Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/e6e282af-5687-39e6-a7e4-3a61f30f0245.roa
File:                     e6e282af-5687-39e6-a7e4-3a61f30f0245.roa (raw, json)
Hash identifier:          4i1bFtueOS8UsedH0NJf9r+1NFtfywpSfGFHd5Qssj4=
Subject key identifier:   9A:2D:A2:73:99:51:C8:38:F2:20:2F:43:43:9F:E2:8D:76:CA:ED:71
Certificate issuer:       /CN=2b03a19b-4a04-4de7-a6cb-c014680895df
Certificate serial:       010D0C9F4328584B3986F75E692A9BA709EC0000
Authority key identifier: 0F:8E:82:FE:86:87:B6:55:31:89:58:EA:25:08:9B:9A:A7:D8:57:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/e6e282af-5687-39e6-a7e4-3a61f30f0245.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     19382
IP address blocks:        2602:81b:6000::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/2b03a19b-4a04-4de7-a6cb-c014680895df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/2b03a19b-4a04-4de7-a6cb-c014680895df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:86:f7:5e:69:2a:9b:a7:09:ec:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b03a19b-4a04-4de7-a6cb-c014680895df
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=895b213d-57d7-46c3-bf0d-a523358f9dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:65:93:86:f5:7c:72:bc:66:a6:3f:b1:9c:c5:
                    34:d5:58:6d:00:9c:84:1d:3d:2c:25:d0:2d:d6:56:
                    b7:87:73:3f:16:55:b7:0a:38:3d:5c:18:7b:01:bb:
                    f3:ea:7f:26:21:cb:c0:f6:6d:54:b6:3f:7f:bf:cb:
                    56:ba:f9:1a:6f:8b:f0:e9:24:2e:2c:cb:d0:47:bd:
                    0d:f0:09:70:1b:87:61:85:67:60:dc:1c:4d:13:82:
                    f6:3e:e2:b0:73:01:4d:1a:79:0f:35:98:b8:df:c0:
                    00:06:fb:b4:8b:93:07:91:9d:9a:12:93:ee:1f:b1:
                    90:e1:e6:95:7f:a2:df:92:04:4e:88:8f:fd:d1:00:
                    e3:82:0f:f3:ae:1e:2e:8a:07:e7:79:2e:6e:13:cc:
                    b0:75:9c:74:10:70:ff:df:98:1b:38:e9:5b:a3:b5:
                    bd:de:67:ab:dc:d2:1b:58:28:ba:21:49:02:09:b7:
                    c7:a6:61:9c:64:ed:31:1b:72:15:71:80:03:6f:00:
                    f2:a3:4b:4f:99:4f:6b:4b:85:a8:53:d3:8f:22:a5:
                    c3:8b:a5:e2:f4:a4:26:0a:e0:b6:d8:7f:69:72:36:
                    80:03:fa:59:9e:a1:22:8e:81:fd:2c:0f:c4:1e:db:
                    d8:6e:1a:1d:be:a1:cb:0a:54:40:64:38:48:4f:1f:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2D:A2:73:99:51:C8:38:F2:20:2F:43:43:9F:E2:8D:76:CA:ED:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/e6e282af-5687-39e6-a7e4-3a61f30f0245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df/2b03a19b-4a04-4de7-a6cb-c014680895df.crl

            X509v3 Authority Key Identifier:
                keyid:0F:8E:82:FE:86:87:B6:55:31:89:58:EA:25:08:9B:9A:A7:D8:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b03a19b-4a04-4de7-a6cb-c014680895df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81b:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b3:9e:a0:52:8e:72:43:5c:2b:4b:ee:f7:35:9f:42:c0:94:
         db:27:2a:0a:be:6f:7d:af:3d:d2:3c:74:85:cd:06:67:17:ba:
         3d:14:a2:81:a0:de:53:7a:a6:48:3d:55:6f:ad:4d:56:7d:bb:
         cf:96:03:35:26:58:f9:6d:20:5b:bd:ef:d3:64:17:a7:e2:b3:
         d7:9a:be:cf:12:90:f8:13:f5:48:da:03:30:0a:ab:bb:88:52:
         f3:bd:d2:60:de:24:53:f8:c0:1f:6e:63:12:3a:83:4a:08:a2:
         2b:f8:29:96:ff:74:de:46:d3:3d:67:08:8b:e5:8f:9c:77:02:
         c4:5d:4e:4d:63:84:9e:a2:91:8c:aa:7c:19:66:2f:cd:ad:e1:
         a5:a3:7b:a4:c2:b0:9e:cb:aa:0a:e6:02:ca:1b:17:dd:95:82:
         d7:71:95:3c:f3:ac:ec:81:88:e0:d8:4e:1f:71:55:20:07:e5:
         eb:1d:7e:f6:a5:2e:5f:ef:b9:6a:a9:e8:63:79:19:2e:f1:bd:
         6a:bf:df:a7:48:cc:e6:eb:04:af:3f:a9:82:2f:6f:85:e2:e0:
         7b:8e:6e:d2:65:ad:d0:57:84:a7:bb:c9:19:55:94:dd:73:f6:
         de:a9:8c:fc:e2:05:c1:50:d7:ae:5e:63:01:2e:d3:50:fc:96:
         46:d5:ef:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs5hvdeaSqbpwnsAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmIwM2ExOWItNGEwNC00ZGU3LWE2Y2ItYzAxNDY4MDg5
NWRmMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk
ODk1YjIxM2QtNTdkNy00NmMzLWJmMGQtYTUyMzM1OGY5ZGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WWThvV8crxmpj+xnMU01VhtAJyEHT0sJdAt
1la3h3M/FlW3Cjg9XBh7Abvz6n8mIcvA9m1Utj9/v8tWuvkab4vw6SQuLMvQR70N
8AlwG4dhhWdg3BxNE4L2PuKwcwFNGnkPNZi438AABvu0i5MHkZ2aEpPuH7GQ4eaV
f6LfkgROiI/90QDjgg/zrh4uigfneS5uE8ywdZx0EHD/35gbOOlbo7W93mer3NIb
WCi6IUkCCbfHpmGcZO0xG3IVcYADbwDyo0tPmU9rS4WoU9OPIqXDi6Xi9KQmCuC2
2H9pcjaAA/pZnqEijoH9LA/EHtvYbhodvqHLClRAZDhITx93mQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJotonOZUcg48iAvQ0Of4o12yu1xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYjAz
YTE5Yi00YTA0LTRkZTctYTZjYi1jMDE0NjgwODk1ZGYvZTZlMjgyYWYtNTY4Ny0z
OWU2LWE3ZTQtM2E2MWYzMGYwMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmIwM2ExOWItNGEwNC00ZGU3LWE2
Y2ItYzAxNDY4MDg5NWRmLzJiMDNhMTliLTRhMDQtNGRlNy1hNmNiLWMwMTQ2ODA4
OTVkZi5jcmwwHwYDVR0jBBgwFoAUD46C/oaHtlUxiVjqJQibmqfYV44wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYjAzYTE5Yi00YTA0LTRkZTctYTZjYi1jMDE0
NjgwODk1ZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIG2AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAECznqBSjnJDXCtL7vc1n0LAlNsnKgq+b32vPdI8dIXNBmcXuj0U
ooGg3lN6pkg9VW+tTVZ9u8+WAzUmWPltIFu979NkF6fis9eavs8SkPgT9UjaAzAK
q7uIUvO90mDeJFP4wB9uYxI6g0oIoiv4KZb/dN5G0z1nCIvlj5x3AsRdTk1jhJ6i
kYyqfBlmL82t4aWje6TCsJ7LqgrmAsobF92VgtdxlTzzrOyBiODYTh9xVSAH5esd
fvalLl/vuWqp6GN5GS7xvWq/36dIzObrBK8/qYIvb4Xi4HuObtJlrdBXhKe7yRlV
lN1z9t6pjPziBcFQ165eYwEu01D8lkbV7xQ=
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:31:56 2025 by rpki-client