Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/a835063b-cffd-3897-a165-8c038e531278.roa
File:                     a835063b-cffd-3897-a165-8c038e531278.roa (raw, json)
Hash identifier:          kh0bU6pM1X8GR+ch6VQFJzJi1gu/m3ulmBtT6dQXLao=
Subject key identifier:   45:4D:4E:BF:21:CE:A6:40:8C:D2:F2:9E:A0:10:2D:FB:2D:AB:53:CD
Certificate issuer:       /CN=b519abcf-d882-4fdb-9883-ac524c0180b1
Certificate serial:       010D0C9F4328584ACE0BA3EE59A46D1C7116EF00
Authority key identifier: AF:CB:79:A6:E3:30:59:4F:42:46:B5:9F:10:98:79:FA:41:68:22:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/a835063b-cffd-3897-a165-8c038e531278.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     26692
IP address blocks:        2602:fa8e::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/b519abcf-d882-4fdb-9883-ac524c0180b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/b519abcf-d882-4fdb-9883-ac524c0180b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a3:ee:59:a4:6d:1c:71:16:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b519abcf-d882-4fdb-9883-ac524c0180b1
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=b99ee763-1109-4115-a1ea-0da0861f7570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:04:62:65:42:bc:2f:6a:49:c2:05:94:0c:
                    94:e6:36:88:d8:91:14:cf:d4:70:d6:e6:51:ea:b3:
                    ef:f9:72:27:7b:79:01:b8:7c:a6:82:88:e7:48:f5:
                    96:b5:6f:2e:ae:1e:ab:4d:3c:04:01:82:81:9d:29:
                    69:0a:be:58:4d:93:84:44:55:c3:70:46:e7:24:1a:
                    8a:05:50:ef:94:a0:85:83:d8:c2:62:d7:34:29:17:
                    4c:34:f1:6e:3f:e5:f1:14:f2:4c:a6:19:41:21:38:
                    43:53:22:ca:24:fb:41:53:94:72:55:85:85:b5:37:
                    8a:06:6d:e2:48:a7:91:76:21:ec:ea:ed:b4:1e:0b:
                    6e:7b:44:8b:1f:8a:bf:45:27:57:d1:cd:2d:58:9f:
                    9d:36:e7:8a:80:c4:cc:f0:fc:9b:9e:72:cb:68:bd:
                    fc:56:8e:0f:5c:02:35:67:cd:55:e2:f5:31:0b:55:
                    04:f9:07:0d:09:dc:8b:c7:29:39:3b:11:56:d2:50:
                    a1:58:5f:8e:42:be:d6:bf:f1:3c:f3:8d:07:21:b2:
                    52:83:c4:ef:a4:9f:a6:10:73:b8:31:22:69:4a:64:
                    85:0e:98:51:70:64:fb:bd:63:9e:58:62:b2:97:86:
                    64:9c:18:06:ac:e7:ff:4e:1c:7d:84:26:e7:27:3f:
                    61:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4D:4E:BF:21:CE:A6:40:8C:D2:F2:9E:A0:10:2D:FB:2D:AB:53:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/a835063b-cffd-3897-a165-8c038e531278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/b519abcf-d882-4fdb-9883-ac524c0180b1.crl

            X509v3 Authority Key Identifier:
                keyid:AF:CB:79:A6:E3:30:59:4F:42:46:B5:9F:10:98:79:FA:41:68:22:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8e::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:cb:08:30:c2:a0:0e:8a:2a:87:21:4e:ad:47:fc:42:8b:0b:
         67:b0:c3:0e:f9:26:46:ca:55:13:8d:14:aa:c9:52:af:4b:97:
         18:3a:44:ab:53:eb:aa:05:df:f5:03:66:97:e8:77:32:f1:99:
         99:03:29:c1:61:98:2b:5e:9d:0a:31:64:7e:06:81:39:1d:81:
         b9:b0:f8:68:cd:8a:e6:c7:df:bc:7c:10:ac:51:26:e0:34:7d:
         2b:99:76:f8:9a:e6:db:ea:2e:7f:df:40:b1:89:fb:ab:57:7a:
         0f:cf:32:b6:7d:6b:49:93:bc:21:f5:06:26:94:f9:a5:99:6f:
         29:e5:e8:60:a4:a8:4f:d8:42:a5:b5:be:7d:22:53:75:32:91:
         4b:a9:f1:f4:57:22:22:f4:63:84:af:15:88:24:f6:6e:8f:79:
         5b:3b:61:37:de:e7:a5:b6:2f:6b:41:9d:29:63:db:56:d4:e9:
         c3:fc:a0:6c:a7:87:91:82:a3:55:91:f9:4a:d3:a8:16:3d:e5:
         2f:cc:95:d3:b2:21:d2:ef:71:d8:a5:13:ad:41:ca:61:f0:bb:
         23:f0:7f:37:f0:60:da:6b:05:88:5d:3c:ae:32:61:51:ac:d5:
         d4:83:b3:3d:2b:24:e1:93:d0:ef:d6:1f:47:50:12:cd:92:c6:
         25:4f:2b:6e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErOC6PuWaRtHHEW7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUxOWFiY2YtZDg4Mi00ZmRiLTk4ODMtYWM1MjRjMDE4
MGIxMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
Yjk5ZWU3NjMtMTEwOS00MTE1LWExZWEtMGRhMDg2MWY3NTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+gEYmVCvC9qScIFlAyU5jaI2JEUz9Rw1uZR
6rPv+XIne3kBuHymgojnSPWWtW8urh6rTTwEAYKBnSlpCr5YTZOERFXDcEbnJBqK
BVDvlKCFg9jCYtc0KRdMNPFuP+XxFPJMphlBIThDUyLKJPtBU5RyVYWFtTeKBm3i
SKeRdiHs6u20Hgtue0SLH4q/RSdX0c0tWJ+dNueKgMTM8PybnnLLaL38Vo4PXAI1
Z81V4vUxC1UE+QcNCdyLxyk5OxFW0lChWF+OQr7Wv/E8840HIbJSg8TvpJ+mEHO4
MSJpSmSFDphRcGT7vWOeWGKyl4ZknBgGrOf/Thx9hCbnJz9h4QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEVNTr8hzqZAjNLynqAQLfstq1PNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNTE5
YWJjZi1kODgyLTRmZGItOTg4My1hYzUyNGMwMTgwYjEvYTgzNTA2M2ItY2ZmZC0z
ODk3LWExNjUtOGMwMzhlNTMxMjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjUxOWFiY2YtZDg4Mi00ZmRiLTk4
ODMtYWM1MjRjMDE4MGIxL2I1MTlhYmNmLWQ4ODItNGZkYi05ODgzLWFjNTI0YzAx
ODBiMS5jcmwwHwYDVR0jBBgwFoAUr8t5puMwWU9CRrWfEJh5+kFoIuMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNTE5YWJjZi1kODgyLTRmZGItOTg4My1hYzUy
NGMwMTgwYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgL6jgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAissIMMKgDooqhyFOrUf8QosLZ7DDDvkmRspVE40UqslSr0uXGDpE
q1PrqgXf9QNml+h3MvGZmQMpwWGYK16dCjFkfgaBOR2BubD4aM2K5sffvHwQrFEm
4DR9K5l2+Jrm2+ouf99AsYn7q1d6D88ytn1rSZO8IfUGJpT5pZlvKeXoYKSoT9hC
pbW+fSJTdTKRS6nx9FciIvRjhK8ViCT2bo95WzthN97npbYva0GdKWPbVtTpw/yg
bKeHkYKjVZH5StOoFj3lL8yV07Ih0u9x2KUTrUHKYfC7I/B/N/Bg2msFiF08rjJh
UazV1IOzPSsk4ZPQ79YfR1ASzZLGJU8rbg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:24 2025 by rpki-client