Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa
File:                     f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa (raw, json)
Hash identifier:          7WxI+iW2iwc3Wdr/KAF0ctqYKDvc35rq89FZifQhwhQ=
Subject key identifier:   14:E3:46:B4:47:D6:0E:8F:2F:F1:E7:91:F7:A6:04:E1:05:26:27:D0
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F4328584A454032F6B225E3DFC7D48CB0
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     3819
IP address blocks:        2602:f69a:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:32:f6:b2:25:e3:df:c7:d4:8c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=8e5840e4-804f-4ad3-b2b9-77c969ac7865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:73:10:f0:be:9b:2a:3d:9c:6b:a3:81:69:
                    71:f4:87:da:35:8a:b8:42:48:02:9e:21:93:e0:fe:
                    b2:3d:c9:b9:7c:5d:c4:75:ae:47:67:de:6f:98:7f:
                    2e:57:5d:84:3a:d1:56:f3:f6:06:55:2d:65:13:62:
                    02:0e:a7:63:f1:b2:3d:d7:a8:5e:74:94:a2:07:2c:
                    f8:21:cd:ac:23:fb:f7:3a:18:d6:f5:1b:0b:3a:47:
                    08:c8:1f:c5:6f:a0:09:7b:b0:87:4a:2c:97:49:5c:
                    43:02:45:53:bd:a2:ff:07:12:46:bf:2a:a7:b5:65:
                    f2:f6:c1:6e:e1:93:33:a9:51:6f:cf:b1:6d:e6:ad:
                    3b:e4:9d:f2:06:94:53:09:03:c4:95:f7:5b:23:4b:
                    2b:d2:17:5a:43:e5:e7:09:81:d3:7e:59:40:1e:04:
                    8c:a3:53:8d:b2:9f:fc:90:7b:8d:d2:4f:50:f3:f2:
                    7f:96:2e:f8:3a:2c:85:9d:51:5d:fb:4d:60:c5:ed:
                    c8:c0:c3:ac:23:2a:0b:f7:8e:d2:f5:60:45:a4:c7:
                    5f:35:ca:d1:d3:39:41:46:b5:d8:02:d6:91:ce:2c:
                    e3:69:06:12:c9:97:34:18:11:f0:e2:4f:61:fc:e7:
                    03:83:0e:32:0e:13:d1:17:fd:67:28:0c:84:91:99:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E3:46:B4:47:D6:0E:8F:2F:F1:E7:91:F7:A6:04:E1:05:26:27:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/f2095247-f4d4-35a7-bc49-3fdf472c3d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6c:f7:ea:5b:eb:96:42:1e:da:92:bd:c8:98:0d:60:2a:43:
         9c:42:33:92:52:99:0b:9c:ba:c6:52:24:96:43:83:40:eb:d3:
         37:93:c2:bc:44:b2:57:a0:85:9d:e1:2c:59:64:44:10:87:47:
         12:15:51:45:c7:66:9d:f8:ab:61:0c:d1:8b:6d:86:9c:25:17:
         ad:bb:d1:39:79:fc:e2:ed:1b:2a:36:7f:e0:0e:7b:19:67:26:
         65:8e:18:b9:35:38:12:6c:bd:61:6e:c0:79:d4:3c:7a:92:fc:
         7b:2b:9d:66:6d:71:c9:39:fd:9e:b2:11:88:70:8f:e6:b3:cc:
         06:99:ba:0c:c2:84:01:cf:26:a1:5c:f7:f7:53:b4:24:07:2f:
         51:b9:bb:95:3c:61:d1:a4:5f:d6:17:ac:8b:c9:69:34:d8:06:
         ff:30:64:74:af:34:77:b3:e9:b8:5c:c1:a1:e8:77:54:b4:da:
         1d:85:c1:ff:3c:ff:05:de:75:3a:ad:4b:8b:c0:47:aa:bc:e9:
         0c:21:40:57:ab:21:f3:aa:ff:4f:a7:e7:aa:e7:4c:89:58:77:
         d2:9a:fd:1a:54:01:92:d8:91:50:c8:2c:ae:ba:6c:3c:76:25:
         7f:f5:90:fb:ec:11:ec:3d:77:c0:df:d4:89:48:28:2c:e7:f8:
         5a:48:11:2f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpFQDL2siXj38fUjLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YmE3Y2EtMDRkYy00OWEyLWFlNzktNGU2ZjZiMzRl
NDg4MB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk
OGU1ODQwZTQtODA0Zi00YWQzLWIyYjktNzdjOTY5YWM3ODY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpxzEPC+myo9nGujgWlx9IfaNYq4QkgCniGT
4P6yPcm5fF3Eda5HZ95vmH8uV12EOtFW8/YGVS1lE2ICDqdj8bI916hedJSiByz4
Ic2sI/v3OhjW9RsLOkcIyB/Fb6AJe7CHSiyXSVxDAkVTvaL/BxJGvyqntWXy9sFu
4ZMzqVFvz7Ft5q075J3yBpRTCQPElfdbI0sr0hdaQ+XnCYHTfllAHgSMo1ONsp/8
kHuN0k9Q8/J/li74OiyFnVFd+01gxe3IwMOsIyoL947S9WBFpMdfNcrR0zlBRrXY
AtaRzizjaQYSyZc0GBHw4k9h/OcDgw4yDhPRF/1nKAyEkZlILQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBTjRrRH1g6PL/HnkfemBOEFJifQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzli
YTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZmNmIzNGU0ODgvZjIwOTUyNDctZjRkNC0z
NWE3LWJjNDktM2ZkZjQ3MmMzZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWM5YmE3Y2EtMDRkYy00OWEyLWFl
NzktNGU2ZjZiMzRlNDg4L2FjOWJhN2NhLTA0ZGMtNDlhMi1hZTc5LTRlNmY2YjM0
ZTQ4OC5jcmwwHwYDVR0jBBgwFoAUdwqi3iU4yVnSsvQGasfVER2E/iQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzliYTdjYS0wNGRjLTQ5YTItYWU3OS00ZTZm
NmIzNGU0ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2mgAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACBs9+pb65ZCHtqSvciYDWAqQ5xCM5JSmQucusZSJJZDg0Dr0zeT
wrxEsleghZ3hLFlkRBCHRxIVUUXHZp34q2EM0YtthpwlF6270Tl5/OLtGyo2f+AO
exlnJmWOGLk1OBJsvWFuwHnUPHqS/HsrnWZtcck5/Z6yEYhwj+azzAaZugzChAHP
JqFc9/dTtCQHL1G5u5U8YdGkX9YXrIvJaTTYBv8wZHSvNHez6bhcwaHod1S02h2F
wf88/wXedTqtS4vAR6q86QwhQFerIfOq/0+n56rnTIlYd9Ka/RpUAZLYkVDILK66
bDx2JX/1kPvsEew9d8Df1IlIKCzn+FpIES8=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:05:00 2025 by rpki-client