Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
File:                     4e136740-8a5c-3866-bc51-aa216174bac7.roa (raw, json)
Hash identifier:          TOLL0LtolnGO8/srr4Cv1YVigCzdsRnyLDCRU13EcEI=
Subject key identifier:   77:39:CE:A9:AE:77:DC:54:A8:9A:CD:86:7B:FC:66:27:1B:27:E2:74
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584B5DD1EC005FF85C03DCC23180
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     57974
IP address blocks:        2602:2d4:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:ec:00:5f:f8:5c:03:dc:c2:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=c5c7f9b0-f079-48df-b226-9081e4256b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:70:06:3d:6b:39:36:da:83:46:a5:63:88:
                    9a:7d:1b:96:21:77:17:a3:19:23:af:d5:05:16:68:
                    83:39:3b:f3:22:65:54:96:5a:c5:12:cf:ee:58:1d:
                    f4:e7:0f:53:bd:1c:82:42:88:e7:18:a2:02:85:4f:
                    f7:67:f0:5c:31:de:5f:23:f7:ca:dd:c4:04:e5:59:
                    44:e9:a6:15:e1:3b:f6:b4:9a:71:0b:fa:c2:7f:d7:
                    df:7e:65:d2:cf:83:47:dd:0e:04:d0:6c:17:96:e7:
                    ae:55:22:d7:ae:24:6d:79:13:72:56:a3:7f:48:e5:
                    e1:d3:28:7e:b7:c8:90:02:77:59:2f:03:1f:ec:a3:
                    5d:58:d6:cf:f1:a6:39:a6:91:2b:cd:f2:7c:49:96:
                    03:1e:4a:61:40:ef:b5:94:4b:81:93:a3:25:5b:7c:
                    74:cd:65:86:3c:9c:13:87:4d:f5:83:77:92:ba:f8:
                    3b:ec:89:b7:da:e4:1d:0a:0e:4e:be:4b:41:c1:bd:
                    f9:fb:3f:d7:5c:f8:ba:8b:47:31:c9:cf:c6:e3:d3:
                    51:d1:6a:0d:73:70:5f:cf:ce:b8:38:8c:34:fe:7d:
                    29:12:2c:ba:be:09:44:30:44:49:8e:5d:47:5a:49:
                    84:ef:8e:d1:a2:9d:95:7f:b1:cd:da:5d:a5:f4:ba:
                    88:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:39:CE:A9:AE:77:DC:54:A8:9A:CD:86:7B:FC:66:27:1B:27:E2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:2c:34:1f:1c:d2:de:32:e6:ef:cc:e3:21:e3:be:8d:64:
         8c:ea:96:b1:ad:16:55:99:b3:28:e6:27:9e:85:9c:f3:c2:31:
         eb:d2:2f:ab:41:da:08:c7:90:85:39:6b:f2:59:48:c8:8e:df:
         72:ca:d2:25:c6:27:2e:68:94:9a:e0:48:e7:a8:1b:e0:e6:a5:
         8b:d9:94:7f:91:f7:18:5e:28:a4:24:97:88:04:66:0b:9b:a8:
         a7:18:4b:e8:4e:e0:5c:7a:9f:16:82:14:34:d5:e9:fa:41:5a:
         cb:d9:26:8a:cd:da:55:5b:0f:ca:22:b2:c3:2e:d0:13:08:66:
         26:73:57:b5:91:29:92:35:2a:7d:10:4c:bf:66:57:8c:9d:6c:
         86:bd:75:a2:f2:b6:44:f9:52:e9:29:7b:c0:a8:fa:6a:a0:25:
         c7:fe:1a:d2:19:b7:0f:1e:e9:3c:41:e7:6f:39:05:78:8f:24:
         21:25:dc:3c:5c:cc:43:83:b6:c9:0d:b5:5e:ce:a1:98:f1:40:
         30:ae:f6:8a:bd:8b:3b:e2:2b:12:fe:5a:6e:25:b5:95:36:44:
         ce:b4:fd:dc:9b:b1:f3:02:66:1d:80:6d:9e:2f:8c:40:16:4d:
         58:0f:14:86:c7:71:68:28:4a:a9:02:50:82:83:9b:81:a0:29:
         67:b6:d1:c9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtd0ewAX/hcA9zCMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5
NzA3MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk
YzVjN2Y5YjAtZjA3OS00OGRmLWIyMjYtOTA4MWU0MjU2YjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mhwBj1rOTbag0alY4iafRuWIXcXoxkjr9UF
FmiDOTvzImVUllrFEs/uWB305w9TvRyCQojnGKIChU/3Z/BcMd5fI/fK3cQE5VlE
6aYV4Tv2tJpxC/rCf9fffmXSz4NH3Q4E0GwXlueuVSLXriRteRNyVqN/SOXh0yh+
t8iQAndZLwMf7KNdWNbP8aY5ppErzfJ8SZYDHkphQO+1lEuBk6MlW3x0zWWGPJwT
h031g3eSuvg77Im32uQdCg5OvktBwb35+z/XXPi6i0cxyc/G49NR0WoNc3Bfz864
OIw0/n0pEiy6vglEMERJjl1HWkmE747Rop2Vf7HN2l2l9LqIAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHc5zqmud9xUqJrNhnv8ZicbJ+J0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm
Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvNGUxMzY3NDAtOGE1Yy0z
ODY2LWJjNTEtYWEyMTYxNzRiYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz
OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi
OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji
ZWFjYjk3MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC1AEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAr8LDQfHNLeMubvzOMh476NZIzqlrGtFlWZsyjmJ56FnPPCMevS
L6tB2gjHkIU5a/JZSMiO33LK0iXGJy5olJrgSOeoG+DmpYvZlH+R9xheKKQkl4gE
ZgubqKcYS+hO4Fx6nxaCFDTV6fpBWsvZJorN2lVbD8oissMu0BMIZiZzV7WRKZI1
Kn0QTL9mV4ydbIa9daLytkT5Uukpe8Co+mqgJcf+GtIZtw8e6TxB5285BXiPJCEl
3DxczEODtskNtV7OoZjxQDCu9oq9izviKxL+Wm4ltZU2RM60/dybsfMCZh2AbZ4v
jEAWTVgPFIbHcWgoSqkCUIKDm4GgKWe20ck=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:38 2025 by rpki-client