Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa
File:                     fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa (raw, json)
Hash identifier:          Y1xt6sephFu3xUQA+YxJyLrzL2pSGjnrXUMWl+qhWlo=
Subject key identifier:   C1:40:D9:EE:82:23:75:C6:30:58:B6:07:F9:DC:34:80:3A:E7:38:50
Certificate issuer:       /CN=efe14a74-8339-4fa1-885a-2ed37947399a
Certificate serial:       010D0C9F4328584B64CCC1CF07991FD62CB9F840
Authority key identifier: C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     198983
IP address blocks:        2602:fa59::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:c1:cf:07:99:1f:d6:2c:b9:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2615fd6a-f211-4d9d-a2ad-1d3816490b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:54:58:c3:db:fb:6d:e5:7c:78:80:89:f3:
                    ad:dd:57:8f:ce:ef:07:fb:c5:fd:cf:d2:8b:8f:72:
                    ff:aa:25:7d:f8:ba:4e:be:3f:11:d5:40:21:98:ba:
                    12:17:f6:20:82:d6:48:7f:f0:c8:69:4d:47:ad:3b:
                    6a:63:76:7e:8a:2f:7d:54:80:6d:3f:3d:13:ac:19:
                    1d:e9:78:44:df:46:7c:9a:5b:7f:e6:df:5b:67:e7:
                    65:5a:aa:77:f3:78:2e:06:36:4b:07:91:9d:75:20:
                    e8:91:ae:8c:54:be:ff:81:d5:8e:3c:20:37:ec:2d:
                    03:21:2b:0e:c2:b0:b2:77:09:be:32:58:a2:b8:96:
                    78:1d:e7:9c:04:b6:20:e0:8b:3e:37:d2:7a:25:d8:
                    3c:3f:b5:7a:79:65:75:95:0b:69:a0:63:f8:42:1f:
                    f7:ad:32:22:e3:94:96:1c:bf:c1:85:fe:2d:51:07:
                    f7:a5:66:b4:e9:c8:ae:da:28:94:18:da:b8:23:5e:
                    de:bb:74:df:fb:1a:fe:6d:cd:91:65:f0:28:df:4a:
                    9e:89:14:ce:d2:ef:fd:ac:0f:ab:18:46:75:0f:08:
                    62:a8:d0:ca:52:b6:fe:8e:bb:4e:b3:b7:be:1a:5f:
                    c2:26:43:93:e1:0b:a2:68:07:a1:93:6f:bc:7d:98:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:40:D9:EE:82:23:75:C6:30:58:B6:07:F9:DC:34:80:3A:E7:38:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/fed6d93f-9e64-3b05-92de-3bd2bbe5cd27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:93:c1:ef:87:4e:f1:07:ee:9c:03:81:90:bf:c7:2d:51:
         35:c6:22:c7:b8:92:03:e0:c0:5b:85:8e:24:bd:9b:f8:47:95:
         47:47:6a:28:b9:8a:f8:75:73:5d:08:08:fb:65:99:9a:d2:8a:
         5f:35:46:16:03:c5:ed:c8:44:03:9d:f6:63:bf:21:67:1d:7e:
         ff:85:b0:31:cd:bb:ae:a1:16:cc:3d:4b:6a:53:52:14:17:0c:
         0c:7d:31:c7:56:f6:2b:41:31:a2:b5:31:af:e5:6e:38:cd:f9:
         e7:b3:88:67:f5:07:4f:da:88:e1:90:2b:0c:62:a7:14:1a:07:
         58:4e:81:8e:ec:cc:6f:ae:8d:ab:15:c1:b6:f6:2b:7c:3b:b6:
         d6:a6:31:70:79:92:6a:8c:24:48:cd:6c:6c:62:b3:74:09:68:
         c6:e0:92:cc:5e:c4:24:a0:a9:de:a8:ad:49:eb:9f:29:e8:7d:
         11:da:ea:ae:bc:82:35:05:9a:5b:c1:08:f8:ed:aa:b3:8f:78:
         66:72:30:5a:4a:bc:69:c3:74:44:c0:32:fe:e2:a8:19:fa:50:
         36:26:93:57:00:fb:d8:e9:ed:52:4d:f8:2e:05:29:d0:cc:12:
         ee:7a:8a:58:88:cb:8a:c4:35:43:47:14:35:19:aa:55:3b:7d:
         cc:9f:ef:53
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzMHPB5kf1iy5+EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWZlMTRhNzQtODMzOS00ZmExLTg4NWEtMmVkMzc5NDcz
OTlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MjYxNWZkNmEtZjIxMS00ZDlkLWEyYWQtMWQzODE2NDkwYjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun1UWMPb+23lfHiAifOt3VePzu8H+8X9z9KL
j3L/qiV9+LpOvj8R1UAhmLoSF/YggtZIf/DIaU1HrTtqY3Z+ii99VIBtPz0TrBkd
6XhE30Z8mlt/5t9bZ+dlWqp383guBjZLB5GddSDoka6MVL7/gdWOPCA37C0DISsO
wrCydwm+MliiuJZ4HeecBLYg4Is+N9J6Jdg8P7V6eWV1lQtpoGP4Qh/3rTIi45SW
HL/Bhf4tUQf3pWa06ciu2iiUGNq4I17eu3Tf+xr+bc2RZfAo30qeiRTO0u/9rA+r
GEZ1DwhiqNDKUrb+jrtOs7e+Gl/CJkOT4QuiaAehk2+8fZgVcwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMFA2e6CI3XGMFi2B/ncNIA65zhQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZmUx
NGE3NC04MzM5LTRmYTEtODg1YS0yZWQzNzk0NzM5OWEvZmVkNmQ5M2YtOWU2NC0z
YjA1LTkyZGUtM2JkMmJiZTVjZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWZlMTRhNzQtODMzOS00ZmExLTg4
NWEtMmVkMzc5NDczOTlhL2VmZTE0YTc0LTgzMzktNGZhMS04ODVhLTJlZDM3OTQ3
Mzk5YS5jcmwwHwYDVR0jBBgwFoAUxJedZ9C2K++jq54cejCwbRqIXeswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lZmUxNGE3NC04MzM5LTRmYTEtODg1YS0yZWQz
Nzk0NzM5OWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6WQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWfKTwe+HTvEH7pwDgZC/xy1RNcYix7iSA+DAW4WOJL2b+EeVR0dq
KLmK+HVzXQgI+2WZmtKKXzVGFgPF7chEA532Y78hZx1+/4WwMc27rqEWzD1LalNS
FBcMDH0xx1b2K0ExorUxr+VuOM3557OIZ/UHT9qI4ZArDGKnFBoHWE6BjuzMb66N
qxXBtvYrfDu21qYxcHmSaowkSM1sbGKzdAloxuCSzF7EJKCp3qitSeufKeh9Edrq
rryCNQWaW8EI+O2qs494ZnIwWkq8acN0RMAy/uKoGfpQNiaTVwD72OntUk34LgUp
0MwS7nqKWIjLisQ1Q0cUNRmqVTt9zJ/vUw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:03 2025 by rpki-client