Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/99d8a592-4034-3bf7-a511-b0ceb7269297.roa
File:                     99d8a592-4034-3bf7-a511-b0ceb7269297.roa (raw, json)
Hash identifier:          XBhIUJ0N+ihqOsNk87EUg44x+8e+JJkKdo4Ji/j0vXw=
Subject key identifier:   0A:62:92:95:E5:64:2B:AC:00:49:A8:3F:72:E3:5B:BE:9E:54:D1:54
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F4328584B6201EDA2F105F34E79D58E60
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/99d8a592-4034-3bf7-a511-b0ceb7269297.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     209542
IP address blocks:        2602:fa92:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ed:a2:f1:05:f3:4e:79:d5:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=94e21096-cf1a-4aa2-abcf-91b1bde7e1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:7f:24:36:ad:29:fd:1d:a5:2b:80:fd:0d:
                    f8:b0:46:2a:da:8f:f1:57:de:5d:88:ea:f8:04:d4:
                    d6:3c:35:83:13:dd:1b:55:f7:9d:84:fc:54:c6:59:
                    46:d9:1f:f5:00:5f:e0:28:2b:66:82:1a:d6:b5:51:
                    3e:c1:8d:8b:32:00:08:c0:bd:e5:06:37:54:fc:18:
                    42:e2:f7:40:5e:35:ab:d2:45:e9:a8:2e:f5:c5:55:
                    46:61:d9:98:fc:a8:0f:32:da:25:9a:5b:f4:71:ad:
                    cb:7a:3c:ba:0b:36:b0:8b:66:4b:0b:99:31:84:23:
                    70:9f:ef:dd:34:53:f3:28:79:82:c7:ea:18:16:13:
                    f5:85:4e:40:8a:44:3b:18:43:86:1e:7b:a0:1e:b0:
                    47:a2:af:55:11:07:ac:57:21:c4:7f:d3:b3:32:63:
                    31:ad:af:82:e6:94:d9:b0:ec:87:a5:ad:3a:e0:3b:
                    9b:5c:28:b0:df:56:40:79:d9:59:4f:6e:00:e7:09:
                    99:25:cc:54:39:d3:1c:f9:64:19:82:93:d4:10:95:
                    95:f6:12:66:ff:5d:64:84:88:78:c8:a6:73:10:03:
                    8c:09:e4:28:fe:b5:05:44:67:da:fe:72:1e:b9:ee:
                    a9:b5:32:1f:f7:1d:73:a2:43:1f:52:93:b4:12:7d:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:62:92:95:E5:64:2B:AC:00:49:A8:3F:72:E3:5B:BE:9E:54:D1:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/99d8a592-4034-3bf7-a511-b0ceb7269297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa92:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d9:aa:a0:2f:7c:8a:8c:26:10:99:6c:b6:8f:6f:6e:1b:39:
         c4:2f:20:29:12:b5:f0:14:ea:fc:f4:9e:0e:62:e6:00:94:e4:
         a9:bd:b3:63:7a:24:0f:6d:04:6a:4c:7d:9e:3e:c7:8f:0b:09:
         61:af:fb:53:7f:7b:c9:8d:65:1d:cc:69:00:cd:71:2d:cb:3c:
         f1:f7:89:a8:74:29:62:b4:1f:c2:49:73:e7:96:59:23:ec:9b:
         21:c6:ea:fd:85:d2:ba:ec:79:f0:6b:dc:42:05:2c:05:38:ab:
         44:76:ab:6f:a7:9a:26:62:d8:07:b7:b9:4e:b1:66:96:e9:a7:
         e3:da:25:62:b0:ba:a7:bc:48:36:7f:c7:0d:f5:db:89:3d:fc:
         3e:63:bc:2b:ce:5d:e1:90:53:cd:75:d3:ab:7c:28:14:c9:49:
         74:fb:3b:a3:e4:fd:e4:79:47:c6:50:f3:58:18:f7:46:d3:3d:
         33:0e:09:c8:b3:3a:1e:43:17:5f:ef:40:6b:70:57:21:a8:25:
         ff:63:ba:a4:49:44:13:33:12:2a:c3:b7:ce:85:60:e5:84:6f:
         fe:44:60:25:a2:69:ff:56:9c:d4:09:6a:ed:4a:bd:70:f2:39:
         5f:03:d5:3d:4d:5b:33:dc:19:f1:8c:0c:aa:53:24:15:17:3a:
         af:32:77:f8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtiAe2i8QXzTnnVjmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc5ZmUxYTctMWQwNC00ZjcxLWI0MTEtNjEzYjk2NjEy
NGZiMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
OTRlMjEwOTYtY2YxYS00YWEyLWFiY2YtOTFiMWJkZTdlMWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie5/JDatKf0dpSuA/Q34sEYq2o/xV95diOr4
BNTWPDWDE90bVfedhPxUxllG2R/1AF/gKCtmghrWtVE+wY2LMgAIwL3lBjdU/BhC
4vdAXjWr0kXpqC71xVVGYdmY/KgPMtolmlv0ca3Lejy6Czawi2ZLC5kxhCNwn+/d
NFPzKHmCx+oYFhP1hU5AikQ7GEOGHnugHrBHoq9VEQesVyHEf9OzMmMxra+C5pTZ
sOyHpa064DubXCiw31ZAedlZT24A5wmZJcxUOdMc+WQZgpPUEJWV9hJm/11khIh4
yKZzEAOMCeQo/rUFRGfa/nIeue6ptTIf9x1zokMfUpO0En0BVwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFApikpXlZCusAEmoP3LjW76eVNFUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Nzlm
ZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNiOTY2MTI0ZmIvOTlkOGE1OTItNDAzNC0z
YmY3LWE1MTEtYjBjZWI3MjY5Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTc5ZmUxYTctMWQwNC00ZjcxLWI0
MTEtNjEzYjk2NjEyNGZiLzU3OWZlMWE3LTFkMDQtNGY3MS1iNDExLTYxM2I5NjYx
MjRmYi5jcmwwHwYDVR0jBBgwFoAUR9ED1+qSyGdIgRrPQ0vkaIytvMEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81NzlmZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNi
OTY2MTI0ZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6kgIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQtmqoC98iowmEJlsto9vbhs5xC8gKRK18BTq/PSeDmLmAJTkqb2z
Y3okD20Eakx9nj7HjwsJYa/7U397yY1lHcxpAM1xLcs88feJqHQpYrQfwklz55ZZ
I+ybIcbq/YXSuux58GvcQgUsBTirRHarb6eaJmLYB7e5TrFmlumn49olYrC6p7xI
Nn/HDfXbiT38PmO8K85d4ZBTzXXTq3woFMlJdPs7o+T95HlHxlDzWBj3RtM9Mw4J
yLM6HkMXX+9Aa3BXIagl/2O6pElEEzMSKsO3zoVg5YRv/kRgJaJp/1ac1Alq7Uq9
cPI5XwPVPU1bM9wZ8YwMqlMkFRc6rzJ3+A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:53 2025 by rpki-client