Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/f1a9c8ee-8dda-3b33-ada0-1c37576eba64.roa
File:                     f1a9c8ee-8dda-3b33-ada0-1c37576eba64.roa (raw, json)
Hash identifier:          5d/8RgogJUbZ+F8iOdQAA4Y7SKqnUlAMlvRVWQ2VA3Q=
Subject key identifier:   A2:19:E7:4D:5E:36:F4:23:23:62:69:0F:65:38:71:80:75:20:EA:C6
Certificate issuer:       /CN=29d35046-09f2-4630-973c-fde248a9c01c
Certificate serial:       010D0C9F4328584B434CB0D7AE7AC5300D8B5500
Authority key identifier: EF:01:BF:82:7C:1A:23:EF:4C:63:62:65:05:72:62:36:58:FB:81:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/f1a9c8ee-8dda-3b33-ada0-1c37576eba64.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     395878
IP address blocks:        2602:f697:e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:b0:d7:ae:7a:c5:30:0d:8b:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d35046-09f2-4630-973c-fde248a9c01c
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=4dea4af9-69c4-492e-9ab3-5c116fcdd6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:eb:29:dc:c7:8e:c6:6d:3b:e6:c1:2b:be:
                    dc:c2:e8:d0:8c:5f:8a:0f:29:f9:30:e2:e6:ae:18:
                    39:0f:e3:55:0f:53:41:4a:b8:6f:91:a9:c4:c3:96:
                    6c:d9:fa:de:14:25:aa:a8:7f:b2:24:cc:5f:ca:9c:
                    a2:86:f7:fe:b4:5e:c3:8f:4d:e8:b9:de:4a:10:22:
                    23:d8:84:0f:f0:0f:f1:a9:fa:90:1f:56:a0:01:c3:
                    01:58:0c:ea:65:20:d5:b0:a2:cd:4d:6d:ac:91:ef:
                    f5:f1:eb:79:47:6c:da:f1:fc:ad:fb:32:32:57:f8:
                    a1:c8:ed:ac:9b:48:56:19:70:9a:95:cf:22:8f:46:
                    af:6c:eb:5e:98:2d:af:86:de:27:78:a0:bc:fd:75:
                    2c:1b:a8:2a:38:69:77:35:85:66:4e:8d:ad:30:98:
                    e0:ac:09:08:a1:70:36:9f:d2:41:f3:0f:dd:9f:e7:
                    2d:d2:93:58:4b:bf:2f:8a:33:6c:57:97:1b:dd:f8:
                    a3:bd:17:26:0a:f5:9e:3d:bb:9c:a8:1d:18:d2:90:
                    cd:37:f4:cc:4a:83:28:56:21:9a:5b:8c:45:f6:78:
                    5b:d4:18:b3:c6:da:5c:35:12:b7:df:75:5a:d9:e7:
                    cd:5d:b3:de:96:15:6c:43:96:18:58:35:1f:70:6f:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:19:E7:4D:5E:36:F4:23:23:62:69:0F:65:38:71:80:75:20:EA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/f1a9c8ee-8dda-3b33-ada0-1c37576eba64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:01:BF:82:7C:1A:23:EF:4C:63:62:65:05:72:62:36:58:FB:81:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f697:e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:09:45:e9:5a:b8:dc:a8:cc:04:7f:6e:40:2c:bf:fc:68:7a:
         20:78:e7:86:3c:ec:8b:63:2f:25:89:5a:75:70:d4:e8:84:31:
         83:39:0c:c1:86:8f:a9:a2:2c:15:a4:8f:30:e7:4e:1c:71:38:
         e7:22:5f:d8:b7:a1:4e:7e:e5:09:3b:75:79:c7:bb:2c:63:6f:
         2a:11:21:ea:fe:dd:93:9d:dc:39:c8:5a:01:a6:7a:ec:65:5a:
         58:b9:1d:3f:c5:7f:5b:8a:24:f5:8f:4d:19:b2:4b:16:5e:86:
         65:da:84:cb:f0:df:c6:22:bc:7e:0b:8c:46:f1:39:d9:41:b4:
         6a:1f:38:d1:8a:4f:ad:81:2b:d3:ef:0b:0f:29:ab:8e:8b:17:
         94:7d:73:24:d8:ee:cb:75:dd:95:02:8b:25:72:fe:6b:ef:cc:
         45:f7:a6:02:c8:45:69:11:1d:5f:8c:4c:18:32:4c:f6:6f:ec:
         8c:e3:15:ee:a1:82:cf:be:9c:40:4e:69:89:39:4b:58:2b:18:
         a4:8d:8f:6f:ec:e2:cd:bd:8b:c0:54:7c:ae:c7:d6:f5:73:b9:
         7f:6f:2d:b8:14:c5:bd:a6:85:1e:4b:19:b8:12:b5:99:c1:c1:
         0f:5e:90:ab:b6:aa:c6:c1:25:26:86:75:26:c7:6c:8a:f1:dd:
         6b:14:e8:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtDTLDXrnrFMA2LVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlkMzUwNDYtMDlmMi00NjMwLTk3M2MtZmRlMjQ4YTlj
MDFjMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
NGRlYTRhZjktNjljNC00OTJlLTlhYjMtNWMxMTZmY2RkNmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrvrKdzHjsZtO+bBK77cwujQjF+KDyn5MOLm
rhg5D+NVD1NBSrhvkanEw5Zs2freFCWqqH+yJMxfypyihvf+tF7Dj03oud5KECIj
2IQP8A/xqfqQH1agAcMBWAzqZSDVsKLNTW2ske/18et5R2za8fyt+zIyV/ihyO2s
m0hWGXCalc8ij0avbOtemC2vht4neKC8/XUsG6gqOGl3NYVmTo2tMJjgrAkIoXA2
n9JB8w/dn+ct0pNYS78vijNsV5cb3fijvRcmCvWePbucqB0Y0pDNN/TMSoMoViGa
W4xF9nhb1BizxtpcNRK333Va2efNXbPelhVsQ5YYWDUfcG/2oQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKIZ501eNvQjI2JpD2U4cYB1IOrGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yOWQz
NTA0Ni0wOWYyLTQ2MzAtOTczYy1mZGUyNDhhOWMwMWMvZjFhOWM4ZWUtOGRkYS0z
YjMzLWFkYTAtMWMzNzU3NmViYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjlkMzUwNDYtMDlmMi00NjMwLTk3
M2MtZmRlMjQ4YTljMDFjLzI5ZDM1MDQ2LTA5ZjItNDYzMC05NzNjLWZkZTI0OGE5
YzAxYy5jcmwwHwYDVR0jBBgwFoAU7wG/gnwaI+9MY2JlBXJiNlj7gcQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yOWQzNTA0Ni0wOWYyLTQ2MzAtOTczYy1mZGUy
NDhhOWMwMWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL2lwDg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJIJRelauNyozAR/bkAsv/xoeiB454Y87ItjLyWJWnVw1OiEMYM5
DMGGj6miLBWkjzDnThxxOOciX9i3oU5+5Qk7dXnHuyxjbyoRIer+3ZOd3DnIWgGm
euxlWli5HT/Ff1uKJPWPTRmySxZehmXahMvw38YivH4LjEbxOdlBtGofONGKT62B
K9PvCw8pq46LF5R9cyTY7st13ZUCiyVy/mvvzEX3pgLIRWkRHV+MTBgyTPZv7Izj
Fe6hgs++nEBOaYk5S1grGKSNj2/s4s29i8BUfK7H1vVzuX9vLbgUxb2mhR5LGbgS
tZnBwQ9ekKu2qsbBJSaGdSbHbIrx3WsU6MQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:03:16 2025 by rpki-client