Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa
File:                     d62afe2a-7630-31f0-9e51-d97ded7730a9.roa (raw, json)
Hash identifier:          amSmNC+lug4mL2p27Izvw71GqMXKd6PVAXySRltBLWs=
Subject key identifier:   C6:04:59:35:04:5A:7A:3F:8F:92:43:5F:A6:C4:5C:20:BA:F5:0E:F2
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F4328584B48E1C2C182E6C6B97451DD00
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     395567
IP address blocks:        2602:fead::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:c2:c1:82:e6:c6:b9:74:51:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=5a68bfce-8f61-403b-bdca-bba8140cf2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:30:27:e7:c2:0d:d9:6b:08:75:3c:66:d0:
                    12:44:9c:ee:9a:a8:9c:77:59:e5:57:8d:9d:6b:a6:
                    35:04:ea:75:80:5a:0f:b3:1d:f5:2d:d9:3a:e5:fc:
                    a8:e6:2f:95:8c:ed:15:7a:a8:f8:00:5e:84:1b:f8:
                    2c:28:70:a9:cd:91:43:f6:79:da:94:19:0c:d3:d5:
                    b2:aa:a5:10:65:af:59:e7:d5:d4:a8:c4:7f:88:1c:
                    c1:28:14:82:31:13:a0:37:40:89:46:e5:ce:a8:ed:
                    86:b9:62:87:6d:88:02:36:ce:8b:a0:d7:b1:62:1d:
                    c8:61:96:57:2f:01:8f:b4:87:86:09:5a:fe:27:11:
                    b1:cf:6d:1f:d8:8a:e7:a4:05:d3:2e:a5:ef:fe:29:
                    ce:b5:4f:ce:c1:24:26:8d:41:1b:7e:81:14:0d:bb:
                    01:9e:9e:9f:e7:20:78:e7:6d:f8:5c:53:85:72:5f:
                    1f:8d:7a:2d:a9:04:fc:77:5d:22:66:57:b7:7f:19:
                    b6:82:08:dd:ae:58:b8:46:46:26:d7:66:b2:87:2b:
                    d4:63:a8:a1:6c:22:5f:96:e5:ed:7e:3c:75:6b:70:
                    bc:52:8a:d0:ab:54:20:1f:3f:6d:89:87:cb:fb:7f:
                    b3:1d:03:57:eb:c7:53:a2:45:7b:1f:b3:86:1d:d9:
                    48:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:04:59:35:04:5A:7A:3F:8F:92:43:5F:A6:C4:5C:20:BA:F5:0E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fead::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c3:7c:e2:c3:f0:a6:82:77:e8:4f:77:4b:ad:5a:9e:6f:a4:
         25:69:bb:55:49:f2:af:de:aa:a0:d2:a5:55:68:f5:ca:14:ab:
         93:b2:cb:ea:b4:5f:8a:b0:b0:05:27:b1:1d:b0:2e:83:10:23:
         b0:d7:a4:5d:72:7f:8a:09:6d:f6:ad:1f:c3:52:10:c4:2a:96:
         18:49:6a:d4:26:15:a6:9c:54:f3:a6:65:69:ce:b1:ec:77:c4:
         ec:6b:8d:85:95:c3:44:29:54:f5:23:9a:52:77:ff:42:4a:1e:
         ca:dc:5a:e3:da:02:6b:e6:27:e0:60:d7:32:7c:a8:f7:3c:a4:
         a6:ad:66:fa:9c:ca:da:29:20:9b:cd:d1:51:cb:ad:1d:05:7a:
         0f:62:e2:88:c4:5d:78:d4:7e:48:3d:7f:e7:67:5e:cd:f6:19:
         89:5c:8a:01:d7:63:a7:ac:63:18:ed:8b:c5:63:da:c8:b2:2d:
         bf:2f:e4:c7:18:26:8a:16:0b:cd:4a:7e:1d:b2:8d:6a:83:e3:
         e0:36:a8:97:0c:51:ee:02:7f:99:75:a5:00:69:ff:10:e0:26:
         a8:2b:34:8b:d9:fc:bc:dc:5a:72:0c:6f:9a:f5:d4:e5:32:5b:
         d2:cb:91:ea:98:53:c4:1e:68:63:3e:a7:8e:80:aa:20:30:50:
         55:c1:50:23
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtI4cLBgubGuXRR3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3
Y2IzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
NWE2OGJmY2UtOGY2MS00MDNiLWJkY2EtYmJhODE0MGNmMmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6EwJ+fCDdlrCHU8ZtASRJzumqicd1nlV42d
a6Y1BOp1gFoPsx31Ldk65fyo5i+VjO0Veqj4AF6EG/gsKHCpzZFD9nnalBkM09Wy
qqUQZa9Z59XUqMR/iBzBKBSCMROgN0CJRuXOqO2GuWKHbYgCNs6LoNexYh3IYZZX
LwGPtIeGCVr+JxGxz20f2IrnpAXTLqXv/inOtU/OwSQmjUEbfoEUDbsBnp6f5yB4
5234XFOFcl8fjXotqQT8d10iZle3fxm2ggjdrli4RkYm12ayhyvUY6ihbCJfluXt
fjx1a3C8UorQq1QgHz9tiYfL+3+zHQNX68dTokV7H7OGHdlIEwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMYEWTUEWno/j5JDX6bEXCC69Q7yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3
YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvZDYyYWZlMmEtNzYzMC0z
MWYwLTllNTEtZDk3ZGVkNzczMGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2
MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm
N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm
ZDY3ZjdjYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL+rQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASsN84sPwpoJ36E93S61anm+kJWm7VUnyr96qoNKlVWj1yhSrk7LL
6rRfirCwBSexHbAugxAjsNekXXJ/iglt9q0fw1IQxCqWGElq1CYVppxU86Zlac6x
7HfE7GuNhZXDRClU9SOaUnf/Qkoeytxa49oCa+Yn4GDXMnyo9zykpq1m+pzK2ikg
m83RUcutHQV6D2LiiMRdeNR+SD1/52dezfYZiVyKAddjp6xjGO2LxWPayLItvy/k
xxgmihYLzUp+HbKNaoPj4DaolwxR7gJ/mXWlAGn/EOAmqCs0i9n8vNxacgxvmvXU
5TJb0suR6phTxB5oYz6njoCqIDBQVcFQIw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:18:41 2025 by rpki-client