Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/7498589e-57a8-3a95-86ac-755dca4d3099.roa
File:                     7498589e-57a8-3a95-86ac-755dca4d3099.roa (raw, json)
Hash identifier:          HeTiC4ZoQ/gNWadKdA/xCGjkSwssYA0y0HZPoQ+IH9E=
Subject key identifier:   87:37:B7:F6:F1:A6:4F:70:87:16:EF:69:9F:5E:0B:2E:CC:B4:F5:8E
Certificate issuer:       /CN=4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c
Certificate serial:       010D0C9F4328584AC01636876ABE74AD94B1EDC0
Authority key identifier: 54:C5:6B:92:F7:D9:72:CC:E8:04:D6:6C:39:D6:D9:00:8D:84:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/7498589e-57a8-3a95-86ac-755dca4d3099.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     397550
IP address blocks:        2602:fdbf::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:36:87:6a:be:74:ad:94:b1:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=194e15dc-6437-4a75-bb2f-963df5f5b10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:a4:55:07:3a:7f:82:fd:f6:74:49:18:02:
                    71:e0:05:1c:10:a9:04:3d:6c:c1:b2:be:67:fc:d1:
                    9b:f4:8b:8b:52:38:db:ed:4f:a9:4c:8f:02:c2:e1:
                    e8:65:b1:ea:e7:46:a2:34:d5:4f:e4:ae:59:29:b2:
                    63:d5:e6:19:ce:03:0a:57:95:86:3d:90:68:5c:df:
                    87:f2:8c:6a:1c:a3:3a:ee:23:97:ce:b9:84:05:b0:
                    ac:8e:e9:2a:fb:10:b4:04:44:5e:cb:e9:0a:fc:7a:
                    a0:95:f2:1c:79:d5:89:ac:fb:b5:68:ad:75:02:01:
                    e8:43:26:38:66:53:7e:70:9f:b8:bb:8e:74:12:5c:
                    c4:a7:e5:c5:b1:45:42:52:36:cb:8a:93:5d:35:df:
                    1c:21:10:1a:3f:18:17:f6:86:ec:26:d3:32:0c:a3:
                    f8:7f:82:63:0f:b9:c4:03:52:d5:32:a6:6b:49:b2:
                    a4:0e:78:06:30:74:45:09:42:95:e4:62:b0:c3:88:
                    78:4e:0a:78:d0:d7:ee:87:b1:3f:4a:08:20:86:fa:
                    32:14:59:aa:3d:06:23:0e:af:a6:f7:1f:dc:7e:7a:
                    04:36:61:7e:79:01:85:d3:32:d9:46:14:fc:3a:87:
                    88:b3:93:33:65:00:10:8b:13:e4:a1:44:6f:eb:b6:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:37:B7:F6:F1:A6:4F:70:87:16:EF:69:9F:5E:0B:2E:CC:B4:F5:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/7498589e-57a8-3a95-86ac-755dca4d3099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.crl

            X509v3 Authority Key Identifier:
                keyid:54:C5:6B:92:F7:D9:72:CC:E8:04:D6:6C:39:D6:D9:00:8D:84:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4f6dd7bc-b8a3-42c3-98b1-f44ac9466f4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdbf::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8d:2c:31:80:e2:ca:21:5a:17:2d:58:99:1d:3d:ca:eb:94:
         66:8d:4e:cb:27:d3:ed:37:1b:c6:98:b3:ef:1e:a6:05:7f:83:
         13:62:dd:d7:a0:53:a2:61:5f:7c:43:12:1b:85:c6:0d:13:3d:
         97:df:b8:df:1e:96:e6:d6:19:10:44:b2:f5:88:87:00:45:a2:
         6a:1b:0d:ac:d3:da:df:18:b5:76:eb:77:c9:82:4d:4b:32:95:
         cc:93:a7:c2:a3:c3:0d:9e:71:24:1e:d8:0d:99:fd:79:6b:dd:
         8b:53:43:0e:7c:c0:d1:56:a7:a8:bc:20:ea:f0:4c:fd:0f:b9:
         c7:e3:e7:3b:ea:5c:a4:00:30:8c:d8:38:6e:25:55:8c:10:ce:
         62:23:e9:7d:61:25:69:85:0a:9a:46:12:b7:b2:a6:38:c4:59:
         72:20:8f:9c:98:ad:56:e3:77:32:9a:2d:71:24:2e:bf:9b:82:
         ad:ae:f1:c4:51:91:40:4d:49:8d:d0:c5:81:72:da:75:fa:73:
         92:40:f6:ed:c7:c2:31:9b:9e:96:ba:f0:54:50:6f:ec:cd:5e:
         48:9d:7b:0f:d3:a6:ba:82:c4:3c:1f:6c:49:1b:52:5b:44:28:
         1b:a9:ed:04:74:91:b0:fd:5a:42:e7:22:96:ff:78:34:c7:a9:
         26:ee:32:57
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErAFjaHar50rZSx7cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGY2ZGQ3YmMtYjhhMy00MmMzLTk4YjEtZjQ0YWM5NDY2
ZjRjMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
MTk0ZTE1ZGMtNjQzNy00YTc1LWJiMmYtOTYzZGY1ZjViMTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnKkVQc6f4L99nRJGAJx4AUcEKkEPWzBsr5n
/NGb9IuLUjjb7U+pTI8CwuHoZbHq50aiNNVP5K5ZKbJj1eYZzgMKV5WGPZBoXN+H
8oxqHKM67iOXzrmEBbCsjukq+xC0BERey+kK/HqglfIcedWJrPu1aK11AgHoQyY4
ZlN+cJ+4u450ElzEp+XFsUVCUjbLipNdNd8cIRAaPxgX9obsJtMyDKP4f4JjD7nE
A1LVMqZrSbKkDngGMHRFCUKV5GKww4h4Tgp40Nfuh7E/SggghvoyFFmqPQYjDq+m
9x/cfnoENmF+eQGF0zLZRhT8OoeIs5MzZQAQixPkoURv67ZezwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIc3t/bxpk9whxbvaZ9eCy7MtPWOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZjZk
ZDdiYy1iOGEzLTQyYzMtOThiMS1mNDRhYzk0NjZmNGMvNzQ5ODU4OWUtNTdhOC0z
YTk1LTg2YWMtNzU1ZGNhNGQzMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGY2ZGQ3YmMtYjhhMy00MmMzLTk4
YjEtZjQ0YWM5NDY2ZjRjLzRmNmRkN2JjLWI4YTMtNDJjMy05OGIxLWY0NGFjOTQ2
NmY0Yy5jcmwwHwYDVR0jBBgwFoAUVMVrkvfZcszoBNZsOdbZAI2E+owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80ZjZkZDdiYy1iOGEzLTQyYzMtOThiMS1mNDRh
Yzk0NjZmNGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9vwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXI0sMYDiyiFaFy1YmR09yuuUZo1OyyfT7Tcbxpiz7x6mBX+DE2Ld
16BTomFffEMSG4XGDRM9l9+43x6W5tYZEESy9YiHAEWiahsNrNPa3xi1dut3yYJN
SzKVzJOnwqPDDZ5xJB7YDZn9eWvdi1NDDnzA0VanqLwg6vBM/Q+5x+PnO+pcpAAw
jNg4biVVjBDOYiPpfWElaYUKmkYSt7KmOMRZciCPnJitVuN3MpotcSQuv5uCra7x
xFGRQE1JjdDFgXLadfpzkkD27cfCMZuelrrwVFBv7M1eSJ17D9OmuoLEPB9sSRtS
W0QoG6ntBHSRsP1aQucilv94NMepJu4yVw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:18:07 2025 by rpki-client