Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/0250aa95-d86f-369c-8422-1ae3fad493fa.roa
File:                     0250aa95-d86f-369c-8422-1ae3fad493fa.roa (raw, json)
Hash identifier:          b7/gJJDe586FYpIx6oZoGtWuGPo+JSDArxABH5FWscQ=
Subject key identifier:   EE:F5:52:33:0B:3B:F1:F7:EB:3A:21:2B:43:BE:DF:88:9B:41:4C:92
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584B715CB61DC506466E5F11A3A0
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/0250aa95-d86f-369c-8422-1ae3fad493fa.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     61112
IP address blocks:        2602:fa4f:f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b6:1d:c5:06:46:6e:5f:11:a3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=75391556-d7a7-4b46-bdf3-11ec564cf2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:61:2f:96:0b:cf:8d:e0:2b:35:28:8a:99:
                    36:16:51:b9:e2:58:56:ec:59:59:df:18:e9:97:c2:
                    06:e1:f7:c8:94:1e:b2:d9:6b:dd:b4:7c:fe:60:7e:
                    86:63:27:c4:79:8e:6b:e5:12:4c:cd:3d:f6:5d:8e:
                    e9:e9:b9:87:c4:d1:5e:dc:19:3e:85:96:1f:7c:23:
                    ff:8e:de:48:8f:e2:45:62:97:77:6b:26:83:65:51:
                    42:96:f6:90:1c:e7:21:15:da:a6:b7:b0:1e:59:d0:
                    52:e5:49:1d:5c:b5:48:f3:d5:22:a2:74:c7:9e:20:
                    a1:4e:60:22:59:9d:c3:e6:7c:0d:61:db:a6:cb:13:
                    fa:80:56:69:9f:f6:cc:49:d6:62:99:82:36:a4:e6:
                    a9:8b:b7:9e:4d:05:47:3c:20:4f:05:7e:fc:5d:43:
                    04:16:05:f3:0b:52:08:10:09:bf:55:f7:b7:b9:5b:
                    35:e4:5e:bf:3e:f8:08:92:af:3d:29:53:fa:5a:58:
                    d3:8a:5a:a6:6a:ac:79:75:36:30:07:b6:bc:81:3c:
                    88:ca:37:02:a6:de:f1:5a:0e:59:9c:42:9f:41:97:
                    dc:57:bb:f0:05:fd:4a:2d:66:a6:90:7a:71:4c:1e:
                    e8:d7:a0:1c:a8:bd:4e:a7:e5:bf:2a:1a:ac:13:08:
                    5b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F5:52:33:0B:3B:F1:F7:EB:3A:21:2B:43:BE:DF:88:9B:41:4C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/0250aa95-d86f-369c-8422-1ae3fad493fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:65:6b:1b:d1:04:cf:45:ef:a0:d9:81:f0:28:02:ed:70:4c:
         7e:41:d3:a3:5d:5a:4c:4a:da:bd:6b:0d:1a:36:19:7c:6b:ad:
         ce:a5:89:07:9b:27:b5:33:40:2b:e6:aa:2d:3f:64:ae:e7:c0:
         f5:41:b6:c5:46:79:8e:9e:ab:b0:ed:2e:44:35:4c:ac:1b:c2:
         35:44:e4:44:92:2e:4d:61:95:e0:78:a6:c6:96:97:3d:67:20:
         99:56:3c:46:40:72:45:20:39:54:4f:fa:81:0f:9f:a6:3e:e1:
         2a:84:90:da:29:ee:96:19:cc:ce:fb:e4:78:32:d1:34:3e:36:
         0f:34:43:08:76:ac:43:55:be:fc:5c:64:23:07:43:22:16:75:
         83:93:15:78:a5:77:82:ec:df:10:7e:89:7b:ea:5c:53:d1:4f:
         4d:a2:90:19:19:58:46:59:9c:32:96:df:82:6f:be:42:08:93:
         7d:8a:4d:5c:ad:5f:f0:eb:26:2a:4c:c9:0a:52:38:36:da:9f:
         77:64:8f:a2:7b:a5:61:d7:f4:44:2a:26:52:07:bb:07:8f:fb:
         a8:7f:59:85:47:4b:46:6f:9c:10:64:05:a7:4c:44:34:19:cd:
         0e:51:da:ca:f9:45:56:06:5c:38:a1:6b:07:70:a3:cc:01:cc:
         83:96:f6:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtxXLYdxQZGbl8Ro6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2
YmY3MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
NzUzOTE1NTYtZDdhNy00YjQ2LWJkZjMtMTFlYzU2NGNmMmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM9hL5YLz43gKzUoipk2FlG54lhW7FlZ3xjp
l8IG4ffIlB6y2WvdtHz+YH6GYyfEeY5r5RJMzT32XY7p6bmHxNFe3Bk+hZYffCP/
jt5Ij+JFYpd3ayaDZVFClvaQHOchFdqmt7AeWdBS5UkdXLVI89UionTHniChTmAi
WZ3D5nwNYdumyxP6gFZpn/bMSdZimYI2pOapi7eeTQVHPCBPBX78XUMEFgXzC1II
EAm/Vfe3uVs15F6/PvgIkq89KVP6WljTilqmaqx5dTYwB7a8gTyIyjcCpt7xWg5Z
nEKfQZfcV7vwBf1KLWamkHpxTB7o16AcqL1Op+W/KhqsEwhbEwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO71UjMLO/H36zohK0O+34ibQUySMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4
ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvMDI1MGFhOTUtZDg2Zi0z
NjljLTg0MjItMWFlM2ZhZDQ5M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1
ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2
NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4
ZTU2NjZiZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6TwDw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGllaxvRBM9F76DZgfAoAu1wTH5B06NdWkxK2r1rDRo2GXxrrc6l
iQebJ7UzQCvmqi0/ZK7nwPVBtsVGeY6eq7DtLkQ1TKwbwjVE5ESSLk1hleB4psaW
lz1nIJlWPEZAckUgOVRP+oEPn6Y+4SqEkNop7pYZzM775Hgy0TQ+Ng80Qwh2rENV
vvxcZCMHQyIWdYOTFXild4Ls3xB+iXvqXFPRT02ikBkZWEZZnDKW34JvvkIIk32K
TVytX/DrJipMyQpSODban3dkj6J7pWHX9EQqJlIHuweP+6h/WYVHS0ZvnBBkBadM
RDQZzQ5R2sr5RVYGXDihawdwo8wBzIOW9ls=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:32:01 2025 by rpki-client