Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/f8e88763-a876-374e-8caf-7813f09c28ce.roa
File:                     f8e88763-a876-374e-8caf-7813f09c28ce.roa (raw, json)
Hash identifier:          +rjepvgun1z8rDieRdS6NCZyg+OxBkl9N2jagNRsSEs=
Subject key identifier:   12:34:8E:3C:E3:73:1F:48:24:F6:81:5A:CB:36:27:F6:71:DA:8D:8A
Certificate issuer:       /CN=63dfa533-829d-4752-9f73-458a9e42bd9e
Certificate serial:       010D0C9F4328584AE46118FC919BEC26B5ED9100
Authority key identifier: 8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/f8e88763-a876-374e-8caf-7813f09c28ce.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     212123
IP address blocks:        2602:fe2e:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:18:fc:91:9b:ec:26:b5:ed:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63dfa533-829d-4752-9f73-458a9e42bd9e
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=6d2e0dc1-c98c-43fd-975e-bab1cc2ee910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b4:2d:94:b7:98:ca:5f:cf:b7:b9:d1:71:c5:
                    84:c6:cf:6a:6c:29:2e:0f:fa:91:12:70:36:f4:4d:
                    63:ad:f7:5d:2b:b0:57:96:52:bd:c5:8e:a9:cf:99:
                    27:7f:e9:bb:fe:82:4c:cf:fe:4b:64:8f:fe:b9:f9:
                    aa:3d:ea:9c:0d:42:33:83:6f:3f:04:f8:85:70:73:
                    4d:cf:0d:a6:a5:c8:25:a9:92:67:19:7d:1d:53:06:
                    11:3d:46:82:4f:d5:01:f2:de:cf:44:d5:28:0d:a4:
                    ff:be:2c:70:56:85:8f:bb:ab:03:8a:98:3c:c5:9d:
                    e7:7f:26:06:a3:78:9b:6c:5b:bb:b6:71:bd:de:a9:
                    11:9d:59:15:34:d5:7e:12:b8:4e:b7:dc:f3:40:81:
                    40:4f:da:10:25:c5:0a:f7:44:34:aa:f8:23:eb:5f:
                    c3:4f:9a:a7:4f:95:f0:f9:7b:d7:3d:c7:75:fd:b0:
                    d2:fa:c0:1e:5c:9b:62:21:6e:0f:21:a3:d2:0e:0f:
                    ae:1b:71:96:08:c2:6b:0e:9e:05:bb:5c:88:ce:1f:
                    4b:78:93:47:98:ed:30:43:aa:19:67:1d:e4:1f:cb:
                    4d:6b:03:d2:f8:67:ce:e7:b3:56:39:c0:7e:9f:0f:
                    4c:93:aa:74:5a:02:d6:21:9a:0a:67:d5:27:d9:62:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:34:8E:3C:E3:73:1F:48:24:F6:81:5A:CB:36:27:F6:71:DA:8D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/f8e88763-a876-374e-8caf-7813f09c28ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe2e:fff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e6:a7:12:c0:cd:c7:72:40:3c:2f:7e:3e:90:47:b9:fd:b1:
         7c:37:d1:63:76:2e:e6:64:28:f4:d9:23:24:cc:f8:da:8e:41:
         fc:fb:05:61:06:35:6b:3e:72:86:57:10:18:ec:64:4c:ed:81:
         10:08:8f:1a:1a:28:27:77:04:08:81:d5:b2:8d:a6:47:34:55:
         ac:f1:72:0e:58:b7:76:09:67:8a:f3:db:0e:ef:9a:97:11:ed:
         70:9a:1b:cf:9c:d7:6f:06:58:43:f3:01:f3:c7:20:5a:aa:c0:
         b5:cf:9f:69:89:e3:34:d0:3a:5f:9b:de:26:fc:a1:d9:7c:7a:
         79:1c:2e:9a:fd:41:01:90:a8:28:59:26:23:23:66:7a:0b:01:
         2e:6e:1f:fa:ea:6a:a8:21:aa:98:38:e0:13:49:87:71:a1:89:
         b8:42:ec:28:86:43:b2:5a:b6:c5:e7:ce:1f:8e:5e:a9:21:4f:
         a1:2a:a9:52:5d:79:3a:ab:37:59:7e:89:25:b4:9a:44:a2:e5:
         02:9e:db:eb:45:d0:f1:f0:bd:f4:bc:34:dd:7e:01:c7:dd:25:
         a2:b1:c1:95:02:6d:44:7e:66:06:11:8d:91:ca:9e:a7:6e:37:
         c2:65:ac:dc:a0:10:db:e2:f5:3f:10:6a:82:8c:44:da:35:1f:
         8d:69:56:2b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErkYRj8kZvsJrXtkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjNkZmE1MzMtODI5ZC00NzUyLTlmNzMtNDU4YTllNDJi
ZDllMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
NmQyZTBkYzEtYzk4Yy00M2ZkLTk3NWUtYmFiMWNjMmVlOTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirQtlLeYyl/Pt7nRccWExs9qbCkuD/qREnA2
9E1jrfddK7BXllK9xY6pz5knf+m7/oJMz/5LZI/+ufmqPeqcDUIzg28/BPiFcHNN
zw2mpcglqZJnGX0dUwYRPUaCT9UB8t7PRNUoDaT/vixwVoWPu6sDipg8xZ3nfyYG
o3ibbFu7tnG93qkRnVkVNNV+ErhOt9zzQIFAT9oQJcUK90Q0qvgj61/DT5qnT5Xw
+XvXPcd1/bDS+sAeXJtiIW4PIaPSDg+uG3GWCMJrDp4Fu1yIzh9LeJNHmO0wQ6oZ
Zx3kH8tNawPS+GfO57NWOcB+nw9Mk6p0WgLWIZoKZ9Un2WJS1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBI0jjzjcx9IJPaBWss2J/Zx2o2KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82M2Rm
YTUzMy04MjlkLTQ3NTItOWY3My00NThhOWU0MmJkOWUvZjhlODg3NjMtYTg3Ni0z
NzRlLThjYWYtNzgxM2YwOWMyOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjNkZmE1MzMtODI5ZC00NzUyLTlm
NzMtNDU4YTllNDJiZDllLzYzZGZhNTMzLTgyOWQtNDc1Mi05ZjczLTQ1OGE5ZTQy
YmQ5ZS5jcmwwHwYDVR0jBBgwFoAUj4WaPPqYwBFnbTEZlB2VgyjiTN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82M2RmYTUzMy04MjlkLTQ3NTItOWY3My00NThh
OWU0MmJkOWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+Lg//
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADfmpxLAzcdyQDwvfj6QR7n9sXw30WN2LuZkKPTZIyTM+NqOQfz7
BWEGNWs+coZXEBjsZEztgRAIjxoaKCd3BAiB1bKNpkc0Vazxcg5Yt3YJZ4rz2w7v
mpcR7XCaG8+c128GWEPzAfPHIFqqwLXPn2mJ4zTQOl+b3ib8odl8enkcLpr9QQGQ
qChZJiMjZnoLAS5uH/rqaqghqpg44BNJh3GhibhC7CiGQ7JatsXnzh+OXqkhT6Eq
qVJdeTqrN1l+iSW0mkSi5QKe2+tF0PHwvfS8NN1+AcfdJaKxwZUCbUR+ZgYRjZHK
nqduN8JlrNygENvi9T8QaoKMRNo1H41pVis=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:17:37 2025 by rpki-client