Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/8b17801e-5dcf-3256-a442-419728b5417d.roa
File:                     8b17801e-5dcf-3256-a442-419728b5417d.roa (raw, json)
Hash identifier:          WPuyR1U1dKeZJf0cAdP6mrHcw/+Ohy3R099gJgvpeIo=
Subject key identifier:   0C:BE:76:12:50:CF:1D:B7:D9:8E:25:E8:ED:34:95:96:29:EA:86:30
Certificate issuer:       /CN=f18acb70-b579-4682-adfb-f098ad50b263
Certificate serial:       010D0C9F4328584B1806ED70F66CCD300A33BD00
Authority key identifier: C7:95:C4:DD:6A:65:10:37:37:20:28:6D:FB:9A:7B:04:1A:54:8F:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/8b17801e-5dcf-3256-a442-419728b5417d.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     23546
IP address blocks:        2606:edc0::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:ed:70:f6:6c:cd:30:0a:33:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f18acb70-b579-4682-adfb-f098ad50b263
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=4e5b7e54-2094-4852-a9e3-6b0002a49367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:f9:5f:8a:73:72:73:0e:88:8c:9a:0c:03:
                    18:a3:29:54:30:89:d3:da:0c:bc:2b:cf:76:08:31:
                    79:8e:9d:20:e6:2c:3d:23:fc:37:7b:46:5a:48:04:
                    bc:46:be:72:96:9c:45:08:46:5e:dd:0e:4f:d1:e2:
                    e1:91:7f:2e:24:3b:99:d8:a7:34:ad:d2:f5:e6:a9:
                    21:57:2c:05:35:62:ff:60:de:aa:09:f3:b8:6d:28:
                    d3:e9:c0:83:33:b5:11:b8:a7:fe:be:36:cb:8a:b5:
                    55:ca:f1:2d:0b:94:a5:29:9c:d4:fc:11:aa:44:b1:
                    10:35:1e:d7:f1:62:f9:05:60:7c:68:7b:80:66:11:
                    b7:46:e3:44:3b:17:63:93:8c:af:09:36:ac:47:18:
                    3e:7f:0a:21:af:0e:56:3b:03:91:b7:a5:7d:5f:d8:
                    32:7c:07:0d:80:31:a1:21:99:6d:df:f9:6b:dd:47:
                    b5:cd:70:a8:7d:7c:e1:1f:19:ed:50:6f:ea:ff:27:
                    a8:ea:ec:cd:7b:da:c6:e6:b7:b4:07:5a:b4:e3:6f:
                    93:f4:33:04:d8:ae:ce:98:b6:7a:d6:dc:e1:a3:42:
                    2c:a6:bf:40:fa:df:13:2b:23:05:bd:73:88:6c:55:
                    21:0c:5c:3e:fc:94:36:23:f9:e0:ad:33:a6:16:29:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BE:76:12:50:CF:1D:B7:D9:8E:25:E8:ED:34:95:96:29:EA:86:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/8b17801e-5dcf-3256-a442-419728b5417d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263/f18acb70-b579-4682-adfb-f098ad50b263.crl

            X509v3 Authority Key Identifier:
                keyid:C7:95:C4:DD:6A:65:10:37:37:20:28:6D:FB:9A:7B:04:1A:54:8F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f18acb70-b579-4682-adfb-f098ad50b263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:edc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:30:2a:a9:49:f4:0c:05:ed:70:de:ee:be:67:79:7d:2f:e4:
         eb:21:8e:16:68:f6:87:00:7c:ab:0e:0c:18:46:59:34:87:46:
         c9:8e:3f:fc:96:d9:60:50:cc:fc:d3:b3:0a:d7:ba:e2:58:f2:
         96:a2:21:7f:ef:e3:4b:9e:7a:ae:c3:8a:a3:5e:a8:cc:e0:55:
         0f:3b:cb:96:7d:87:82:8b:fe:2c:50:67:0e:9b:5f:62:67:05:
         12:a1:8d:57:68:9c:aa:32:dc:8b:ea:4c:da:e4:6e:bb:17:3f:
         40:5f:73:fd:7c:3e:72:2a:f9:e0:f8:52:12:c1:91:1f:86:d7:
         c9:0d:82:04:39:3e:16:ff:d0:01:ad:e6:e8:92:0c:20:43:50:
         9e:58:c5:b5:b4:9f:34:2f:6b:8b:99:79:2b:38:ca:cd:98:bc:
         33:6d:1b:17:cb:97:15:4a:6a:ef:e0:37:36:f4:8c:e0:ef:34:
         b7:29:75:df:ac:f6:d6:83:73:72:81:0f:1e:3d:39:4c:d3:3a:
         71:76:97:b1:49:e6:b7:84:23:bb:a2:98:0b:09:15:46:a6:7d:
         99:56:63:1a:61:89:b1:dc:f1:3e:4c:52:61:de:e7:71:ea:81:
         b7:ed:12:9a:a8:42:9b:44:c1:2c:9f:bb:b2:b0:29:a5:80:c3:
         73:4d:cb:bb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsYBu1w9mzNMAozvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjE4YWNiNzAtYjU3OS00NjgyLWFkZmItZjA5OGFkNTBi
MjYzMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NGU1YjdlNTQtMjA5NC00ODUyLWE5ZTMtNmIwMDAyYTQ5MzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsX5X4pzcnMOiIyaDAMYoylUMInT2gy8K892
CDF5jp0g5iw9I/w3e0ZaSAS8Rr5ylpxFCEZe3Q5P0eLhkX8uJDuZ2Kc0rdL15qkh
VywFNWL/YN6qCfO4bSjT6cCDM7URuKf+vjbLirVVyvEtC5SlKZzU/BGqRLEQNR7X
8WL5BWB8aHuAZhG3RuNEOxdjk4yvCTasRxg+fwohrw5WOwORt6V9X9gyfAcNgDGh
IZlt3/lr3Ue1zXCofXzhHxntUG/q/yeo6uzNe9rG5re0B1q042+T9DME2K7OmLZ6
1tzho0Ispr9A+t8TKyMFvXOIbFUhDFw+/JQ2I/ngrTOmFilSxQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAy+dhJQzx232Y4l6O00lZYp6oYwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMThh
Y2I3MC1iNTc5LTQ2ODItYWRmYi1mMDk4YWQ1MGIyNjMvOGIxNzgwMWUtNWRjZi0z
MjU2LWE0NDItNDE5NzI4YjU0MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjE4YWNiNzAtYjU3OS00NjgyLWFk
ZmItZjA5OGFkNTBiMjYzL2YxOGFjYjcwLWI1NzktNDY4Mi1hZGZiLWYwOThhZDUw
YjI2My5jcmwwHwYDVR0jBBgwFoAUx5XE3WplEDc3ICht+5p7BBpUjyYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMThhY2I3MC1iNTc5LTQ2ODItYWRmYi1mMDk4
YWQ1MGIyNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbtwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAgMCqpSfQMBe1w3u6+Z3l9L+TrIY4WaPaHAHyrDgwYRlk0h0bJjj/8
ltlgUMz807MK17riWPKWoiF/7+NLnnquw4qjXqjM4FUPO8uWfYeCi/4sUGcOm19i
ZwUSoY1XaJyqMtyL6kza5G67Fz9AX3P9fD5yKvng+FISwZEfhtfJDYIEOT4W/9AB
rebokgwgQ1CeWMW1tJ80L2uLmXkrOMrNmLwzbRsXy5cVSmrv4Dc29Izg7zS3KXXf
rPbWg3NygQ8ePTlM0zpxdpexSea3hCO7opgLCRVGpn2ZVmMaYYmx3PE+TFJh3udx
6oG37RKaqEKbRMEsn7uysCmlgMNzTcu7
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:56 2025 by rpki-client