Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa
File:                     2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa (raw, json)
Hash identifier:          FUBXbmpMwQC0RfF9PhchPeLzUWKyL3IDH79gOswoLqk=
Subject key identifier:   A8:FD:22:2F:04:22:32:4B:C7:9F:4C:EE:C3:2B:8D:6B:43:14:CD:9C
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584B25FC339A383B85C6BCD93E80
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     198949
IP address blocks:        2607:cc80:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:33:9a:38:3b:85:c6:bc:d9:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=0643bd61-f155-4da0-a100-8ae8e702a354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:3b:ce:3f:d8:ef:9a:92:37:06:6e:43:9f:
                    2d:1a:bd:87:fd:84:24:18:54:ec:d0:0f:04:a7:66:
                    65:01:9b:20:58:e5:bf:b5:e3:a5:72:c6:be:6f:61:
                    82:8c:bd:39:24:95:d8:1b:6b:27:45:9a:16:57:ed:
                    92:a2:8b:14:1c:4e:bc:e5:ee:62:ea:2d:85:71:4a:
                    ca:1b:a0:d6:39:61:6b:7c:58:42:0b:f3:32:a1:b1:
                    6e:70:c5:a5:e1:da:ed:2b:6b:dc:f5:42:61:d7:11:
                    5d:0b:48:80:a0:68:1c:1c:f4:d2:cc:62:e6:ec:fa:
                    e3:cd:8b:25:9a:f9:a5:97:9f:25:aa:2b:b4:75:46:
                    41:68:b3:1e:0a:96:51:16:08:88:27:57:33:1a:8d:
                    9f:a4:30:22:e9:32:d1:cf:1a:0f:7e:40:c1:37:4b:
                    ef:14:4e:55:68:a8:fb:db:18:9f:1b:fd:60:ed:5e:
                    0b:ba:93:74:ab:40:de:94:12:10:8e:a9:f5:16:25:
                    97:9e:34:0a:3f:25:dd:84:01:36:d9:62:06:61:29:
                    0c:f1:b3:49:cf:24:cb:44:8a:3a:f1:04:63:e3:a2:
                    f3:c9:ca:0e:1c:6d:2b:84:40:1f:17:e1:d8:8d:37:
                    77:a3:0d:41:29:e2:91:a6:3b:a8:1b:4d:db:59:0a:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FD:22:2F:04:22:32:4B:C7:9F:4C:EE:C3:2B:8D:6B:43:14:CD:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/2e3eec9d-ef2d-3201-b0d7-fa96cbcbd39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9a:24:30:01:01:9f:cc:15:ea:b8:01:36:da:1f:1f:70:63:
         7e:47:25:c4:44:8a:21:e0:6d:c2:13:93:5e:4b:71:b1:fe:8c:
         2f:0c:67:9c:dc:da:4f:62:2f:c5:4c:72:ea:3d:e1:e8:10:77:
         35:32:7b:f5:0e:c3:02:b6:65:03:b2:1d:cb:0a:cf:ab:4a:af:
         48:af:f9:7c:79:46:49:61:1b:65:fb:d2:13:0e:78:22:60:0b:
         dd:e4:a2:52:3b:21:5b:89:4f:d4:4e:7f:54:89:86:44:e4:4f:
         f5:9a:ba:eb:d7:88:81:33:2d:ad:47:27:42:da:c0:6c:c8:ce:
         21:94:5e:29:c7:5f:b7:3f:3f:a4:c1:17:6c:7b:05:bf:28:cb:
         45:92:a0:2f:cd:cb:cc:d6:9b:91:6b:3a:fc:f1:05:84:7f:ad:
         26:ff:27:2c:59:a0:b9:93:5f:81:0e:d5:50:e6:07:9f:f4:08:
         70:a7:39:49:78:8d:52:f4:7a:a2:07:0e:cc:2e:8d:c8:42:6f:
         fa:32:5a:ae:09:0b:df:07:57:75:ab:b1:43:6c:29:95:d9:34:
         4a:2c:b7:68:6c:73:53:89:c6:9f:62:78:55:17:7c:16:66:9a:
         cf:57:47:7a:35:3a:d4:e9:71:27:ad:a9:e9:4e:6e:09:c1:95:
         83:f0:11:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsl/DOaODuFxrzZPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0
MDc4MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk
MDY0M2JkNjEtZjE1NS00ZGEwLWExMDAtOGFlOGU3MDJhMzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsw7zj/Y75qSNwZuQ58tGr2H/YQkGFTs0A8E
p2ZlAZsgWOW/teOlcsa+b2GCjL05JJXYG2snRZoWV+2SoosUHE685e5i6i2FcUrK
G6DWOWFrfFhCC/MyobFucMWl4drtK2vc9UJh1xFdC0iAoGgcHPTSzGLm7PrjzYsl
mvmll58lqiu0dUZBaLMeCpZRFgiIJ1czGo2fpDAi6TLRzxoPfkDBN0vvFE5VaKj7
2xifG/1g7V4LupN0q0DelBIQjqn1FiWXnjQKPyXdhAE22WIGYSkM8bNJzyTLRIo6
8QRj46LzycoOHG0rhEAfF+HYjTd3ow1BKeKRpjuoG03bWQqprwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKj9Ii8EIjJLx59M7sMrjWtDFM2cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk
M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvMmUzZWVjOWQtZWYyZC0z
MjAxLWIwZDctZmE5NmNiY2JkMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3
MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm
NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2
ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgIAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFqaJDABAZ/MFeq4ATbaHx9wY35HJcREiiHgbcITk15LcbH+jC8M
Z5zc2k9iL8VMcuo94egQdzUye/UOwwK2ZQOyHcsKz6tKr0iv+Xx5RklhG2X70hMO
eCJgC93kolI7IVuJT9ROf1SJhkTkT/WauuvXiIEzLa1HJ0LawGzIziGUXinHX7c/
P6TBF2x7Bb8oy0WSoC/Ny8zWm5FrOvzxBYR/rSb/JyxZoLmTX4EO1VDmB5/0CHCn
OUl4jVL0eqIHDswujchCb/oyWq4JC98HV3WrsUNsKZXZNEost2hsc1OJxp9ieFUX
fBZmms9XR3o1OtTpcSetqelObgnBlYPwEfc=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:10 2025 by rpki-client