Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/fbbba54b-950b-302b-a65a-9cf427e72454.roa
File:                     fbbba54b-950b-302b-a65a-9cf427e72454.roa (raw, json)
Hash identifier:          cyL/hSbUh3JcKiWUxrsL1/YeikRYGrkoCPQAKGSsljY=
Subject key identifier:   22:B1:28:BB:F0:CC:12:FA:E1:F0:F6:45:29:C3:80:4C:11:0C:2D:11
Certificate issuer:       /CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84
Certificate serial:       010D0C9F4328584AC8767B56974C1DECB9D7BAC0
Authority key identifier: B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/fbbba54b-950b-302b-a65a-9cf427e72454.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     23102
IP address blocks:        2620:95::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:7b:56:97:4c:1d:ec:b9:d7:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8a971f-d7dc-4e95-bc6e-a0db15f80a84
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=8f581ac6-99e6-4a99-9df9-804af07eb75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:f9:69:a2:0e:c5:01:7e:ad:21:6e:03:ca:
                    22:a4:1b:3b:ff:e5:e3:2b:16:05:a3:fd:b0:9c:58:
                    9f:07:e1:45:8c:0e:27:65:a5:83:35:75:69:7a:af:
                    9d:76:ab:7f:4d:d4:38:af:27:92:ee:07:82:ab:54:
                    f6:5b:36:5c:b0:8b:6e:44:a2:60:8c:19:c5:f0:39:
                    5b:60:c7:f9:42:cb:e1:87:cd:ad:c4:8f:d5:90:20:
                    5d:ab:ff:72:c4:84:9d:10:66:da:36:76:fe:c9:73:
                    36:ed:44:fe:89:f0:f1:71:ce:c5:34:7e:94:3b:ad:
                    9b:cd:03:5b:d9:64:bb:86:1e:2c:bb:19:05:19:ab:
                    bc:f0:c5:53:de:4e:94:a7:c4:1f:0a:c2:ef:bb:a4:
                    97:9a:89:72:b8:37:64:a7:9a:f7:dc:3b:f8:17:74:
                    27:17:57:b3:b2:e7:57:30:54:85:b2:6b:60:9a:9a:
                    ce:07:d4:c6:73:91:08:36:fb:a5:5a:96:42:21:bb:
                    df:a1:43:71:09:70:da:b9:dd:a2:af:de:ae:41:85:
                    64:d5:93:8c:70:af:b2:cf:0f:5a:0d:03:42:b9:88:
                    2c:05:69:e4:cb:62:18:b5:99:2e:d9:00:77:14:b5:
                    86:16:d7:8e:e7:d5:a5:cf:7e:f7:f2:9a:b9:ee:0b:
                    d9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B1:28:BB:F0:CC:12:FA:E1:F0:F6:45:29:C3:80:4C:11:0C:2D:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/fbbba54b-950b-302b-a65a-9cf427e72454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.crl

            X509v3 Authority Key Identifier:
                keyid:B9:FA:57:DE:DB:64:ED:20:6A:5E:8D:41:2D:2E:86:34:D7:63:4B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3c8a971f-d7dc-4e95-bc6e-a0db15f80a84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:95::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:47:c2:91:97:e3:49:78:03:0c:5d:af:5d:76:e4:e6:f0:f4:
         45:e1:30:4f:7c:b3:26:8e:84:3e:b5:a9:11:c2:91:80:e6:7e:
         1b:2b:aa:95:00:6b:27:e6:e4:d0:d4:ba:a6:29:ca:69:e3:a5:
         05:a7:e0:02:c5:1d:ad:59:9c:2d:0a:a8:86:a7:58:5b:43:c0:
         38:6e:39:57:4e:d9:1d:8c:56:c7:eb:c2:ca:5d:33:52:d4:d2:
         d2:1c:ed:22:6a:47:df:17:e9:03:41:97:12:cf:f3:c9:cd:fb:
         cf:8e:48:41:72:52:76:55:a3:f8:fc:2d:72:95:e3:5e:d2:59:
         ac:15:6f:73:12:f6:c6:06:7f:18:c3:b6:f1:69:4b:20:38:ad:
         a5:7f:02:ce:d5:04:c9:89:08:35:80:99:61:c7:a9:79:52:5e:
         f0:21:a6:66:98:13:74:f9:a9:6f:ee:cd:b6:f4:d9:e4:9a:7f:
         f4:86:13:2f:b0:40:25:cd:64:e4:66:3c:57:e2:10:4b:2e:aa:
         95:0d:83:d5:91:65:8a:35:50:4e:51:28:93:5f:21:60:77:41:
         a3:3f:e4:54:08:b4:5c:b2:b1:b9:4d:06:27:70:aa:bf:26:41:
         11:33:2b:22:b2:5a:14:a2:c6:7b:9d:74:0e:0f:b7:6e:ad:d5:
         19:b0:1b:ac
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErIdntWl0wd7LnXusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M4YTk3MWYtZDdkYy00ZTk1LWJjNmUtYTBkYjE1Zjgw
YTg0MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
OGY1ODFhYzYtOTllNi00YTk5LTlkZjktODA0YWYwN2ViNzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lz5aaIOxQF+rSFuA8oipBs7/+XjKxYFo/2w
nFifB+FFjA4nZaWDNXVpeq+ddqt/TdQ4ryeS7geCq1T2WzZcsItuRKJgjBnF8Dlb
YMf5Qsvhh82txI/VkCBdq/9yxISdEGbaNnb+yXM27UT+ifDxcc7FNH6UO62bzQNb
2WS7hh4suxkFGau88MVT3k6Up8QfCsLvu6SXmolyuDdkp5r33Dv4F3QnF1ezsudX
MFSFsmtgmprOB9TGc5EINvulWpZCIbvfoUNxCXDaud2ir96uQYVk1ZOMcK+yzw9a
DQNCuYgsBWnky2IYtZku2QB3FLWGFteO59Wlz3738pq57gvZ+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCKxKLvwzBL64fD2RSnDgEwRDC0RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhh
OTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRiMTVmODBhODQvZmJiYmE1NGItOTUwYi0z
MDJiLWE2NWEtOWNmNDI3ZTcyNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2M4YTk3MWYtZDdkYy00ZTk1LWJj
NmUtYTBkYjE1ZjgwYTg0LzNjOGE5NzFmLWQ3ZGMtNGU5NS1iYzZlLWEwZGIxNWY4
MGE4NC5jcmwwHwYDVR0jBBgwFoAUufpX3ttk7SBqXo1BLS6GNNdjSxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYzhhOTcxZi1kN2RjLTRlOTUtYmM2ZS1hMGRi
MTVmODBhODQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAlQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAChHwpGX40l4Awxdr1125Obw9EXhME98syaOhD61qRHCkYDmfhsr
qpUAayfm5NDUuqYpymnjpQWn4ALFHa1ZnC0KqIanWFtDwDhuOVdO2R2MVsfrwspd
M1LU0tIc7SJqR98X6QNBlxLP88nN+8+OSEFyUnZVo/j8LXKV417SWawVb3MS9sYG
fxjDtvFpSyA4raV/As7VBMmJCDWAmWHHqXlSXvAhpmaYE3T5qW/uzbb02eSaf/SG
Ey+wQCXNZORmPFfiEEsuqpUNg9WRZYo1UE5RKJNfIWB3QaM/5FQItFyysblNBidw
qr8mQREzKyKyWhSixnuddA4Pt26t1RmwG6w=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:43 2025 by rpki-client