Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9fa4f415-973f-323a-a294-77ec6ecf0080.roa
File:                     9fa4f415-973f-323a-a294-77ec6ecf0080.roa (raw, json)
Hash identifier:          +01TG462rw/yAKosnSAZlG8rEDUPQSlREs09Y4roNQw=
Subject key identifier:   9F:33:17:A8:BD:B2:E1:3B:7F:17:37:F6:2F:02:E1:31:39:17:50:DD
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F4328584AFC1BF161F651FD02388C3440
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9fa4f415-973f-323a-a294-77ec6ecf0080.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     13627
IP address blocks:        2602:fba3:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:f1:61:f6:51:fd:02:38:8c:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=4167c8f1-5c6b-42f7-adaa-6d365ee0cba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a9:2d:71:39:dd:cb:99:c5:c4:3f:e7:df:1e:
                    3c:da:cc:69:20:90:38:25:64:c4:ca:43:4f:70:b1:
                    73:f8:73:a8:7e:9f:0e:50:8b:71:8c:97:ee:f8:2d:
                    99:5f:4f:9c:f8:ed:39:13:04:9b:c6:fd:3c:90:a8:
                    04:6a:33:8a:5c:a2:f1:61:58:3e:11:57:63:39:25:
                    1c:90:83:f0:2a:9a:8c:34:43:7b:1c:1b:50:fb:e2:
                    83:68:10:f7:c7:0f:7c:7f:6d:7b:64:e8:d8:e2:41:
                    71:a3:dd:3d:b8:d0:74:93:67:74:db:7f:70:de:60:
                    95:7f:04:ef:b4:04:3c:82:ab:fe:18:1e:68:41:c8:
                    51:3b:38:74:a0:dd:9a:19:4b:05:92:fe:b4:52:49:
                    dc:e9:f7:45:7e:0d:d8:f7:7c:de:eb:55:8e:fa:8e:
                    10:3b:2b:fa:62:5b:c9:50:bb:f6:3c:d8:36:27:71:
                    9c:8d:49:3d:32:d1:eb:d6:22:61:c8:01:90:75:64:
                    70:1f:94:c1:02:dd:f9:30:c0:32:b8:39:dc:50:ae:
                    14:2c:68:d5:67:a8:a9:92:75:8c:e9:5a:34:a3:e2:
                    6b:87:da:70:4e:f8:82:45:35:67:41:32:a5:54:20:
                    59:f0:c5:dc:30:5f:c8:fa:43:f1:7e:e9:06:71:06:
                    72:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:33:17:A8:BD:B2:E1:3B:7F:17:37:F6:2F:02:E1:31:39:17:50:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9fa4f415-973f-323a-a294-77ec6ecf0080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:58:1c:e5:39:63:07:f3:f1:b1:bf:90:1e:55:98:4d:79:4a:
         5f:4b:64:af:32:0a:46:f1:32:48:61:80:7e:e2:15:fa:5c:6a:
         be:2a:ef:d8:de:3f:ae:9f:2a:62:ae:16:63:19:8b:81:28:03:
         3d:8b:b9:7c:03:8d:17:9d:fe:f5:63:3f:ad:5a:5b:da:c3:93:
         d2:b0:2b:e8:10:bc:41:69:c4:39:5b:cd:03:6d:2a:59:b8:66:
         ce:ae:0f:e7:f4:24:2d:be:8c:b2:54:f6:3e:c7:e8:fb:e2:0e:
         91:a4:f9:d5:32:bf:cd:76:65:b4:4c:00:8b:ce:67:21:5f:dd:
         6e:19:6a:54:fa:b5:14:cb:d8:73:1f:77:4c:50:74:f4:ec:91:
         a2:0b:62:24:60:34:d3:ec:e2:39:33:d1:7b:d5:43:fb:ef:64:
         44:26:61:11:fe:db:47:07:ad:81:2f:0c:a7:9b:d9:cd:ee:7b:
         37:36:5c:ea:2f:ed:80:16:90:87:a7:a5:e0:84:ee:19:dc:3f:
         82:a2:19:78:e8:a4:1e:70:79:9c:2c:02:24:85:e7:ee:59:32:
         e8:02:64:83:ec:44:f8:d9:8a:42:4f:58:e2:e3:f0:90:c6:3a:
         8e:e6:61:d9:ab:24:c6:f0:8e:bd:72:99:73:ae:24:f8:a8:47:
         da:b4:53:9e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr8G/Fh9lH9AjiMNEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz
ZTM3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk
NDE2N2M4ZjEtNWM2Yi00MmY3LWFkYWEtNmQzNjVlZTBjYmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qktcTndy5nFxD/n3x482sxpIJA4JWTEykNP
cLFz+HOofp8OUItxjJfu+C2ZX0+c+O05EwSbxv08kKgEajOKXKLxYVg+EVdjOSUc
kIPwKpqMNEN7HBtQ++KDaBD3xw98f217ZOjY4kFxo909uNB0k2d0239w3mCVfwTv
tAQ8gqv+GB5oQchROzh0oN2aGUsFkv60Uknc6fdFfg3Y93ze61WO+o4QOyv6YlvJ
ULv2PNg2J3GcjUk9MtHr1iJhyAGQdWRwH5TBAt35MMAyuDncUK4ULGjVZ6ipknWM
6Vo0o+Jrh9pwTviCRTVnQTKlVCBZ8MXcMF/I+kPxfukGcQZy/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJ8zF6i9suE7fxc39i8C4TE5F1DdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5
Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvOWZhNGY0MTUtOTczZi0z
MjNhLWEyOTQtNzdlYzZlY2YwMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx
MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx
M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2
MGEyMTNlMzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7owMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALFgc5TljB/Pxsb+QHlWYTXlKX0tkrzIKRvEySGGAfuIV+lxqvirv
2N4/rp8qYq4WYxmLgSgDPYu5fAONF53+9WM/rVpb2sOT0rAr6BC8QWnEOVvNA20q
Wbhmzq4P5/QkLb6MslT2Psfo++IOkaT51TK/zXZltEwAi85nIV/dbhlqVPq1FMvY
cx93TFB09OyRogtiJGA00+ziOTPRe9VD++9kRCZhEf7bRwetgS8Mp5vZze57NzZc
6i/tgBaQh6el4ITuGdw/gqIZeOikHnB5nCwCJIXn7lky6AJkg+xE+NmKQk9Y4uPw
kMY6juZh2askxvCOvXKZc64k+KhH2rRTng==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:09 2025 by rpki-client