Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1c661a4e-30f2-3464-acbd-d88cf667907b.roa
File:                     1c661a4e-30f2-3464-acbd-d88cf667907b.roa (raw, json)
Hash identifier:          HU2lShywGJb9euzr0XrutcZaBVAINipOTe5mcyxuJkA=
Subject key identifier:   25:EF:29:37:89:7E:BB:8B:6C:1D:74:33:5B:94:AA:B8:D6:9E:8B:00
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F4328584B25FC2DE28291B28C8680D418
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1c661a4e-30f2-3464-acbd-d88cf667907b.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     3819
IP address blocks:        2602:f69a:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:2d:e2:82:91:b2:8c:86:80:d4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=20964fe1-f906-4cea-b1a3-0469a5c4f2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:68:59:b4:ff:91:0b:3a:af:7d:c9:82:95:f9:
                    cd:f8:12:77:21:21:8f:73:b5:46:38:18:1f:5f:c7:
                    db:a1:33:ca:fb:7f:a8:fb:15:46:f9:de:5d:98:7f:
                    d5:54:26:39:4a:aa:7f:31:68:a4:38:3d:a4:f8:2f:
                    8d:c9:18:60:42:dc:be:48:96:2c:a1:6a:de:ca:1b:
                    f2:0c:d6:d1:8e:98:0a:3d:07:b2:ac:94:4b:1d:e0:
                    68:c9:96:d7:f7:ba:48:7d:b9:7c:68:96:b1:33:80:
                    c6:4b:39:32:33:9c:a6:79:9c:f3:3f:6b:57:d3:31:
                    35:74:5a:fe:7d:20:d8:1a:22:13:34:c7:c2:82:34:
                    0e:82:b9:1c:4e:70:05:dc:aa:97:08:8f:e9:d9:5f:
                    4e:ff:c5:67:a3:e7:ff:12:94:a7:68:75:69:9c:5d:
                    c8:39:52:7f:fb:ff:8e:ba:cb:6c:9d:fa:1d:c7:b2:
                    64:3e:8d:58:38:54:5f:8f:66:52:a1:f4:61:24:75:
                    38:77:ac:e1:95:f2:4a:64:1f:00:46:ff:bf:b5:d7:
                    33:29:03:dc:cd:61:5d:ff:f3:ef:ac:76:9c:68:63:
                    75:6b:17:77:7f:83:18:03:86:5f:57:be:17:8d:28:
                    2f:c1:35:ba:38:40:ea:35:01:6d:5e:0b:1c:fe:0d:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EF:29:37:89:7E:BB:8B:6C:1D:74:33:5B:94:AA:B8:D6:9E:8B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/1c661a4e-30f2-3464-acbd-d88cf667907b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:3d:cb:28:7f:7e:b4:ff:33:55:55:d6:70:5c:2e:fd:3c:
         49:fc:56:83:74:be:46:a9:41:55:cd:bd:68:10:15:08:a7:8b:
         63:93:3c:ca:3f:60:01:a0:b6:0e:7f:f8:74:58:f9:4f:ae:c8:
         f8:78:f6:61:4a:72:e1:bb:1e:a7:e4:ba:57:18:18:6b:67:b3:
         bf:28:9c:34:94:d9:55:05:53:92:62:c9:47:86:76:b7:d0:ba:
         85:24:e9:3d:fa:67:d0:16:24:f6:63:d2:ee:fe:23:7d:a6:a7:
         3d:e0:79:6c:d7:86:3d:c6:b3:ae:f5:55:95:72:2d:8b:70:b8:
         60:4c:98:3e:dc:3a:54:8c:e9:27:c5:11:d3:7c:5a:ba:70:2e:
         c3:20:6f:41:f6:5d:59:45:64:29:68:58:3b:38:b4:c4:f2:c1:
         6d:38:68:d4:28:33:ca:b2:b7:a1:40:8f:a9:19:31:02:37:41:
         49:ec:c8:b7:5f:8f:00:93:98:7b:a4:55:18:62:a1:af:5b:88:
         81:e9:56:32:0c:d1:98:f3:95:74:de:1b:9d:aa:ce:e2:a2:1f:
         2b:6c:ea:08:9e:86:03:44:3b:8e:b9:cb:92:12:53:65:fd:ca:
         73:00:e0:08:b6:6b:34:60:10:27:82:1f:0f:e8:5b:74:7c:55:
         b7:36:e6:9c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsl/C3igpGyjIaA1BgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YmE3Y2EtMDRkYy00OWEyLWFlNzktNGU2ZjZiMzRl
NDg4MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk
MjA5NjRmZTEtZjkwNi00Y2VhLWIxYTMtMDQ2OWE1YzRmMmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22hZtP+RCzqvfcmClfnN+BJ3ISGPc7VGOBgf
X8fboTPK+3+o+xVG+d5dmH/VVCY5Sqp/MWikOD2k+C+NyRhgQty+SJYsoWreyhvy
DNbRjpgKPQeyrJRLHeBoyZbX97pIfbl8aJaxM4DGSzkyM5ymeZzzP2tX0zE1dFr+
fSDYGiITNMfCgjQOgrkcTnAF3KqXCI/p2V9O/8Vno+f/EpSnaHVpnF3IOVJ/+/+O
ustsnfodx7JkPo1YOFRfj2ZSofRhJHU4d6zhlfJKZB8ARv+/tdczKQPczWFd//Pv
rHacaGN1axd3f4MYA4ZfV74XjSgvwTW6OEDqNQFtXgsc/g29FwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCXvKTeJfruLbB10M1uUqrjWnosAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzli
YTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZmNmIzNGU0ODgvMWM2NjFhNGUtMzBmMi0z
NDY0LWFjYmQtZDg4Y2Y2Njc5MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWM5YmE3Y2EtMDRkYy00OWEyLWFl
NzktNGU2ZjZiMzRlNDg4L2FjOWJhN2NhLTA0ZGMtNDlhMi1hZTc5LTRlNmY2YjM0
ZTQ4OC5jcmwwHwYDVR0jBBgwFoAUdwqi3iU4yVnSsvQGasfVER2E/iQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzliYTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZm
NmIzNGU0ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2mgAH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADjJPcsof360/zNVVdZwXC79PEn8VoN0vkapQVXNvWgQFQini2OT
PMo/YAGgtg5/+HRY+U+uyPh49mFKcuG7HqfkulcYGGtns78onDSU2VUFU5JiyUeG
drfQuoUk6T36Z9AWJPZj0u7+I32mpz3geWzXhj3Gs671VZVyLYtwuGBMmD7cOlSM
6SfFEdN8WrpwLsMgb0H2XVlFZCloWDs4tMTywW04aNQoM8qyt6FAj6kZMQI3QUns
yLdfjwCTmHukVRhioa9biIHpVjIM0ZjzlXTeG52qzuKiHyts6giehgNEO465y5IS
U2X9ynMA4Ai2azRgECeCHw/oW3R8Vbc25pw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:14 2025 by rpki-client