc:1f:
         06:53:d4:38:10:c8:5b:d2:ae:91:43:2a:5d:fa:cd:00:b9:38:
         c9:b8:b0:0d:cf:be:d1:0b:8f:30:4d:87:d9:8d:9a:a9:ff:c8:
         9c:5b:a4:17:e6:8a:65:02:16:3f:af:46:35:15:ae:73:39:a4:
         f8:b5:82:25:cf:a8:2a:63:bc:87:e6:fe:08:ad:d8:8a:53:18:
         a1:44:f5:c0:57:5a:d0:f9:7f:3a:11:51:ae:00:e2:03:24:a6:
         93:c4:7d:29:85:25:25:76:12:1c:bc:55:1d:f9:28:03:bc:b0:
         dd:0c:32:42:b3:a9:c7:36:e5:03:e3:03:87:18:32:e8:95:db:
         06:73:52:96:73:e9:95:5d:a3:25:07:b4:cd:13:ea:ea:fb:b0:
         6e:29:89:81:f1:47:45:69:46:fd:96:ec:86:ab:ff:12:4c:6a:
         22:17:bc:ec:3c:3c:23:78:f5:9f:41:d1:5b:73:4b:79:09:de:
         f1:1c:bc:67:c1:0b:40:d9:6e:8d:eb:7d:96:c2:46:20:b7:a4:
         9e:83:9e:67:55:cb:3b:a6:3e:b6:25:43:e0:53:8f:60:92:36:
         b2:f0:af:64
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq5G5/jGX+k/o3I2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMzODIxY2MtMTRlNS00MDM2LThmMzItZTU0YjZmYWNi
ZGJlMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
MjI5Mzc0MWEtOGIzZC00MjM5LWE0YzgtY2MwYTdjM2MzNGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBKou2ckKGSV/Pb2WcHmFxG+FIYGQiBFMl8Y
F6RwHTcxhnc+TWEQdL6DrtK81Tzoy57QGlDVOBxJweYhWTUJ5mVXsChJqc2+CeMW
4zWXl8SW7UNGsK4mGwmQl1fORkfdPiMDmPMexRpr2Y4Gp/z5txvTBHvTf1ty6TZO
oohEN9ORR2zniSxwlb0qjvlJbsvSCiLKZk4hjIbbPrlC2Q0pCzf2unAqc4hEVXBT
7in1iArWBCEXF/p10ixF+7XRmxQ5su8GsH3jqRPWWBt7h7xQGou02RDemT2Q0g8B
QzGyYtDjtcmWLaKCIuL24FxVLap9MtMX1UCaj6F4LRssjzV8xwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFHEfne2wPlK0aNITOeb4gS2cH7kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MzM4
MjFjYy0xNGU1LTQwMzYtOGYzMi1lNTRiNmZhY2JkYmUvZTM1MDM1OTItNDhhOS0z
ZTg3LWI2NTYtYmUzMTgwZTJlM2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTMzODIxY2MtMTRlNS00MDM2LThm
MzItZTU0YjZmYWNiZGJlLzkzMzgyMWNjLTE0ZTUtNDAzNi04ZjMyLWU1NGI2ZmFj
YmRiZS5jcmwwHwYDVR0jBBgwFoAUdcgr6PUEIXcbmaik1z+GU4z74fMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85MzM4MjFjYy0xNGU1LTQwMzYtOGYzMi1lNTRi
NmZhY2JkYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL41gAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASi0rW0ncafblVqgXsMzRvZXYtEsw89tUX7e8vq/ROve8oswfBlPU
OBDIW9KukUMqXfrNALk4ybiwDc++0QuPME2H2Y2aqf/InFukF+aKZQIWP69GNRWu
czmk+LWCJc+oKmO8h+b+CK3YilMYoUT1wFda0Pl/OhFRrgDiAySmk8R9KYUlJXYS
HLxVHfkoA7yw3QwyQrOpxzblA+MDhxgy6JXbBnNSlnPplV2jJQe0zRPq6vuwbimJ
gfFHRWlG/Zbshqv/EkxqIhe87Dw8I3j1n0HRW3NLeQne8Ry8Z8ELQNlujet9lsJG
ILeknoOeZ1XLO6Y+tiVD4FOPYJI2svCvZA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:49 2025 by rpki-client