Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/19d943a9-9882-3b09-9042-ffa328cee2a1.roa
File:                     19d943a9-9882-3b09-9042-ffa328cee2a1.roa (raw, json)
Hash identifier:          VR8Hfn0otVC356FOJvDoctH7uzm35rxt+smR2uTDV0U=
Subject key identifier:   CF:5D:5E:CD:97:C5:2C:B6:82:18:86:BF:0A:B3:5C:47:13:21:79:E9
Certificate issuer:       /CN=0e0ac023-c334-4bbe-bab3-afb7662be83d
Certificate serial:       010D0C9F4328584B94422ED4F9B770C797B70B00
Authority key identifier: EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/19d943a9-9882-3b09-9042-ffa328cee2a1.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     29802
IP address blocks:        2602:f5b3::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:2e:d4:f9:b7:70:c7:97:b7:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0ac023-c334-4bbe-bab3-afb7662be83d
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=8eeb50ef-5f65-4602-96e1-428a34de9a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:00:0f:3c:4a:86:ff:7a:9e:c3:0b:ff:a9:98:
                    d2:31:fb:7d:33:78:d2:ef:24:39:58:e6:b3:e7:7b:
                    49:4d:a2:f5:45:ab:f5:82:5b:fb:b8:1e:54:39:63:
                    ca:15:61:e1:4b:29:85:5c:71:10:52:d4:25:c3:a0:
                    01:9e:fe:bf:25:d6:af:39:25:b3:3e:e0:86:05:35:
                    fd:fe:e5:50:71:ae:7a:79:e6:3a:85:92:b6:6c:0e:
                    d0:ef:3d:ba:8e:07:2c:cc:18:7c:1f:c5:dc:0f:6a:
                    af:88:42:f8:15:4f:d9:32:f0:fc:66:8f:ca:35:f0:
                    cb:d4:5b:38:f7:a0:77:17:88:fb:8c:04:d9:c1:98:
                    f7:f4:0a:69:3d:45:0a:58:30:12:69:e4:ae:4d:c8:
                    7a:71:ea:ed:5d:c1:09:94:2a:01:98:c3:d3:eb:61:
                    20:a6:8f:1b:0d:84:69:11:dd:ed:f6:82:aa:dc:2f:
                    0d:b4:d0:80:55:40:5a:db:ee:1d:c8:5a:ee:71:33:
                    2c:e6:73:78:82:67:a1:c1:3c:36:b8:85:a2:13:53:
                    2d:99:bc:4a:8f:d3:19:b3:f7:51:14:f8:d5:11:79:
                    c4:b6:39:8e:93:99:bf:ee:ef:ed:5d:c1:a5:c4:1a:
                    cc:8a:39:15:89:19:a9:4a:8d:f0:fb:72:d2:20:46:
                    37:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5D:5E:CD:97:C5:2C:B6:82:18:86:BF:0A:B3:5C:47:13:21:79:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/19d943a9-9882-3b09-9042-ffa328cee2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5b3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:81:a5:eb:41:be:ad:35:c9:00:6a:a3:8c:af:eb:08:4f:8c:
         23:ee:07:b7:8e:7c:d4:59:1f:55:9b:61:05:cc:f6:8a:3e:84:
         a2:33:32:24:01:f1:70:21:ad:0c:48:b3:bd:b3:d9:57:c9:33:
         bb:ee:08:19:11:9b:0b:ee:93:95:64:fe:75:ad:bf:af:dc:7a:
         9f:85:07:f5:39:e0:df:e7:59:f3:f7:a2:9f:0f:b1:d1:c6:ce:
         0c:71:16:4c:af:d4:b2:55:11:9d:f0:5c:5d:bd:55:81:e5:38:
         5c:59:cb:92:16:81:4a:90:d9:d4:93:4c:34:e7:70:6d:20:15:
         a8:1f:56:53:95:da:e9:73:59:24:36:da:b7:12:35:76:4d:01:
         dd:43:2b:e4:32:a9:d5:d8:f0:04:04:45:1e:c7:9a:b9:46:df:
         5e:8f:20:35:af:c8:d5:ae:85:1b:4c:39:1b:82:e9:93:65:8b:
         90:cf:25:bc:ce:24:e6:bc:b1:a3:23:5c:64:71:5a:99:3a:69:
         66:04:e3:6f:3b:8a:68:40:33:85:29:30:fc:b6:7b:3e:c9:2f:
         22:30:09:d3:66:da:04:aa:98:fe:3d:cf:76:b3:87:af:fc:2e:
         d7:7b:e4:1d:68:da:23:a2:52:b6:15:96:93:3b:f5:13:05:6b:
         3c:a9:aa:9e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuUQi7U+bdwx5e3CwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGUwYWMwMjMtYzMzNC00YmJlLWJhYjMtYWZiNzY2MmJl
ODNkMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk
OGVlYjUwZWYtNWY2NS00NjAyLTk2ZTEtNDI4YTM0ZGU5YTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAAPPEqG/3qewwv/qZjSMft9M3jS7yQ5WOaz
53tJTaL1Rav1glv7uB5UOWPKFWHhSymFXHEQUtQlw6ABnv6/JdavOSWzPuCGBTX9
/uVQca56eeY6hZK2bA7Q7z26jgcszBh8H8XcD2qviEL4FU/ZMvD8Zo/KNfDL1Fs4
96B3F4j7jATZwZj39AppPUUKWDASaeSuTch6certXcEJlCoBmMPT62Egpo8bDYRp
Ed3t9oKq3C8NtNCAVUBa2+4dyFrucTMs5nN4gmehwTw2uIWiE1MtmbxKj9MZs/dR
FPjVEXnEtjmOk5m/7u/tXcGlxBrMijkViRmpSo3w+3LSIEY3MQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM9dXs2XxSy2ghiGvwqzXEcTIXnpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wZTBh
YzAyMy1jMzM0LTRiYmUtYmFiMy1hZmI3NjYyYmU4M2QvMTlkOTQzYTktOTg4Mi0z
YjA5LTkwNDItZmZhMzI4Y2VlMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGUwYWMwMjMtYzMzNC00YmJlLWJh
YjMtYWZiNzY2MmJlODNkLzBlMGFjMDIzLWMzMzQtNGJiZS1iYWIzLWFmYjc2NjJi
ZTgzZC5jcmwwHwYDVR0jBBgwFoAU6yCFl6bIMynVCOYJufQwC7463CkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8wZTBhYzAyMy1jMzM0LTRiYmUtYmFiMy1hZmI3
NjYyYmU4M2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1swAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAa4Gl60G+rTXJAGqjjK/rCE+MI+4Ht4581FkfVZthBcz2ij6EojMy
JAHxcCGtDEizvbPZV8kzu+4IGRGbC+6TlWT+da2/r9x6n4UH9Tng3+dZ8/einw+x
0cbODHEWTK/UslURnfBcXb1VgeU4XFnLkhaBSpDZ1JNMNOdwbSAVqB9WU5Xa6XNZ
JDbatxI1dk0B3UMr5DKp1djwBARFHseauUbfXo8gNa/I1a6FG0w5G4Lpk2WLkM8l
vM4k5ryxoyNcZHFamTppZgTjbzuKaEAzhSkw/LZ7PskvIjAJ02baBKqY/j3PdrOH
r/wu13vkHWjaI6JSthWWkzv1EwVrPKmqng==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:03:59 2025 by rpki-client