Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa
File:                     381fe162-8140-3694-81fa-38c3b160b29d.roa (raw, json)
Hash identifier:          zyQle7N2j+hCqKpcVb8ba59UNh3Ii137Ja3JtFnlo3E=
Subject key identifier:   EC:53:E7:9F:94:21:F9:5B:51:59:ED:F1:8B:05:2C:FC:5B:C5:8D:77
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F4328584B3556E01817DC8F34956D4100
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     400861
IP address blocks:        2602:2da:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e0:18:17:dc:8f:34:95:6d:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=45de1e74-3bcf-433f-975e-a0d9a5e19a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:77:df:ba:16:55:9d:77:84:50:19:43:3f:22:
                    2d:8f:29:c9:e8:d7:af:e5:e5:6f:d1:4f:f5:3b:ad:
                    52:24:5b:b2:2a:65:63:3d:63:a5:85:7a:36:37:87:
                    b6:3d:7e:7d:06:f7:b3:09:0c:aa:25:fb:0a:44:26:
                    dd:98:30:78:33:fe:af:1b:ca:d9:21:73:bc:30:e0:
                    3f:69:79:98:9a:21:a1:7c:ff:5d:a8:c8:3e:f3:77:
                    34:71:07:0e:84:3f:0c:a4:4b:04:d7:4d:fc:ea:d9:
                    db:98:c6:b2:f5:ed:54:f0:40:3f:f4:ba:33:5c:32:
                    7b:b3:df:34:01:b9:8d:48:84:ef:50:d4:4f:8c:09:
                    71:ce:db:45:b8:2b:2f:c5:50:00:80:58:33:7f:52:
                    23:c5:32:00:7e:a9:9e:e3:f1:84:73:b5:8d:22:23:
                    cd:70:99:b6:31:c5:b0:b7:c0:73:a8:48:c6:df:e0:
                    05:65:00:83:af:0b:a8:b3:33:8f:e6:ec:2f:76:c2:
                    ab:bb:b4:a0:79:be:87:1a:89:34:ef:d0:f3:80:62:
                    b0:8e:51:18:65:06:84:34:18:1e:23:23:bb:bf:e3:
                    62:2a:28:a3:24:d1:e4:67:41:05:57:9f:2f:d0:56:
                    bd:08:b8:c0:1a:e3:3b:86:04:6b:52:8a:ea:db:dd:
                    6f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:53:E7:9F:94:21:F9:5B:51:59:ED:F1:8B:05:2C:FC:5B:C5:8D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ee:e4:64:87:51:cb:ee:c9:0e:3d:8b:5b:9a:68:9e:41:9d:
         1a:24:5f:a9:99:28:8d:4e:52:4f:17:e0:1b:ad:e8:1c:f9:ab:
         21:b4:a4:e2:7f:76:c5:08:a2:6e:0e:43:85:7e:94:fc:55:52:
         cd:c4:60:c9:d3:d9:86:ef:ba:52:40:3b:1e:40:57:70:ef:2e:
         15:55:8f:76:3c:61:07:b5:a7:53:eb:a4:33:91:96:8f:67:93:
         dc:b0:66:38:3e:82:e6:f6:20:46:ca:7d:dc:be:fd:2b:9c:2f:
         db:34:fe:74:e2:4e:fa:58:1c:b9:f0:c7:3a:da:88:ac:c9:0d:
         eb:67:cb:df:b1:a4:ac:3b:65:31:46:2e:72:ab:42:c6:50:aa:
         a9:7b:a5:04:84:4e:a2:fc:a1:b4:61:63:e8:27:c6:be:a7:5b:
         75:9e:5e:d1:e9:cf:78:69:95:1c:b5:b5:a9:aa:41:a9:38:44:
         b7:ab:51:df:e2:86:c4:82:50:03:55:e4:da:4f:40:0b:95:9f:
         29:48:81:14:eb:22:6e:14:73:a7:1f:14:93:49:45:1f:ad:ff:
         75:34:e7:bc:fc:01:74:b3:1f:9a:01:71:64:eb:70:97:2c:0f:
         57:0d:3a:73:54:1b:bf:6f:92:fa:fa:85:cc:a5:13:c9:a8:91:
         08:6a:41:45
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs1VuAYF9yPNJVtQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFiMTdiZWEtZTY2NS00ZWQxLWFiZTMtZDJhOWFjMzRl
MGVhMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk
NDVkZTFlNzQtM2JjZi00MzNmLTk3NWUtYTBkOWE1ZTE5YTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XffuhZVnXeEUBlDPyItjynJ6Nev5eVv0U/1
O61SJFuyKmVjPWOlhXo2N4e2PX59BvezCQyqJfsKRCbdmDB4M/6vG8rZIXO8MOA/
aXmYmiGhfP9dqMg+83c0cQcOhD8MpEsE10386tnbmMay9e1U8EA/9LozXDJ7s980
AbmNSITvUNRPjAlxzttFuCsvxVAAgFgzf1IjxTIAfqme4/GEc7WNIiPNcJm2McWw
t8BzqEjG3+AFZQCDrwuoszOP5uwvdsKru7Sgeb6HGok079DzgGKwjlEYZQaENBge
IyO7v+NiKiijJNHkZ0EFV58v0Fa9CLjAGuM7hgRrUorq291vewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOxT55+UIflbUVnt8YsFLPxbxY13MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWIx
N2JlYS1lNjY1LTRlZDEtYWJlMy1kMmE5YWMzNGUwZWEvMzgxZmUxNjItODE0MC0z
Njk0LTgxZmEtMzhjM2IxNjBiMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFiMTdiZWEtZTY2NS00ZWQxLWFi
ZTMtZDJhOWFjMzRlMGVhL2FhYjE3YmVhLWU2NjUtNGVkMS1hYmUzLWQyYTlhYzM0
ZTBlYS5jcmwwHwYDVR0jBBgwFoAULaiA1O+1z0U8T5SFN3XGDcEUFSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYWIxN2JlYS1lNjY1LTRlZDEtYWJlMy1kMmE5
YWMzNGUwZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC2gAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI3u5GSHUcvuyQ49i1uaaJ5BnRokX6mZKI1OUk8X4But6Bz5qyG0
pOJ/dsUIom4OQ4V+lPxVUs3EYMnT2YbvulJAOx5AV3DvLhVVj3Y8YQe1p1PrpDOR
lo9nk9ywZjg+gub2IEbKfdy+/SucL9s0/nTiTvpYHLnwxzraiKzJDetny9+xpKw7
ZTFGLnKrQsZQqql7pQSETqL8obRhY+gnxr6nW3WeXtHpz3hplRy1tamqQak4RLer
Ud/ihsSCUANV5NpPQAuVnylIgRTrIm4Uc6cfFJNJRR+t/3U057z8AXSzH5oBcWTr
cJcsD1cNOnNUG79vkvr6hcylE8mokQhqQUU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:12 2025 by rpki-client