Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ed56583d-d446-3e2a-bfd2-8922516e0941.roa
File:                     ed56583d-d446-3e2a-bfd2-8922516e0941.roa (raw, json)
Hash identifier:          LcNnwqHprZAxcvLMLavdlFTpnT2ddjhd+kD2TQhEJnU=
Subject key identifier:   F2:14:55:8C:E2:25:D7:B1:DF:9B:76:20:98:B5:94:1C:DA:48:0F:9F
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584AC87654C6F101E9D181CE9040
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ed56583d-d446-3e2a-bfd2-8922516e0941.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     150184
IP address blocks:        2602:f9f6:400::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:54:c6:f1:01:e9:d1:81:ce:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=a6219e49-a1ee-4494-9023-2f705c8cad45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d0:55:91:77:4e:31:64:5b:4e:ed:90:f4:03:
                    8f:11:a3:40:91:c0:d6:b4:a5:86:6b:cc:bc:95:8a:
                    76:13:32:90:0f:f9:5a:ac:33:cd:b2:9a:ab:fb:de:
                    af:51:76:35:fb:a8:89:cc:30:88:52:90:ab:d5:6c:
                    44:3b:36:21:55:f7:1c:71:88:af:e3:76:3e:ad:e4:
                    1e:e6:9d:c2:af:af:46:fd:3e:d6:a3:a7:3c:b1:8f:
                    46:6d:58:4a:47:0a:c2:d3:59:f1:1b:85:fa:ba:51:
                    74:2f:9e:24:b3:be:36:70:1d:29:a8:78:41:8c:2c:
                    05:15:cd:8b:98:c1:0c:47:7c:70:17:16:e5:9c:ea:
                    37:ef:8b:8c:ba:0d:a5:75:87:f1:aa:b6:d6:3c:8d:
                    a2:bb:86:a7:75:69:bc:59:6c:b8:0e:c9:30:f4:af:
                    ff:11:ee:b2:4a:40:e9:cf:60:0e:a6:a3:7b:1b:8b:
                    92:c8:f1:f3:13:ba:94:25:c6:93:49:09:0b:1c:36:
                    a1:53:98:a9:35:e0:27:45:82:66:68:27:a7:fb:4f:
                    ee:5e:bc:e1:0e:f4:72:6f:2a:05:43:15:0f:31:83:
                    f7:96:55:0b:d4:16:13:a3:94:8c:69:28:e6:2b:1d:
                    8f:fd:c2:8c:86:07:77:08:94:7a:21:36:a5:b4:a6:
                    58:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:14:55:8C:E2:25:D7:B1:DF:9B:76:20:98:B5:94:1C:DA:48:0F:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ed56583d-d446-3e2a-bfd2-8922516e0941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:2c:70:87:60:7d:c6:20:23:a8:bb:2c:19:8f:c9:bd:ae:
         b2:01:fa:ed:42:7d:bd:47:ef:ea:12:ea:22:a4:46:d6:6c:82:
         f7:4a:05:24:c5:f2:bf:50:89:ee:52:7b:9c:94:91:06:6e:ca:
         63:bb:d2:4c:55:0f:c6:ff:5d:f7:75:b2:ba:00:56:8b:82:0d:
         8f:69:7c:fe:39:4d:3d:6c:0e:02:6e:ae:cf:da:be:eb:d5:52:
         f4:12:6c:9b:9c:f5:85:ed:d1:27:2e:ed:f1:75:e4:55:bd:29:
         a5:59:5c:34:81:5e:b4:38:df:c6:44:45:26:a0:9f:72:93:a0:
         a6:fe:02:77:b9:b7:29:97:d9:21:56:22:a6:61:c3:73:52:fb:
         18:78:c7:46:36:21:4f:26:08:bf:98:ef:2a:4e:b4:cc:1a:22:
         b9:fa:f2:bc:86:9b:88:fd:fe:aa:83:b0:06:82:5a:82:b3:4e:
         ce:82:3f:fa:cf:52:09:d5:78:70:d7:1e:fa:8b:db:44:35:10:
         6b:27:4e:ba:e0:55:75:72:5c:5e:26:33:3b:5a:8d:41:a4:19:
         9f:1c:e8:71:ea:85:84:58:29:4e:17:b9:f9:e1:30:50:84:6c:
         09:88:26:3c:41:dd:92:d7:35:ec:5b:76:2b:15:51:06:19:96:
         13:63:cf:f9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErIdlTG8QHp0YHOkEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew
NjZjMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
YTYyMTllNDktYTFlZS00NDk0LTkwMjMtMmY3MDVjOGNhZDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNBVkXdOMWRbTu2Q9AOPEaNAkcDWtKWGa8y8
lYp2EzKQD/larDPNspqr+96vUXY1+6iJzDCIUpCr1WxEOzYhVfcccYiv43Y+reQe
5p3Cr69G/T7Wo6c8sY9GbVhKRwrC01nxG4X6ulF0L54ks742cB0pqHhBjCwFFc2L
mMEMR3xwFxblnOo374uMug2ldYfxqrbWPI2iu4andWm8WWy4Dskw9K//Ee6ySkDp
z2AOpqN7G4uSyPHzE7qUJcaTSQkLHDahU5ipNeAnRYJmaCen+0/uXrzhDvRybyoF
QxUPMYP3llUL1BYTo5SMaSjmKx2P/cKMhgd3CJR6ITaltKZYTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPIUVYziJdex35t2IJi1lBzaSA+fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0
NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvZWQ1NjU4M2QtZDQ0Ni0z
ZTJhLWJmZDItODkyMjUxNmUwOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1
ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh
MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1
ZmU3YTA2NmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL59gQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFOaLHCHYH3GICOouywZj8m9rrIB+u1Cfb1H7+oS6iKkRtZsgvdK
BSTF8r9Qie5Se5yUkQZuymO70kxVD8b/Xfd1sroAVouCDY9pfP45TT1sDgJurs/a
vuvVUvQSbJuc9YXt0Scu7fF15FW9KaVZXDSBXrQ438ZERSagn3KToKb+Ane5tymX
2SFWIqZhw3NS+xh4x0Y2IU8mCL+Y7ypOtMwaIrn68ryGm4j9/qqDsAaCWoKzTs6C
P/rPUgnVeHDXHvqL20Q1EGsnTrrgVXVyXF4mMztajUGkGZ8c6HHqhYRYKU4Xufnh
MFCEbAmIJjxB3ZLXNexbdisVUQYZlhNjz/k=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:30:27 2025 by rpki-client