Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa
File:                     3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa (raw, json)
Hash identifier:          OT1yv0Dc2SgtF9W73FvOO1GO3JreN2LFNYurxVlAzqE=
Subject key identifier:   28:11:6D:C5:BE:D6:B5:CF:B4:5E:6E:A7:3A:74:25:E4:61:D2:1A:12
Certificate issuer:       /CN=d189c13c-82f8-4a93-80ac-c659e448dd77
Certificate serial:       010D0C9F4328584B0316962EC0D55E858A9B51C0
Authority key identifier: 34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     401400
IP address blocks:        2602:81a:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:96:2e:c0:d5:5e:85:8a:9b:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d189c13c-82f8-4a93-80ac-c659e448dd77
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=69aae77f-cca0-41c9-aac3-02399c0e4ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:67:7e:16:83:a3:c6:60:54:8c:5b:2d:5b:a2:
                    b8:0e:b6:f6:0a:49:c7:8f:61:3c:22:fb:1a:e4:57:
                    3e:b5:99:dc:47:c6:c6:c0:f4:ab:83:ef:cb:eb:ee:
                    92:35:8c:74:76:07:4a:e4:cb:d1:f2:b1:36:ba:dd:
                    74:7c:4e:47:6f:95:fe:91:d0:af:15:c3:37:8e:84:
                    52:40:26:3f:5a:26:96:eb:07:aa:a6:66:3e:c4:93:
                    6e:93:6c:4f:63:03:a3:68:c7:be:15:49:40:be:d8:
                    c3:46:aa:14:da:e7:eb:a6:8f:7d:25:37:db:a7:be:
                    63:aa:96:db:99:bf:3f:fc:09:14:d9:5a:a4:77:c1:
                    02:b6:f3:c1:e9:94:2b:42:3a:11:d9:b1:28:18:ac:
                    64:44:ee:21:55:d5:3d:28:8b:e5:06:46:44:56:c8:
                    6e:8d:84:80:25:f9:55:38:0e:8e:f7:5c:0e:43:68:
                    d0:32:b0:ad:68:dc:4b:7f:9b:ce:1b:7e:cc:3b:f7:
                    d5:83:b9:02:12:aa:a0:c9:50:ae:3f:03:dc:30:5c:
                    88:7b:fd:0e:0c:e9:ba:3f:82:be:7a:7c:5f:ec:88:
                    51:55:42:94:94:03:b8:1e:b4:79:89:bb:d2:ce:f2:
                    26:05:6d:cf:d9:50:9c:6c:60:28:10:cd:72:a3:88:
                    f8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:11:6D:C5:BE:D6:B5:CF:B4:5E:6E:A7:3A:74:25:E4:61:D2:1A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/3b9d7cb3-27da-3b9c-bbc3-382a6d178788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl

            X509v3 Authority Key Identifier:
                keyid:34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81a:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:74:76:74:02:e0:c7:f2:1e:c1:90:88:eb:17:6e:22:d7:15:
         75:42:dc:9f:8b:5b:38:1c:59:9a:88:c6:0e:07:cc:7f:b3:f1:
         34:d3:c2:b2:ec:21:2d:8c:dd:41:ed:0c:38:c8:55:20:a9:ed:
         13:36:31:43:5e:45:bc:ca:71:47:ab:75:c9:4a:48:be:12:2b:
         9d:12:59:21:1e:4e:78:ae:92:e6:04:10:cf:1c:73:3f:e0:dc:
         5d:b5:54:49:c1:1a:43:4c:50:45:fc:ab:99:7c:b8:2d:4f:de:
         04:b9:e8:d1:32:51:b7:21:96:bb:fc:cc:02:1d:27:60:12:c3:
         ea:1a:5f:32:c2:b8:b6:da:50:04:c9:ef:50:8a:b4:bc:67:b7:
         09:5a:6a:ab:1a:02:ca:70:02:3a:c6:12:69:ea:8e:59:66:6c:
         59:2f:21:08:d3:5b:93:65:50:3c:ac:88:d1:0f:97:86:26:02:
         ca:a9:31:c4:6c:3a:57:e8:30:b3:c5:54:35:f9:e4:28:87:ea:
         23:60:5c:2b:af:d5:93:f4:e7:2d:de:7b:f8:7f:d7:2f:e3:43:
         22:00:c6:df:e2:52:cb:3a:c3:b5:5e:c6:5f:88:c5:08:54:96:
         de:e8:f7:8c:0b:de:f0:6d:ab:ca:70:f5:3c:26:a6:fb:2b:9c:
         74:13:0b:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsDFpYuwNVehYqbUcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDE4OWMxM2MtODJmOC00YTkzLTgwYWMtYzY1OWU0NDhk
ZDc3MB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk
NjlhYWU3N2YtY2NhMC00MWM5LWFhYzMtMDIzOTljMGU0ZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82d+FoOjxmBUjFstW6K4Drb2CknHj2E8Ivsa
5Fc+tZncR8bGwPSrg+/L6+6SNYx0dgdK5MvR8rE2ut10fE5Hb5X+kdCvFcM3joRS
QCY/WiaW6weqpmY+xJNuk2xPYwOjaMe+FUlAvtjDRqoU2ufrpo99JTfbp75jqpbb
mb8//AkU2Vqkd8ECtvPB6ZQrQjoR2bEoGKxkRO4hVdU9KIvlBkZEVshujYSAJflV
OA6O91wOQ2jQMrCtaNxLf5vOG37MO/fVg7kCEqqgyVCuPwPcMFyIe/0ODOm6P4K+
enxf7IhRVUKUlAO4HrR5ibvSzvImBW3P2VCcbGAoEM1yo4j4cQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCgRbcW+1rXPtF5upzp0JeRh0hoSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5
YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5ZTQ0OGRkNzcvM2I5ZDdjYjMtMjdkYS0z
YjljLWJiYzMtMzgyYTZkMTc4Nzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDE4OWMxM2MtODJmOC00YTkzLTgw
YWMtYzY1OWU0NDhkZDc3L2QxODljMTNjLTgyZjgtNGE5My04MGFjLWM2NTllNDQ4
ZGQ3Ny5jcmwwHwYDVR0jBBgwFoAUNHebP4O34C4ygPYlixA/2j3VvUwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5
ZTQ0OGRkNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIGoAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF90dnQC4MfyHsGQiOsXbiLXFXVC3J+LWzgcWZqIxg4HzH+z8TTT
wrLsIS2M3UHtDDjIVSCp7RM2MUNeRbzKcUerdclKSL4SK50SWSEeTniukuYEEM8c
cz/g3F21VEnBGkNMUEX8q5l8uC1P3gS56NEyUbchlrv8zAIdJ2ASw+oaXzLCuLba
UATJ71CKtLxntwlaaqsaAspwAjrGEmnqjllmbFkvIQjTW5NlUDysiNEPl4YmAsqp
McRsOlfoMLPFVDX55CiH6iNgXCuv1ZP05y3ee/h/1y/jQyIAxt/iUss6w7Vexl+I
xQhUlt7o94wL3vBtq8pw9TwmpvsrnHQTCxE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:38:40 2025 by rpki-client