Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/797a34bc-e5eb-3080-8424-f9de46b2953e.roa
File:                     797a34bc-e5eb-3080-8424-f9de46b2953e.roa (raw, json)
Hash identifier:          0xqdB+wLZVoEqwP+Y1XdroYnhAE14FE+ZGz1mGK/ITU=
Subject key identifier:   AC:7A:47:3F:DA:86:79:16:EB:95:26:E3:EE:4C:E7:82:6C:AE:FC:77
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584B33F19EB9DAEF0A0EA36C6580
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/797a34bc-e5eb-3080-8424-f9de46b2953e.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     2152
IP address blocks:        2607:cc80:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:9e:b9:da:ef:0a:0e:a3:6c:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=20e08cc2-5b4f-437e-a603-3d33fb281316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:7d:cf:29:05:96:d1:d4:d3:95:9e:4e:7a:
                    47:be:66:92:c5:03:a3:ca:61:b2:c5:3e:c9:1d:de:
                    32:25:5b:a3:c6:f1:6f:73:37:88:34:cf:8d:b2:86:
                    45:d6:ec:02:fe:d6:7c:81:5d:31:40:e1:11:d0:c5:
                    84:2c:61:44:7e:56:3e:e8:56:de:10:2a:c7:25:90:
                    77:54:30:ce:35:6c:20:b3:ed:df:5e:32:b7:80:52:
                    1e:e1:da:cf:d5:d0:9e:44:9b:da:90:fa:00:6d:c0:
                    f7:ca:16:a4:8a:c2:50:62:f5:e7:c2:4d:a9:f9:03:
                    64:b5:78:8b:4c:ba:f2:c5:f3:0b:f1:78:94:2e:14:
                    55:8e:4a:c1:ba:cd:36:1a:06:e1:e1:8e:07:39:d9:
                    03:02:74:b9:d2:aa:f9:df:77:99:52:40:9a:2d:35:
                    a6:af:74:b9:13:06:ca:74:68:c5:09:63:2e:f1:00:
                    d3:08:37:c6:84:ff:c7:f9:95:f3:f5:f0:9d:ed:93:
                    fb:d3:5c:9f:82:f3:54:c6:73:b7:17:fc:96:f7:9b:
                    af:cf:1a:c8:e4:ab:78:79:ae:6d:75:25:64:b1:5c:
                    04:46:ac:ea:9d:b9:34:cb:4e:43:d6:8f:19:40:32:
                    32:b0:30:17:3f:cf:ea:48:1f:6b:a3:f0:34:6a:fb:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7A:47:3F:DA:86:79:16:EB:95:26:E3:EE:4C:E7:82:6C:AE:FC:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/797a34bc-e5eb-3080-8424-f9de46b2953e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:40:ee:26:f1:b2:ab:50:45:4e:87:01:2a:8a:fb:e6:81:71:
         13:6d:06:62:27:ee:b7:84:a0:34:15:98:44:68:ed:95:b0:b2:
         70:b8:a9:d5:9c:ba:4f:16:26:92:ae:16:8a:0d:44:42:2f:c5:
         96:fa:78:8a:52:23:4d:87:9e:e3:96:5c:78:d5:33:59:49:ce:
         88:57:ae:9f:7e:ab:e1:49:e0:97:ef:77:07:d3:8a:9d:66:9d:
         63:37:05:aa:f9:c3:5c:99:5e:ef:8e:df:24:66:b4:88:dc:46:
         19:17:1e:af:4d:f4:fe:75:09:29:ce:d3:a5:35:64:16:ce:f8:
         4e:fd:3b:af:5c:9c:5f:ed:86:dd:06:07:49:e6:d2:67:8f:32:
         3f:0c:31:3a:a1:a4:77:57:0c:40:a0:3b:84:ee:60:d1:6a:d9:
         a3:df:44:f0:06:52:61:65:80:8f:31:18:b5:dd:3a:3b:ec:c7:
         1a:78:97:19:1d:70:4b:37:16:7c:fe:be:4f:0e:65:1a:a1:f1:
         c7:bd:f1:ce:aa:c0:71:3a:69:d0:21:da:28:92:5c:aa:70:19:
         23:04:4a:7b:6e:45:b3:c7:15:b7:6e:8e:25:9f:f2:c4:0e:20:
         80:fb:5c:43:0b:9f:51:4e:d9:06:1b:51:8f:1a:a6:0d:b0:83:
         e7:d5:7b:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsz8Z652u8KDqNsZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0
MDc4MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk
MjBlMDhjYzItNWI0Zi00MzdlLWE2MDMtM2QzM2ZiMjgxMzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktB9zykFltHU05WeTnpHvmaSxQOjymGyxT7J
Hd4yJVujxvFvczeINM+NsoZF1uwC/tZ8gV0xQOER0MWELGFEflY+6FbeECrHJZB3
VDDONWwgs+3fXjK3gFIe4drP1dCeRJvakPoAbcD3yhakisJQYvXnwk2p+QNktXiL
TLryxfML8XiULhRVjkrBus02Ggbh4Y4HOdkDAnS50qr533eZUkCaLTWmr3S5EwbK
dGjFCWMu8QDTCDfGhP/H+ZXz9fCd7ZP701yfgvNUxnO3F/yW95uvzxrI5Kt4ea5t
dSVksVwERqzqnbk0y05D1o8ZQDIysDAXP8/qSB9ro/A0avvDLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKx6Rz/ahnkW65Um4+5M54Jsrvx3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk
M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvNzk3YTM0YmMtZTVlYi0z
MDgwLTg0MjQtZjlkZTQ2YjI5NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3
MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm
NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2
ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAtA7ibxsqtQRU6HASqK++aBcRNtBmIn7reEoDQVmERo7ZWwsnC4
qdWcuk8WJpKuFooNREIvxZb6eIpSI02HnuOWXHjVM1lJzohXrp9+q+FJ4JfvdwfT
ip1mnWM3Bar5w1yZXu+O3yRmtIjcRhkXHq9N9P51CSnO06U1ZBbO+E79O69cnF/t
ht0GB0nm0mePMj8MMTqhpHdXDECgO4TuYNFq2aPfRPAGUmFlgI8xGLXdOjvsxxp4
lxkdcEs3Fnz+vk8OZRqh8ce98c6qwHE6adAh2iiSXKpwGSMESntuRbPHFbdujiWf
8sQOIID7XEMLn1FO2QYbUY8apg2wg+fVe9M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:14 2025 by rpki-client