Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa
File:                     7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa (raw, json)
Hash identifier:          7Z3bEP/2+cEMbeVc6FXTF3d21aH66rgNbE4aOk3HUYU=
Subject key identifier:   A1:94:BD:E3:4F:06:DB:7C:9E:D7:7D:06:9C:91:A1:C8:9A:39:A2:48
Certificate issuer:       /CN=83fa580e-7075-4d7f-b2fa-c07eafc22d85
Certificate serial:       010D0C9F4328584AD23C328892F23C2BAFC2D160
Authority key identifier: E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     401734
IP address blocks:        2602:f640::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:32:88:92:f2:3c:2b:af:c2:d1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83fa580e-7075-4d7f-b2fa-c07eafc22d85
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=f97e8dcc-9eb3-4070-9409-ce87402857a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:67:c5:f5:96:15:24:eb:3b:8e:8d:ea:3c:
                    9e:8e:ab:95:68:10:80:ba:bd:f3:d0:c8:e9:a1:45:
                    84:bb:00:73:a6:c1:68:08:52:4d:d4:54:f0:1c:a7:
                    72:fc:d9:55:70:99:a4:df:39:36:8d:47:5c:9c:6b:
                    b0:3a:38:48:23:81:45:8d:9d:8d:db:f5:33:ba:85:
                    66:e5:8b:75:54:40:5f:8b:78:c3:b5:8a:0a:22:8f:
                    1d:86:41:b2:e4:b9:44:64:11:95:21:03:a0:69:6f:
                    92:0d:fb:cd:8c:79:98:8c:f5:8b:b2:3a:82:1f:bc:
                    86:98:ee:67:e7:eb:3c:ed:02:3b:49:bd:61:b4:86:
                    ee:27:79:73:50:50:8f:e0:e4:5f:f5:ac:0e:3a:fa:
                    e2:15:c3:80:d7:8a:16:e8:08:1b:1d:21:a9:6a:bf:
                    33:77:04:da:46:0c:de:a0:ac:9d:e7:4a:28:d9:78:
                    a8:bf:be:bd:c2:a4:33:36:94:4a:45:59:c7:4b:90:
                    ce:68:bf:ba:67:a0:30:bb:d5:06:bc:2d:9c:5a:d8:
                    34:e1:57:1d:7a:78:a7:43:36:cc:4f:ae:e7:ee:32:
                    99:3e:36:29:92:fc:97:8b:5b:4e:d6:e5:c4:44:02:
                    90:4e:c2:b2:6e:22:ba:ad:69:1b:32:1f:f2:bc:94:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:94:BD:E3:4F:06:DB:7C:9E:D7:7D:06:9C:91:A1:C8:9A:39:A2:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.crl

            X509v3 Authority Key Identifier:
                keyid:E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f640::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:3b:66:3d:ce:0f:0f:04:2f:8b:db:a1:6b:ab:84:3a:a3:7c:
         cc:50:0c:e8:b8:b3:db:b5:c2:bf:23:55:de:4c:4e:23:a5:54:
         51:39:a1:1e:6e:31:b2:ea:31:bb:05:94:77:61:39:6c:f5:9f:
         8d:84:85:5a:77:13:c3:f4:ec:3e:c2:97:76:45:5a:01:24:89:
         bc:54:41:40:f6:5f:28:99:ec:8d:d9:84:1e:17:0b:a3:dd:c6:
         6b:af:de:3b:69:e0:a8:99:3c:a7:48:83:3e:5b:67:ba:13:46:
         6a:22:5e:f6:86:af:46:29:a9:47:4c:c0:ef:69:7a:34:98:a3:
         75:de:30:c1:4c:b0:8c:45:27:81:40:23:ce:82:0c:78:dd:0a:
         f4:be:2e:48:81:2e:18:2f:17:04:8f:86:a6:8a:17:81:30:8d:
         4f:31:98:f3:b3:31:95:27:96:23:50:f1:12:35:3d:0c:13:7c:
         67:47:22:6f:c8:1e:c5:eb:7d:f1:d7:bc:1d:e9:06:bd:7f:69:
         83:bc:0f:a1:41:2c:89:a7:40:b3:24:32:ea:d4:c1:2c:4e:f5:
         f4:d9:7c:84:53:b3:7e:06:78:1d:ea:96:d5:1f:29:10:e5:ad:
         ed:ea:e1:69:d0:21:64:3c:e9:1f:76:aa:9c:b0:52:fc:58:cf:
         25:cf:e5:71
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErSPDKIkvI8K6/C0WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODNmYTU4MGUtNzA3NS00ZDdmLWIyZmEtYzA3ZWFmYzIy
ZDg1MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
Zjk3ZThkY2MtOWViMy00MDcwLTk0MDktY2U4NzQwMjg1N2E0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe5nxfWWFSTrO46N6jyejquVaBCAur3z0Mjp
oUWEuwBzpsFoCFJN1FTwHKdy/NlVcJmk3zk2jUdcnGuwOjhII4FFjZ2N2/UzuoVm
5Yt1VEBfi3jDtYoKIo8dhkGy5LlEZBGVIQOgaW+SDfvNjHmYjPWLsjqCH7yGmO5n
5+s87QI7Sb1htIbuJ3lzUFCP4ORf9awOOvriFcOA14oW6AgbHSGpar8zdwTaRgze
oKyd50oo2Xiov769wqQzNpRKRVnHS5DOaL+6Z6Awu9UGvC2cWtg04VcdeninQzbM
T67n7jKZPjYpkvyXi1tO1uXERAKQTsKybiK6rWkbMh/yvJT2HwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKGUveNPBtt8ntd9BpyRociaOaJIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84M2Zh
NTgwZS03MDc1LTRkN2YtYjJmYS1jMDdlYWZjMjJkODUvN2RkM2U4ZGEtNTkyNy0z
ZmQ0LTlhMDYtZGNmNDI5ZmQ1NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODNmYTU4MGUtNzA3NS00ZDdmLWIy
ZmEtYzA3ZWFmYzIyZDg1LzgzZmE1ODBlLTcwNzUtNGQ3Zi1iMmZhLWMwN2VhZmMy
MmQ4NS5jcmwwHwYDVR0jBBgwFoAU5QRIC7ridbBulRfNeSyIpkF1/18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84M2ZhNTgwZS03MDc1LTRkN2YtYjJmYS1jMDdl
YWZjMjJkODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL2QAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZztmPc4PDwQvi9uha6uEOqN8zFAM6Liz27XCvyNV3kxOI6VUUTmh
Hm4xsuoxuwWUd2E5bPWfjYSFWncTw/TsPsKXdkVaASSJvFRBQPZfKJnsjdmEHhcL
o93Ga6/eO2ngqJk8p0iDPltnuhNGaiJe9oavRimpR0zA72l6NJijdd4wwUywjEUn
gUAjzoIMeN0K9L4uSIEuGC8XBI+GpooXgTCNTzGY87MxlSeWI1DxEjU9DBN8Z0ci
b8gexet98de8HekGvX9pg7wPoUEsiadAsyQy6tTBLE719Nl8hFOzfgZ4HeqW1R8p
EOWt7erhadAhZDzpH3aqnLBS/FjPJc/lcQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:24:09 2025 by rpki-client