Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa
File:                     829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa (raw, json)
Hash identifier:          i8FWtL9G0FlJbOGCJvnZfV5wrVUJcIPXHPlErOXt9WE=
Subject key identifier:   52:71:E0:96:AD:07:D6:EC:9E:05:5F:E8:DE:32:EF:94:72:75:F2:46
Certificate issuer:       /CN=4b9027e9-0517-4775-a6c4-35522e65e4ad
Certificate serial:       010D0C9F4328584A96368EE1D9729ACE2F8C8D00
Authority key identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     398697
IP address blocks:        2602:fcdd::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:8e:e1:d9:72:9a:ce:2f:8c:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9027e9-0517-4775-a6c4-35522e65e4ad
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=c1c37bb8-75b2-4f22-ad8f-7c92a4f13a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:48:90:0f:e3:61:73:30:2e:6f:f0:7b:ab:
                    37:f1:ce:b3:8e:a7:71:32:b0:69:1d:de:21:9d:89:
                    2a:c5:a8:41:15:d5:70:51:d4:7c:62:09:61:97:0d:
                    f8:7c:07:5b:8c:48:f1:81:b1:08:8c:b1:b6:0c:2c:
                    94:b7:6b:66:e6:3c:cf:02:6a:4d:95:46:93:98:a3:
                    07:21:32:a8:4c:93:47:21:56:88:25:2a:17:0f:5d:
                    98:97:95:6d:c8:55:fe:fc:71:49:bc:7c:21:23:e2:
                    04:a8:f1:09:77:53:05:53:e4:15:7e:c1:27:74:3e:
                    6d:49:d1:e3:9c:57:a8:48:d6:57:d8:84:be:31:ce:
                    32:df:32:f8:d5:9b:16:16:ad:ea:16:23:b6:bb:8a:
                    f1:9a:f6:54:d1:05:d2:93:35:f2:f4:62:bc:06:15:
                    8e:77:47:e8:96:d7:5b:00:74:5d:2d:18:6e:a7:a8:
                    f0:5f:51:c6:ba:b4:be:f3:88:33:d9:bf:05:87:f7:
                    13:b7:a4:50:40:fa:2b:34:f0:cd:61:e8:f9:1d:77:
                    01:59:52:6c:b6:90:f2:0d:7c:88:fb:2f:bd:40:a0:
                    cb:14:90:a2:d7:c6:07:40:63:b0:56:66:b4:16:3b:
                    99:aa:3e:a4:d3:c2:9b:18:8a:06:fe:1b:e7:03:39:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:71:E0:96:AD:07:D6:EC:9E:05:5F:E8:DE:32:EF:94:72:75:F2:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl

            X509v3 Authority Key Identifier:
                keyid:68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcdd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:02:1e:f9:9c:a7:08:e5:a8:49:87:0b:ab:50:12:80:4c:71:
         2b:98:12:8f:c0:a8:51:ac:91:ed:90:ca:ab:8c:58:32:de:56:
         95:f4:13:d0:d9:7b:ee:48:ba:75:75:76:ba:ed:21:63:c6:20:
         72:4c:39:fe:43:11:f4:20:f8:ca:0b:ab:10:18:db:79:69:32:
         c3:89:6e:74:20:6d:f0:3b:bd:22:91:82:87:9d:02:4b:3d:42:
         07:df:16:b6:be:85:c9:80:4f:46:1a:8c:e3:7d:9c:0d:36:8b:
         d4:93:cd:9a:ea:a7:9f:10:e2:cc:5c:7e:30:c7:31:32:86:7d:
         b5:98:78:45:9d:d8:5f:40:d7:f6:d4:d3:a0:c5:16:bf:de:b6:
         db:b4:8e:b0:b7:18:1e:d2:4a:38:49:03:e1:e4:33:19:5c:4f:
         e8:96:b9:f4:c2:af:e2:e0:de:98:a1:bf:15:d4:fc:27:52:35:
         6b:2a:bd:ee:1d:b4:33:87:71:8f:d5:c6:5b:f7:87:3e:70:c9:
         16:66:19:77:29:06:d0:04:88:ff:05:b7:54:a1:29:bf:c3:66:
         1d:36:71:f6:09:10:cc:e8:d2:6d:5c:e8:81:13:2d:c4:54:28:
         63:c6:df:e0:53:1e:87:ff:a8:d8:15:57:cc:a7:b0:d8:cd:98:
         b7:94:cd:7d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqWNo7h2XKazi+MjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGI5MDI3ZTktMDUxNy00Nzc1LWE2YzQtMzU1MjJlNjVl
NGFkMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
YzFjMzdiYjgtNzViMi00ZjIyLWFkOGYtN2M5MmE0ZjEzYTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIVIkA/jYXMwLm/we6s38c6zjqdxMrBpHd4h
nYkqxahBFdVwUdR8Yglhlw34fAdbjEjxgbEIjLG2DCyUt2tm5jzPAmpNlUaTmKMH
ITKoTJNHIVaIJSoXD12Yl5VtyFX+/HFJvHwhI+IEqPEJd1MFU+QVfsEndD5tSdHj
nFeoSNZX2IS+Mc4y3zL41ZsWFq3qFiO2u4rxmvZU0QXSkzXy9GK8BhWOd0foltdb
AHRdLRhup6jwX1HGurS+84gz2b8Fh/cTt6RQQPorNPDNYej5HXcBWVJstpDyDXyI
+y+9QKDLFJCi18YHQGOwVma0FjuZqj6k08KbGIoG/hvnAzmDJQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFJx4JatB9bsngVf6N4y75RydfJGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Yjkw
MjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUyMmU2NWU0YWQvODI5YmIzYmEtMjliYy0z
ZGRjLThlMGQtODI5ZTIzY2I1NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGI5MDI3ZTktMDUxNy00Nzc1LWE2
YzQtMzU1MjJlNjVlNGFkLzRiOTAyN2U5LTA1MTctNDc3NS1hNmM0LTM1NTIyZTY1
ZTRhZC5jcmwwHwYDVR0jBBgwFoAUaAaXzMELbzFO2zE1+i0H8zBpTwowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80YjkwMjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUy
MmU2NWU0YWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL83QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAkAIe+ZynCOWoSYcLq1ASgExxK5gSj8CoUayR7ZDKq4xYMt5WlfQT
0Nl77ki6dXV2uu0hY8Ygckw5/kMR9CD4ygurEBjbeWkyw4ludCBt8Du9IpGCh50C
Sz1CB98Wtr6FyYBPRhqM432cDTaL1JPNmuqnnxDizFx+MMcxMoZ9tZh4RZ3YX0DX
9tTToMUWv96227SOsLcYHtJKOEkD4eQzGVxP6Ja59MKv4uDemKG/FdT8J1I1ayq9
7h20M4dxj9XGW/eHPnDJFmYZdykG0ASI/wW3VKEpv8NmHTZx9gkQzOjSbVzogRMt
xFQoY8bf4FMeh/+o2BVXzKew2M2Yt5TNfQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:14:47 2025 by rpki-client