Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa
File:                     8afe2b44-aeed-3635-96f2-699b9e5360de.roa (raw, json)
Hash identifier:          7FWoCTn77hf5gZigVC/gEU7zT2+G8U8/1klH51Xmvgs=
Subject key identifier:   6D:53:62:DF:08:70:36:30:9B:A0:64:0B:CA:B3:1E:9E:E0:66:1C:4B
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584B917783AF8DFFE9214D09E2E0
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     38047
IP address blocks:        2602:f83b:1886::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:83:af:8d:ff:e9:21:4d:09:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=f26af3ae-7bd8-4f2c-9db4-ecc9ed88d4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:53:63:84:11:44:62:14:dd:74:a7:d3:d9:
                    2e:bc:51:cd:b8:82:d0:39:93:b3:74:cc:20:4c:f7:
                    78:4e:13:97:27:79:5d:07:29:c5:5e:db:5b:a0:0c:
                    82:2e:96:dd:fa:7b:9b:5b:4e:03:bf:a5:73:d7:d9:
                    4e:29:da:cb:68:bd:65:a8:13:2b:8d:10:b0:a0:43:
                    45:cb:09:2a:ad:83:b8:66:db:97:38:88:51:fd:a6:
                    af:1e:c5:81:d7:5d:e7:7d:d8:82:42:97:09:57:ee:
                    55:c5:71:cb:e1:90:c9:d6:37:80:cb:51:52:88:71:
                    e3:79:c4:f7:02:9a:82:a6:d7:37:9b:17:18:90:a8:
                    2f:c7:91:45:4b:79:a7:66:27:e6:25:03:b7:f7:ec:
                    c3:66:26:5f:72:97:54:3d:01:2c:7f:ad:2e:12:82:
                    03:67:0a:f6:7f:ec:59:b5:f0:f6:9b:71:a8:d3:1a:
                    de:cf:14:43:0b:ec:79:cf:90:82:74:7f:91:a4:09:
                    b6:fa:37:9c:b2:1b:04:64:a0:5b:a9:8c:79:12:f7:
                    85:82:6b:f5:ea:bf:d5:25:0e:68:c5:b3:22:f3:40:
                    80:d9:a1:0f:af:11:63:cf:44:84:52:5a:23:46:43:
                    a7:38:bc:c3:ab:2b:da:de:90:eb:db:ad:03:34:77:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:53:62:DF:08:70:36:30:9B:A0:64:0B:CA:B3:1E:9E:E0:66:1C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:1886::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:dd:00:db:2b:16:da:48:a3:1b:31:d4:0c:f1:4a:f8:b9:c9:
         0b:e1:12:de:02:ef:18:6c:a0:d1:64:69:17:e3:f0:23:db:42:
         e3:40:0b:80:b6:20:68:69:4c:f9:fe:9e:59:18:ed:71:93:8e:
         34:95:01:5e:fd:0f:30:12:76:dd:2a:fe:e8:ab:1c:a9:d3:94:
         2b:31:80:7e:26:8f:4d:01:77:1c:38:c8:bb:d5:a9:1a:2b:00:
         98:2f:a5:39:c0:09:49:a0:20:a8:25:d4:99:fd:8d:d2:4c:e6:
         b9:c1:99:3d:fa:ad:68:43:6c:72:ad:47:c7:39:e7:88:56:3b:
         73:1e:8c:91:3e:21:ec:b3:fa:95:7a:5e:62:b2:6c:3b:d2:ee:
         9f:5a:51:03:60:d6:37:1d:ea:7f:6c:7b:e4:23:12:3c:0e:1a:
         25:e5:80:19:f6:0f:1b:a5:df:4d:79:df:f7:bc:d7:fb:67:d9:
         7f:9b:cb:9f:85:44:92:49:55:3f:ce:90:cb:d6:24:5e:d3:f3:
         a0:0a:4b:fc:43:07:61:30:52:4e:12:51:e0:4e:50:9d:77:56:
         4a:d9:c1:44:a0:5a:04:d3:e1:16:d8:8c:e1:16:88:75:4c:4b:
         3d:62:9b:80:ec:45:1e:8b:5c:c6:d1:41:8a:50:53:79:20:ad:
         74:6c:14:f6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuRd4Ovjf/pIU0J4uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk
MjYxMB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk
ZjI2YWYzYWUtN2JkOC00ZjJjLTlkYjQtZWNjOWVkODhkNGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHhTY4QRRGIU3XSn09kuvFHNuILQOZOzdMwg
TPd4ThOXJ3ldBynFXttboAyCLpbd+nubW04Dv6Vz19lOKdrLaL1lqBMrjRCwoENF
ywkqrYO4ZtuXOIhR/aavHsWB113nfdiCQpcJV+5VxXHL4ZDJ1jeAy1FSiHHjecT3
ApqCptc3mxcYkKgvx5FFS3mnZifmJQO39+zDZiZfcpdUPQEsf60uEoIDZwr2f+xZ
tfD2m3Go0xrezxRDC+x5z5CCdH+RpAm2+jecshsEZKBbqYx5EveFgmv16r/VJQ5o
xbMi80CA2aEPrxFjz0SEUlojRkOnOLzDqyva3pDr260DNHdFtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG1TYt8IcDYwm6BkC8qzHp7gZhxLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4
YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvOGFmZTJiNDQtYWVlZC0z
NjM1LTk2ZjItNjk5YjllNTM2MGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1
YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk
ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm
MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4OxiG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIrdANsrFtpIoxsx1AzxSvi5yQvhEt4C7xhsoNFkaRfj8CPbQuNA
C4C2IGhpTPn+nlkY7XGTjjSVAV79DzASdt0q/uirHKnTlCsxgH4mj00Bdxw4yLvV
qRorAJgvpTnACUmgIKgl1Jn9jdJM5rnBmT36rWhDbHKtR8c554hWO3MejJE+Ieyz
+pV6XmKybDvS7p9aUQNg1jcd6n9se+QjEjwOGiXlgBn2Dxul30153/e81/tn2X+b
y5+FRJJJVT/OkMvWJF7T86AKS/xDB2EwUk4SUeBOUJ13VkrZwUSgWgTT4RbYjOEW
iHVMSz1im4DsRR6LXMbRQYpQU3kgrXRsFPY=
-----END CERTIFICATE-----
Generated at Tue Oct 21 06:54:42 2025 by rpki-client