Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/acfc81bd-39bf-39a7-9219-e815d915a041.roa
File:                     acfc81bd-39bf-39a7-9219-e815d915a041.roa (raw, json)
Hash identifier:          QAUFC9CrrIylIwbtUNLfgQAZf2YLM2rTFgALd+dAznM=
Subject key identifier:   0B:B5:57:77:9E:F7:02:1F:CD:3A:29:FF:E5:43:19:88:92:B6:38:6D
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584AD7D11FED5ED204B82F48A200
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/acfc81bd-39bf-39a7-9219-e815d915a041.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     38047
IP address blocks:        2602:f83b:a202::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:1f:ed:5e:d2:04:b8:2f:48:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=aaa4b8fe-ad1d-4e5d-8973-42f494fa3585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:e6:fd:ca:8d:a7:c8:4a:91:99:12:5b:44:
                    d5:d7:4b:28:2a:f9:37:bc:09:08:05:47:2f:ff:82:
                    76:dd:f7:d7:14:9e:2f:f4:4f:23:e5:5d:c3:80:0c:
                    6a:7f:73:9c:b2:38:be:b8:da:f1:e5:16:27:e6:39:
                    66:f2:26:ca:e0:94:65:b1:02:ea:4c:ac:fe:c1:eb:
                    12:4a:60:2c:2b:38:b0:e1:a3:38:5c:18:56:47:8c:
                    3e:74:69:06:1d:2d:30:e8:00:5e:f9:b0:43:6c:3e:
                    a2:29:f9:47:8c:62:d2:33:d8:60:20:3e:bd:dc:83:
                    b2:20:2e:16:4a:0a:34:ed:62:d2:fb:c4:e7:08:77:
                    0b:96:4f:1a:58:12:9c:a8:2c:a5:de:32:88:ec:42:
                    68:f1:07:bc:86:c1:2c:93:8f:76:3f:e1:8e:a6:f6:
                    68:10:8a:a2:b8:03:78:e6:ba:9a:a6:35:60:38:5a:
                    a1:a3:e2:7b:56:d4:1a:1f:d2:10:ab:f6:3f:93:2c:
                    8a:b2:6e:e4:85:5b:c3:f0:a0:95:bd:b2:cf:3a:e8:
                    1a:93:73:66:22:cd:1e:25:24:e1:7e:3c:f1:9b:25:
                    b8:af:be:f3:d1:0f:40:cf:1b:02:ac:6d:87:ba:d2:
                    f5:a2:e3:4a:17:d6:1d:c4:72:92:45:4a:b4:c9:84:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B5:57:77:9E:F7:02:1F:CD:3A:29:FF:E5:43:19:88:92:B6:38:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/acfc81bd-39bf-39a7-9219-e815d915a041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:a202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:14:84:fd:33:2d:3f:74:69:09:12:4a:dd:6e:95:3b:7f:
         e0:14:af:f8:8d:06:eb:6d:80:54:00:6d:22:c8:18:1c:f9:46:
         6e:d3:5a:bd:6b:f4:99:2d:0a:ed:33:59:b1:20:1a:ba:56:28:
         7d:e5:08:6b:a2:9c:d6:14:32:9b:8d:59:ce:f5:47:e4:74:7c:
         5b:9c:a9:49:9c:c1:97:e2:02:c0:1c:b6:8b:f3:5e:ec:d5:be:
         ff:71:ea:7d:62:a1:9f:b2:8a:d1:58:0a:0b:2a:b8:2b:58:58:
         66:a5:fc:1b:76:b0:da:3a:d4:72:22:2c:ef:ea:80:23:35:51:
         9e:88:7b:f1:88:4e:03:1f:25:70:56:6f:07:76:ff:c4:37:15:
         f5:5a:e8:d7:01:78:9e:56:d9:d3:27:a3:0d:c1:db:ed:57:d0:
         66:ee:6f:63:42:52:b8:19:93:2e:46:be:17:bb:88:19:ec:54:
         93:4f:48:3b:92:be:a5:1c:1e:17:c5:1f:ab:a5:76:17:67:1b:
         73:23:4c:eb:72:9e:72:07:d5:92:02:37:24:05:63:8e:39:e4:
         a6:0b:e6:6f:32:85:b6:5c:2f:07:27:98:fa:63:ea:97:af:ad:
         ba:63:dd:58:2a:50:8a:5e:8b:96:49:30:d6:08:ae:7c:a8:d8:
         22:8b:97:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0R/tXtIEuC9IogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk
MjYxMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
YWFhNGI4ZmUtYWQxZC00ZTVkLTg5NzMtNDJmNDk0ZmEzNTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKXm/cqNp8hKkZkSW0TV10soKvk3vAkIBUcv
/4J23ffXFJ4v9E8j5V3DgAxqf3Ocsji+uNrx5RYn5jlm8ibK4JRlsQLqTKz+wesS
SmAsKziw4aM4XBhWR4w+dGkGHS0w6ABe+bBDbD6iKflHjGLSM9hgID693IOyIC4W
Sgo07WLS+8TnCHcLlk8aWBKcqCyl3jKI7EJo8Qe8hsEsk492P+GOpvZoEIqiuAN4
5rqapjVgOFqho+J7VtQaH9IQq/Y/kyyKsm7khVvD8KCVvbLPOugak3NmIs0eJSTh
fjzxmyW4r77z0Q9AzxsCrG2HutL1ouNKF9YdxHKSRUq0yYSHWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAu1V3ee9wIfzTop/+VDGYiStjhtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4
YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvYWNmYzgxYmQtMzliZi0z
OWE3LTkyMTktZTgxNWQ5MTVhMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1
YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk
ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm
MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4O6IC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHrPFIT9My0/dGkJEkrdbpU7f+AUr/iNButtgFQAbSLIGBz5Rm7T
Wr1r9JktCu0zWbEgGrpWKH3lCGuinNYUMpuNWc71R+R0fFucqUmcwZfiAsActovz
XuzVvv9x6n1ioZ+yitFYCgsquCtYWGal/Bt2sNo61HIiLO/qgCM1UZ6Ie/GITgMf
JXBWbwd2/8Q3FfVa6NcBeJ5W2dMnow3B2+1X0Gbub2NCUrgZky5Gvhe7iBnsVJNP
SDuSvqUcHhfFH6uldhdnG3MjTOtynnIH1ZICNyQFY4455KYL5m8yhbZcLwcnmPpj
6pevrbpj3VgqUIpei5ZJMNYIrnyo2CKLlwo=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:32:25 2025 by rpki-client