Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/87654cdb-6a1c-358d-8cae-7f3770237693.roa
File:                     87654cdb-6a1c-358d-8cae-7f3770237693.roa (raw, json)
Hash identifier:          3/ja6bv6KoFPvHUiBbq5en0eh4R8f7cXsOSPipEm7vg=
Subject key identifier:   5A:86:33:B3:3D:88:1A:54:F3:08:D2:82:1C:B0:20:75:64:54:23:CE
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584AEE269DD727920283721732A4
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/87654cdb-6a1c-358d-8cae-7f3770237693.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     20473
IP address blocks:        2602:f66c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:9d:d7:27:92:02:83:72:17:32:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=1ec45628-7c3c-4160-97f3-c636757c3913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:9a:7d:53:69:9d:31:f2:12:93:45:d5:95:
                    e4:a8:06:94:30:37:3a:62:dc:bc:5e:53:1e:72:5a:
                    db:cb:9a:8f:f1:d2:2f:05:39:f7:bd:7c:80:e3:21:
                    ae:a8:ee:86:18:93:f0:72:5f:58:da:8a:89:78:76:
                    d1:dc:2e:4d:1f:1b:18:08:fb:d5:2c:af:95:b8:aa:
                    fe:eb:a1:9c:aa:fa:a0:32:ca:56:00:bb:b6:34:aa:
                    d7:7c:af:07:02:9a:d2:d5:b2:79:1b:ac:f0:46:c8:
                    53:76:60:7a:3d:d5:dc:db:eb:0e:5d:19:24:10:6f:
                    46:b5:c5:9e:85:ce:fc:91:a2:6a:36:26:11:f1:27:
                    8f:34:33:4d:95:9b:78:79:45:b9:5e:a7:11:6d:55:
                    a0:a0:d6:5a:a2:1e:cb:fa:92:4f:1c:44:bd:dd:2b:
                    fd:a6:1f:3f:e3:df:a4:15:b7:e5:7c:9a:53:15:80:
                    09:0d:50:72:2f:3b:5b:91:df:69:71:15:22:8f:fd:
                    0e:8a:3a:76:a6:06:4e:99:8c:a5:fb:96:01:6f:b8:
                    ef:e5:b7:07:52:32:72:32:d3:29:1c:0d:ce:d4:f2:
                    06:24:22:7f:f1:b6:c3:f8:47:ec:24:0a:68:60:72:
                    b6:21:77:64:77:57:a0:95:53:51:a4:4b:eb:8c:bd:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:86:33:B3:3D:88:1A:54:F3:08:D2:82:1C:B0:20:75:64:54:23:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/87654cdb-6a1c-358d-8cae-7f3770237693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:23:c3:01:12:63:f7:2a:0c:25:84:cd:37:72:ce:f7:4e:03:
         96:6b:91:58:2d:65:49:7e:db:8f:55:db:18:3a:75:01:c5:4d:
         9f:cd:88:4e:36:7b:11:e2:01:cd:58:c1:05:f4:4b:bb:e8:0c:
         36:2f:b3:88:5f:ad:21:01:5a:eb:9a:85:0e:5a:ab:46:64:cf:
         ec:ba:f6:46:ce:b7:d1:5f:72:51:8c:53:ac:39:80:d2:a1:c9:
         eb:f5:5b:d9:5d:58:f1:f4:92:c1:37:a6:7e:49:fb:54:de:25:
         c1:ec:97:f6:66:04:9f:e0:56:f1:86:47:0b:b3:87:a0:9d:76:
         e1:d6:b4:e8:56:6f:1e:27:c5:fb:a0:15:d9:85:f2:d6:8b:d8:
         d1:45:42:66:8c:8f:e1:df:f3:04:12:ed:9a:8e:77:cf:82:87:
         82:7e:ee:78:21:f5:ab:a3:41:43:07:1c:8b:a3:6c:9c:13:4e:
         53:0f:a5:96:d1:c7:36:94:b7:2c:76:99:78:39:96:d8:1d:91:
         fa:29:cf:dc:55:ac:7a:d6:48:85:e3:a1:80:08:d4:22:fa:07:
         c8:28:88:40:3a:8a:88:3e:87:a6:9e:d8:b5:23:c9:6f:51:84:
         e9:a8:ac:d4:d3:c7:36:aa:0a:25:40:21:43:07:12:4f:1c:07:
         4a:fe:7d:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEruJp3XJ5ICg3IXMqQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1
MjgxMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk
MWVjNDU2MjgtN2MzYy00MTYwLTk3ZjMtYzYzNjc1N2MzOTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXeafVNpnTHyEpNF1ZXkqAaUMDc6Yty8XlMe
clrby5qP8dIvBTn3vXyA4yGuqO6GGJPwcl9Y2oqJeHbR3C5NHxsYCPvVLK+VuKr+
66GcqvqgMspWALu2NKrXfK8HAprS1bJ5G6zwRshTdmB6PdXc2+sOXRkkEG9GtcWe
hc78kaJqNiYR8SePNDNNlZt4eUW5XqcRbVWgoNZaoh7L+pJPHES93Sv9ph8/49+k
FbflfJpTFYAJDVByLztbkd9pcRUij/0Oijp2pgZOmYyl+5YBb7jv5bcHUjJyMtMp
HA3O1PIGJCJ/8bbD+EfsJApoYHK2IXdkd1eglVNRpEvrjL11IwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFqGM7M9iBpU8wjSghywIHVkVCPOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl
MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvODc2NTRjZGItNmExYy0z
NThkLThjYWUtN2YzNzcwMjM3NjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0
ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw
NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx
NjEzMDUyODEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2bAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUiPDARJj9yoMJYTNN3LO904DlmuRWC1lSX7bj1XbGDp1AcVNn82I
TjZ7EeIBzVjBBfRLu+gMNi+ziF+tIQFa65qFDlqrRmTP7Lr2Rs630V9yUYxTrDmA
0qHJ6/Vb2V1Y8fSSwTemfkn7VN4lweyX9mYEn+BW8YZHC7OHoJ124da06FZvHifF
+6AV2YXy1ovY0UVCZoyP4d/zBBLtmo53z4KHgn7ueCH1q6NBQwcci6NsnBNOUw+l
ltHHNpS3LHaZeDmW2B2R+inP3FWsetZIheOhgAjUIvoHyCiIQDqKiD6Hpp7YtSPJ
b1GE6ais1NPHNqoKJUAhQwcSTxwHSv597Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:43 2025 by rpki-client