Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
File:                     62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa (raw, json)
Hash identifier:          0nv1PqhWrMoCfzspKdC6Kq2ll7voZnFgcMbcBq6aPLU=
Subject key identifier:   A4:E9:C7:2E:ED:45:25:7F:5A:07:C6:50:E3:B4:3F:AE:79:C1:DC:99
Certificate issuer:       /CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
Certificate serial:       010D0C9F4328584B5141C1D6ECF68572AB72AF00
Authority key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     399525
IP address blocks:        2602:fc9e::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:c1:d6:ec:f6:85:72:ab:72:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=97baa8f9-a79d-4dee-98cb-f3c9980d3141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:20:95:09:e1:93:98:b9:ad:f9:67:23:f8:
                    58:95:8e:5e:8e:b2:cf:6e:60:b8:e4:d4:68:d3:6f:
                    29:f4:e4:9d:d8:d5:1f:f2:cf:49:3a:e2:13:8b:31:
                    dc:57:bb:52:e8:2f:47:65:09:e7:ae:fd:b4:f1:2f:
                    f3:31:59:c6:ab:df:06:05:3d:22:db:15:db:a7:ba:
                    fb:46:52:4f:ad:30:2e:7e:4d:67:83:c3:69:b3:44:
                    29:0a:93:f0:90:e4:26:07:85:27:44:20:c9:18:aa:
                    5e:f2:e8:27:38:5c:dd:03:0e:40:f4:12:68:59:f5:
                    4a:72:1f:91:99:55:f0:b9:85:5c:a2:d8:ab:ec:a1:
                    7e:f7:4f:79:59:a8:b8:0b:13:bb:e0:20:fb:e8:3f:
                    e2:40:79:d8:94:a3:16:ec:82:05:22:94:0d:a4:8d:
                    bd:cc:47:80:1e:e5:bb:99:29:9b:9f:08:23:33:04:
                    1e:42:e0:5d:0c:80:cd:23:0a:a1:cc:c9:16:d7:2c:
                    b3:2c:85:3b:09:81:58:84:c7:6a:3a:c1:76:b5:b8:
                    31:ab:85:51:dc:12:80:b7:65:07:87:3e:ca:d1:c8:
                    08:d4:a0:80:ff:6e:2c:4f:cf:b1:f2:c4:ed:56:c0:
                    14:20:28:da:93:d0:db:fd:b5:ae:50:bc:51:ff:e7:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E9:C7:2E:ED:45:25:7F:5A:07:C6:50:E3:B4:3F:AE:79:C1:DC:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl

            X509v3 Authority Key Identifier:
                keyid:FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc9e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:96:26:72:b6:e2:14:40:f0:ff:9f:f4:70:f2:42:2c:34:85:
         48:7b:c1:0b:b5:ce:bf:a6:b2:0d:f9:d1:9d:44:8a:8c:3e:2e:
         9e:85:22:4f:bd:92:3a:0e:cc:f2:dd:17:ba:c4:23:29:b6:14:
         12:40:f8:67:b1:e8:51:cf:57:e7:a5:89:15:65:24:f1:72:6b:
         e7:b1:d0:5f:af:73:70:d4:d5:93:c8:b7:89:1b:fc:0e:57:08:
         30:9a:8d:ef:54:0c:fa:41:eb:ba:46:ed:7f:df:fc:d8:4f:c2:
         56:53:24:1f:b2:8a:e7:2e:00:a6:fe:02:43:07:7e:64:d5:14:
         e6:44:a7:53:62:4f:f3:a0:22:7a:bd:6c:8f:7f:91:8d:a4:93:
         d7:19:3f:53:7c:89:bf:83:43:cb:94:33:42:57:44:55:7b:bb:
         61:e3:45:22:e7:b0:19:b1:52:83:b7:2a:d0:77:de:b2:bb:59:
         50:17:2a:8c:35:41:d2:70:b2:51:2c:41:36:53:9b:f6:41:bb:
         29:8c:60:c4:84:b5:4c:aa:a9:70:54:73:12:0d:f8:f2:f6:27:
         4e:0e:44:8a:05:ff:bb:b4:24:79:ea:41:6a:8d:a6:1d:41:7e:
         51:f7:a7:23:06:52:5b:f1:e7:3b:e1:52:c4:16:ed:79:8d:ac:
         68:b0:e0:4b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtRQcHW7PaFcqtyrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWYxMjM5ZTYtM2FlNy00M2JlLTk2NmItMmY1Yjk2NzFj
MjlkMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
OTdiYWE4ZjktYTc5ZC00ZGVlLTk4Y2ItZjNjOTk4MGQzMTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09EglQnhk5i5rflnI/hYlY5ejrLPbmC45NRo
028p9OSd2NUf8s9JOuITizHcV7tS6C9HZQnnrv208S/zMVnGq98GBT0i2xXbp7r7
RlJPrTAufk1ng8Nps0QpCpPwkOQmB4UnRCDJGKpe8ugnOFzdAw5A9BJoWfVKch+R
mVXwuYVcotir7KF+9095Wai4CxO74CD76D/iQHnYlKMW7IIFIpQNpI29zEeAHuW7
mSmbnwgjMwQeQuBdDIDNIwqhzMkW1yyzLIU7CYFYhMdqOsF2tbgxq4VR3BKAt2UH
hz7K0cgI1KCA/24sT8+x8sTtVsAUICjak9Db/bWuULxR/+dJcwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKTpxy7tRSV/WgfGUOO0P655wdyZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lZjEy
MzllNi0zYWU3LTQzYmUtOTY2Yi0yZjViOTY3MWMyOWQvNjJiYTFiODAtMTc1MC0z
MGNjLWFlMDMtMGFkMmUxYzRmZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWYxMjM5ZTYtM2FlNy00M2JlLTk2
NmItMmY1Yjk2NzFjMjlkL2VmMTIzOWU2LTNhZTctNDNiZS05NjZiLTJmNWI5Njcx
YzI5ZC5jcmwwHwYDVR0jBBgwFoAU/L0bsopZ7ba7VJ2Dycy8rEO3tMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lZjEyMzllNi0zYWU3LTQzYmUtOTY2Yi0yZjVi
OTY3MWMyOWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8ngAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGJYmcrbiFEDw/5/0cPJCLDSFSHvBC7XOv6ayDfnRnUSKjD4unoUi
T72SOg7M8t0XusQjKbYUEkD4Z7HoUc9X56WJFWUk8XJr57HQX69zcNTVk8i3iRv8
DlcIMJqN71QM+kHrukbtf9/82E/CVlMkH7KK5y4Apv4CQwd+ZNUU5kSnU2JP86Ai
er1sj3+RjaST1xk/U3yJv4NDy5QzQldEVXu7YeNFIuewGbFSg7cq0HfesrtZUBcq
jDVB0nCyUSxBNlOb9kG7KYxgxIS1TKqpcFRzEg348vYnTg5EigX/u7QkeepBao2m
HUF+UfenIwZSW/HnO+FSxBbteY2saLDgSw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 17:59:01 2025 by rpki-client