Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa
File:                     92ecd3af-616b-30b8-8f04-b100fd223035.roa (raw, json)
Hash identifier:          7MQ+S6ZXNlGxJulRXULGCMITsUMpjZkDOCW/g9HGSuY=
Subject key identifier:   6A:87:BE:E0:58:16:63:DB:01:13:26:87:A7:AD:9B:F0:B7:AC:C0:64
Certificate issuer:       /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Certificate serial:       010D0C9F4328584B79BCB847F820BB4175364700
Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     2728
IP address blocks:        2605:7b80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b8:47:f8:20:bb:41:75:36:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=b62c34dd-18fc-484c-a083-77833eeddf7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:a0:70:ee:9b:5e:39:1a:9f:96:46:88:31:
                    ea:35:b8:f2:60:b8:3d:19:53:68:55:c6:1b:a5:ef:
                    da:f4:b8:13:6b:ce:6d:e0:1e:ba:3f:89:21:6d:a6:
                    6d:b1:58:1e:0f:c7:13:f2:2f:69:a8:18:47:5a:03:
                    6b:58:b4:42:38:25:e7:c2:a5:f5:e7:b2:18:71:de:
                    98:bc:05:e6:b3:ea:1d:04:00:9b:5c:9d:02:4a:b5:
                    b7:e1:98:3f:c5:df:7a:8a:ce:97:0d:73:25:56:91:
                    87:b5:1b:e8:24:0d:fa:b6:c0:99:95:45:fc:4b:33:
                    21:41:4e:a3:3e:33:0a:58:6d:71:69:6d:95:19:05:
                    ac:00:a3:61:c7:91:43:ea:39:03:1b:08:87:3d:3e:
                    7d:01:b2:b8:c9:48:c5:37:33:57:09:88:f1:1a:18:
                    a9:37:64:90:df:ff:ac:5f:1f:2c:db:92:60:3b:17:
                    f6:0d:0f:65:f5:05:4d:d4:1e:2f:47:bd:5a:6d:96:
                    0c:96:37:1f:f1:9a:67:cc:38:35:08:75:47:6d:b4:
                    bb:eb:82:b4:45:c2:83:10:11:87:0b:2d:80:9e:27:
                    51:38:c0:8f:6d:84:85:23:04:3e:c6:39:74:12:23:
                    b2:96:b6:79:99:3f:6b:5b:6b:ed:ba:4c:2d:8e:99:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:87:BE:E0:58:16:63:DB:01:13:26:87:A7:AD:9B:F0:B7:AC:C0:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/92ecd3af-616b-30b8-8f04-b100fd223035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d2:48:73:35:11:d7:3d:63:cb:cb:37:94:03:41:ed:96:0a:
         86:f1:9e:17:f6:fa:7b:c2:be:af:04:a0:61:86:f2:26:48:d7:
         19:dd:54:e4:c2:e0:d8:d3:99:ea:39:85:61:fb:07:31:55:7f:
         87:51:01:8a:af:c5:43:c2:c0:22:d6:9e:fa:3b:aa:7b:7b:a8:
         7e:9e:1a:19:a8:9a:e6:11:03:42:3d:f2:bf:49:7c:96:32:54:
         ed:af:c2:21:36:19:da:55:bf:fd:98:b7:51:d2:27:4a:d1:ee:
         f2:de:d4:e3:4f:bb:d8:a6:dd:13:b9:bd:da:93:51:ce:8f:ab:
         66:b8:fa:4d:a9:6d:5f:15:31:e3:b8:39:a4:0c:2f:b0:dc:08:
         3b:8c:b8:69:3b:db:7e:be:d2:8d:b8:3c:80:17:12:d4:67:79:
         6e:f9:59:c3:26:33:9e:c2:40:c3:10:c4:95:60:58:09:1f:dc:
         7a:bf:70:38:7d:a3:e7:99:83:a6:88:f3:2b:a8:e9:f4:73:9d:
         9f:cd:1f:8b:68:ff:ec:58:b9:58:87:64:ff:77:43:7d:d5:0a:
         35:9d:b3:04:a1:89:8f:f5:5c:65:d0:b4:71:66:fc:7a:12:0a:
         bc:96:10:97:78:9b:4a:fc:cb:8b:7f:d3:11:ce:ae:99:b2:e3:
         e5:d1:d9:f5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt5vLhH+CC7QXU2RwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Q4ZGVmZjctNmJlOS00ZDE2LTgzNDktOWY2NDM5Nzc1
YjBhMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk
YjYyYzM0ZGQtMThmYy00ODRjLWEwODMtNzc4MzNlZWRkZjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXSgcO6bXjkan5ZGiDHqNbjyYLg9GVNoVcYb
pe/a9LgTa85t4B66P4khbaZtsVgeD8cT8i9pqBhHWgNrWLRCOCXnwqX157IYcd6Y
vAXms+odBACbXJ0CSrW34Zg/xd96is6XDXMlVpGHtRvoJA36tsCZlUX8SzMhQU6j
PjMKWG1xaW2VGQWsAKNhx5FD6jkDGwiHPT59AbK4yUjFNzNXCYjxGhipN2SQ3/+s
Xx8s25JgOxf2DQ9l9QVN1B4vR71abZYMljcf8ZpnzDg1CHVHbbS764K0RcKDEBGH
Cy2AnidROMCPbYSFIwQ+xjl0EiOylrZ5mT9rW2vtukwtjplHEQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGqHvuBYFmPbARMmh6etm/C3rMBkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDhk
ZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0Mzk3NzViMGEvOTJlY2QzYWYtNjE2Yi0z
MGI4LThmMDQtYjEwMGZkMjIzMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4ZGVmZjctNmJlOS00ZDE2LTgz
NDktOWY2NDM5Nzc1YjBhL2NkOGRlZmY3LTZiZTktNGQxNi04MzQ5LTlmNjQzOTc3
NWIwYS5jcmwwHwYDVR0jBBgwFoAUzhQlAW3FZ7kkMlbx3Mqao7fddM0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZDhkZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0
Mzk3NzViMGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgV7gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAi0khzNRHXPWPLyzeUA0HtlgqG8Z4X9vp7wr6vBKBhhvImSNcZ3VTk
wuDY05nqOYVh+wcxVX+HUQGKr8VDwsAi1p76O6p7e6h+nhoZqJrmEQNCPfK/SXyW
MlTtr8IhNhnaVb/9mLdR0idK0e7y3tTjT7vYpt0Tub3ak1HOj6tmuPpNqW1fFTHj
uDmkDC+w3Ag7jLhpO9t+vtKNuDyAFxLUZ3lu+VnDJjOewkDDEMSVYFgJH9x6v3A4
faPnmYOmiPMrqOn0c52fzR+LaP/sWLlYh2T/d0N91Qo1nbMEoYmP9Vxl0LRxZvx6
Egq8lhCXeJtK/MuLf9MRzq6ZsuPl0dn1
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:38:57 2025 by rpki-client