Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/8b69e542-2f34-3348-8fbd-317efc06b5b4.roa
File:                     8b69e542-2f34-3348-8fbd-317efc06b5b4.roa (raw, json)
Hash identifier:          8UCqEXXY18gXmLXh5r60KgGwjId8I24n506Ze9KwIrg=
Subject key identifier:   FA:49:DB:C9:A8:7F:80:99:99:0A:34:F6:65:38:73:76:1D:85:1F:3F
Certificate issuer:       /CN=0d6bb559-168b-45eb-91f1-f7988760221d
Certificate serial:       010D0C9F4328584B80B7678B495C73847B8BB8C0
Authority key identifier: 76:05:63:64:2B:D7:BC:2E:F9:39:65:1E:FB:00:AE:3F:EC:07:CD:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/8b69e542-2f34-3348-8fbd-317efc06b5b4.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     46437
IP address blocks:        2604:3380::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:67:8b:49:5c:73:84:7b:8b:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb559-168b-45eb-91f1-f7988760221d
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=ad24faf7-12d5-4a20-97b7-d09db0a9a9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6d:9c:55:36:ba:b3:8f:24:95:4c:3a:6e:d0:
                    f3:fa:f5:4f:95:d4:8b:83:5c:17:5a:5c:50:01:5b:
                    3d:49:c4:4e:29:0a:a1:48:48:e4:25:60:f6:56:23:
                    37:21:fe:e7:ce:5d:b1:0b:0c:e7:c7:42:93:03:0b:
                    8d:8e:8e:95:94:ff:1b:70:78:6f:68:f7:22:44:09:
                    fb:32:aa:82:df:fa:69:f9:6c:88:1f:27:40:77:d4:
                    62:dc:a9:4f:ea:4d:c8:55:26:bf:0c:b3:49:45:53:
                    ad:88:0d:f7:83:d5:4f:e0:4d:f3:32:b6:4a:cb:59:
                    38:de:4c:3e:3c:bd:0c:49:ce:e2:1e:a1:27:dd:f3:
                    fc:30:9a:a1:bf:d9:9a:fe:63:64:36:51:c7:6a:c0:
                    29:7d:61:28:0f:19:8b:d8:cb:71:6d:f2:1d:28:08:
                    6c:67:f8:a3:70:d2:70:15:3e:09:92:a6:04:52:03:
                    84:98:a7:19:27:b1:c8:29:b7:e9:5a:5e:f8:46:67:
                    4c:ed:f9:bd:95:0e:6b:be:3b:24:e2:eb:89:cb:6a:
                    f2:5a:63:47:99:17:c9:6b:b1:5f:89:06:d7:70:55:
                    5d:66:a7:bb:1d:15:73:11:2e:26:5f:51:f5:60:f4:
                    ad:92:bd:05:15:79:6b:55:5a:0b:7d:99:32:07:79:
                    0c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:49:DB:C9:A8:7F:80:99:99:0A:34:F6:65:38:73:76:1D:85:1F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/8b69e542-2f34-3348-8fbd-317efc06b5b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d/0d6bb559-168b-45eb-91f1-f7988760221d.crl

            X509v3 Authority Key Identifier:
                keyid:76:05:63:64:2B:D7:BC:2E:F9:39:65:1E:FB:00:AE:3F:EC:07:CD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0d6bb559-168b-45eb-91f1-f7988760221d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3380::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:fc:22:96:1d:58:bd:30:e1:ef:2b:f7:76:25:85:2b:3d:ae:
         cc:74:88:56:73:76:dc:53:6b:50:77:68:66:70:0b:f4:6e:4d:
         37:ae:a0:99:4d:92:0a:bc:f4:65:77:0c:10:02:7a:aa:18:6b:
         52:5b:61:f2:e8:a5:ac:dc:51:66:0d:68:a9:dd:84:51:df:c8:
         22:b9:84:a5:65:b1:b9:0d:ac:cd:6b:87:17:df:a2:79:1b:f2:
         69:02:fd:ce:51:3a:93:0a:b8:a7:1b:aa:6a:bb:73:6a:9d:f1:
         fc:88:0f:c0:6a:38:05:a0:a9:bc:56:0e:2b:b7:43:c1:f9:4c:
         05:dc:ce:ee:12:65:c0:61:fe:89:0e:be:e5:79:4a:ee:43:55:
         c8:ee:4a:54:93:db:6b:7d:de:95:eb:25:f5:bc:59:a8:00:5a:
         c1:43:8f:ac:f5:41:79:9d:a5:d1:87:7a:12:f3:46:02:db:bf:
         c7:fb:1b:81:b8:0e:ba:52:b4:e7:ba:24:cc:94:00:1b:b9:48:
         05:5e:a9:54:0e:50:de:e2:0d:60:d2:07:5a:50:ad:aa:78:27:
         d8:b3:45:04:2b:4e:1a:5a:4d:dc:a2:4b:f2:51:81:bc:6c:36:
         2e:f2:e2:5a:b7:c5:9c:e4:30:c4:7a:ee:a1:d5:aa:8c:76:06:
         49:2f:a5:41
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuAt2eLSVxzhHuLuMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ2YmI1NTktMTY4Yi00NWViLTkxZjEtZjc5ODg3NjAy
MjFkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
YWQyNGZhZjctMTJkNS00YTIwLTk3YjctZDA5ZGIwYTlhOWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn22cVTa6s48klUw6btDz+vVPldSLg1wXWlxQ
AVs9ScROKQqhSEjkJWD2ViM3If7nzl2xCwznx0KTAwuNjo6VlP8bcHhvaPciRAn7
MqqC3/pp+WyIHydAd9Ri3KlP6k3IVSa/DLNJRVOtiA33g9VP4E3zMrZKy1k43kw+
PL0MSc7iHqEn3fP8MJqhv9ma/mNkNlHHasApfWEoDxmL2MtxbfIdKAhsZ/ijcNJw
FT4JkqYEUgOEmKcZJ7HIKbfpWl74RmdM7fm9lQ5rvjsk4uuJy2ryWmNHmRfJa7Ff
iQbXcFVdZqe7HRVzES4mX1H1YPStkr0FFXlrVVoLfZkyB3kMrwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPpJ28mof4CZmQo09mU4c3YdhR8/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZDZi
YjU1OS0xNjhiLTQ1ZWItOTFmMS1mNzk4ODc2MDIyMWQvOGI2OWU1NDItMmYzNC0z
MzQ4LThmYmQtMzE3ZWZjMDZiNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGQ2YmI1NTktMTY4Yi00NWViLTkx
ZjEtZjc5ODg3NjAyMjFkLzBkNmJiNTU5LTE2OGItNDVlYi05MWYxLWY3OTg4NzYw
MjIxZC5jcmwwHwYDVR0jBBgwFoAUdgVjZCvXvC75OWUe+wCuP+wHzckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZDZiYjU1OS0xNjhiLTQ1ZWItOTFmMS1mNzk4
ODc2MDIyMWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgQzgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC7/CKWHVi9MOHvK/d2JYUrPa7MdIhWc3bcU2tQd2hmcAv0bk03rqCZ
TZIKvPRldwwQAnqqGGtSW2Hy6KWs3FFmDWip3YRR38giuYSlZbG5DazNa4cX36J5
G/JpAv3OUTqTCrinG6pqu3NqnfH8iA/AajgFoKm8Vg4rt0PB+UwF3M7uEmXAYf6J
Dr7leUruQ1XI7kpUk9trfd6V6yX1vFmoAFrBQ4+s9UF5naXRh3oS80YC27/H+xuB
uA66UrTnuiTMlAAbuUgFXqlUDlDe4g1g0gdaUK2qeCfYs0UEK04aWk3cokvyUYG8
bDYu8uJat8Wc5DDEeu6h1aqMdgZJL6VB
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:43:42 2025 by rpki-client