Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/6a99ba37-8293-3f02-b18e-0d3eb3d70579.roa
File:                     6a99ba37-8293-3f02-b18e-0d3eb3d70579.roa (raw, json)
Hash identifier:          qfsCSSvkaYC520lvDI9o3jIOHGBhewHwdh7pHKFNprY=
Subject key identifier:   FF:19:45:AC:B1:96:C8:13:33:B5:86:70:15:14:25:BF:7F:4C:99:EB
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF5213F8350B6E2B13648BA00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/6a99ba37-8293-3f02-b18e-0d3eb3d70579.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:20a1::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:3f:83:50:b6:e2:b1:36:48:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=9f552574-67ab-4135-830e-3c686ba51e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:f4:85:61:de:da:3d:5d:e5:21:37:36:4c:
                    84:6e:24:ad:1a:5d:7b:77:5c:cc:9f:9c:d2:41:8a:
                    e0:5a:ea:da:d2:ae:24:ed:af:36:06:96:94:0f:94:
                    32:3f:bf:ef:39:fe:67:2e:9e:27:c9:b6:51:4c:6e:
                    0b:b2:f2:a6:41:37:5e:19:fd:a2:d5:0f:0b:c2:58:
                    42:84:0f:0f:8a:9b:c0:19:44:71:3c:1b:60:f6:d2:
                    2e:e1:6f:53:ed:25:3d:be:87:3d:34:09:a2:da:4c:
                    2b:13:c5:39:80:20:a7:a4:7a:62:06:aa:a8:75:d6:
                    29:15:7e:67:ab:c7:05:b5:f5:a0:18:e2:0d:e8:f7:
                    91:6d:3e:f0:39:76:43:7b:ed:b9:69:8e:f1:45:97:
                    06:d7:16:7c:2e:d7:c3:66:e9:df:c2:34:9b:f8:5d:
                    7a:d3:0a:d9:cc:ea:4b:9b:56:0e:24:70:46:86:bb:
                    3b:12:6c:52:1b:38:47:2b:85:4b:fa:f8:30:45:2c:
                    a6:4d:b8:fd:9d:8d:5a:a6:e0:68:cf:7a:67:bf:f4:
                    2a:fb:aa:5c:ab:b5:a3:4e:c4:55:b2:e8:6e:46:79:
                    bb:31:f1:11:c7:4a:31:6c:1d:55:92:a9:4f:a4:3f:
                    ac:8f:b8:77:aa:3c:a5:1c:1f:28:22:87:0f:19:7a:
                    ad:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:19:45:AC:B1:96:C8:13:33:B5:86:70:15:14:25:BF:7F:4C:99:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/6a99ba37-8293-3f02-b18e-0d3eb3d70579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:d1:3b:96:ce:64:5a:73:b3:1f:81:2f:94:6a:06:9c:de:
         d0:a6:63:9c:91:57:fd:ac:54:7c:2e:d2:e5:c4:12:1d:67:77:
         2c:27:78:26:e1:d7:4e:de:97:ee:8e:1b:ec:2a:a6:01:46:73:
         cc:62:43:71:da:12:70:99:ee:8e:4c:dc:41:48:21:f9:2a:93:
         4a:7f:da:3c:68:d8:4d:82:6f:ee:94:ca:8c:e8:dd:76:98:d2:
         35:4b:30:bd:46:29:5b:22:63:83:7c:20:1a:85:a7:dc:b0:ce:
         ed:c2:25:ee:e2:9f:31:a0:dd:9f:66:c4:9e:5d:9b:a1:25:d7:
         32:1c:7d:6e:0c:da:91:52:dc:70:67:56:4b:cd:11:29:25:30:
         cf:79:cb:80:91:56:e3:e9:1f:95:f7:76:e4:e1:9a:5d:88:c0:
         c4:ce:64:d0:9a:e9:1c:33:cd:74:d0:19:63:12:61:4b:17:74:
         99:8c:ac:c0:61:4c:0b:54:fe:41:20:93:8f:03:c3:85:e4:6b:
         9e:29:33:88:2b:a8:35:fd:27:05:eb:04:93:45:71:96:df:3b:
         e6:ed:41:a6:3b:5e:18:fd:f1:4b:f9:71:d4:25:45:48:34:88:
         bc:77:3b:17:15:eb:e0:1a:6c:42:29:2a:0e:96:b4:a4:5b:72:
         13:90:b3:89
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr1IT+DULbisTZIugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
OWY1NTI1NzQtNjdhYi00MTM1LTgzMGUtM2M2ODZiYTUxZTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLj0hWHe2j1d5SE3NkyEbiStGl17d1zMn5zS
QYrgWura0q4k7a82BpaUD5QyP7/vOf5nLp4nybZRTG4LsvKmQTdeGf2i1Q8LwlhC
hA8PipvAGURxPBtg9tIu4W9T7SU9voc9NAmi2kwrE8U5gCCnpHpiBqqoddYpFX5n
q8cFtfWgGOIN6PeRbT7wOXZDe+25aY7xRZcG1xZ8LtfDZunfwjSb+F160wrZzOpL
m1YOJHBGhrs7EmxSGzhHK4VL+vgwRSymTbj9nY1apuBoz3pnv/Qq+6pcq7WjTsRV
suhuRnm7MfERx0oxbB1VkqlPpD+sj7h3qjylHB8oIocPGXqtqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP8ZRayxlsgTM7WGcBUUJb9/TJnrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvNmE5OWJhMzctODI5My0z
ZjAyLWIxOGUtMGQzZWIzZDcwNTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCCh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACyf0TuWzmRac7MfgS+Uagac3tCmY5yRV/2sVHwu0uXEEh1ndywn
eCbh107el+6OG+wqpgFGc8xiQ3HaEnCZ7o5M3EFIIfkqk0p/2jxo2E2Cb+6Uyozo
3XaY0jVLML1GKVsiY4N8IBqFp9ywzu3CJe7inzGg3Z9mxJ5dm6El1zIcfW4M2pFS
3HBnVkvNESklMM95y4CRVuPpH5X3duThml2IwMTOZNCa6RwzzXTQGWMSYUsXdJmM
rMBhTAtU/kEgk48Dw4Xka54pM4grqDX9JwXrBJNFcZbfO+btQaY7Xhj98Uv5cdQl
RUg0iLx3OxcV6+AabEIpKg6WtKRbchOQs4k=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:59:08 2025 by rpki-client