Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f38f0482-ffe5-3df1-b6ce-8b1d28435946.roa
File:                     f38f0482-ffe5-3df1-b6ce-8b1d28435946.roa (raw, json)
Hash identifier:          okwc/YPM9BDhxQDagwBBrMFhX9eYCzV9LeMAqjciNcA=
Subject key identifier:   80:11:40:3D:35:01:4E:BA:3D:0C:41:0C:E7:25:22:E9:65:A7:4C:90
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584B9E07BD81D5A49AFAB71998E4
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f38f0482-ffe5-3df1-b6ce-8b1d28435946.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     399275
IP address blocks:        2602:fcc0:7777::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:bd:81:d5:a4:9a:fa:b7:19:98:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=ac2662bf-a32a-42c5-8a09-9ba816014962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:e6:bf:f9:bd:63:5b:7d:1c:4f:1a:44:68:
                    21:54:64:6b:e5:c5:f8:9e:44:eb:ba:d6:81:f9:2e:
                    93:9c:8f:75:2b:69:ef:df:c4:e2:1f:85:77:02:04:
                    a3:42:60:c0:c9:3d:f6:a4:64:fe:68:50:09:11:63:
                    f7:64:5f:e0:96:75:40:97:58:6d:65:42:4e:92:7f:
                    a0:13:15:83:c2:ae:18:0b:77:07:c9:d5:94:30:10:
                    de:c3:0a:ce:35:bc:19:37:57:34:b0:c7:be:28:ae:
                    36:a6:e9:8d:28:ee:7f:61:4d:35:c0:14:20:4d:4f:
                    66:07:10:06:62:9a:18:51:68:f2:6c:86:a1:81:31:
                    f2:ec:35:8d:d5:5e:ac:2c:38:34:d6:f4:8a:a2:f7:
                    43:d2:04:7f:2c:e0:bc:8f:f0:50:88:fe:0d:d2:01:
                    b6:fd:aa:a1:9e:b7:2b:15:b7:0d:ba:8d:7b:98:57:
                    29:03:fd:6a:0c:8f:94:0b:62:28:bc:b9:c9:af:5b:
                    71:46:f5:f0:95:97:57:2d:87:05:f2:29:ed:b5:fc:
                    bf:a8:50:64:e2:a7:dc:74:8f:55:d5:59:6f:f7:75:
                    dc:93:84:21:eb:7c:16:0b:07:d4:aa:55:cd:2b:37:
                    02:ec:5d:8d:d2:9c:8a:2b:f1:8d:a2:0f:aa:9d:98:
                    70:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:11:40:3D:35:01:4E:BA:3D:0C:41:0C:E7:25:22:E9:65:A7:4C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/f38f0482-ffe5-3df1-b6ce-8b1d28435946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:7777::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:78:7a:3f:7a:73:91:86:f8:0f:d7:4c:62:3b:42:7e:2b:ce:
         49:e8:79:83:e8:e2:c0:14:0f:7e:db:bf:14:b2:4c:cf:88:29:
         46:a1:9d:a6:9a:49:03:e7:19:d0:39:d7:75:94:bf:1d:cb:70:
         b3:2b:ac:c5:ab:03:d3:2e:e7:db:16:2f:03:1f:e6:6e:4a:9b:
         ca:e9:1a:4a:34:a4:5c:75:bb:e8:f4:ef:1b:44:27:cc:8f:06:
         2a:4d:3a:66:13:d4:a0:3c:d1:9c:f0:50:63:c0:98:85:7e:ae:
         3f:c3:13:e2:53:db:aa:85:87:d1:a3:01:e9:c7:8b:99:39:b9:
         78:07:20:8b:93:af:64:e9:4a:19:41:6b:fb:b8:4f:09:94:be:
         d0:62:d2:94:35:6a:34:57:cd:ae:34:6a:62:06:9c:25:d0:2f:
         e6:af:d4:6c:37:5a:1e:fe:e4:d0:61:eb:05:9b:87:b0:8d:bd:
         3e:3c:15:7a:f1:c5:e2:b5:ac:de:5e:7d:52:d1:be:ca:34:ed:
         af:ed:48:9d:91:c4:86:53:ec:d9:39:31:50:51:1e:e1:cf:79:
         fa:16:7f:28:fc:1c:b9:69:bb:f1:9b:9f:09:a6:d9:65:3d:cb:
         eb:c5:f7:2e:81:3b:e1:a5:02:d3:d3:d3:c6:db:f9:10:34:09:
         80:f9:cd:96
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB72B1aSa+rcZmOQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2
ZTc1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
YWMyNjYyYmYtYTMyYS00MmM1LThhMDktOWJhODE2MDE0OTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx7mv/m9Y1t9HE8aRGghVGRr5cX4nkTrutaB
+S6TnI91K2nv38TiH4V3AgSjQmDAyT32pGT+aFAJEWP3ZF/glnVAl1htZUJOkn+g
ExWDwq4YC3cHydWUMBDewwrONbwZN1c0sMe+KK42pumNKO5/YU01wBQgTU9mBxAG
YpoYUWjybIahgTHy7DWN1V6sLDg01vSKovdD0gR/LOC8j/BQiP4N0gG2/aqhnrcr
FbcNuo17mFcpA/1qDI+UC2IovLnJr1txRvXwlZdXLYcF8inttfy/qFBk4qfcdI9V
1Vlv93Xck4Qh63wWCwfUqlXNKzcC7F2N0pyKK/GNog+qnZhwDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIARQD01AU66PQxBDOclIullp0yQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl
NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvZjM4ZjA0ODItZmZlNS0z
ZGYxLWI2Y2UtOGIxZDI4NDM1OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky
OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4
NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj
OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wHd3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALV4ej96c5GG+A/XTGI7Qn4rzknoeYPo4sAUD37bvxSyTM+IKUah
naaaSQPnGdA513WUvx3LcLMrrMWrA9Mu59sWLwMf5m5Km8rpGko0pFx1u+j07xtE
J8yPBipNOmYT1KA80ZzwUGPAmIV+rj/DE+JT26qFh9GjAenHi5k5uXgHIIuTr2Tp
ShlBa/u4TwmUvtBi0pQ1ajRXza40amIGnCXQL+av1Gw3Wh7+5NBh6wWbh7CNvT48
FXrxxeK1rN5efVLRvso07a/tSJ2RxIZT7Nk5MVBRHuHPefoWfyj8HLlpu/Gbnwmm
2WU9y+vF9y6BO+GlAtPT08bb+RA0CYD5zZY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:32:55 2025 by rpki-client