Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa
File:                     8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa (raw, json)
Hash identifier:          727UOoGBlF9DRklFhCrFG2KM/mQLQP+279sh2a2o5j4=
Subject key identifier:   F3:E9:55:11:7D:5E:9E:F8:D6:9C:50:D8:ED:14:29:AF:8A:46:21:C8
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584AA42B8CC388A227D0D8ECCB20
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     16417
IP address blocks:        2620:101:2001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8c:c3:88:a2:27:d0:d8:ec:cb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=ea3dc26e-13ca-47ec-b026-8bd5b0041087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:35:59:cc:87:f7:26:23:39:ec:da:29:44:5e:
                    07:ed:40:ef:64:75:17:0b:de:7b:f2:c6:5c:be:e8:
                    12:b6:2a:e5:52:e5:08:d6:de:18:64:ab:84:c1:87:
                    e7:b2:9d:b4:73:3f:7a:e4:ca:1d:08:86:75:0e:5a:
                    c4:7a:7f:6e:60:e1:40:a5:07:15:74:ad:6f:3a:94:
                    65:74:dc:e8:e2:35:c4:9f:29:cd:d3:bc:80:d5:d5:
                    d9:d8:3d:b6:97:e6:e9:2e:82:80:2f:ad:40:1d:29:
                    6c:59:59:e3:9a:63:b1:c0:43:6f:f0:8e:ed:4f:a3:
                    62:36:19:a8:80:b2:5d:7a:54:a0:c9:3a:cf:1d:c2:
                    7b:ff:d3:44:7e:2f:80:64:cd:4a:65:55:78:ce:00:
                    c8:c0:5d:16:a4:8d:e7:c9:d2:2c:93:a0:2d:28:c9:
                    4a:5d:eb:53:cc:63:af:42:8d:46:f5:11:f1:ac:40:
                    af:04:6c:6a:61:5d:bb:7d:a7:99:12:2f:b7:ef:8a:
                    f2:00:0f:9c:b2:b7:c8:2a:9c:1e:87:21:a4:62:55:
                    cd:d8:b5:4d:eb:29:e1:b3:d7:71:c4:14:ba:da:f6:
                    f2:e0:00:50:2f:23:4d:47:77:dd:b4:63:0c:e5:8b:
                    d3:b3:6d:3a:35:82:95:ae:b4:84:a5:c2:1e:48:28:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E9:55:11:7D:5E:9E:F8:D6:9C:50:D8:ED:14:29:AF:8A:46:21:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101:2001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:1d:b9:77:54:07:e8:e8:b0:04:a0:c6:83:85:ff:ae:95:7e:
         72:ed:7d:c4:57:b5:62:d1:23:a7:ec:8a:c8:e0:00:f0:0a:12:
         b3:1a:1b:39:ee:22:37:89:18:7a:f8:9b:a9:f0:43:69:98:fe:
         a1:b7:2e:65:8e:4e:00:40:c4:9b:bb:d5:d9:93:0a:14:cc:a2:
         8b:91:e2:62:ca:fb:5d:b9:46:7b:2e:26:e3:ad:d1:d0:3a:18:
         a4:7e:f8:b0:52:ab:f7:38:e5:67:eb:b3:e3:5c:4b:61:e8:b0:
         30:e8:6a:ff:f0:18:ea:6b:b7:b1:6e:3b:6c:52:84:4e:e3:f3:
         ed:96:b1:b2:67:5d:50:72:7b:44:48:b1:7a:71:1b:28:cc:22:
         7e:7b:fb:9f:48:8f:a7:3e:6a:ff:31:c7:65:88:e3:70:ea:cb:
         d6:19:1e:8c:2f:67:9c:1a:e3:cf:6f:dd:42:a4:4e:e2:1e:3b:
         67:98:c9:9c:d9:d3:0a:21:c9:21:b0:93:bf:10:4c:26:ef:39:
         b4:c3:86:f1:2f:79:c0:99:79:d5:6f:b1:b6:2d:0b:d6:7f:21:
         03:f0:96:f0:d0:25:4a:cb:dc:81:fa:84:e7:d8:d0:db:da:6b:
         8c:0b:a9:9a:5c:7f:3f:2d:3b:1b:24:31:9b:c3:37:89:95:0a:
         0d:77:59:69
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqkK4zDiKIn0NjsyyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
ZWEzZGMyNmUtMTNjYS00N2VjLWIwMjYtOGJkNWIwMDQxMDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DVZzIf3JiM57NopRF4H7UDvZHUXC9578sZc
vugStirlUuUI1t4YZKuEwYfnsp20cz965ModCIZ1DlrEen9uYOFApQcVdK1vOpRl
dNzo4jXEnynN07yA1dXZ2D22l+bpLoKAL61AHSlsWVnjmmOxwENv8I7tT6NiNhmo
gLJdelSgyTrPHcJ7/9NEfi+AZM1KZVV4zgDIwF0WpI3nydIsk6AtKMlKXetTzGOv
Qo1G9RHxrECvBGxqYV27faeZEi+374ryAA+csrfIKpwehyGkYlXN2LVN6ynhs9dx
xBS62vby4ABQLyNNR3fdtGMM5YvTs206NYKVrrSEpcIeSChygQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPPpVRF9Xp741pxQ2O0UKa+KRiHIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvOGNlOWU2YmItYWMzNi0z
Mjk1LTgzMWEtMDBlM2QxMDNlYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABASAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFUduXdUB+josASgxoOF/66VfnLtfcRXtWLRI6fsisjgAPAKErMa
GznuIjeJGHr4m6nwQ2mY/qG3LmWOTgBAxJu71dmTChTMoouR4mLK+125RnsuJuOt
0dA6GKR++LBSq/c45Wfrs+NcS2HosDDoav/wGOprt7FuO2xShE7j8+2WsbJnXVBy
e0RIsXpxGyjMIn57+59Ij6c+av8xx2WI43Dqy9YZHowvZ5wa489v3UKkTuIeO2eY
yZzZ0wohySGwk78QTCbvObTDhvEvecCZedVvsbYtC9Z/IQPwlvDQJUrL3IH6hOfY
0Nvaa4wLqZpcfz8tOxskMZvDN4mVCg13WWk=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:16 2025 by rpki-client