Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa
File:                     c21b6b08-7706-398f-83f1-168e28d2da7f.roa (raw, json)
Hash identifier:          Wb/2SlBPuTlBO9k1ZycmF/71G4t/KqFWiJ4OlA/iNCI=
Subject key identifier:   7D:94:56:F6:A8:2E:09:6F:B7:74:4A:0C:EB:5C:D6:A7:6F:2B:FE:8C
Certificate issuer:       /CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3
Certificate serial:       010D0C9F4328584AF9514AC27F1893BC9F10F080
Authority key identifier: 26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     17138
IP address blocks:        2602:803:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:4a:c2:7f:18:93:bc:9f:10:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60048b5a-2ca8-4251-8e93-5eaab72d4cc3
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=413e7b77-200c-4df0-bf97-07cdd60e2154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:61:88:61:d3:24:64:82:1c:55:7c:6b:1a:
                    97:08:e5:f8:06:39:2b:5d:5a:1d:ea:fa:9f:e1:8e:
                    8c:08:d5:7a:b3:8d:da:29:07:b7:24:c6:fe:0f:e9:
                    94:7b:92:41:22:d4:d6:5a:9d:e8:58:b3:92:a1:d1:
                    27:34:54:51:b5:dd:04:d5:7e:17:d7:b6:74:8f:48:
                    0e:2b:95:fd:74:3f:46:94:a4:5a:d8:e0:79:9d:08:
                    64:b5:2b:30:ac:ef:f6:52:da:b4:f5:16:93:fe:be:
                    7f:cf:ae:77:48:9c:54:ec:6b:05:58:36:23:5b:8b:
                    85:3e:6e:fa:5a:24:38:24:22:57:d9:f2:14:95:de:
                    e8:b4:79:90:1b:4a:e0:9e:21:ca:4e:7e:8c:f9:4c:
                    6e:2b:23:32:28:71:fc:3d:8d:b9:48:4d:af:cf:b0:
                    b7:88:ce:21:53:da:ac:67:c0:09:65:f4:dc:a7:e5:
                    81:cf:e9:47:cc:0d:5a:bb:c9:13:c5:00:d5:a7:87:
                    83:5d:68:85:38:dc:f2:a1:73:92:1d:c4:43:14:e3:
                    66:37:1c:91:29:a4:6a:cd:b7:9b:64:d0:2d:9f:f8:
                    41:db:d0:dd:4d:3b:e3:65:b1:63:ca:0f:cc:25:e5:
                    56:94:20:90:67:9f:6c:7f:65:a5:3a:75:98:5b:a6:
                    55:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:94:56:F6:A8:2E:09:6F:B7:74:4A:0C:EB:5C:D6:A7:6F:2B:FE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/c21b6b08-7706-398f-83f1-168e28d2da7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.crl

            X509v3 Authority Key Identifier:
                keyid:26:B3:71:D8:2E:D3:02:50:9E:82:C5:F0:AB:9E:E5:53:DD:3F:ED:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/60048b5a-2ca8-4251-8e93-5eaab72d4cc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c7:72:1c:3e:58:4f:b3:ea:db:ac:45:56:a6:f4:7e:b0:08:
         e1:e1:f7:47:80:df:07:4b:85:c2:9c:d6:b0:f2:d2:e5:ff:d5:
         e3:ed:e7:ee:5c:71:74:c6:a5:ed:fd:5a:66:76:70:76:b5:39:
         d9:59:e1:b1:8d:80:77:d7:b4:74:d7:d8:49:fd:c0:ee:e1:df:
         a5:09:53:1d:ee:40:01:5b:b4:ce:de:d1:45:d4:a5:53:18:06:
         fa:f9:51:ea:bf:fc:8c:58:a0:d0:8d:d4:07:4c:bb:5a:db:8d:
         24:77:ca:3f:00:1f:ab:57:c5:dc:0f:0d:08:f6:ee:8d:1c:80:
         e5:3d:a3:d1:40:a3:67:2f:7d:c1:97:fb:8f:5e:93:38:a9:11:
         db:ef:5d:99:e8:e0:7f:6d:e8:57:7d:b6:73:ce:c0:98:85:d5:
         9a:98:fd:fb:e9:20:7c:9a:78:69:1e:e4:50:95:ef:f1:57:b7:
         47:61:6b:35:54:f0:8b:df:db:cf:4b:4a:62:94:15:20:06:d8:
         61:7b:71:2b:63:c2:c4:a4:38:be:f4:20:33:a8:7e:d0:ee:e9:
         a8:29:22:82:bd:04:86:8d:a4:c8:63:a4:03:a3:89:f0:17:d7:
         f1:39:8a:f1:69:ae:c7:16:da:7f:b3:4b:f6:04:43:e5:27:46:
         f2:7d:4d:80
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEr5UUrCfxiTvJ8Q8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAwNDhiNWEtMmNhOC00MjUxLThlOTMtNWVhYWI3MmQ0
Y2MzMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
NDEzZTdiNzctMjAwYy00ZGYwLWJmOTctMDdjZGQ2MGUyMTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWphiGHTJGSCHFV8axqXCOX4BjkrXVod6vqf
4Y6MCNV6s43aKQe3JMb+D+mUe5JBItTWWp3oWLOSodEnNFRRtd0E1X4X17Z0j0gO
K5X9dD9GlKRa2OB5nQhktSswrO/2Utq09RaT/r5/z653SJxU7GsFWDYjW4uFPm76
WiQ4JCJX2fIUld7otHmQG0rgniHKTn6M+UxuKyMyKHH8PY25SE2vz7C3iM4hU9qs
Z8AJZfTcp+WBz+lHzA1au8kTxQDVp4eDXWiFONzyoXOSHcRDFONmNxyRKaRqzbeb
ZNAtn/hB29DdTTvjZbFjyg/MJeVWlCCQZ59sf2WlOnWYW6ZVZQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFH2UVvaoLglvt3RKDOtc1qdvK/6MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0
OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFhYjcyZDRjYzMvYzIxYjZiMDgtNzcwNi0z
OThmLTgzZjEtMTY4ZTI4ZDJkYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjAwNDhiNWEtMmNhOC00MjUxLThl
OTMtNWVhYWI3MmQ0Y2MzLzYwMDQ4YjVhLTJjYTgtNDI1MS04ZTkzLTVlYWFiNzJk
NGNjMy5jcmwwHwYDVR0jBBgwFoAUJrNx2C7TAlCegsXwq57lU90/7UgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82MDA0OGI1YS0yY2E4LTQyNTEtOGU5My01ZWFh
YjcyZDRjYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIIA5Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAesdyHD5YT7Pq26xFVqb0frAI4eH3R4DfB0uFwpzWsPLS5f/V4+3n
7lxxdMal7f1aZnZwdrU52VnhsY2Ad9e0dNfYSf3A7uHfpQlTHe5AAVu0zt7RRdSl
UxgG+vlR6r/8jFig0I3UB0y7WtuNJHfKPwAfq1fF3A8NCPbujRyA5T2j0UCjZy99
wZf7j16TOKkR2+9dmejgf23oV322c87AmIXVmpj9++kgfJp4aR7kUJXv8Ve3R2Fr
NVTwi9/bz0tKYpQVIAbYYXtxK2PCxKQ4vvQgM6h+0O7pqCkigr0Eho2kyGOkA6OJ
8BfX8TmK8Wmuxxbaf7NL9gRD5SdG8n1NgA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:37:10 2025 by rpki-client