Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
File:                     0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa (raw, json)
Hash identifier:          9idy1pq1F4yNuuhtLrqNuR3hcFUJj6An/o9Gy4FFGlc=
Subject key identifier:   CC:89:A7:FA:4A:5B:2A:6F:67:A5:9E:75:28:E6:A7:91:DE:07:45:98
Certificate issuer:       /CN=1fb5932e-f862-443b-a719-26a612c2f112
Certificate serial:       010D0C9F4328584B434C5C7A62FF86FE12FE7C00
Authority key identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     17326
IP address blocks:        2602:fd2a::/36 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:5c:7a:62:ff:86:fe:12:fe:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5932e-f862-443b-a719-26a612c2f112
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=8b67e3d1-96ac-4aa1-bcae-2e9fe6bec976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:fe:02:ff:24:94:c7:ae:09:69:16:8e:d2:
                    35:ff:a5:5a:e3:05:5f:4e:72:c9:12:09:7d:62:ea:
                    6a:97:6d:f6:42:a9:46:ac:aa:0e:d2:5c:dc:91:86:
                    f7:c5:74:b7:63:a2:63:f0:9b:86:43:c3:76:82:e4:
                    0b:d7:d6:a6:b4:54:01:d0:69:87:a8:70:d7:bc:69:
                    6f:72:33:1c:6e:10:ad:5a:75:58:15:29:d8:d9:c2:
                    17:43:d8:ad:28:e7:7e:e5:ad:35:c5:97:b1:47:ff:
                    d0:07:b9:51:99:2c:f6:66:81:08:c6:14:2b:6d:75:
                    97:2d:4c:40:b9:83:c6:b1:f9:09:7a:2c:b5:ae:f7:
                    23:05:1f:e2:bb:ef:0a:2a:16:97:92:c1:72:dc:cc:
                    83:f8:2b:d6:21:d8:d6:e1:ac:eb:76:c1:4e:87:04:
                    35:7d:92:db:b7:91:af:74:a7:ff:d5:51:e7:0b:1a:
                    fd:6c:6d:69:9a:38:46:a7:75:4d:1e:93:a7:72:5c:
                    4f:14:e6:9a:ff:23:21:65:f7:94:48:ea:5f:5f:4b:
                    14:09:7c:f6:f8:9a:e5:98:ba:80:a6:b1:00:70:68:
                    6d:58:51:6e:e3:2b:67:da:b2:29:a3:73:f4:2f:db:
                    ed:7d:0f:b1:c9:c4:42:b4:6d:31:00:a5:58:4c:f1:
                    be:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:89:A7:FA:4A:5B:2A:6F:67:A5:9E:75:28:E6:A7:91:DE:07:45:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c1:b6:06:c2:d7:5c:a3:e4:8f:8e:b7:8a:6f:97:63:09:fd:
         a8:d8:e3:02:5d:5d:7d:13:6d:19:5e:4b:68:7a:92:04:59:1b:
         78:fe:ac:5a:be:47:00:f5:08:9f:7a:b5:d5:ef:bf:58:7c:46:
         55:5f:df:ee:54:36:2c:ba:bd:12:28:b3:50:13:cf:1d:94:e3:
         4d:f6:a6:7a:25:0c:6c:52:ce:d7:cf:7b:17:b5:ed:43:94:74:
         7c:71:ac:80:3e:d3:44:28:54:ea:a4:f7:72:33:17:01:b7:c1:
         3b:e4:b0:8d:44:0f:f8:2b:aa:3d:95:89:e4:ce:99:a9:a6:3b:
         3b:1a:38:28:62:91:fc:aa:3d:26:56:94:fb:49:4e:00:98:aa:
         c0:9b:ee:12:18:b9:4e:98:63:6a:12:43:fa:7f:55:de:74:8c:
         9f:03:40:3b:b1:14:57:09:62:58:6a:30:ef:d8:c6:af:5e:4c:
         28:c7:2d:54:23:ce:19:2a:b9:63:16:d6:9f:6d:59:ef:b4:f0:
         52:e0:e2:c8:ba:8c:07:bf:ef:62:fd:bb:4c:6f:ad:ed:12:f4:
         fd:d0:03:bc:7c:ce:f5:cc:7b:65:f7:55:64:b9:2a:40:e2:e2:
         bf:f7:ff:cc:17:ff:03:2f:a7:0e:f5:b4:aa:ed:12:0d:cf:46:
         ef:92:06:f7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtDTFx6Yv+G/hL+fAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZiNTkzMmUtZjg2Mi00NDNiLWE3MTktMjZhNjEyYzJm
MTEyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
OGI2N2UzZDEtOTZhYy00YWExLWJjYWUtMmU5ZmU2YmVjOTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj7+Av8klMeuCWkWjtI1/6Va4wVfTnLJEgl9
Yupql232QqlGrKoO0lzckYb3xXS3Y6Jj8JuGQ8N2guQL19amtFQB0GmHqHDXvGlv
cjMcbhCtWnVYFSnY2cIXQ9itKOd+5a01xZexR//QB7lRmSz2ZoEIxhQrbXWXLUxA
uYPGsfkJeiy1rvcjBR/iu+8KKhaXksFy3MyD+CvWIdjW4azrdsFOhwQ1fZLbt5Gv
dKf/1VHnCxr9bG1pmjhGp3VNHpOnclxPFOaa/yMhZfeUSOpfX0sUCXz2+JrlmLqA
prEAcGhtWFFu4ytn2rIpo3P0L9vtfQ+xycRCtG0xAKVYTPG+dwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMyJp/pKWypvZ6WedSjmp5HeB0WYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZmI1
OTMyZS1mODYyLTQ0M2ItYTcxOS0yNmE2MTJjMmYxMTIvMDE5N2E5ZTYtZDI3MS0z
YjhhLTk5ZDItZWUyYzliZWQyYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWZiNTkzMmUtZjg2Mi00NDNiLWE3
MTktMjZhNjEyYzJmMTEyLzFmYjU5MzJlLWY4NjItNDQzYi1hNzE5LTI2YTYxMmMy
ZjExMi5jcmwwHwYDVR0jBBgwFoAU9asPkG+Z5pqS0rYxgixZgRR5rNYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xZmI1OTMyZS1mODYyLTQ0M2ItYTcxOS0yNmE2
MTJjMmYxMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL9KgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIMG2BsLXXKPkj463im+XYwn9qNjjAl1dfRNtGV5LaHqSBFkbeP6s
Wr5HAPUIn3q11e+/WHxGVV/f7lQ2LLq9EiizUBPPHZTjTfameiUMbFLO1897F7Xt
Q5R0fHGsgD7TRChU6qT3cjMXAbfBO+SwjUQP+CuqPZWJ5M6ZqaY7Oxo4KGKR/Ko9
JlaU+0lOAJiqwJvuEhi5TphjahJD+n9V3nSMnwNAO7EUVwliWGow79jGr15MKMct
VCPOGSq5YxbWn21Z77TwUuDiyLqMB7/vYv27TG+t7RL0/dADvHzO9cx7ZfdVZLkq
QOLiv/f/zBf/Ay+nDvW0qu0SDc9G75IG9w==
-----END CERTIFICATE-----
Generated at Tue Oct 21 16:58:58 2025 by rpki-client