Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/dcfddeaf-43b7-3dee-9381-6d8d6c32e17d.roa
File:                     dcfddeaf-43b7-3dee-9381-6d8d6c32e17d.roa (raw, json)
Hash identifier:          HoQ4pvUlF1CFZSdDX27P+a37ocmcT3o5bLP9E+vIDQw=
Subject key identifier:   4F:32:36:63:F7:93:26:7C:F4:69:96:D1:C1:82:C8:43:11:31:6A:4A
Certificate issuer:       /CN=15756508-6a6f-4a84-9002-5dec8cf1467b
Certificate serial:       010D0C9F4328584B39870ABE9B47D5F382B16F80
Authority key identifier: 94:E8:81:09:DC:EE:69:B2:A4:EC:D0:2C:7C:AB:D2:98:9A:C3:1A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/dcfddeaf-43b7-3dee-9381-6d8d6c32e17d.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     36598
IP address blocks:        2602:ff2f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/15756508-6a6f-4a84-9002-5dec8cf1467b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/15756508-6a6f-4a84-9002-5dec8cf1467b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:0a:be:9b:47:d5:f3:82:b1:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15756508-6a6f-4a84-9002-5dec8cf1467b
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=aaec1fd8-a2c8-4a57-a49f-c601e1e5c3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fd:8d:45:9d:aa:79:56:f0:8b:10:1d:b6:fb:
                    78:3c:1e:dd:e5:36:3d:8d:3a:99:3d:d7:20:b0:2f:
                    56:98:49:2b:64:15:fb:f1:9d:41:e6:94:a5:cb:23:
                    f6:37:d8:ae:51:49:26:ce:32:92:b2:fc:fa:86:80:
                    a0:28:8e:e5:a1:1f:76:12:88:22:34:0e:6b:b6:ae:
                    95:5b:24:88:1a:47:3b:e1:d7:c5:b0:17:5d:a8:da:
                    03:cc:19:15:bc:32:f6:c4:a6:a0:c0:21:e5:be:42:
                    64:50:ca:62:e0:1d:26:7a:2b:70:69:d0:e7:88:05:
                    02:49:64:46:16:69:77:8e:c5:bb:57:69:37:d4:08:
                    58:ad:89:77:6c:b9:a8:ab:f2:a5:af:0b:21:1b:d4:
                    da:bf:20:ed:bf:be:97:c1:bc:96:5c:a0:54:2e:b7:
                    c7:58:49:c5:e9:a4:89:da:b1:43:b2:0d:f7:31:ed:
                    15:0d:58:24:38:c8:89:bb:89:8f:f2:c0:4e:71:91:
                    e2:e4:57:df:07:dd:72:8a:14:83:33:2c:e8:17:85:
                    5c:f1:c4:c7:fd:97:6f:e7:97:01:f5:94:a6:fc:86:
                    40:f1:e3:74:cb:ca:e0:8f:a1:dd:20:d0:f0:c5:e0:
                    3f:e7:68:b4:8c:a0:d7:18:c3:3b:20:b0:43:9a:a3:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:32:36:63:F7:93:26:7C:F4:69:96:D1:C1:82:C8:43:11:31:6A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/dcfddeaf-43b7-3dee-9381-6d8d6c32e17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/15756508-6a6f-4a84-9002-5dec8cf1467b.crl

            X509v3 Authority Key Identifier:
                keyid:94:E8:81:09:DC:EE:69:B2:A4:EC:D0:2C:7C:AB:D2:98:9A:C3:1A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff2f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:87:a1:7c:8b:a5:2f:d3:2f:0c:da:ae:5f:2a:2f:7a:c4:e7:
         37:b4:19:3d:b9:b6:32:aa:37:b3:93:19:40:97:ba:8b:6a:c0:
         e9:b1:d4:bc:8c:32:3f:11:a5:32:07:6f:15:28:66:ef:81:bb:
         4c:50:76:74:54:a1:6f:5b:49:22:fe:d8:2e:ce:93:40:80:d6:
         6b:66:bf:53:63:10:1d:7d:4e:1f:3b:ce:f5:07:54:60:6a:85:
         2c:3f:3a:42:3b:e3:5c:86:56:9a:c4:13:6e:3f:5e:60:04:56:
         55:c0:5d:ef:d5:79:0a:e5:a0:fd:d4:fe:34:06:7c:f7:f6:43:
         a8:bf:c1:54:81:ef:b2:dc:0f:d7:dc:50:67:b0:b7:5e:a7:dd:
         fb:c1:e5:3a:6e:bb:68:0d:87:38:02:34:d0:67:53:44:4a:10:
         c3:61:75:ce:e0:98:42:9e:47:cd:83:b3:2a:05:a3:ec:3b:10:
         35:ee:40:b8:e9:9b:d3:46:11:ed:db:39:38:99:a4:00:54:b0:
         0d:e7:3a:14:ec:27:37:a9:22:00:d9:7a:b3:00:93:99:04:38:
         6a:0c:e2:42:c7:41:27:fc:75:5b:80:68:25:6b:8e:96:29:63:
         b6:d7:60:2c:02:fb:39:d9:1d:51:2f:cf:00:a2:fa:18:94:bc:
         5c:dc:e9:b4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs5hwq+m0fV84Kxb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU3NTY1MDgtNmE2Zi00YTg0LTkwMDItNWRlYzhjZjE0
NjdiMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk
YWFlYzFmZDgtYTJjOC00YTU3LWE0OWYtYzYwMWUxZTVjM2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7P2NRZ2qeVbwixAdtvt4PB7d5TY9jTqZPdcg
sC9WmEkrZBX78Z1B5pSlyyP2N9iuUUkmzjKSsvz6hoCgKI7loR92EogiNA5rtq6V
WySIGkc74dfFsBddqNoDzBkVvDL2xKagwCHlvkJkUMpi4B0meitwadDniAUCSWRG
Fml3jsW7V2k31AhYrYl3bLmoq/KlrwshG9TavyDtv76XwbyWXKBULrfHWEnF6aSJ
2rFDsg33Me0VDVgkOMiJu4mP8sBOcZHi5FffB91yihSDMyzoF4Vc8cTH/Zdv55cB
9ZSm/IZA8eN0y8rgj6HdINDwxeA/52i0jKDXGMM7ILBDmqNqswIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE8yNmP3kyZ89GmW0cGCyEMRMWpKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTc1
NjUwOC02YTZmLTRhODQtOTAwMi01ZGVjOGNmMTQ2N2IvZGNmZGRlYWYtNDNiNy0z
ZGVlLTkzODEtNmQ4ZDZjMzJlMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU3NTY1MDgtNmE2Zi00YTg0LTkw
MDItNWRlYzhjZjE0NjdiLzE1NzU2NTA4LTZhNmYtNGE4NC05MDAyLTVkZWM4Y2Yx
NDY3Yi5jcmwwHwYDVR0jBBgwFoAUlOiBCdzuabKk7NAsfKvSmJrDGjYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTc1NjUwOC02YTZmLTRhODQtOTAwMi01ZGVj
OGNmMTQ2N2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/LwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnIehfIulL9MvDNquXyovesTnN7QZPbm2Mqo3s5MZQJe6i2rA6bHU
vIwyPxGlMgdvFShm74G7TFB2dFShb1tJIv7YLs6TQIDWa2a/U2MQHX1OHzvO9QdU
YGqFLD86QjvjXIZWmsQTbj9eYARWVcBd79V5CuWg/dT+NAZ89/ZDqL/BVIHvstwP
19xQZ7C3Xqfd+8HlOm67aA2HOAI00GdTREoQw2F1zuCYQp5HzYOzKgWj7DsQNe5A
uOmb00YR7ds5OJmkAFSwDec6FOwnN6kiANl6swCTmQQ4agziQsdBJ/x1W4BoJWuO
liljttdgLAL7OdkdUS/PAKL6GJS8XNzptA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:22 2025 by rpki-client