Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa
File:                     d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa (raw, json)
Hash identifier:          BZ68+WzX8ydKJUkTvsZu+dwmizNhSu80776Z4YtztEg=
Subject key identifier:   6F:13:41:4F:D9:28:0E:07:66:12:A4:80:8A:6C:D6:72:C5:A2:B9:E6
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584B477C6E95F32A77E5E6BFA340
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     398395
IP address blocks:        2602:fb54:146::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:6e:95:f3:2a:77:e5:e6:bf:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=97a920dc-a68c-4d39-8145-e7c6a277570f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9c:df:c9:43:77:79:99:a1:c5:3b:1c:4d:c3:
                    a3:11:a9:0e:51:97:ca:69:46:5d:4f:c4:01:32:3b:
                    75:02:56:7a:3c:45:9b:9f:01:ab:30:15:8e:a5:5c:
                    09:07:ac:c4:eb:06:5c:56:e4:4e:cf:4c:01:07:ed:
                    02:43:7e:ce:e2:e4:11:82:77:08:46:80:55:eb:d6:
                    c4:bf:93:e2:5a:d0:a3:5e:40:e7:9c:7a:af:7d:94:
                    2d:be:30:5c:0a:91:bb:b6:9e:ab:93:18:c7:58:c6:
                    a3:fc:57:42:7c:39:c8:3b:59:3e:ea:57:d5:1c:a4:
                    35:23:e6:d7:44:8f:11:ba:47:f9:2a:fd:39:1c:a9:
                    bb:79:38:3f:51:d8:88:f5:44:0a:39:f3:b7:0a:76:
                    68:33:68:32:f8:23:21:b2:3e:5f:e9:4d:39:4e:33:
                    1e:f5:54:09:b2:49:d7:55:3b:68:66:77:f8:d1:3e:
                    9f:3c:5d:04:a2:ae:df:67:a0:c3:53:f3:cd:21:bf:
                    83:76:04:12:68:04:a1:09:38:71:ac:de:9e:04:85:
                    b3:14:42:87:e4:b7:f8:8d:c1:3e:18:7d:8a:c4:15:
                    e4:f9:f0:7d:90:b0:22:7a:d1:03:3f:c9:b7:bc:b8:
                    cd:4f:96:0f:1b:df:8e:40:a6:93:1b:d0:45:93:64:
                    e0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:13:41:4F:D9:28:0E:07:66:12:A4:80:8A:6C:D6:72:C5:A2:B9:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:146::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c3:67:21:78:67:33:2f:36:0b:ea:a6:b6:37:38:20:70:69:
         72:b8:c4:b3:51:a1:a3:c1:aa:8d:aa:f9:38:97:e0:d1:2b:fd:
         34:de:a1:92:14:d7:87:ed:ba:03:2a:47:5e:4b:57:6c:ff:1f:
         2d:00:93:ca:01:b6:a5:b7:05:21:c3:99:c4:c9:3c:ce:83:4b:
         31:42:14:5a:26:0a:76:27:f6:26:cd:d8:9e:d1:35:26:7b:65:
         92:45:62:43:8e:c4:34:5c:82:0a:bd:d3:ab:d2:f8:fb:db:f5:
         07:9e:eb:6e:a6:20:5e:52:08:6b:e6:ea:f3:d2:34:9e:41:bc:
         45:f6:53:49:93:b8:86:5b:f0:e3:f5:7d:19:63:a0:e8:87:38:
         c3:c9:28:f2:05:58:36:98:08:a3:a3:8a:69:e3:d0:ba:61:e7:
         d6:7f:57:7e:bf:66:3b:72:8f:4b:49:75:a0:96:b4:ea:62:38:
         55:52:b8:65:3b:5e:4e:99:c9:00:09:51:7a:81:cc:77:5f:a6:
         cb:71:c9:10:46:0d:23:06:a4:5d:ef:ae:fd:06:e9:80:67:dc:
         17:0d:20:a8:a2:85:c2:d1:95:30:30:39:49:60:82:70:1e:f0:
         01:49:e6:f5:03:ae:5a:0f:d7:7e:aa:34:7f:86:6f:9c:0e:12:
         17:85:35:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHfG6V8yp35ea/o0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
OTdhOTIwZGMtYTY4Yy00ZDM5LTgxNDUtZTdjNmEyNzc1NzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZzfyUN3eZmhxTscTcOjEakOUZfKaUZdT8QB
Mjt1AlZ6PEWbnwGrMBWOpVwJB6zE6wZcVuROz0wBB+0CQ37O4uQRgncIRoBV69bE
v5PiWtCjXkDnnHqvfZQtvjBcCpG7tp6rkxjHWMaj/FdCfDnIO1k+6lfVHKQ1I+bX
RI8Rukf5Kv05HKm7eTg/UdiI9UQKOfO3CnZoM2gy+CMhsj5f6U05TjMe9VQJsknX
VTtoZnf40T6fPF0Eoq7fZ6DDU/PNIb+DdgQSaAShCThxrN6eBIWzFEKH5Lf4jcE+
GH2KxBXk+fB9kLAietEDP8m3vLjNT5YPG9+OQKaTG9BFk2TgcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG8TQU/ZKA4HZhKkgIps1nLFornmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvZDUzMTdkYmMtNWQ5YS0z
NGZhLWE2ZmQtZTE0ZDZkZjAwZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7VAFG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADDDZyF4ZzMvNgvqprY3OCBwaXK4xLNRoaPBqo2q+TiX4NEr/TTe
oZIU14ftugMqR15LV2z/Hy0Ak8oBtqW3BSHDmcTJPM6DSzFCFFomCnYn9ibN2J7R
NSZ7ZZJFYkOOxDRcggq906vS+Pvb9Qee626mIF5SCGvm6vPSNJ5BvEX2U0mTuIZb
8OP1fRljoOiHOMPJKPIFWDaYCKOjimnj0Lph59Z/V36/Zjtyj0tJdaCWtOpiOFVS
uGU7Xk6ZyQAJUXqBzHdfpstxyRBGDSMGpF3vrv0G6YBn3BcNIKiihcLRlTAwOUlg
gnAe8AFJ5vUDrloP136qNH+Gb5wOEheFNQ8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:25 2025 by rpki-client