Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3e1febce-a882-390d-b48a-932011598477.roa
File:                     3e1febce-a882-390d-b48a-932011598477.roa (raw, json)
Hash identifier:          q2fb2Pi9F0avB+NU/P5fzkOUF/idoc2ecMot8fGFu+A=
Subject key identifier:   70:47:A8:F7:48:2E:BE:86:E1:82:34:1A:13:4D:BD:0C:E4:EE:8B:3D
Certificate issuer:       /CN=3a000633-c1ee-492c-b730-12e113ab8bd2
Certificate serial:       010D0C9F4328584B76F25CF51295EF171A839900
Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3e1febce-a882-390d-b48a-932011598477.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     394710
IP address blocks:        2604:7a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:5c:f5:12:95:ef:17:1a:83:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=0da933d3-0e15-4787-ba48-66e26f44e45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:f8:00:f8:da:e8:72:49:73:4b:9c:00:db:
                    7a:f0:c5:e5:fd:d1:0b:44:57:56:5a:11:70:55:e7:
                    58:71:c3:3d:77:4a:1a:27:f9:90:b7:68:e7:c4:83:
                    c9:31:86:a2:ef:fb:72:0b:37:cd:22:5a:ef:2a:5d:
                    ec:e3:fb:29:8d:a3:86:68:84:af:ff:30:4f:19:13:
                    12:77:08:20:02:8a:e1:62:b0:8e:e5:3c:21:87:10:
                    92:28:86:e0:2b:e9:40:69:d6:4c:46:20:22:73:26:
                    8d:3f:d8:47:af:f9:ec:a0:25:c3:1e:15:5f:d1:c5:
                    8d:53:bc:bd:dd:c0:22:61:6f:e7:75:36:fb:4b:b5:
                    a3:39:e6:fe:2c:80:31:b7:23:67:6b:0d:2e:99:c2:
                    ca:cd:96:94:0e:28:56:76:a5:95:ae:69:72:df:2f:
                    be:29:c5:d2:3a:38:3f:fd:91:31:bf:56:9c:14:42:
                    4c:50:dc:bd:c1:ab:b9:09:dc:ec:2d:81:68:15:3e:
                    14:cf:6a:bd:ea:5c:3d:68:03:57:13:66:1d:e5:a5:
                    3b:69:fe:9d:d4:11:79:c5:be:e7:ea:08:62:0f:33:
                    4f:9b:22:98:59:6a:63:75:0c:86:88:07:7e:0f:49:
                    b2:0b:9c:fe:40:7f:29:23:cc:b2:f9:c2:2a:af:75:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:47:A8:F7:48:2E:BE:86:E1:82:34:1A:13:4D:BD:0C:E4:EE:8B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3e1febce-a882-390d-b48a-932011598477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl

            X509v3 Authority Key Identifier:
                keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:88:ad:53:39:83:73:c7:68:3c:22:6a:49:34:e1:ef:61:
         a6:36:fa:5d:28:1c:76:39:38:3f:f4:84:76:91:64:57:ae:98:
         3d:06:ba:22:e4:c6:8e:37:8f:6c:d0:01:4e:c1:cb:a2:cc:cf:
         b7:8c:3c:20:2e:f3:af:96:30:d7:1e:63:d5:24:6c:f0:63:6c:
         23:93:c2:16:c7:b5:0b:4c:f2:87:a1:62:5d:07:1b:87:2a:68:
         93:e5:36:c9:50:8e:c4:89:f8:50:2b:11:cb:28:57:e8:7c:d3:
         e0:49:c8:68:2b:9c:75:28:18:27:5b:1b:5c:cf:81:9b:54:dc:
         8f:3d:3f:f3:2e:f0:d6:b0:50:8a:1c:b0:cb:ea:05:3a:0d:26:
         df:1a:cb:36:3b:e7:20:57:bb:8f:ef:77:34:f6:c3:ed:4b:96:
         da:d2:ea:80:eb:1f:48:6c:a0:dc:50:10:72:fd:ba:01:bc:6a:
         b4:67:63:d4:b0:98:b4:bb:2f:66:0e:e8:e0:61:35:09:cc:99:
         86:bd:86:61:f8:f3:e0:aa:0b:88:8c:8d:cf:77:88:a4:76:bf:
         1c:85:ce:fc:17:5a:2a:9a:f3:40:4a:90:ec:84:71:de:fe:e2:
         a4:93:1d:dd:89:b5:ae:8c:b5:89:cb:c5:38:de:67:f2:04:9f:
         bb:b6:95:b2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt28lz1EpXvFxqDmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2EwMDA2MzMtYzFlZS00OTJjLWI3MzAtMTJlMTEzYWI4
YmQyMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
MGRhOTMzZDMtMGUxNS00Nzg3LWJhNDgtNjZlMjZmNDRlNDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXv4APja6HJJc0ucANt68MXl/dELRFdWWhFw
VedYccM9d0oaJ/mQt2jnxIPJMYai7/tyCzfNIlrvKl3s4/spjaOGaISv/zBPGRMS
dwggAorhYrCO5TwhhxCSKIbgK+lAadZMRiAicyaNP9hHr/nsoCXDHhVf0cWNU7y9
3cAiYW/ndTb7S7WjOeb+LIAxtyNnaw0umcLKzZaUDihWdqWVrmly3y++KcXSOjg/
/ZExv1acFEJMUNy9wau5CdzsLYFoFT4Uz2q96lw9aANXE2Yd5aU7af6d1BF5xb7n
6ghiDzNPmyKYWWpjdQyGiAd+D0myC5z+QH8pI8yy+cIqr3XchwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHBHqPdILr6G4YI0GhNNvQzk7os9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAw
MDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNhYjhiZDIvM2UxZmViY2UtYTg4Mi0z
OTBkLWI0OGEtOTMyMDExNTk4NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMDA2MzMtYzFlZS00OTJjLWI3
MzAtMTJlMTEzYWI4YmQyLzNhMDAwNjMzLWMxZWUtNDkyYy1iNzMwLTEyZTExM2Fi
OGJkMi5jcmwwHwYDVR0jBBgwFoAUFGVxCMW+NO6jxif09m0EUs/PIyAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUx
MTNhYjhiZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgR6QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBgH4itUzmDc8doPCJqSTTh72GmNvpdKBx2OTg/9IR2kWRXrpg9Broi
5MaON49s0AFOwcuizM+3jDwgLvOvljDXHmPVJGzwY2wjk8IWx7ULTPKHoWJdBxuH
KmiT5TbJUI7EifhQKxHLKFfofNPgSchoK5x1KBgnWxtcz4GbVNyPPT/zLvDWsFCK
HLDL6gU6DSbfGss2O+cgV7uP73c09sPtS5ba0uqA6x9IbKDcUBBy/boBvGq0Z2PU
sJi0uy9mDujgYTUJzJmGvYZh+PPgqguIjI3Pd4ikdr8chc78F1oqmvNASpDshHHe
/uKkkx3dibWujLWJy8U43mfyBJ+7tpWy
-----END CERTIFICATE-----
Generated at Wed Oct 22 00:21:12 2025 by rpki-client