Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/1234b749-f39e-390e-8d4d-9ae37b918e11.roa
File:                     1234b749-f39e-390e-8d4d-9ae37b918e11.roa (raw, json)
Hash identifier:          QnOeQdrpf9ozVH1PhsmMOz51vspZi0960YBMBnUuHYw=
Subject key identifier:   DB:0A:AC:85:41:7B:59:80:63:25:D6:25:D9:3B:BF:39:E3:F7:63:27
Certificate issuer:       /CN=e915fc0b-b44d-42fb-82c5-34cb016b9f56
Certificate serial:       010D0C9F4328584AA6F62E77311F1F4CF7B0AD40
Authority key identifier: D3:8C:1F:6A:7A:A4:A7:2E:66:59:5B:71:90:3D:3C:76:1E:EE:B8:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/1234b749-f39e-390e-8d4d-9ae37b918e11.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     15167
IP address blocks:        2602:f892::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/e915fc0b-b44d-42fb-82c5-34cb016b9f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/e915fc0b-b44d-42fb-82c5-34cb016b9f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2e:77:31:1f:1f:4c:f7:b0:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e915fc0b-b44d-42fb-82c5-34cb016b9f56
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=e034af56-dcfc-47f0-ae0f-05397ee1de21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:de:38:89:0c:6b:c4:7e:5a:7e:b7:f9:d6:
                    f4:1a:7e:cb:2a:56:f2:04:cf:33:f1:5a:85:23:78:
                    b6:79:86:16:85:d3:1f:ed:4e:36:dc:20:f4:8e:32:
                    29:61:e2:4c:02:6d:ab:61:1a:22:96:4e:cd:fa:0d:
                    a8:13:d4:d5:3e:28:d9:11:16:4c:17:73:f2:6f:17:
                    19:8c:c0:f5:bc:bc:9f:3e:e9:8b:9e:70:e0:dc:0b:
                    55:b3:df:8b:ac:61:4e:e2:8c:09:39:7e:ad:2a:f9:
                    c8:22:0b:df:47:3f:3e:37:29:13:f6:b7:6b:ed:40:
                    65:34:36:25:25:dd:c3:22:7e:90:69:01:9a:31:26:
                    72:ef:af:7b:6b:6c:41:8d:7a:81:85:55:bd:66:c9:
                    fc:5e:b0:c7:72:72:c6:de:5d:3e:b7:fb:2e:62:61:
                    6e:bf:5a:1f:e6:07:a2:17:af:b6:b0:10:0c:b3:7b:
                    35:83:de:a9:8c:99:c2:f7:7f:d2:7e:fa:bf:17:d1:
                    45:5f:d3:ef:0c:d5:8b:3e:9d:17:79:37:ca:8e:fa:
                    16:14:af:8b:da:18:a2:1c:f3:7e:91:19:c7:83:f4:
                    9f:bb:8d:fc:73:a1:11:0f:eb:7a:57:03:b5:01:29:
                    ba:20:eb:de:7c:c5:11:54:9d:51:33:cd:26:ef:fa:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0A:AC:85:41:7B:59:80:63:25:D6:25:D9:3B:BF:39:E3:F7:63:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/1234b749-f39e-390e-8d4d-9ae37b918e11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56/e915fc0b-b44d-42fb-82c5-34cb016b9f56.crl

            X509v3 Authority Key Identifier:
                keyid:D3:8C:1F:6A:7A:A4:A7:2E:66:59:5B:71:90:3D:3C:76:1E:EE:B8:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e915fc0b-b44d-42fb-82c5-34cb016b9f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f892::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ac:fd:99:e5:b8:57:6a:d0:38:66:af:66:07:88:0b:8b:15:
         ee:9b:4c:d9:3e:a3:8b:02:38:a8:74:07:c6:79:23:85:e4:4e:
         f3:1f:d3:c3:d5:14:dd:7e:94:e1:4b:16:7e:67:3c:1c:20:b0:
         3c:f9:93:d7:f1:ba:84:01:57:48:34:ed:f6:df:67:aa:21:8f:
         f9:49:5d:e1:d3:0a:72:7c:86:dd:ae:48:7b:07:df:b8:e9:ab:
         58:24:4b:8d:5a:12:d0:d9:93:03:61:18:51:cf:ee:5e:8f:ad:
         43:d0:9a:a0:ed:39:1d:08:b2:34:a9:64:78:86:b8:be:3d:7c:
         2f:89:60:ab:22:34:83:e7:d9:d7:75:9b:1f:d0:5a:d1:b5:d0:
         40:63:fd:ec:55:2b:32:10:87:c3:73:8c:ba:43:8f:5e:f8:a5:
         ef:3f:8a:30:68:36:8f:02:73:56:8f:e4:5a:68:3f:e5:f4:af:
         17:1b:c0:44:99:21:29:dc:49:95:63:4f:a6:15:a1:90:eb:d2:
         c2:8c:4a:a9:f4:6c:86:50:82:88:b2:3d:cd:d5:fe:50:29:eb:
         c7:f1:b7:a2:e0:b0:6d:c9:62:d5:09:46:41:01:9a:dc:01:4e:
         7b:6c:fc:81:96:50:17:8d:fe:83:23:94:8c:36:66:c8:fe:e0:
         55:b3:d8:6c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqm9i53MR8fTPewrUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTkxNWZjMGItYjQ0ZC00MmZiLTgyYzUtMzRjYjAxNmI5
ZjU2MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
ZTAzNGFmNTYtZGNmYy00N2YwLWFlMGYtMDUzOTdlZTFkZTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ineOIkMa8R+Wn63+db0Gn7LKlbyBM8z8VqF
I3i2eYYWhdMf7U423CD0jjIpYeJMAm2rYRoilk7N+g2oE9TVPijZERZMF3PybxcZ
jMD1vLyfPumLnnDg3AtVs9+LrGFO4owJOX6tKvnIIgvfRz8+NykT9rdr7UBlNDYl
Jd3DIn6QaQGaMSZy7697a2xBjXqBhVW9Zsn8XrDHcnLG3l0+t/suYmFuv1of5gei
F6+2sBAMs3s1g96pjJnC93/Sfvq/F9FFX9PvDNWLPp0XeTfKjvoWFK+L2hiiHPN+
kRnHg/Sfu438c6ERD+t6VwO1ASm6IOvefMURVJ1RM80m7/pnzwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNsKrIVBe1mAYyXWJdk7vznj92MnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lOTE1
ZmMwYi1iNDRkLTQyZmItODJjNS0zNGNiMDE2YjlmNTYvMTIzNGI3NDktZjM5ZS0z
OTBlLThkNGQtOWFlMzdiOTE4ZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTkxNWZjMGItYjQ0ZC00MmZiLTgy
YzUtMzRjYjAxNmI5ZjU2L2U5MTVmYzBiLWI0NGQtNDJmYi04MmM1LTM0Y2IwMTZi
OWY1Ni5jcmwwHwYDVR0jBBgwFoAU04wfanqkpy5mWVtxkD08dh7uuNQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lOTE1ZmMwYi1iNDRkLTQyZmItODJjNS0zNGNi
MDE2YjlmNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4kgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIKz9meW4V2rQOGavZgeIC4sV7ptM2T6jiwI4qHQHxnkjheRO8x/T
w9UU3X6U4UsWfmc8HCCwPPmT1/G6hAFXSDTt9t9nqiGP+Uld4dMKcnyG3a5Iewff
uOmrWCRLjVoS0NmTA2EYUc/uXo+tQ9CaoO05HQiyNKlkeIa4vj18L4lgqyI0g+fZ
13WbH9Ba0bXQQGP97FUrMhCHw3OMukOPXvil7z+KMGg2jwJzVo/kWmg/5fSvFxvA
RJkhKdxJlWNPphWhkOvSwoxKqfRshlCCiLI9zdX+UCnrx/G3ouCwbcli1QlGQQGa
3AFOe2z8gZZQF43+gyOUjDZmyP7gVbPYbA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:19:55 2025 by rpki-client