Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/a7bb83b8-57b1-3c19-ae66-1dd12c927356.roa
File:                     a7bb83b8-57b1-3c19-ae66-1dd12c927356.roa (raw, json)
Hash identifier:          9vt39NAC715QXbMbOf/krT/+HZwAdOJmnmhk3FwAYoE=
Subject key identifier:   28:94:97:75:45:A2:37:95:13:DA:C6:7D:9A:75:F5:22:97:18:F2:78
Certificate issuer:       /CN=eb14eb3d-346a-447d-adfe-7256c1a87ce2
Certificate serial:       010D0C9F4328584B821CB641D627DDD8DF888BC0
Authority key identifier: D8:E3:69:76:55:7F:03:3D:7A:D0:76:19:B0:5C:40:80:F3:92:5B:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/a7bb83b8-57b1-3c19-ae66-1dd12c927356.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     8075
IP address blocks:        2602:f7be:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/eb14eb3d-346a-447d-adfe-7256c1a87ce2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/eb14eb3d-346a-447d-adfe-7256c1a87ce2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:b6:41:d6:27:dd:d8:df:88:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb14eb3d-346a-447d-adfe-7256c1a87ce2
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=6d5c83c9-e604-413b-827b-640944b57bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b3:84:30:38:20:e2:30:45:6a:b1:92:56:09:
                    7f:2e:54:0b:70:94:2d:b4:6e:4b:d7:55:9c:7e:a8:
                    73:b2:e4:40:25:22:05:c3:de:24:5e:20:9e:8e:71:
                    d7:63:b4:e7:72:d7:27:cd:63:ed:ca:0b:22:3a:ec:
                    50:8a:17:af:ec:dc:2c:53:02:74:6d:80:af:c9:bf:
                    ad:cf:29:e7:4c:63:da:cd:47:4e:ea:2a:9a:ff:bf:
                    61:3c:bf:2e:fd:bf:b0:dd:83:ea:5e:b3:d3:82:69:
                    78:e8:4f:54:24:b0:da:64:43:7c:94:70:d9:8c:20:
                    03:52:7c:b9:33:e5:2b:b6:36:6c:a2:f7:98:86:f1:
                    21:24:2a:b9:a4:68:22:ce:ef:e7:80:4f:dc:2b:2d:
                    a6:05:83:c9:50:50:c1:9d:c0:2b:3f:71:47:f3:1d:
                    60:ef:6d:18:fd:09:a8:e7:e6:da:5d:ed:a1:2e:66:
                    63:da:12:5e:22:41:24:8d:7a:c9:91:fe:21:93:05:
                    54:a8:b9:58:cb:eb:3f:b9:5b:1d:21:44:7c:c8:45:
                    91:90:3f:89:35:70:93:a0:a5:91:88:f8:0b:95:d0:
                    bb:f2:81:5a:54:ca:d3:8f:90:3e:b0:e4:71:de:bd:
                    9f:42:d0:d9:d1:55:1d:ba:a4:d6:b0:b8:8c:ba:bc:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:94:97:75:45:A2:37:95:13:DA:C6:7D:9A:75:F5:22:97:18:F2:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/a7bb83b8-57b1-3c19-ae66-1dd12c927356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2/eb14eb3d-346a-447d-adfe-7256c1a87ce2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:E3:69:76:55:7F:03:3D:7A:D0:76:19:B0:5C:40:80:F3:92:5B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb14eb3d-346a-447d-adfe-7256c1a87ce2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7be:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:1d:0c:d4:77:9b:34:55:1f:12:a4:7e:01:b0:22:6c:12:a7:
         76:82:a7:3e:7a:5a:84:b9:00:59:5f:30:53:db:c2:c4:ae:a7:
         21:ff:63:19:1a:5d:8b:83:66:b5:22:a7:66:79:ab:a1:31:df:
         0d:ba:ad:be:2f:b6:f8:d9:45:d2:9d:4b:8c:1f:20:cc:37:63:
         73:c0:67:26:45:ff:b0:df:32:2e:07:36:d2:1a:50:ca:18:33:
         f0:18:b9:f5:c6:38:27:0a:86:24:31:be:5c:03:e4:4f:78:5a:
         7e:d2:e3:5c:c9:ad:a5:74:b5:7b:34:3b:06:79:00:77:72:ea:
         07:9f:68:43:8e:7e:8c:3c:72:dd:f1:b4:9e:65:dc:80:80:e0:
         d4:4b:89:c3:36:ad:37:4c:e0:5d:84:5f:9b:5d:33:0d:ae:59:
         99:f6:a7:85:bf:22:7d:6c:90:9a:75:0e:00:1f:68:df:00:44:
         6f:0f:f0:f8:69:61:f7:91:8a:64:73:aa:b9:c1:09:c9:ee:bb:
         d9:4e:e8:11:87:04:16:80:51:29:96:5c:bf:c8:94:00:26:a1:
         7e:5c:ed:04:78:a3:42:20:ad:c7:43:09:5a:48:b9:a8:4d:91:
         65:a8:a2:ba:0c:a4:3f:18:88:7c:01:c7:5c:6c:39:4c:a1:d8:
         d9:3f:ab:81
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHLZB1ifd2N+Ii8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIxNGViM2QtMzQ2YS00NDdkLWFkZmUtNzI1NmMxYTg3
Y2UyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
NmQ1YzgzYzktZTYwNC00MTNiLTgyN2ItNjQwOTQ0YjU3YmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLOEMDgg4jBFarGSVgl/LlQLcJQttG5L11Wc
fqhzsuRAJSIFw94kXiCejnHXY7TnctcnzWPtygsiOuxQihev7NwsUwJ0bYCvyb+t
zynnTGPazUdO6iqa/79hPL8u/b+w3YPqXrPTgml46E9UJLDaZEN8lHDZjCADUny5
M+UrtjZsoveYhvEhJCq5pGgizu/ngE/cKy2mBYPJUFDBncArP3FH8x1g720Y/Qmo
5+baXe2hLmZj2hJeIkEkjXrJkf4hkwVUqLlYy+s/uVsdIUR8yEWRkD+JNXCToKWR
iPgLldC78oFaVMrTj5A+sORx3r2fQtDZ0VUduqTWsLiMurzfRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCiUl3VFojeVE9rGfZp19SKXGPJ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYjE0
ZWIzZC0zNDZhLTQ0N2QtYWRmZS03MjU2YzFhODdjZTIvYTdiYjgzYjgtNTdiMS0z
YzE5LWFlNjYtMWRkMTJjOTI3MzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWIxNGViM2QtMzQ2YS00NDdkLWFk
ZmUtNzI1NmMxYTg3Y2UyL2ViMTRlYjNkLTM0NmEtNDQ3ZC1hZGZlLTcyNTZjMWE4
N2NlMi5jcmwwHwYDVR0jBBgwFoAU2ONpdlV/Az160HYZsFxAgPOSW5cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYjE0ZWIzZC0zNDZhLTQ0N2QtYWRmZS03MjU2
YzFhODdjZTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3vgEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI0dDNR3mzRVHxKkfgGwImwSp3aCpz56WoS5AFlfMFPbwsSupyH/
YxkaXYuDZrUip2Z5q6Ex3w26rb4vtvjZRdKdS4wfIMw3Y3PAZyZF/7DfMi4HNtIa
UMoYM/AYufXGOCcKhiQxvlwD5E94Wn7S41zJraV0tXs0OwZ5AHdy6gefaEOOfow8
ct3xtJ5l3ICA4NRLicM2rTdM4F2EX5tdMw2uWZn2p4W/In1skJp1DgAfaN8ARG8P
8PhpYfeRimRzqrnBCcnuu9lO6BGHBBaAUSmWXL/IlAAmoX5c7QR4o0IgrcdDCVpI
uahNkWWooroMpD8YiHwBx1xsOUyh2Nk/q4E=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:23 2025 by rpki-client