Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/21214490-ba7a-3258-9590-6f9f34a28301.roa
File:                     21214490-ba7a-3258-9590-6f9f34a28301.roa (raw, json)
Hash identifier:          J73b6PZubEpg4d9TfAmHsurdbX3NqOEM3wuzfs95Oh4=
Subject key identifier:   A7:81:B4:2C:26:16:E5:C5:FE:92:8E:1B:41:BB:AE:B1:14:39:91:CB
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F4328584AC9DBA73AE0F2DAF88EE7C100
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/21214490-ba7a-3258-9590-6f9f34a28301.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     46427
IP address blocks:        2602:2c1:388::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a7:3a:e0:f2:da:f8:8e:e7:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=28b0ec7c-599e-4d98-80cd-0eae31e9d085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:4c:51:43:02:52:62:1e:2e:09:85:0c:4e:
                    cd:1c:31:60:51:d0:9b:5a:f4:44:62:3e:27:6d:6e:
                    86:10:b4:8e:15:d3:c3:1b:43:8e:ad:94:de:69:68:
                    27:0c:58:dd:84:fc:92:f6:42:fe:b1:cd:01:3e:a3:
                    a5:a7:4d:ec:e9:43:82:05:e6:72:8c:8f:aa:4f:ac:
                    59:4e:4b:e8:69:88:ea:7a:76:c9:ff:fa:6c:8d:60:
                    94:be:1b:42:59:1f:ea:a6:77:d7:1e:4c:ce:6d:71:
                    ff:22:0b:ae:0c:0b:23:25:61:8e:3d:f8:13:2e:e3:
                    9e:6b:27:7a:a6:fe:41:d3:9b:cc:e8:96:a2:f5:6c:
                    e7:46:b3:0f:cf:10:38:be:25:96:b8:b8:c8:f3:c9:
                    d5:5e:70:a6:99:58:76:4c:be:40:f4:81:35:a4:6f:
                    66:36:b6:86:b9:85:08:87:ba:ab:5a:3f:f2:d0:d6:
                    fb:17:8d:80:de:7e:6a:9b:20:de:d4:96:c1:4e:70:
                    99:d6:fc:f9:20:a4:94:22:6d:e9:24:c2:f7:92:82:
                    6c:0d:aa:ae:b2:00:da:a3:a8:9b:cc:13:d6:29:e6:
                    37:6c:1c:9f:00:70:04:fb:ad:51:09:06:17:3c:7e:
                    46:4a:72:dd:71:03:df:de:5b:08:41:b8:73:3b:84:
                    60:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:81:B4:2C:26:16:E5:C5:FE:92:8E:1B:41:BB:AE:B1:14:39:91:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/21214490-ba7a-3258-9590-6f9f34a28301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c1:388::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:83:69:cc:dd:fa:e5:bb:e9:20:1c:80:3f:40:10:84:63:5b:
         24:e9:09:ea:60:20:85:44:1b:09:02:72:4e:23:f3:9a:56:e9:
         f4:78:a8:90:38:a6:2f:7a:c9:b4:41:77:9d:1a:a6:2f:e5:ec:
         7d:c6:58:81:20:1b:1b:7a:c1:53:c4:c7:d3:8d:cf:87:cf:3f:
         c7:77:06:d2:77:c2:f6:11:81:44:29:2a:56:58:21:9e:8a:6c:
         8c:76:87:a0:b3:ac:2a:66:f7:db:f6:da:14:12:4c:32:27:2d:
         fd:69:da:07:ac:5e:bb:73:94:b2:95:b6:ff:ff:62:be:5b:71:
         46:37:b0:af:d5:5b:8e:fe:65:04:0b:e6:77:de:a5:3b:e0:44:
         03:ae:1d:71:58:96:72:aa:89:73:7b:6f:63:d7:47:cc:5a:96:
         7e:9d:c8:26:d4:b9:a8:79:b7:74:8c:06:cc:05:5b:f6:9b:f3:
         58:c0:b3:44:3b:29:e8:e7:1f:f9:95:f6:7f:66:7f:9a:1f:b3:
         b0:47:ce:a0:dd:9b:d7:45:9e:f7:a1:4d:d6:9a:21:f2:d9:0a:
         eb:f9:e0:97:bb:1b:0f:c7:7a:14:53:d0:71:8e:bc:b1:cc:52:
         36:24:6e:b4:80:dd:1e:b9:cc:5b:e1:ee:e6:24:d2:f1:14:e3:
         24:1f:3a:07
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErJ26c64PLa+I7nwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjgyZTVjMTAtYWVlNy00YzE5LWE4MjgtODQ5NzRmY2I4
YWMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk
MjhiMGVjN2MtNTk5ZS00ZDk4LTgwY2QtMGVhZTMxZTlkMDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVBMUUMCUmIeLgmFDE7NHDFgUdCbWvREYj4n
bW6GELSOFdPDG0OOrZTeaWgnDFjdhPyS9kL+sc0BPqOlp03s6UOCBeZyjI+qT6xZ
TkvoaYjqenbJ//psjWCUvhtCWR/qpnfXHkzObXH/IguuDAsjJWGOPfgTLuOeayd6
pv5B05vM6Jai9WznRrMPzxA4viWWuLjI88nVXnCmmVh2TL5A9IE1pG9mNraGuYUI
h7qrWj/y0Nb7F42A3n5qmyDe1JbBTnCZ1vz5IKSUIm3pJML3koJsDaqusgDao6ib
zBPWKeY3bByfAHAE+61RCQYXPH5GSnLdcQPf3lsIQbhzO4RgZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKeBtCwmFuXF/pKOG0G7rrEUOZHLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iODJl
NWMxMC1hZWU3LTRjMTktYTgyOC04NDk3NGZjYjhhYzIvMjEyMTQ0OTAtYmE3YS0z
MjU4LTk1OTAtNmY5ZjM0YTI4MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjgyZTVjMTAtYWVlNy00YzE5LWE4
MjgtODQ5NzRmY2I4YWMyL2I4MmU1YzEwLWFlZTctNGMxOS1hODI4LTg0OTc0ZmNi
OGFjMi5jcmwwHwYDVR0jBBgwFoAUfHty1WJzWvEh92tWwACWUA0zzHAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iODJlNWMxMC1hZWU3LTRjMTktYTgyOC04NDk3
NGZjYjhhYzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgICwQOI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL2Daczd+uW76SAcgD9AEIRjWyTpCepgIIVEGwkCck4j85pW6fR4
qJA4pi96ybRBd50api/l7H3GWIEgGxt6wVPEx9ONz4fPP8d3BtJ3wvYRgUQpKlZY
IZ6KbIx2h6CzrCpm99v22hQSTDInLf1p2gesXrtzlLKVtv//Yr5bcUY3sK/VW47+
ZQQL5nfepTvgRAOuHXFYlnKqiXN7b2PXR8xaln6dyCbUuah5t3SMBswFW/ab81jA
s0Q7KejnH/mV9n9mf5ofs7BHzqDdm9dFnvehTdaaIfLZCuv54Je7Gw/HehRT0HGO
vLHMUjYkbrSA3R65zFvh7uYk0vEU4yQfOgc=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:35:37 2025 by rpki-client