Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/15c3d643-97ef-3423-a734-50fcae0488f8.roa
File:                     15c3d643-97ef-3423-a734-50fcae0488f8.roa (raw, json)
Hash identifier:          0Y5I/gIWNUjpd1gtn8l8yOhMqtjYBsKBbk6p2VHzTvI=
Subject key identifier:   A1:44:8C:09:CC:F8:2D:CA:23:10:59:AA:9A:04:47:71:80:30:5E:1C
Certificate issuer:       /CN=8c2edafd-cabf-41fb-a360-7f06dd982529
Certificate serial:       010D0C9F4328584AD5065D7CD6B0D4D3B8285880
Authority key identifier: 82:81:2B:E4:FB:03:3A:95:F7:77:E0:7F:55:59:95:AD:59:04:4F:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/15c3d643-97ef-3423-a734-50fcae0488f8.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     397454
IP address blocks:        2605:3440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/8c2edafd-cabf-41fb-a360-7f06dd982529.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/8c2edafd-cabf-41fb-a360-7f06dd982529.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:5d:7c:d6:b0:d4:d3:b8:28:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2edafd-cabf-41fb-a360-7f06dd982529
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=f0a8a9fa-8c0d-468c-9dee-8124c4c0127e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b9:d0:e3:a4:da:19:d0:f3:37:7a:9e:f1:61:
                    64:2d:3a:d0:b9:65:f6:4a:5c:3a:52:0e:92:03:3b:
                    69:b5:e2:00:b3:75:11:d5:87:83:f8:df:1e:42:1a:
                    49:e6:4e:8e:ca:41:e5:6f:50:12:4f:a7:a9:7f:30:
                    a1:30:83:4d:57:46:3b:fc:d0:0c:a6:2f:63:bc:9b:
                    07:29:df:dc:f4:69:49:40:42:6f:c8:da:d1:88:03:
                    80:31:d8:76:37:6b:75:9d:08:54:60:d1:e6:ce:e4:
                    b9:a1:4b:4b:4d:13:bb:8c:a4:47:92:49:cf:79:79:
                    33:27:1f:53:5e:a1:9e:b9:51:94:19:3c:e8:f7:ef:
                    91:c7:f7:41:51:87:8c:b1:9d:42:54:76:64:63:3a:
                    d4:f6:b8:dc:d8:d5:15:93:7f:f5:96:f5:49:17:05:
                    6b:4e:9d:8e:60:9b:58:33:ca:b0:4b:14:08:f5:4d:
                    f3:92:b2:63:ad:a2:6a:3a:9a:19:b9:0c:0d:cf:9b:
                    fd:60:08:f6:8c:02:e3:ce:79:a7:48:e1:2d:34:90:
                    ae:32:7e:43:6c:d8:17:5a:62:37:3f:b4:e3:9e:d0:
                    09:f7:99:d6:76:c6:44:32:8c:9b:b5:5e:3c:cb:0f:
                    b2:78:df:18:c4:64:2b:02:b9:09:2f:4a:4d:22:aa:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:44:8C:09:CC:F8:2D:CA:23:10:59:AA:9A:04:47:71:80:30:5E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/15c3d643-97ef-3423-a734-50fcae0488f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/8c2edafd-cabf-41fb-a360-7f06dd982529.crl

            X509v3 Authority Key Identifier:
                keyid:82:81:2B:E4:FB:03:3A:95:F7:77:E0:7F:55:59:95:AD:59:04:4F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:69:5a:bd:de:f3:5f:33:4f:7e:a2:25:62:99:00:53:2f:
         46:61:5c:6f:5b:c2:93:c2:61:8d:6e:c5:14:00:a9:c2:66:b9:
         12:6d:99:7d:4b:81:73:31:bc:8e:74:b4:03:a8:97:fe:55:60:
         f3:5f:c2:9b:c8:49:8a:ad:b7:69:3d:a1:26:9a:90:94:6c:dc:
         e1:89:1d:3a:45:01:9d:ad:b6:02:34:b2:af:9b:5a:65:24:8d:
         d4:40:5f:79:43:ad:21:77:c3:bc:80:a4:43:5c:c0:08:52:66:
         1f:f5:56:e5:1d:e1:8a:a8:1d:21:a5:b6:68:f2:1c:5b:98:0f:
         ed:68:21:a2:fa:ee:96:b3:ff:a7:39:2b:7a:e8:9c:33:2e:fc:
         2f:05:66:9e:80:9b:6f:28:62:bd:49:98:17:a3:98:67:42:e7:
         66:ba:7e:9d:09:3e:f7:af:66:65:b3:78:d0:38:d8:e3:28:5f:
         1f:f5:fa:16:a0:7f:b7:09:82:b0:77:69:1e:43:69:11:4e:8b:
         37:93:1d:23:3e:af:92:b2:2f:3e:15:9a:19:2a:8e:54:d5:ed:
         8c:55:90:d5:09:4f:1b:24:e8:70:19:c2:4f:79:a7:40:7b:f0:
         0e:8e:5b:10:76:45:39:2f:4b:ac:ba:1f:1e:98:25:26:7d:18:
         9a:60:46:ae
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErVBl181rDU07goWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGMyZWRhZmQtY2FiZi00MWZiLWEzNjAtN2YwNmRkOTgy
NTI5MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk
ZjBhOGE5ZmEtOGMwZC00NjhjLTlkZWUtODEyNGM0YzAxMjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLnQ46TaGdDzN3qe8WFkLTrQuWX2Slw6Ug6S
AztpteIAs3UR1YeD+N8eQhpJ5k6OykHlb1AST6epfzChMINNV0Y7/NAMpi9jvJsH
Kd/c9GlJQEJvyNrRiAOAMdh2N2t1nQhUYNHmzuS5oUtLTRO7jKRHkknPeXkzJx9T
XqGeuVGUGTzo9++Rx/dBUYeMsZ1CVHZkYzrU9rjc2NUVk3/1lvVJFwVrTp2OYJtY
M8qwSxQI9U3zkrJjraJqOpoZuQwNz5v9YAj2jALjznmnSOEtNJCuMn5DbNgXWmI3
P7TjntAJ95nWdsZEMoybtV48yw+yeN8YxGQrArkJL0pNIqqSoQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKFEjAnM+C3KIxBZqpoER3GAMF4cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YzJl
ZGFmZC1jYWJmLTQxZmItYTM2MC03ZjA2ZGQ5ODI1MjkvMTVjM2Q2NDMtOTdlZi0z
NDIzLWE3MzQtNTBmY2FlMDQ4OGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGMyZWRhZmQtY2FiZi00MWZiLWEz
NjAtN2YwNmRkOTgyNTI5LzhjMmVkYWZkLWNhYmYtNDFmYi1hMzYwLTdmMDZkZDk4
MjUyOS5jcmwwHwYDVR0jBBgwFoAUgoEr5PsDOpX3d+B/VVmVrVkET78wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84YzJlZGFmZC1jYWJmLTQxZmItYTM2MC03ZjA2
ZGQ5ODI1MjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgU0QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBja2lavd7zXzNPfqIlYpkAUy9GYVxvW8KTwmGNbsUUAKnCZrkSbZl9
S4FzMbyOdLQDqJf+VWDzX8KbyEmKrbdpPaEmmpCUbNzhiR06RQGdrbYCNLKvm1pl
JI3UQF95Q60hd8O8gKRDXMAIUmYf9VblHeGKqB0hpbZo8hxbmA/taCGi+u6Ws/+n
OSt66JwzLvwvBWaegJtvKGK9SZgXo5hnQudmun6dCT73r2Zls3jQONjjKF8f9foW
oH+3CYKwd2keQ2kRTos3kx0jPq+Ssi8+FZoZKo5U1e2MVZDVCU8bJOhwGcJPeadA
e/AOjlsQdkU5L0usuh8emCUmfRiaYEau
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:56:16 2025 by rpki-client