Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/e2b765f3-a13d-355e-9bca-81bb1d95fba3.roa
File:                     e2b765f3-a13d-355e-9bca-81bb1d95fba3.roa (raw, json)
Hash identifier:          uDCc284KJC+e/WmNrT0BkK5RgXImGW/LXnHtrjWZfow=
Subject key identifier:   BC:F4:1C:1D:0E:AA:CE:6C:AB:98:4B:69:75:8A:CE:08:51:D4:BD:0C
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584ADA9BD2E323BD2F291E2D1280
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/e2b765f3-a13d-355e-9bca-81bb1d95fba3.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     0
IP address blocks:        2602:fd10:600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d2:e3:23:bd:2f:29:1e:2d:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=5928c737-52ed-477d-a048-f7089870e38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:24:16:e2:d0:eb:a8:c2:e7:d2:33:84:50:
                    7b:74:73:1c:b6:8a:dc:b6:9c:c1:98:76:bf:28:af:
                    97:7b:49:65:cc:e6:18:86:4b:3b:e6:29:ee:b0:9d:
                    87:10:5c:ed:03:e2:f9:7f:66:50:e3:5b:7d:b7:7d:
                    75:0b:b9:6c:e0:c4:9e:bf:06:b7:a7:06:25:a9:fa:
                    5f:e5:d7:df:c8:37:05:d2:7d:f2:6e:ce:bb:dd:53:
                    aa:b8:50:f6:94:a4:11:35:98:89:04:7a:f5:13:e7:
                    6b:8a:15:9b:2f:f1:08:82:72:80:8a:b3:46:f2:cc:
                    ca:f8:4c:fe:f6:e7:88:fc:8c:56:d0:90:30:37:d0:
                    70:29:b0:9a:58:3c:de:58:5c:8e:75:14:23:08:d1:
                    0e:e3:54:b3:4e:4b:0e:fa:3d:7b:45:9c:c2:fc:4c:
                    f2:2c:94:53:0d:b2:ea:e3:a5:4b:fa:a9:8d:43:84:
                    87:eb:03:e6:a3:86:f7:06:b9:49:e2:32:fb:2b:23:
                    09:9f:1b:0d:9a:02:40:f2:a1:de:47:9e:d4:98:00:
                    3c:38:cb:d8:a9:6c:af:ff:c5:9f:7c:b1:3f:ef:8a:
                    cd:30:fa:2c:ac:1e:52:01:16:4f:ef:17:50:bb:24:
                    03:17:c2:7f:06:ca:1e:57:5a:95:13:b3:c2:39:5b:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F4:1C:1D:0E:AA:CE:6C:AB:98:4B:69:75:8A:CE:08:51:D4:BD:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/e2b765f3-a13d-355e-9bca-81bb1d95fba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:fb:f6:b4:39:d3:02:d9:71:37:8c:fb:75:fd:51:e6:09:49:
         88:90:c7:e1:28:64:a0:7b:41:7a:eb:90:c3:d7:c8:97:f9:30:
         92:31:a0:92:2f:19:8e:06:aa:d2:b1:d2:e8:a4:a7:6b:41:30:
         46:6d:0b:d8:b0:90:ab:a0:82:86:2f:1a:91:88:51:1f:24:c1:
         3f:d3:51:dc:76:57:19:99:ed:ef:da:3b:a2:1a:47:08:4c:41:
         33:06:31:8c:b6:3c:5d:c8:1b:3c:55:85:84:c0:56:dc:55:88:
         c4:9f:df:ca:06:93:9b:68:9a:a6:83:2a:fe:11:d7:4c:11:2c:
         27:8d:68:56:cb:dc:16:bb:b4:63:85:42:2d:50:b1:1f:c1:fa:
         30:51:53:2d:b5:88:c9:d9:85:5c:93:18:b6:a0:fc:ba:09:94:
         bc:46:10:6e:93:41:2e:5c:c1:86:d3:46:9d:0b:c3:30:8d:b9:
         57:f9:40:de:90:9c:fd:fe:d1:4d:22:62:66:4f:89:d5:d4:61:
         f1:e5:d9:a5:10:86:b4:97:2b:44:e5:10:ee:fe:1d:ef:57:fb:
         fa:1f:77:5a:07:53:28:b8:b1:af:d6:4d:0c:70:b7:9b:28:d1:
         28:b3:dc:6d:6c:31:94:79:9c:e4:48:aa:a4:76:77:db:6b:2d:
         d9:96:c6:87
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEram9LjI70vKR4tEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx
MWRkMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk
NTkyOGM3MzctNTJlZC00NzdkLWEwNDgtZjcwODk4NzBlMzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwYkFuLQ66jC59IzhFB7dHMctorctpzBmHa/
KK+Xe0llzOYYhks75inusJ2HEFztA+L5f2ZQ41t9t311C7ls4MSevwa3pwYlqfpf
5dffyDcF0n3ybs673VOquFD2lKQRNZiJBHr1E+drihWbL/EIgnKAirNG8szK+Ez+
9ueI/IxW0JAwN9BwKbCaWDzeWFyOdRQjCNEO41SzTksO+j17RZzC/EzyLJRTDbLq
46VL+qmNQ4SH6wPmo4b3BrlJ4jL7KyMJnxsNmgJA8qHeR57UmAA8OMvYqWyv/8Wf
fLE/74rNMPosrB5SARZP7xdQuyQDF8J/BsoeV1qVE7PCOVukDQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLz0HB0Oqs5sq5hLaXWKzghR1L0MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj
NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvZTJiNzY1ZjMtYTEzZC0z
NTVlLTliY2EtODFiYjFkOTVmYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk
ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj
MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh
YjYzYzExZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9EAYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbfv2tDnTAtlxN4z7df1R5glJiJDH4ShkoHtBeuuQw9fIl/kwkjGg
ki8Zjgaq0rHS6KSna0EwRm0L2LCQq6CChi8akYhRHyTBP9NR3HZXGZnt79o7ohpH
CExBMwYxjLY8XcgbPFWFhMBW3FWIxJ/fygaTm2iapoMq/hHXTBEsJ41oVsvcFru0
Y4VCLVCxH8H6MFFTLbWIydmFXJMYtqD8ugmUvEYQbpNBLlzBhtNGnQvDMI25V/lA
3pCc/f7RTSJiZk+J1dRh8eXZpRCGtJcrROUQ7v4d71f7+h93WgdTKLixr9ZNDHC3
myjRKLPcbWwxlHmc5EiqpHZ322st2ZbGhw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:09 2025 by rpki-client