Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa
File:                     e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa (raw, json)
Hash identifier:          htetQXszE/zBTvVAg5SsqQwL0m1Z2HU4Gn+I/Jx0lAM=
Subject key identifier:   5D:26:FD:6A:8A:DF:71:13:3A:58:7E:07:A6:21:8E:6D:05:3D:EA:B6
Certificate issuer:       /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial:       010D0C9F4328584B4BAC5DC648F70026AF8DA880
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     397735
IP address blocks:        2605:54c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5d:c6:48:f7:00:26:af:8d:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=5fe35153-3fea-4736-b96b-a4e1c2571e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:83:4e:5d:cd:58:fd:48:fa:a5:a5:9f:52:
                    0a:d5:81:ea:c8:9a:4e:25:d1:e8:8a:39:8f:d9:8c:
                    46:a5:b3:b9:d1:a8:7d:bd:0a:60:b8:5c:3a:85:10:
                    3c:43:8f:db:55:03:9c:68:cf:7a:5d:62:8b:86:87:
                    a2:f5:a5:d4:99:98:dc:4b:64:fd:c8:5f:7c:1a:71:
                    45:91:a7:ab:42:cc:63:a1:b5:41:2a:d9:ff:4b:c5:
                    64:a0:7d:37:7c:07:89:ce:aa:1b:29:8e:0d:c9:49:
                    dd:9a:5d:ed:b2:77:b2:55:55:b6:33:cb:ab:a0:c8:
                    1f:4a:b1:a8:d2:1f:62:3c:44:82:ec:c6:ca:67:47:
                    95:02:29:b9:53:c6:d0:f0:17:69:b2:5c:f0:be:f5:
                    15:f9:66:cc:ba:eb:6c:79:28:6a:ed:1a:fd:d1:9b:
                    be:5b:77:21:82:7c:19:5b:af:ef:59:ef:0a:47:fe:
                    65:72:7f:1e:6d:f9:85:c5:bb:93:cc:a4:79:56:8c:
                    d8:2e:8e:65:bc:a1:e1:79:86:09:57:e0:64:6c:41:
                    1a:c3:c8:db:97:93:4d:c1:f9:7e:1b:20:f0:e5:ab:
                    2d:d2:4f:cb:a7:ee:ef:cf:c9:4a:19:ea:d2:72:47:
                    01:d3:35:c5:63:f3:05:d0:03:77:81:25:45:09:5b:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:26:FD:6A:8A:DF:71:13:3A:58:7E:07:A6:21:8E:6D:05:3D:EA:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/e4bc3223-cb7b-325a-93cf-27d74c4acd2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:54c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f8:af:f7:f2:4f:0a:06:4e:1d:c8:25:2b:6c:69:a8:77:d2:
         bf:d3:75:34:9c:2e:2d:21:20:16:96:d6:d6:c0:5d:18:26:35:
         f6:ab:cd:37:c7:9e:9c:18:35:ac:d3:ac:4c:06:96:57:2e:de:
         72:b0:4b:fe:5e:d8:ca:59:c4:a5:9a:9c:ca:e2:8e:6e:84:ad:
         3c:84:ca:81:5c:e3:6e:d6:2a:d3:83:cd:17:34:70:b2:de:83:
         72:d3:4a:39:43:08:a3:4e:b4:d2:be:a2:d9:75:14:4e:e0:fb:
         8f:3f:a7:8c:11:5d:0d:e4:ac:c8:13:86:8d:35:48:1c:37:df:
         6e:13:72:44:10:f4:7b:57:64:77:77:f4:66:66:47:54:64:5b:
         ea:90:ae:25:c2:df:72:0e:00:73:de:a3:d8:a3:32:9e:62:7e:
         59:d9:98:d5:4b:5e:2b:64:f4:5d:37:f0:9f:f4:ae:c0:6a:aa:
         7c:e2:3c:b6:cc:0e:4a:e1:59:d0:c1:3c:c5:f4:7e:2a:c9:51:
         1e:24:2c:56:6a:83:0c:9f:87:5a:a2:99:8f:7a:b3:3d:c5:1a:
         54:26:87:50:23:97:f5:64:25:2b:9a:b4:5a:2a:98:1e:06:5f:
         55:54:15:be:9f:5a:7e:64:0e:2e:d3:4d:e5:94:44:47:ec:c5:
         c9:65:fa:bb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtLrF3GSPcAJq+NqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjcxOWM1ZjItNTgxOS00OTcyLWI0MzAtOWQ3NmViODhj
YjM2MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
NWZlMzUxNTMtM2ZlYS00NzM2LWI5NmItYTRlMWMyNTcxZTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD6DTl3NWP1I+qWln1IK1YHqyJpOJdHoijmP
2YxGpbO50ah9vQpguFw6hRA8Q4/bVQOcaM96XWKLhoei9aXUmZjcS2T9yF98GnFF
kaerQsxjobVBKtn/S8VkoH03fAeJzqobKY4NyUndml3tsneyVVW2M8uroMgfSrGo
0h9iPESC7MbKZ0eVAim5U8bQ8BdpslzwvvUV+WbMuutseShq7Rr90Zu+W3chgnwZ
W6/vWe8KR/5lcn8ebfmFxbuTzKR5VozYLo5lvKHheYYJV+BkbEEaw8jbl5NNwfl+
GyDw5ast0k/Lp+7vz8lKGerSckcB0zXFY/MF0AN3gSVFCVuRKQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF0m/WqK33ETOlh+B6Yhjm0FPeq2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82NzE5
YzVmMi01ODE5LTQ5NzItYjQzMC05ZDc2ZWI4OGNiMzYvZTRiYzMyMjMtY2I3Yi0z
MjVhLTkzY2YtMjdkNzRjNGFjZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjcxOWM1ZjItNTgxOS00OTcyLWI0
MzAtOWQ3NmViODhjYjM2LzY3MTljNWYyLTU4MTktNDk3Mi1iNDMwLTlkNzZlYjg4
Y2IzNi5jcmwwHwYDVR0jBBgwFoAU0huBRRStte2piy2/HvpBB1BUquwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82NzE5YzVmMi01ODE5LTQ5NzItYjQzMC05ZDc2
ZWI4OGNiMzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVUwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBF+K/38k8KBk4dyCUrbGmod9K/03U0nC4tISAWltbWwF0YJjX2q803
x56cGDWs06xMBpZXLt5ysEv+XtjKWcSlmpzK4o5uhK08hMqBXONu1irTg80XNHCy
3oNy00o5QwijTrTSvqLZdRRO4PuPP6eMEV0N5KzIE4aNNUgcN99uE3JEEPR7V2R3
d/RmZkdUZFvqkK4lwt9yDgBz3qPYozKeYn5Z2ZjVS14rZPRdN/Cf9K7Aaqp84jy2
zA5K4VnQwTzF9H4qyVEeJCxWaoMMn4daopmPerM9xRpUJodQI5f1ZCUrmrRaKpge
Bl9VVBW+n1p+ZA4u003llERH7MXJZfq7
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:00:12 2025 by rpki-client