Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/d18ee015-34f3-3082-a22b-cf0515f687de.roa
File:                     d18ee015-34f3-3082-a22b-cf0515f687de.roa (raw, json)
Hash identifier:          WPg1xeJFhgMqfXq1w316QgvA0Wtf8KcevUJQZ8U5zqQ=
Subject key identifier:   FD:17:9F:11:01:F9:CD:8D:58:9E:72:77:77:6C:FC:0E:3D:FA:B0:3C
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F4328584AD7D1508AE5F82FF9F8CE0E80
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/d18ee015-34f3-3082-a22b-cf0515f687de.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     33164
IP address blocks:        2602:ff9d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:50:8a:e5:f8:2f:f9:f8:ce:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=7c3914ad-c549-4924-a6e6-b90bd0810725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:df:74:a5:69:2e:bd:9f:5f:41:5a:ca:ed:76:
                    e7:98:b5:49:08:c2:da:e1:d9:49:32:71:b0:4a:5e:
                    63:13:36:74:ef:0b:21:68:2c:0b:8c:60:39:95:34:
                    42:38:5c:10:22:76:28:7a:1e:84:6b:13:09:f4:c3:
                    dd:e9:af:20:8c:ca:2b:a8:c5:27:ff:89:ab:36:d9:
                    84:b5:97:7d:95:d0:50:82:d5:dc:8b:a2:aa:67:ef:
                    b1:82:95:4e:eb:6a:2f:0b:a1:c5:61:8a:33:ef:cb:
                    a6:d7:b3:78:ee:76:51:b8:5d:ba:f4:02:80:c8:66:
                    b5:9a:bc:d2:52:3e:b9:a9:4f:59:78:64:60:f7:7e:
                    04:95:64:89:57:81:b0:d0:26:12:56:7c:6f:6d:a8:
                    88:06:cc:10:59:2c:ee:c9:58:09:ce:5e:b5:0f:01:
                    f7:17:af:a4:84:41:b5:c8:38:b1:c6:d4:2e:a1:31:
                    60:f4:70:9a:82:4f:f2:38:4f:c5:7e:a5:e7:53:99:
                    ed:f6:a3:e5:fb:5d:ed:fd:b8:ee:be:35:22:4c:8d:
                    e1:6d:31:96:4c:3a:40:14:d5:f6:af:74:c6:bb:72:
                    76:5e:ac:2d:7a:95:27:d2:7f:7a:9a:46:16:85:c8:
                    1c:a9:f6:a3:fd:b1:85:4d:bc:86:00:29:97:de:11:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:9F:11:01:F9:CD:8D:58:9E:72:77:77:6C:FC:0E:3D:FA:B0:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/d18ee015-34f3-3082-a22b-cf0515f687de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff9d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:8f:e4:60:f7:f6:36:f1:a0:28:ec:37:52:3a:28:f5:4e:12:
         26:ba:c7:a0:cd:5d:72:92:17:61:b1:d5:48:ae:0e:3f:38:a3:
         f2:49:02:15:4c:81:78:a8:37:20:5c:ea:43:ae:74:d8:c7:8f:
         49:d1:9f:28:13:46:f4:0c:a7:c9:0d:f2:64:b4:c9:c6:55:ef:
         7a:e8:1f:3a:bf:44:d6:e6:83:42:63:f9:3e:7f:bc:49:51:e9:
         7f:b5:c1:5e:a6:60:23:3b:d2:bb:c7:4e:cd:75:fa:25:57:40:
         ca:7b:44:40:9d:7f:64:b8:39:47:0c:e1:e3:09:ad:cb:dd:38:
         9c:3b:f4:5c:73:0a:49:a3:12:a3:01:df:96:57:c8:bc:b0:b9:
         61:8a:59:66:ab:37:c9:27:4c:64:49:51:06:4d:f5:5e:88:81:
         a1:7e:24:77:d2:12:af:12:19:3e:84:aa:0f:48:02:0a:b5:45:
         97:23:fd:f4:ac:8f:7f:a9:db:b5:38:c5:21:70:f7:8a:b5:49:
         67:4e:cd:d9:40:0b:49:a2:cf:b0:e2:7c:2d:64:40:29:21:3f:
         99:50:f3:39:95:c4:fd:d0:43:a1:ab:cd:b6:c0:94:b0:87:b3:
         9e:ad:66:2b:f7:d9:48:3b:f8:ee:f9:50:fa:42:7a:e6:99:d3:
         1c:cd:a5:03
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErX0VCK5fgv+fjODoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0
ZDUwMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
N2MzOTE0YWQtYzU0OS00OTI0LWE2ZTYtYjkwYmQwODEwNzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd90pWkuvZ9fQVrK7XbnmLVJCMLa4dlJMnGw
Sl5jEzZ07wshaCwLjGA5lTRCOFwQInYoeh6EaxMJ9MPd6a8gjMorqMUn/4mrNtmE
tZd9ldBQgtXci6KqZ++xgpVO62ovC6HFYYoz78um17N47nZRuF269AKAyGa1mrzS
Uj65qU9ZeGRg934ElWSJV4Gw0CYSVnxvbaiIBswQWSzuyVgJzl61DwH3F6+khEG1
yDixxtQuoTFg9HCagk/yOE/FfqXnU5nt9qPl+13t/bjuvjUiTI3hbTGWTDpAFNX2
r3TGu3J2XqwtepUn0n96mkYWhcgcqfaj/bGFTbyGACmX3hFb8QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP0XnxEB+c2NWJ5yd3ds/A49+rA8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl
Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvZDE4ZWUwMTUtMzRmMy0z
MDgyLWEyMmItY2YwNTE1ZjY4N2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1
MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh
NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi
OWQyYTRkNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/nQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKY/kYPf2NvGgKOw3Ujoo9U4SJrrHoM1dcpIXYbHVSK4OPzij8kkC
FUyBeKg3IFzqQ6502MePSdGfKBNG9AynyQ3yZLTJxlXveugfOr9E1uaDQmP5Pn+8
SVHpf7XBXqZgIzvSu8dOzXX6JVdAyntEQJ1/ZLg5Rwzh4wmty904nDv0XHMKSaMS
owHfllfIvLC5YYpZZqs3ySdMZElRBk31XoiBoX4kd9ISrxIZPoSqD0gCCrVFlyP9
9KyPf6nbtTjFIXD3irVJZ07N2UALSaLPsOJ8LWRAKSE/mVDzOZXE/dBDoavNtsCU
sIeznq1mK/fZSDv47vlQ+kJ65pnTHM2lAw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:30:41 2025 by rpki-client