Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/a70708bb-9107-3142-a761-273eda33709b.roa
File:                     a70708bb-9107-3142-a761-273eda33709b.roa (raw, json)
Hash identifier:          utHaakru6r8L1q772+k0PEetBtSKBNqqrka1m8MeKMU=
Subject key identifier:   79:AB:B5:A3:A1:FD:D6:A4:0A:F8:96:E7:8A:36:1A:FB:20:04:85:49
Certificate issuer:       /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial:       010D0C9F4328584B7B21F16151C4BD874496C380
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/a70708bb-9107-3142-a761-273eda33709b.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     10996
IP address blocks:        2607:f530::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f1:61:51:c4:bd:87:44:96:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=8bbec4e4-39f3-49e9-a3f0-9cf370aec565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:1e:c2:99:7f:9a:17:9d:92:3b:7b:6c:da:
                    11:a1:64:4b:f6:bd:60:22:22:b9:24:8f:dd:cf:72:
                    9d:df:27:cf:4e:22:94:5b:73:fb:45:3d:91:1c:8b:
                    37:13:c7:c7:ba:4e:4c:c1:91:20:7d:d1:85:b6:c9:
                    dd:e4:e3:22:a2:33:b5:7b:16:c4:4c:af:17:68:e9:
                    81:15:8b:e2:05:65:b3:ab:b8:3e:52:88:20:20:6a:
                    fe:47:d9:40:05:3a:ff:92:43:a5:35:a1:03:4a:9e:
                    db:5e:35:2e:18:44:b0:d8:15:7a:8c:72:9a:cc:ee:
                    dd:bb:dd:d8:6e:ec:32:52:d9:a9:ac:93:b9:62:df:
                    42:5d:94:29:1e:9b:69:79:5c:2e:c3:e7:3c:34:63:
                    1e:a8:8f:d6:d9:09:fc:b3:dc:65:68:a5:3e:de:ce:
                    28:14:18:3b:a2:08:41:2f:84:01:82:d6:74:12:a1:
                    a2:f6:7e:01:fd:8f:7a:3f:d4:f0:d1:e0:dc:55:06:
                    6f:13:ee:63:c4:50:1d:95:dd:4c:c7:b2:19:8e:24:
                    b3:0d:c2:54:19:67:06:be:d9:c3:46:2b:e2:9d:24:
                    1b:24:25:cf:28:fb:14:bf:ab:cb:31:b5:0a:05:1e:
                    4c:50:39:ff:c1:ce:94:31:ff:b3:9e:87:f6:c9:4c:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AB:B5:A3:A1:FD:D6:A4:0A:F8:96:E7:8A:36:1A:FB:20:04:85:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/a70708bb-9107-3142-a761-273eda33709b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl

            X509v3 Authority Key Identifier:
                keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f530::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5c:d8:4c:cc:7f:78:9e:d2:d3:d3:2b:d8:52:17:45:45:e8:
         2f:e9:f6:96:8f:2c:f1:82:4c:cd:26:93:36:ab:25:14:ea:4e:
         9c:f4:d2:84:6d:67:36:c0:b3:8e:14:77:e4:0c:7a:bf:c7:63:
         07:58:30:ff:71:d0:46:4d:35:2a:54:f7:16:b7:33:14:5e:7d:
         9d:40:d6:3b:c4:50:f3:1a:f2:7b:a6:16:05:b3:ca:3e:78:7a:
         fe:fb:af:dd:b8:bd:25:c9:aa:cb:ba:19:66:d4:74:c1:32:e4:
         ea:30:f0:b7:a4:3f:c3:04:a9:f8:85:60:08:0a:2c:a2:8d:0f:
         4d:38:fd:f3:43:3a:93:78:9e:79:49:f7:35:c8:05:52:42:c2:
         30:ab:d4:2e:7d:93:26:24:a6:a7:78:b9:14:c4:74:88:62:b5:
         74:b7:11:76:a5:6a:04:d4:ec:13:60:87:59:1b:76:1a:ad:53:
         ef:ee:f7:50:b5:68:34:6d:1f:44:9a:0a:2b:c4:ea:3f:c5:73:
         68:71:ed:26:07:2d:35:3f:d4:3f:40:5f:7a:0e:4e:a0:85:92:
         87:40:08:02:be:04:bf:ec:6b:80:65:9a:ab:4f:4a:02:93:bd:
         4f:89:83:30:d8:20:9b:f0:d8:dd:f3:6a:1d:57:9e:36:87:48:
         22:3d:a4:c1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt7IfFhUcS9h0SWw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQy
YWQwMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk
OGJiZWM0ZTQtMzlmMy00OWU5LWEzZjAtOWNmMzcwYWVjNTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyYewpl/mhedkjt7bNoRoWRL9r1gIiK5JI/d
z3Kd3yfPTiKUW3P7RT2RHIs3E8fHuk5MwZEgfdGFtsnd5OMiojO1exbETK8XaOmB
FYviBWWzq7g+UoggIGr+R9lABTr/kkOlNaEDSp7bXjUuGESw2BV6jHKazO7du93Y
buwyUtmprJO5Yt9CXZQpHptpeVwuw+c8NGMeqI/W2Qn8s9xlaKU+3s4oFBg7oghB
L4QBgtZ0EqGi9n4B/Y96P9Tw0eDcVQZvE+5jxFAdld1Mx7IZjiSzDcJUGWcGvtnD
RivinSQbJCXPKPsUv6vLMbUKBR5MUDn/wc6UMf+znof2yUzPjwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHmrtaOh/dakCviW54o2GvsgBIVJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MDBi
Y2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvYTcwNzA4YmItOTEwNy0z
MTQyLWE3NjEtMjczZWRhMzM3MDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTAwYmNiNWQtOWUwNy00NGEzLWFm
NjEtMjVlN2YwMjQyYWQwLzkwMGJjYjVkLTllMDctNDRhMy1hZjYxLTI1ZTdmMDI0
MmFkMC5jcmwwHwYDVR0jBBgwFoAUsWEfsEw1NKJ6ktKh1nWmALbAQ3wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3
ZjAyNDJhZDAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1MDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAfXNhMzH94ntLT0yvYUhdFRegv6faWjyzxgkzNJpM2qyUU6k6c9NKE
bWc2wLOOFHfkDHq/x2MHWDD/cdBGTTUqVPcWtzMUXn2dQNY7xFDzGvJ7phYFs8o+
eHr++6/duL0lyarLuhlm1HTBMuTqMPC3pD/DBKn4hWAICiyijQ9NOP3zQzqTeJ55
Sfc1yAVSQsIwq9QufZMmJKaneLkUxHSIYrV0txF2pWoE1OwTYIdZG3YarVPv7vdQ
tWg0bR9EmgorxOo/xXNoce0mBy01P9Q/QF96Dk6ghZKHQAgCvgS/7GuAZZqrT0oC
k71PiYMw2CCb8Njd82odV542h0giPaTB
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:12:55 2025 by rpki-client