Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa
File:                     84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa (raw, json)
Hash identifier:          QYRh6m/eM+z9Y8627VmHcEYzEw/z72k0HIV1eOhn3tY=
Subject key identifier:   F8:53:BB:D0:F4:95:7C:96:DC:E3:F0:B4:88:4D:53:E5:D4:8C:A3:09
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F4328584AE891378A0EB8B40289670620
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     46427
IP address blocks:        2602:2c1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:37:8a:0e:b8:b4:02:89:67:06:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=424aafab-9ccc-4d5c-9d52-2b8ba198c213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:6b:85:c1:c1:53:46:6c:57:06:d9:fe:5e:
                    ce:e9:7f:86:cb:c8:6d:33:54:23:c8:f9:d8:9d:21:
                    83:40:19:4b:d3:3b:57:14:c9:18:97:53:17:94:70:
                    5a:10:31:c6:19:08:41:f4:8d:e9:b2:db:19:1e:58:
                    2a:5a:97:ee:b2:c7:54:6b:3b:fd:54:a9:33:7c:9c:
                    f8:4c:47:6b:be:b2:9d:d5:6d:62:57:f3:5e:fe:74:
                    19:77:90:93:b3:47:de:b8:22:85:03:44:b6:57:28:
                    67:a3:28:76:5a:2d:01:8d:26:0d:09:d6:3f:4e:c6:
                    6c:f0:e6:c4:2e:1a:ab:86:ac:3e:3a:3f:a8:2a:c3:
                    04:0f:7b:0a:ed:4f:31:6a:c9:68:96:27:02:0e:b4:
                    75:76:55:99:4c:0e:2e:90:5e:16:8f:ce:70:c2:76:
                    39:26:7e:af:96:98:6c:fc:76:a4:a6:0f:6d:9e:92:
                    ea:79:7e:9c:30:dd:64:78:ac:b2:dd:20:c4:c0:9a:
                    9a:76:a0:ce:ee:36:ae:0b:9f:e6:01:26:68:37:67:
                    d6:84:38:fb:55:69:f3:63:44:40:7e:c1:ac:cc:2a:
                    1c:ee:f5:de:12:fd:59:60:92:1a:70:65:1c:b4:4c:
                    8a:08:0f:60:b4:4f:70:8d:d4:5a:a6:cf:53:1f:3e:
                    70:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:53:BB:D0:F4:95:7C:96:DC:E3:F0:B4:88:4D:53:E5:D4:8C:A3:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:0c:4a:c1:fa:e9:97:d8:64:50:92:94:d2:97:72:39:46:51:
         ca:f7:f7:f0:36:e4:61:c0:68:a4:1d:d5:0e:44:bf:39:ea:10:
         87:b4:82:25:a6:86:dc:b4:2f:97:96:f0:07:b6:85:43:5f:0f:
         04:b5:a6:7c:36:5c:80:b0:53:aa:a8:4c:43:d0:fe:ef:54:3c:
         38:db:07:b5:26:ad:f0:af:98:98:b2:cf:c4:81:8f:70:8b:47:
         6a:94:0c:9d:64:57:ef:a9:ba:09:a1:d4:11:69:e1:bf:4a:38:
         ae:61:d4:a1:b3:e1:a9:30:e5:53:1a:99:22:08:73:24:33:cf:
         eb:98:91:82:8e:30:9e:b5:f2:ed:c5:89:f8:d7:4b:22:19:1a:
         d9:b4:58:c5:28:6f:15:b4:db:56:f8:5c:4a:14:a5:de:86:27:
         ec:df:0d:9d:df:54:7e:99:f0:25:c7:8f:95:ed:a9:2f:55:d5:
         ef:7f:f7:d7:b5:50:bf:1b:5b:d8:e0:b0:ff:2e:9e:18:c1:29:
         fd:fa:c5:90:44:2d:a4:16:69:ae:03:e9:b7:cc:68:88:83:1f:
         86:f2:4b:06:7f:c3:15:2c:79:aa:ae:2c:99:8a:24:fe:43:ae:
         45:90:99:7a:40:a0:04:c6:9f:46:ee:40:6e:af:3f:dd:0c:2e:
         72:ea:d2:27
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErokTeKDri0AolnBiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjgyZTVjMTAtYWVlNy00YzE5LWE4MjgtODQ5NzRmY2I4
YWMyMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk
NDI0YWFmYWItOWNjYy00ZDVjLTlkNTItMmI4YmExOThjMjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUhrhcHBU0ZsVwbZ/l7O6X+Gy8htM1QjyPnY
nSGDQBlL0ztXFMkYl1MXlHBaEDHGGQhB9I3pstsZHlgqWpfussdUazv9VKkzfJz4
TEdrvrKd1W1iV/Ne/nQZd5CTs0feuCKFA0S2Vyhnoyh2Wi0BjSYNCdY/TsZs8ObE
Lhqrhqw+Oj+oKsMED3sK7U8xaslolicCDrR1dlWZTA4ukF4Wj85wwnY5Jn6vlphs
/Hakpg9tnpLqeX6cMN1keKyy3SDEwJqadqDO7jauC5/mASZoN2fWhDj7VWnzY0RA
fsGszCoc7vXeEv1ZYJIacGUctEyKCA9gtE9wjdRaps9THz5wOQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPhTu9D0lXyW3OPwtIhNU+XUjKMJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iODJl
NWMxMC1hZWU3LTRjMTktYTgyOC04NDk3NGZjYjhhYzIvODRjMDg4NDUtN2M1Ni0z
YzU4LWFjNTktOGE4OTZiOGFjMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjgyZTVjMTAtYWVlNy00YzE5LWE4
MjgtODQ5NzRmY2I4YWMyL2I4MmU1YzEwLWFlZTctNGMxOS1hODI4LTg0OTc0ZmNi
OGFjMi5jcmwwHwYDVR0jBBgwFoAUfHty1WJzWvEh92tWwACWUA0zzHAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iODJlNWMxMC1hZWU3LTRjMTktYTgyOC04NDk3
NGZjYjhhYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgICwQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAtQxKwfrpl9hkUJKU0pdyOUZRyvf38DbkYcBopB3VDkS/OeoQh7SC
JaaG3LQvl5bwB7aFQ18PBLWmfDZcgLBTqqhMQ9D+71Q8ONsHtSat8K+YmLLPxIGP
cItHapQMnWRX76m6CaHUEWnhv0o4rmHUobPhqTDlUxqZIghzJDPP65iRgo4wnrXy
7cWJ+NdLIhka2bRYxShvFbTbVvhcShSl3oYn7N8Nnd9UfpnwJcePle2pL1XV73/3
17VQvxtb2OCw/y6eGMEp/frFkEQtpBZprgPpt8xoiIMfhvJLBn/DFSx5qq4smYok
/kOuRZCZekCgBMafRu5Abq8/3QwucurSJw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:05:18 2025 by rpki-client