Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65d081d9-2a9b-3222-846f-804325e8b329.roa
File:                     65d081d9-2a9b-3222-846f-804325e8b329.roa (raw, json)
Hash identifier:          nBvmYoFIE5+H7+bF63TTSGEMeoqvuA8A8tx/Fu1+P58=
Subject key identifier:   FE:50:57:8C:2D:C9:39:AA:17:B0:BB:8F:2A:CE:2C:BE:72:07:2D:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031B73CD09031E632EDA480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65d081d9-2a9b-3222-846f-804325e8b329.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        2601:c1:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:b7:3c:d0:90:31:e6:32:ed:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=f13be1f1-4b54-4fca-bfeb-5effb78d3853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:48:99:3f:4e:4a:17:aa:96:b2:4b:40:bb:
                    fe:ed:88:b2:87:39:b5:54:81:c9:a5:ff:0d:5f:8a:
                    37:db:f7:46:20:34:c2:7e:3b:4b:e6:04:04:f4:83:
                    8e:45:88:ec:a1:07:01:ea:09:bf:08:54:8d:1d:5f:
                    3e:24:9e:c0:04:75:b0:92:55:71:fb:4a:05:12:30:
                    a1:8d:30:14:fb:9f:9d:90:cf:d1:74:d8:c5:45:16:
                    36:fb:09:f1:70:5e:fd:f4:1b:88:b9:c1:f0:b1:c9:
                    cf:66:e8:79:8a:dc:3e:29:e8:72:6d:68:f8:1f:4a:
                    a9:94:70:53:40:bd:82:a5:41:30:a7:f9:6c:e4:b3:
                    aa:b3:16:68:04:9d:62:aa:47:3b:04:fe:04:12:3b:
                    45:e2:bc:a6:3c:da:74:e0:0b:32:42:63:87:5f:a2:
                    a2:94:9e:4d:37:aa:5a:37:71:8e:95:3d:b8:67:86:
                    20:a0:40:bb:6f:3e:9e:ca:dc:68:73:9d:b2:ff:5e:
                    78:a7:6f:d5:3c:89:f2:71:03:67:2c:aa:ae:70:9f:
                    16:a8:4a:77:b1:3d:1a:8b:a0:28:b5:d2:2e:78:0b:
                    cf:cd:32:3e:28:0e:1b:77:1d:9d:8d:c8:42:9c:d9:
                    5c:6d:37:0b:63:04:83:e0:8c:ef:ba:2e:18:96:e6:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:50:57:8C:2D:C9:39:AA:17:B0:BB:8F:2A:CE:2C:BE:72:07:2D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65d081d9-2a9b-3222-846f-804325e8b329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:c1:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:7f:dc:b4:74:68:84:46:3f:b8:ad:fb:9b:5b:9b:2e:ed:
         35:f4:fc:0e:19:c7:de:5b:f6:2e:e0:8f:0e:ec:52:90:d8:41:
         f9:46:0e:2f:f5:da:25:7f:f6:06:e1:fe:29:d6:e9:dc:34:71:
         38:06:11:4c:d0:b5:68:24:21:22:ac:f5:9e:09:92:38:8f:58:
         70:29:9d:27:fb:0c:ba:fa:78:03:af:34:ea:b6:bc:f5:89:6e:
         cb:86:ad:ab:7b:8c:54:60:23:12:ba:43:b3:89:d5:f9:d7:d7:
         23:97:7f:97:2b:dc:1f:bc:9b:cf:ad:cc:f8:22:7a:d0:72:ed:
         95:ef:7a:e1:27:78:90:cf:cc:05:9a:9b:e8:37:49:e7:d4:42:
         bf:bd:a9:e9:08:56:78:eb:bc:ff:5c:a8:a5:ba:c2:1f:22:0c:
         34:b6:2b:06:47:a4:94:eb:0c:60:77:89:aa:56:25:98:66:05:
         e6:5b:ee:9e:44:f3:2e:67:a2:6a:0f:01:25:cd:df:4f:ab:ae:
         27:74:fb:09:aa:5c:05:36:8e:1e:ac:e2:df:cb:71:5f:b8:a5:
         28:71:ab:6c:71:af:a6:ea:dd:a5:9b:f0:6a:78:ed:4b:ec:95:
         ee:16:d6:5e:92:8c:1a:77:72:c9:d0:da:4c:90:c6:fc:7d:e1:
         3d:b6:63:5f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErgMbc80JAx5jLtpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
ZjEzYmUxZjEtNGI1NC00ZmNhLWJmZWItNWVmZmI3OGQzODUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQFImT9OSheqlrJLQLv+7Yiyhzm1VIHJpf8N
X4o32/dGIDTCfjtL5gQE9IOORYjsoQcB6gm/CFSNHV8+JJ7ABHWwklVx+0oFEjCh
jTAU+5+dkM/RdNjFRRY2+wnxcF799BuIucHwscnPZuh5itw+KehybWj4H0qplHBT
QL2CpUEwp/ls5LOqsxZoBJ1iqkc7BP4EEjtF4rymPNp04AsyQmOHX6KilJ5NN6pa
N3GOlT24Z4YgoEC7bz6eytxoc52y/154p2/VPInycQNnLKqucJ8WqEp3sT0ai6Ao
tdIueAvPzTI+KA4bdx2djchCnNlcbTcLYwSD4Izvui4YlubcxwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP5QV4wtyTmqF7C7jyrOLL5yBy2iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjVkMDgxZDktMmE5Yi0z
MjIyLTg0NmYtODA0MzI1ZThiMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAwYAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAO5N/3LR0aIRGP7it+5tbmy7tNfT8DhnH3lv2LuCPDuxSkNhB+UYO
L/XaJX/2BuH+Kdbp3DRxOAYRTNC1aCQhIqz1ngmSOI9YcCmdJ/sMuvp4A6806ra8
9Yluy4atq3uMVGAjErpDs4nV+dfXI5d/lyvcH7ybz63M+CJ60HLtle964Sd4kM/M
BZqb6DdJ59RCv72p6QhWeOu8/1yopbrCHyIMNLYrBkeklOsMYHeJqlYlmGYF5lvu
nkTzLmeiag8BJc3fT6uuJ3T7CapcBTaOHqzi38txX7ilKHGrbHGvpurdpZvwanjt
S+yV7hbWXpKMGndyydDaTJDG/H3hPbZjXw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:33:38 2025 by rpki-client