Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/82735312-5a03-3ac8-81b5-8933874e041c.roa
File:                     82735312-5a03-3ac8-81b5-8933874e041c.roa (raw, json)
Hash identifier:          pzhyeb273Ag6avEXCMqaZODCuZxsGvjXd6R7i/rUOHI=
Subject key identifier:   18:99:E0:82:93:59:FB:9D:D5:EC:C4:01:E2:69:38:AD:26:F3:AC:3D
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F4328584AC9DB9F249676495C695E2C00
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/82735312-5a03-3ac8-81b5-8933874e041c.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     399906
IP address blocks:        2602:807:6007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9f:24:96:76:49:5c:69:5e:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=12eb7e95-f5a1-4dc1-9357-0322a18b509c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0c:ee:04:ce:64:c9:13:cb:dd:8c:49:f0:0c:
                    47:f8:51:ef:27:66:9a:58:87:c2:cf:ae:4c:37:f7:
                    eb:9d:b0:92:56:a9:db:34:5c:a5:09:2e:8b:64:5b:
                    fb:15:e2:ec:ad:4f:ce:21:99:d3:b3:77:62:ee:c0:
                    bd:38:c3:4f:e8:33:f2:d7:73:e7:55:ca:f9:98:b5:
                    8d:d2:a0:c5:6d:bf:99:a8:a7:4b:59:0b:cd:ef:10:
                    77:a7:c8:c3:84:29:88:72:66:9f:59:06:a5:12:30:
                    f5:bc:30:74:76:e0:a3:a3:23:e6:c2:e8:99:8d:03:
                    69:21:06:db:fa:ff:a6:85:43:e7:c7:63:3c:17:b5:
                    b8:9e:04:f1:cc:41:d3:a8:62:2a:c1:94:05:de:de:
                    92:37:1f:26:ef:26:92:36:ab:be:b5:a5:25:79:e7:
                    78:75:94:97:b6:5b:c9:c3:5a:67:94:ba:9c:88:c7:
                    e3:e5:88:20:18:db:d9:a6:c6:10:e2:ee:3c:2a:2b:
                    d8:d9:19:d3:fe:c9:88:15:e1:62:95:7b:70:20:6a:
                    c5:e7:25:cb:7f:bb:54:26:00:72:d1:30:af:87:27:
                    ae:f2:f1:4d:3c:6c:c9:98:60:d6:79:a8:66:fe:71:
                    28:5f:6d:d7:a9:e8:7b:b5:50:77:7b:a0:5b:04:68:
                    0f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:99:E0:82:93:59:FB:9D:D5:EC:C4:01:E2:69:38:AD:26:F3:AC:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/82735312-5a03-3ac8-81b5-8933874e041c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:6a:2d:ae:5a:04:41:9b:dc:de:7b:5f:00:4e:c4:eb:33:
         7b:1f:6f:da:27:c0:1e:ff:3c:69:65:1c:4c:16:cf:a1:5b:97:
         cf:92:69:b9:62:c6:22:83:70:af:3b:ab:56:28:63:a4:d7:2e:
         c7:5c:45:9e:cf:e8:af:7d:bc:b3:57:81:66:39:09:f2:31:ef:
         4c:3d:62:71:9a:57:59:9d:e3:72:f9:3a:ce:a3:0a:f9:4a:4b:
         51:00:10:db:08:f8:36:54:ea:59:df:1f:04:32:c0:af:c1:cc:
         29:f8:46:10:54:a9:25:30:77:fb:83:27:7f:7c:6b:51:40:01:
         a1:17:e6:71:03:61:cc:a8:24:f5:eb:d8:b8:8f:6e:82:5a:71:
         52:64:e2:3d:f7:66:ff:d8:4e:37:2b:51:71:59:df:6f:b8:67:
         1e:93:d6:b5:51:9e:c3:72:1a:74:92:3e:66:1f:fc:eb:d4:f9:
         9a:74:5a:a7:68:b9:1a:31:f6:49:e2:23:f4:a9:c6:d0:9d:82:
         3a:fb:2a:19:4d:9c:7c:e5:be:01:a1:9e:b2:ca:eb:bb:57:e5:
         f0:5b:b3:97:95:55:08:42:89:16:97:df:6e:36:73:71:7c:62:
         d6:c4:6a:1b:bc:70:04:bb:ac:56:4d:8f:8a:93:a0:50:91:c0:
         3b:65:4a:6d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErJ258klnZJXGleLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmFjNTE2ZmItZTRkZi00OWMxLTgyYmMtZmVkMjM5OWQy
MWMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
MTJlYjdlOTUtZjVhMS00ZGMxLTkzNTctMDMyMmExOGI1MDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwzuBM5kyRPL3YxJ8AxH+FHvJ2aaWIfCz65M
N/frnbCSVqnbNFylCS6LZFv7FeLsrU/OIZnTs3di7sC9OMNP6DPy13PnVcr5mLWN
0qDFbb+ZqKdLWQvN7xB3p8jDhCmIcmafWQalEjD1vDB0duCjoyPmwuiZjQNpIQbb
+v+mhUPnx2M8F7W4ngTxzEHTqGIqwZQF3t6SNx8m7yaSNqu+taUleed4dZSXtlvJ
w1pnlLqciMfj5YggGNvZpsYQ4u48KivY2RnT/smIFeFilXtwIGrF5yXLf7tUJgBy
0TCvhyeu8vFNPGzJmGDWeahm/nEoX23Xqeh7tVB3e6BbBGgPQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBiZ4IKTWfud1ezEAeJpOK0m86w9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YWM1
MTZmYi1lNGRmLTQ5YzEtODJiYy1mZWQyMzk5ZDIxYzIvODI3MzUzMTItNWEwMy0z
YWM4LTgxYjUtODkzMzg3NGUwNDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmFjNTE2ZmItZTRkZi00OWMxLTgy
YmMtZmVkMjM5OWQyMWMyLzZhYzUxNmZiLWU0ZGYtNDljMS04MmJjLWZlZDIzOTlk
MjFjMi5jcmwwHwYDVR0jBBgwFoAUF4lBSoEsr3LH4ic/wFzMM8KRZyswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82YWM1MTZmYi1lNGRmLTQ5YzEtODJiYy1mZWQy
Mzk5ZDIxYzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIB2AH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGzWai2uWgRBm9zee18ATsTrM3sfb9onwB7/PGllHEwWz6Fbl8+S
ablixiKDcK87q1YoY6TXLsdcRZ7P6K99vLNXgWY5CfIx70w9YnGaV1md43L5Os6j
CvlKS1EAENsI+DZU6lnfHwQywK/BzCn4RhBUqSUwd/uDJ398a1FAAaEX5nEDYcyo
JPXr2LiPboJacVJk4j33Zv/YTjcrUXFZ32+4Zx6T1rVRnsNyGnSSPmYf/OvU+Zp0
WqdouRox9kniI/SpxtCdgjr7KhlNnHzlvgGhnrLK67tX5fBbs5eVVQhCiRaX3242
c3F8YtbEahu8cAS7rFZNj4qToFCRwDtlSm0=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:06:56 2025 by rpki-client