Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1be577e5-88ce-38c2-b796-7b1bf9d4ec5e.roa
File:                     1be577e5-88ce-38c2-b796-7b1bf9d4ec5e.roa (raw, json)
Hash identifier:          TuU429TRNVnqaD4ujuMjHkLQ7ZfpBglK7356GR0L2rc=
Subject key identifier:   35:46:61:3B:94:CB:9D:B6:22:C1:FF:88:E4:DB:5C:95:67:D7:EA:DE
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584ADA9BBAD78DB99B93EE71ED40
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1be577e5-88ce-38c2-b796-7b1bf9d4ec5e.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     211876
IP address blocks:        2602:fd92:300::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:ba:d7:8d:b9:9b:93:ee:71:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=3e84ab70-5ef3-4d80-a4d6-5db49cb56128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:c3:17:07:c3:95:36:e5:61:48:65:8a:60:
                    a1:39:70:b8:f4:0e:ae:8b:ad:75:1a:7f:08:90:d4:
                    18:36:11:2d:93:48:c2:8f:ff:c0:f4:e3:f6:3a:4e:
                    aa:a0:f6:10:97:ad:3c:ef:96:41:3c:e6:a8:92:e0:
                    f8:33:b3:3a:8d:9a:a5:0f:77:2f:e3:20:07:fa:6f:
                    83:2c:7b:a6:43:18:f6:b7:c3:12:4f:6d:e7:8f:78:
                    24:5f:f4:8b:3a:ba:f2:48:94:7e:80:87:76:a0:8e:
                    3f:ec:86:54:2b:34:2d:3b:d4:ca:a8:1b:b7:28:40:
                    ac:3e:ef:92:d7:1c:f6:5c:ce:3c:85:78:48:5d:91:
                    4b:be:12:dd:f4:4e:60:37:b5:f9:e0:36:6a:d5:23:
                    7e:ec:d1:8a:0f:98:47:b4:12:b3:b0:bb:44:74:e6:
                    36:39:14:ee:5c:8a:43:c7:8e:75:74:96:d5:07:0e:
                    d1:f4:68:a3:75:f8:68:da:99:32:1b:9a:15:f4:04:
                    09:86:33:45:1e:b1:9a:2f:e5:60:f9:5b:be:eb:0e:
                    02:a3:a3:84:2c:b8:5b:29:c3:e3:a1:89:ad:94:e0:
                    f9:e7:c2:64:f8:6c:3b:40:4f:52:ef:84:bb:ec:d3:
                    b4:f6:40:cf:d9:12:7a:24:14:9e:ad:f9:cb:1e:69:
                    42:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:46:61:3B:94:CB:9D:B6:22:C1:FF:88:E4:DB:5C:95:67:D7:EA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/1be577e5-88ce-38c2-b796-7b1bf9d4ec5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:5b:b9:53:e3:06:58:58:c5:57:51:f5:50:43:d4:b4:be:
         4c:8c:2d:6c:4c:b8:5f:e6:60:d4:20:15:d4:1e:28:05:06:80:
         a7:78:a5:4b:3c:49:a0:35:d5:58:93:cf:1b:23:ee:0a:b6:1f:
         a6:34:d4:f6:a4:f0:bb:cf:38:57:6e:90:a0:7e:c3:bb:90:75:
         47:28:9b:a4:f8:12:01:a4:b4:79:f4:34:01:de:12:81:39:91:
         41:8b:9c:09:a9:e8:0b:29:93:28:3c:e5:2a:82:d0:5f:b3:9c:
         ea:ee:65:54:5f:25:19:5d:44:9a:39:d3:2a:bb:50:c0:7e:c9:
         ef:4d:65:eb:06:48:5b:d4:fc:26:09:a1:88:3e:ac:e5:31:a2:
         91:53:ce:ab:83:0f:bb:d3:4d:a7:fe:a5:b7:11:4d:e1:ed:e1:
         0c:64:54:ee:7d:59:fc:ac:e5:21:f3:de:54:a2:f6:af:55:82:
         4e:16:38:22:2b:46:ce:71:60:35:93:75:f1:38:52:bd:f6:8b:
         b9:36:66:5b:74:85:fe:db:e9:ef:70:23:39:9c:8b:83:4a:81:
         a3:d4:10:40:73:37:22:ee:5d:1c:97:c8:d5:f0:09:5d:9b:c4:
         18:f1:b4:41:a9:88:e3:64:57:1e:b8:39:62:67:30:81:78:c3:
         2c:2d:4a:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEram7rXjbmbk+5x7UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2MmE3MzMtMGUxMy00MDEyLTgyOTQtZmNlNjU1ZTRh
NDFhMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk
M2U4NGFiNzAtNWVmMy00ZDgwLWE0ZDYtNWRiNDljYjU2MTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/7DFwfDlTblYUhlimChOXC49A6ui611Gn8I
kNQYNhEtk0jCj//A9OP2Ok6qoPYQl60875ZBPOaokuD4M7M6jZqlD3cv4yAH+m+D
LHumQxj2t8MST23nj3gkX/SLOrrySJR+gId2oI4/7IZUKzQtO9TKqBu3KECsPu+S
1xz2XM48hXhIXZFLvhLd9E5gN7X54DZq1SN+7NGKD5hHtBKzsLtEdOY2ORTuXIpD
x451dJbVBw7R9Gijdfho2pkyG5oV9AQJhjNFHrGaL+Vg+Vu+6w4Co6OELLhbKcPj
oYmtlOD558Jk+Gw7QE9S74S77NO09kDP2RJ6JBSerfnLHmlCNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDVGYTuUy522IsH/iOTbXJVn1+reMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYy
YTczMy0wZTEzLTQwMTItODI5NC1mY2U2NTVlNGE0MWEvMWJlNTc3ZTUtODhjZS0z
OGMyLWI3OTYtN2IxYmY5ZDRlYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2MmE3MzMtMGUxMy00MDEyLTgy
OTQtZmNlNjU1ZTRhNDFhL2RkNjJhNzMzLTBlMTMtNDAxMi04Mjk0LWZjZTY1NWU0
YTQxYS5jcmwwHwYDVR0jBBgwFoAUkRNYtHaun6GwfpONvDcsq5c9dt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDYyYTczMy0wZTEzLTQwMTItODI5NC1mY2U2
NTVlNGE0MWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL9kgMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAgfW7lT4wZYWMVXUfVQQ9S0vkyMLWxMuF/mYNQgFdQeKAUGgKd4
pUs8SaA11ViTzxsj7gq2H6Y01Pak8LvPOFdukKB+w7uQdUcom6T4EgGktHn0NAHe
EoE5kUGLnAmp6Aspkyg85SqC0F+znOruZVRfJRldRJo50yq7UMB+ye9NZesGSFvU
/CYJoYg+rOUxopFTzquDD7vTTaf+pbcRTeHt4QxkVO59Wfys5SHz3lSi9q9Vgk4W
OCIrRs5xYDWTdfE4Ur32i7k2Zlt0hf7b6e9wIzmci4NKgaPUEEBzNyLuXRyXyNXw
CV2bxBjxtEGpiONkVx64OWJnMIF4wywtSlE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:59:14 2025 by rpki-client