Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/bb5f3b31-dcf3-3c23-800e-986083a9e6b3.roa
File:                     bb5f3b31-dcf3-3c23-800e-986083a9e6b3.roa (raw, json)
Hash identifier:          Cfk9rfbRVULMFT+gF5yqIEp0MF5hCX1Ynfbl1+w+yEs=
Subject key identifier:   4A:8A:DC:2A:94:50:CD:4A:29:33:3E:2E:D0:50:B6:95:D9:7B:84:AA
Certificate issuer:       /CN=53d9715a-5edc-4d9f-a9a2-830a16826131
Certificate serial:       010D0C9F4328584ADD669A96C7EB147122898480
Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/bb5f3b31-dcf3-3c23-800e-986083a9e6b3.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     62787
IP address blocks:        2602:f6d0:f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:9a:96:c7:eb:14:71:22:89:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=fcbb10d7-c0ab-4e87-91ff-957618043737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e2:a2:6c:01:b0:28:b3:62:dc:4f:1a:b3:48:
                    60:8a:86:0f:91:09:b5:4d:26:7b:b6:78:f6:c3:c1:
                    00:ce:76:13:af:ff:fd:cf:bc:33:99:be:fc:9b:e7:
                    35:42:b9:14:1c:7f:80:cd:c9:88:b7:31:d5:8d:26:
                    de:4c:5d:27:58:55:7d:0e:63:25:94:83:05:0e:b3:
                    f9:66:69:68:41:8a:c3:cd:9e:c9:23:96:d2:0f:e5:
                    58:76:2f:18:c5:cd:9b:06:a7:e3:1f:10:f6:56:3a:
                    77:36:e3:cc:21:37:0b:3c:47:ac:b0:59:65:bd:7b:
                    db:84:07:f9:75:06:37:6e:1b:2e:b2:ef:d9:9f:da:
                    07:df:36:ff:df:f3:e2:21:e6:d7:33:01:9c:07:cc:
                    89:d8:22:41:f8:4f:ff:27:41:17:32:91:07:fd:9b:
                    7e:81:50:74:85:70:0d:49:05:73:ad:b5:32:c9:2c:
                    2e:26:49:49:72:bf:f8:bf:e6:a3:80:01:89:66:b4:
                    ec:02:06:da:7e:eb:eb:eb:39:b8:a9:3f:59:36:a7:
                    61:ee:97:f6:3a:c0:11:5e:75:61:a9:d8:27:5f:3a:
                    4b:3b:66:ba:68:74:01:5f:2b:74:7e:66:e9:cb:51:
                    f9:c0:c0:41:ff:19:51:fb:03:7c:14:70:cc:11:f9:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8A:DC:2A:94:50:CD:4A:29:33:3E:2E:D0:50:B6:95:D9:7B:84:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/bb5f3b31-dcf3-3c23-800e-986083a9e6b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl

            X509v3 Authority Key Identifier:
                keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6d0:f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c1:6b:67:e6:5f:53:a7:a7:17:a5:1a:ec:d0:dc:c1:b3:4d:
         68:97:8d:1c:d5:97:5a:e9:c5:48:22:02:f5:93:e3:9e:01:30:
         ba:22:2c:d9:6d:d3:80:9d:df:00:28:83:5d:85:d4:a5:0d:fb:
         3f:62:75:fc:9e:57:7d:ea:a8:5d:cd:c9:98:ea:50:2a:79:50:
         7f:78:70:ca:71:47:b4:f8:0b:d2:94:d6:ba:26:0a:03:25:9b:
         f0:e1:8a:a5:9b:dd:ea:c5:da:f0:d5:bc:f5:49:17:d1:50:3c:
         72:27:8d:51:13:3d:29:93:8f:92:09:41:34:b4:40:9b:d5:89:
         90:de:a8:50:cd:ad:8d:04:fe:c5:6a:bf:ec:2a:a4:fe:77:e1:
         3f:dd:26:56:8b:78:74:2b:b3:d3:5e:b4:d9:6f:56:ef:cf:a5:
         a7:18:cd:55:b2:f8:d1:3b:de:a6:22:e3:df:f6:18:13:43:89:
         9d:f0:9a:04:4f:ec:b1:09:be:62:31:56:95:3f:70:ec:42:0c:
         81:30:42:eb:9e:41:72:0a:c7:ad:c4:a0:75:48:de:6e:77:19:
         de:73:22:a6:69:b3:e8:2f:c2:3b:d0:62:36:0a:17:bb:7e:09:
         3f:7d:99:7a:a2:8e:68:91:25:e0:9d:41:8f:56:75:38:7d:8a:
         8c:c3:55:3d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErdZpqWx+sUcSKJhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNkOTcxNWEtNWVkYy00ZDlmLWE5YTItODMwYTE2ODI2
MTMxMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk
ZmNiYjEwZDctYzBhYi00ZTg3LTkxZmYtOTU3NjE4MDQzNzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+KibAGwKLNi3E8as0hgioYPkQm1TSZ7tnj2
w8EAznYTr//9z7wzmb78m+c1QrkUHH+AzcmItzHVjSbeTF0nWFV9DmMllIMFDrP5
ZmloQYrDzZ7JI5bSD+VYdi8Yxc2bBqfjHxD2Vjp3NuPMITcLPEessFllvXvbhAf5
dQY3bhsusu/Zn9oH3zb/3/PiIebXMwGcB8yJ2CJB+E//J0EXMpEH/Zt+gVB0hXAN
SQVzrbUyySwuJklJcr/4v+ajgAGJZrTsAgbafuvr6zm4qT9ZNqdh7pf2OsARXnVh
qdgnXzpLO2a6aHQBXyt0fmbpy1H5wMBB/xlR+wN8FHDMEfmGmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEqK3CqUUM1KKTM+LtBQtpXZe4SqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5
NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBhMTY4MjYxMzEvYmI1ZjNiMzEtZGNmMy0z
YzIzLTgwMGUtOTg2MDgzYTllNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTNkOTcxNWEtNWVkYy00ZDlmLWE5
YTItODMwYTE2ODI2MTMxLzUzZDk3MTVhLTVlZGMtNGQ5Zi1hOWEyLTgzMGExNjgy
NjEzMS5jcmwwHwYDVR0jBBgwFoAUZwucipDtk9MgM+wjN5eQ+ihFt5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBh
MTY4MjYxMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL20AD0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE/Ba2fmX1OnpxelGuzQ3MGzTWiXjRzVl1rpxUgiAvWT454BMLoi
LNlt04Cd3wAog12F1KUN+z9idfyeV33qqF3NyZjqUCp5UH94cMpxR7T4C9KU1rom
CgMlm/DhiqWb3erF2vDVvPVJF9FQPHInjVETPSmTj5IJQTS0QJvViZDeqFDNrY0E
/sVqv+wqpP534T/dJlaLeHQrs9NetNlvVu/PpacYzVWy+NE73qYi49/2GBNDiZ3w
mgRP7LEJvmIxVpU/cOxCDIEwQuueQXIKx63EoHVI3m53Gd5zIqZps+gvwjvQYjYK
F7t+CT99mXqijmiRJeCdQY9WdTh9iozDVT0=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:36:48 2025 by rpki-client