Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa
File:                     ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa (raw, json)
Hash identifier:          Xn1UxqADJ7K9m4Qgksd0us3N9SMPYQt6aMsl7T9V8XE=
Subject key identifier:   D2:D2:99:F2:C0:ED:9F:93:3D:78:C5:8E:44:17:8A:3C:3E:98:CB:89
Certificate issuer:       /CN=a99f9d36-f970-481f-ae52-e74a6f8a7541
Certificate serial:       010D0C9F4328584AF52149618608443A787D7A80
Authority key identifier: BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     396996
IP address blocks:        2602:f9c8::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:49:61:86:08:44:3a:78:7d:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a99f9d36-f970-481f-ae52-e74a6f8a7541
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=75b80ec1-5002-42c2-80ca-a7ae26990282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:eb:49:7c:93:ad:27:f1:cd:2a:e6:69:d6:
                    52:33:34:f2:b0:67:1d:05:6f:16:f3:6c:3d:c9:3d:
                    e9:d4:8c:20:c5:28:3d:f9:b3:82:64:7b:29:29:0d:
                    63:c6:09:6c:52:83:b1:87:3a:b4:9c:91:fc:76:0b:
                    c7:12:9b:4f:6e:39:65:18:1a:b0:ed:0c:6a:2a:a8:
                    4d:e9:4c:44:de:97:c4:ca:5e:94:47:ec:44:ef:dc:
                    2b:6b:1b:9d:b6:06:ca:f1:d0:81:11:fa:7c:ef:73:
                    ee:88:28:93:cc:58:1c:a0:b8:77:32:0f:dd:a4:bd:
                    73:66:8e:38:25:6e:e9:bc:13:52:55:cb:93:93:b3:
                    d8:84:f1:e8:58:da:67:ee:47:6c:fd:13:68:1e:2b:
                    59:56:ad:63:01:6a:cf:59:ad:35:24:1a:47:1f:6b:
                    f9:55:da:c6:69:7d:20:ca:a1:35:df:29:62:11:01:
                    c1:19:08:3e:0f:19:b6:6f:64:38:f4:a7:0f:e5:76:
                    26:dd:d3:be:35:e6:f3:de:8a:14:5c:b6:c8:26:3b:
                    4e:b9:cd:ea:ce:19:12:b8:d3:e0:34:fd:4e:ac:6d:
                    9c:d1:52:f6:81:9b:f7:85:61:bd:89:66:a7:29:74:
                    2c:f7:91:3e:0d:33:11:40:69:ae:ff:0d:59:ae:7f:
                    f6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D2:99:F2:C0:ED:9F:93:3D:78:C5:8E:44:17:8A:3C:3E:98:CB:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl

            X509v3 Authority Key Identifier:
                keyid:BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9c8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:48:47:9d:7c:c1:a4:30:8a:6a:e4:87:b8:1a:b7:86:cb:87:
         51:59:fc:a4:0d:aa:62:bd:33:93:40:2c:0e:fd:e3:62:7f:59:
         40:c8:84:b1:aa:e8:06:32:02:55:00:9c:1b:5a:70:c9:d3:62:
         25:7b:94:f0:7e:c6:61:ae:a7:7e:ec:82:85:0c:9c:f0:8c:f2:
         c0:a0:4d:f5:e8:94:a5:fc:b2:01:36:76:59:b5:06:3a:69:44:
         6d:36:a8:5d:6b:de:29:dd:da:43:64:d2:3f:42:57:95:34:76:
         1c:76:d9:71:9c:03:31:69:7b:c6:66:d7:7c:7b:ad:b9:37:13:
         76:fb:65:f1:83:29:64:94:69:2f:0e:77:ce:49:f0:f8:31:9f:
         93:df:a0:d3:3b:ce:c2:3c:6f:64:5a:5a:5b:7b:4d:1f:a3:1b:
         15:92:96:ba:f0:76:41:9e:2d:66:74:6d:6b:80:10:d9:2f:13:
         6f:a3:6c:44:8b:f5:38:0b:63:0c:b9:bf:41:12:50:cc:30:9c:
         ed:60:4d:11:7c:16:79:8b:af:28:38:91:bf:d1:52:a3:7b:06:
         13:0e:2f:79:40:b3:da:fb:48:b5:d8:5b:6c:4f:60:0a:70:ec:
         3f:03:fd:7a:b2:94:37:8c:ca:2e:2b:eb:2a:48:5f:03:41:8e:
         be:c1:8c:8b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr1IUlhhghEOnh9eoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTk5ZjlkMzYtZjk3MC00ODFmLWFlNTItZTc0YTZmOGE3
NTQxMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
NzViODBlYzEtNTAwMi00MmMyLTgwY2EtYTdhZTI2OTkwMjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7TrSXyTrSfxzSrmadZSMzTysGcdBW8W82w9
yT3p1IwgxSg9+bOCZHspKQ1jxglsUoOxhzq0nJH8dgvHEptPbjllGBqw7QxqKqhN
6UxE3pfEyl6UR+xE79wraxudtgbK8dCBEfp873PuiCiTzFgcoLh3Mg/dpL1zZo44
JW7pvBNSVcuTk7PYhPHoWNpn7kds/RNoHitZVq1jAWrPWa01JBpHH2v5VdrGaX0g
yqE13yliEQHBGQg+Dxm2b2Q49KcP5XYm3dO+Nebz3ooUXLbIJjtOuc3qzhkSuNPg
NP1OrG2c0VL2gZv3hWG9iWanKXQs95E+DTMRQGmu/w1Zrn/2jwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNLSmfLA7Z+TPXjFjkQXijw+mMuJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hOTlm
OWQzNi1mOTcwLTQ4MWYtYWU1Mi1lNzRhNmY4YTc1NDEvZGRkMTlkMzMtZWYwMi0z
NGMxLWFiZDEtYWVmMjkwNGI3YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTk5ZjlkMzYtZjk3MC00ODFmLWFl
NTItZTc0YTZmOGE3NTQxL2E5OWY5ZDM2LWY5NzAtNDgxZi1hZTUyLWU3NGE2Zjhh
NzU0MS5jcmwwHwYDVR0jBBgwFoAUvMRVQVuDs9BtufBxgJNbtCGZ05swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hOTlmOWQzNi1mOTcwLTQ4MWYtYWU1Mi1lNzRh
NmY4YTc1NDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5yAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdEhHnXzBpDCKauSHuBq3hsuHUVn8pA2qYr0zk0AsDv3jYn9ZQMiE
saroBjICVQCcG1pwydNiJXuU8H7GYa6nfuyChQyc8IzywKBN9eiUpfyyATZ2WbUG
OmlEbTaoXWveKd3aQ2TSP0JXlTR2HHbZcZwDMWl7xmbXfHutuTcTdvtl8YMpZJRp
Lw53zknw+DGfk9+g0zvOwjxvZFpaW3tNH6MbFZKWuvB2QZ4tZnRta4AQ2S8Tb6Ns
RIv1OAtjDLm/QRJQzDCc7WBNEXwWeYuvKDiRv9FSo3sGEw4veUCz2vtItdhbbE9g
CnDsPwP9erKUN4zKLivrKkhfA0GOvsGMiw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 11:48:57 2025 by rpki-client