Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/3d3c2e44-40ab-33eb-bb27-1c0304d48566.roa
File:                     3d3c2e44-40ab-33eb-bb27-1c0304d48566.roa (raw, json)
Hash identifier:          nE3OZzK+XJIBsn2MNFF5JGJaVYrQ9EKiJX2o5oRH21U=
Subject key identifier:   53:AA:2B:DD:BB:C4:34:95:10:6E:86:28:2E:47:D0:FE:4E:A2:D6:55
Certificate issuer:       /CN=344c647c-2bcf-4b84-a292-fe7e96b86354
Certificate serial:       010D0C9F4328584B11413B4EA53CA03CE7A09D00
Authority key identifier: B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/3d3c2e44-40ab-33eb-bb27-1c0304d48566.roa
Signing time:             Wed 03 Sep 2025 02:47:53 +0000
ROA not before:           Wed 03 Sep 2025 02:47:53 +0000
ROA not after:            Tue 02 Dec 2025 03:47:53 +0000
asID:                     63150
IP address blocks:        2602:f840:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:41:3b:4e:a5:3c:a0:3c:e7:a0:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344c647c-2bcf-4b84-a292-fe7e96b86354
        Validity
            Not Before: Sep  3 02:47:53 2025 GMT
            Not After : Dec  2 03:47:53 2025 GMT
        Subject: CN=c2829423-6b54-44a9-8491-347e5a57f53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:14:02:5f:c6:1d:26:b2:91:fc:b9:f3:aa:
                    dc:a5:4c:09:25:eb:9c:21:c7:4e:ea:55:1a:1a:43:
                    d5:65:a0:fc:5b:e3:2e:6d:65:bf:ed:6a:88:71:69:
                    de:cf:c7:42:ee:08:f1:aa:f0:e0:6d:1d:31:43:22:
                    f1:aa:09:ff:b5:82:98:0b:47:38:a6:89:df:2e:a0:
                    ef:43:59:b7:79:b8:32:89:9d:14:83:a9:f1:b8:9d:
                    c2:13:93:20:33:39:f3:a9:65:0c:10:c8:1d:9e:1a:
                    0d:a3:bf:b9:4f:36:39:70:c6:bb:ca:8b:e4:38:0b:
                    ef:93:54:10:2d:b0:e9:55:f8:e1:d2:82:12:32:b1:
                    94:a4:38:fb:cc:59:aa:fe:21:21:47:dd:88:8d:75:
                    f8:84:02:51:af:b3:b9:1a:cf:fe:c0:d2:f8:e0:53:
                    18:40:94:bd:7e:26:92:58:20:fa:bf:68:35:5e:50:
                    02:7d:e1:03:56:16:01:65:5f:a8:5a:be:75:27:f8:
                    6d:be:58:bf:1d:b2:78:6e:bd:21:3f:a6:7c:c3:82:
                    ed:9f:ca:bb:a8:20:a9:8f:86:10:92:3b:fa:f7:61:
                    5e:f7:03:33:c7:0b:67:06:a8:d8:4f:90:13:9d:15:
                    f3:41:53:ab:a3:7f:18:a9:5b:e1:09:b3:72:ca:57:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AA:2B:DD:BB:C4:34:95:10:6E:86:28:2E:47:D0:FE:4E:A2:D6:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/3d3c2e44-40ab-33eb-bb27-1c0304d48566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl

            X509v3 Authority Key Identifier:
                keyid:B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f840:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:84:1d:a3:81:4e:bd:a4:06:90:6a:94:c8:03:4a:bb:76:f3:
         1e:ac:6d:64:5c:34:65:ce:4d:7c:99:9a:d9:10:fd:8f:8f:33:
         eb:66:90:b9:ac:54:b0:a8:54:92:35:2e:11:ca:15:9b:6d:3d:
         75:7b:3b:3d:fd:e7:56:fe:0c:55:2c:1a:d2:3f:54:48:1d:cc:
         8a:6f:6d:90:aa:50:3b:2a:a9:a5:e0:a9:0c:b5:12:fd:a6:b9:
         03:fb:cc:e9:27:04:31:0d:64:b4:28:95:d2:99:1f:2e:f5:f6:
         72:1e:4a:8a:d1:a9:fe:b7:7e:fe:dd:72:04:0e:1a:14:48:94:
         57:e9:af:f4:6a:04:cd:94:08:b8:62:f8:5c:e8:58:50:fa:e3:
         20:79:1b:08:76:af:b0:ce:03:6b:d5:85:1c:02:dd:50:cb:ac:
         80:08:7f:52:8b:5a:7b:2f:7b:13:b0:09:42:d8:28:6b:bb:02:
         ec:c0:aa:9b:29:69:b8:60:61:31:de:51:0b:df:48:48:2e:cf:
         ad:7e:b5:3b:5c:f9:b9:6b:71:b7:de:2f:a6:29:7e:24:68:cb:
         6f:54:61:84:67:54:18:da:bb:16:c1:9a:9c:36:cd:b5:42:68:
         b6:65:db:09:cc:06:77:58:04:72:66:d1:9b:2c:97:13:08:f5:
         10:39:71:b7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsRQTtOpTygPOegnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ0YzY0N2MtMmJjZi00Yjg0LWEyOTItZmU3ZTk2Yjg2
MzU0MB4XDTI1MDkwMzAyNDc1M1oXDTI1MTIwMjAzNDc1M1owLzEtMCsGA1UEAxMk
YzI4Mjk0MjMtNmI1NC00NGE5LTg0OTEtMzQ3ZTVhNTdmNTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4roUAl/GHSaykfy586rcpUwJJeucIcdO6lUa
GkPVZaD8W+MubWW/7WqIcWnez8dC7gjxqvDgbR0xQyLxqgn/tYKYC0c4ponfLqDv
Q1m3ebgyiZ0Ug6nxuJ3CE5MgMznzqWUMEMgdnhoNo7+5TzY5cMa7yovkOAvvk1QQ
LbDpVfjh0oISMrGUpDj7zFmq/iEhR92IjXX4hAJRr7O5Gs/+wNL44FMYQJS9fiaS
WCD6v2g1XlACfeEDVhYBZV+oWr51J/htvli/HbJ4br0hP6Z8w4Ltn8q7qCCpj4YQ
kjv692Fe9wMzxwtnBqjYT5ATnRXzQVOro38YqVvhCbNyyle0BQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFOqK927xDSVEG6GKC5H0P5OotZVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDRj
NjQ3Yy0yYmNmLTRiODQtYTI5Mi1mZTdlOTZiODYzNTQvM2QzYzJlNDQtNDBhYi0z
M2ViLWJiMjctMWMwMzA0ZDQ4NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ0YzY0N2MtMmJjZi00Yjg0LWEy
OTItZmU3ZTk2Yjg2MzU0LzM0NGM2NDdjLTJiY2YtNGI4NC1hMjkyLWZlN2U5NmI4
NjM1NC5jcmwwHwYDVR0jBBgwFoAUthEJ9kFLV6jXL4jhck7+3Iqqa4AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDRjNjQ3Yy0yYmNmLTRiODQtYTI5Mi1mZTdl
OTZiODYzNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4QAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARYQdo4FOvaQGkGqUyANKu3bzHqxtZFw0Zc5NfJma2RD9j48z62aQ
uaxUsKhUkjUuEcoVm209dXs7Pf3nVv4MVSwa0j9USB3Mim9tkKpQOyqppeCpDLUS
/aa5A/vM6ScEMQ1ktCiV0pkfLvX2ch5KitGp/rd+/t1yBA4aFEiUV+mv9GoEzZQI
uGL4XOhYUPrjIHkbCHavsM4Da9WFHALdUMusgAh/Uotaey97E7AJQtgoa7sC7MCq
mylpuGBhMd5RC99ISC7PrX61O1z5uWtxt94vpil+JGjLb1RhhGdUGNq7FsGanDbN
tUJotmXbCcwGd1gEcmbRmyyXEwj1EDlxtw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:00 2025 by rpki-client