Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa
File:                     defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa (raw, json)
Hash identifier:          awwwYf9eDP3tcooU6ZOf+jCXbk9MNpQkwdWooMb0aJg=
Subject key identifier:   0B:70:9A:14:70:22:6B:D7:C8:69:7F:6C:42:75:19:28:26:C8:E1:8A
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584AE9F666B13050228F667C3480
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     62874
IP address blocks:        2602:ffb7:594::/48 maxlen: 48
                          2602:ffb7:5a0::/46 maxlen: 46
                          2602:ffb7:d00::/40 maxlen: 40
                          2602:ffb7:f00::/40 maxlen: 40
                          2602:ffd9::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:66:b1:30:50:22:8f:66:7c:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=9cad5ce5-1d09-4478-9588-b5baf58785ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:43:cb:94:ab:7b:e1:84:6b:ad:81:aa:6b:
                    46:68:1d:4f:64:3e:7e:ea:e0:a4:cc:70:0d:c8:73:
                    9f:75:7e:90:76:8d:e7:87:d0:80:ad:95:4d:93:90:
                    a4:5f:2d:52:ab:08:ac:98:dc:c6:98:dd:ff:b2:ba:
                    a4:58:25:d1:5e:77:33:36:7d:06:f9:c1:6d:4d:10:
                    dc:4f:e2:dd:74:b3:71:06:60:c2:18:88:96:95:40:
                    30:38:13:72:5c:37:16:fa:2e:7f:80:3b:86:eb:a3:
                    b3:e3:73:e4:ed:2b:15:86:27:8e:dd:cf:65:d9:b2:
                    ae:ef:bf:13:7a:5d:02:70:28:fd:94:b7:31:14:8c:
                    bf:87:ff:8f:a7:4d:53:f7:2b:b7:bc:1a:f8:d0:93:
                    bc:e2:b2:11:bc:6a:a2:47:2d:e1:f8:e4:4b:e8:d8:
                    a9:1b:b0:d5:fc:8c:07:9b:b1:fd:dd:a0:80:7c:c4:
                    25:38:5b:18:e1:de:68:93:82:39:d8:48:b7:52:e2:
                    8f:7d:38:79:e6:c3:17:13:64:2c:af:9b:32:c4:92:
                    c2:ff:89:48:2f:f5:eb:37:5c:86:a3:82:ab:13:10:
                    b9:2e:0b:74:b3:b1:28:04:4c:b3:b0:4f:af:d3:34:
                    25:a6:b4:51:16:cb:9c:44:d6:e3:e4:e4:b0:16:d5:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:70:9A:14:70:22:6B:D7:C8:69:7F:6C:42:75:19:28:26:C8:E1:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/defa4b41-4cbc-3128-83c6-ac72490d9f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffb7:594::/48
                  2602:ffb7:5a0::/46
                  2602:ffb7:d00::/40
                  2602:ffb7:f00::/40
                  2602:ffd9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:88:fe:76:64:9e:00:aa:9c:6b:c1:43:61:24:5a:3a:d0:f1:
         74:0f:96:98:0d:b7:76:01:35:32:46:3a:74:91:0c:19:94:8c:
         c0:07:4b:58:61:f6:c4:a1:54:7f:a9:ae:d5:cf:c0:57:ad:3c:
         05:e0:b9:d2:3a:23:54:39:3a:a8:33:7a:73:1e:fa:e9:8e:02:
         cd:b6:7e:7c:22:9e:17:79:3d:10:44:1d:d8:13:89:49:e3:d9:
         31:7a:69:9f:bd:ac:d2:ab:37:ac:90:49:bb:59:31:80:14:4a:
         0f:2b:2f:41:39:ca:51:47:15:ff:44:31:1e:8b:c9:6c:b8:46:
         36:e0:b8:51:55:04:50:9b:ed:d8:c1:74:11:c5:c6:5b:93:26:
         cd:a9:fe:d2:57:46:06:8c:82:c7:3f:6b:fb:df:23:ce:e9:c7:
         fa:2a:9b:61:64:09:f7:3c:06:b3:1d:0d:72:39:83:55:4b:e3:
         38:32:97:ea:c1:f4:3d:11:04:89:df:c0:03:5a:2a:5f:32:f8:
         9f:78:fc:61:ce:e7:f3:28:e7:16:8d:3f:1d:55:9e:08:fe:47:
         4f:6a:16:76:d9:d5:86:e3:a8:95:14:7a:ee:7a:68:79:3d:cb:
         d1:4e:41:6c:1b:cd:82:94:75:c5:2e:b7:75:da:77:75:55:e3:
         13:6f:55:5b
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWErp9maxMFAij2Z8NIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi
ZmUyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk
OWNhZDVjZTUtMWQwOS00NDc4LTk1ODgtYjViYWY1ODc4NWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbZDy5Sre+GEa62BqmtGaB1PZD5+6uCkzHAN
yHOfdX6Qdo3nh9CArZVNk5CkXy1SqwismNzGmN3/srqkWCXRXnczNn0G+cFtTRDc
T+LddLNxBmDCGIiWlUAwOBNyXDcW+i5/gDuG66Oz43Pk7SsVhieO3c9l2bKu778T
el0CcCj9lLcxFIy/h/+Pp01T9yu3vBr40JO84rIRvGqiRy3h+ORL6NipG7DV/IwH
m7H93aCAfMQlOFsY4d5ok4I52Ei3UuKPfTh55sMXE2Qsr5syxJLC/4lIL/XrN1yG
o4KrExC5Lgt0s7EoBEyzsE+v0zQlprRRFsucRNbj5OSwFtWkXwIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFAtwmhRwImvXyGl/bEJ1GSgmyOGKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5
OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvZGVmYTRiNDEtNGNiYy0z
MTI4LTgzYzYtYWM3MjQ5MGQ5ZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj
YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4
YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl
N2YxOGJmZTIuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwcAJgL/twWU
AwcCJgL/twWgAwYAJgL/tw0DBgAmAv+3DwMGBCYC/9kAMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJKI/nZk
ngCqnGvBQ2EkWjrQ8XQPlpgNt3YBNTJGOnSRDBmUjMAHS1hh9sShVH+prtXPwFet
PAXgudI6I1Q5OqgzenMe+umOAs22fnwinhd5PRBEHdgTiUnj2TF6aZ+9rNKrN6yQ
SbtZMYAUSg8rL0E5ylFHFf9EMR6LyWy4RjbguFFVBFCb7djBdBHFxluTJs2p/tJX
RgaMgsc/a/vfI87px/oqm2FkCfc8BrMdDXI5g1VL4zgyl+rB9D0RBInfwANaKl8y
+J94/GHO5/Mo5xaNPx1Vngj+R09qFnbZ1YbjqJUUeu56aHk9y9FOQWwbzYKUdcUu
t3Xad3VV4xNvVVs=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:52 2025 by rpki-client