Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/f2649715-e7a5-3530-afee-04e6eac4fedb.roa
File:                     f2649715-e7a5-3530-afee-04e6eac4fedb.roa (raw, json)
Hash identifier:          uOUrQLvW20R9DYbCgwcrZQHhYqeog3Iq6C/pseVhDIc=
Subject key identifier:   30:38:BB:DD:2D:1B:6B:77:D2:4F:48:07:67:91:4D:EC:34:4E:E1:4F
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584B4A5B9567E2F1B374C7707D40
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/f2649715-e7a5-3530-afee-04e6eac4fedb.roa
Signing time:             Tue 23 Sep 2025 13:42:03 +0000
ROA not before:           Tue 23 Sep 2025 13:42:03 +0000
ROA not after:            Mon 22 Dec 2025 14:42:03 +0000
asID:                     6327
IP address blocks:        2607:f798:250c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:5b:95:67:e2:f1:b3:74:c7:70:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Sep 23 13:42:03 2025 GMT
            Not After : Dec 22 14:42:03 2025 GMT
        Subject: CN=c38fb06a-bc30-4053-8067-b27e11fcdc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:83:25:d0:0e:ee:38:d3:e4:45:45:33:41:
                    08:6d:f4:b4:c2:c9:b0:eb:14:fc:29:bf:ea:0f:60:
                    1d:e9:21:c6:7a:30:12:76:e6:4e:09:cb:7b:6e:ca:
                    e0:50:64:29:40:5d:1a:fc:b3:82:7a:32:18:d4:93:
                    e2:dc:ad:6f:c1:58:67:ef:6a:08:8e:25:9e:13:29:
                    49:fe:b5:59:76:1a:c8:2c:eb:a2:3e:03:a6:f5:9b:
                    99:ca:28:29:59:9c:42:16:81:1c:fe:1a:d9:14:11:
                    3e:15:16:01:8c:11:52:5c:b7:0b:e8:c4:4b:cc:8a:
                    4f:69:1d:a4:cb:21:e9:06:dc:c4:96:12:48:64:d3:
                    e1:57:1a:a4:15:d6:9c:74:0f:19:57:b5:78:fb:22:
                    87:1f:6b:07:86:c1:a6:4c:a9:54:39:1a:4b:64:73:
                    2f:8e:16:b2:fb:0d:b3:30:46:cb:38:5b:a7:20:75:
                    2e:0f:99:9e:4d:23:b1:1f:1f:4d:24:7f:e2:1f:4e:
                    50:20:3f:aa:8f:64:cb:84:c5:47:ab:14:f5:e2:bd:
                    d9:9b:f9:46:e5:53:ed:cc:12:54:df:f2:d2:3b:b9:
                    ba:24:da:11:55:02:90:98:19:d8:0e:e0:c3:52:f6:
                    8a:22:92:2d:1f:0d:cb:7a:19:3e:7d:4e:77:48:d2:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:38:BB:DD:2D:1B:6B:77:D2:4F:48:07:67:91:4D:EC:34:4E:E1:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/f2649715-e7a5-3530-afee-04e6eac4fedb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f798:250c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d4:e8:49:1b:06:f6:43:77:54:ee:7e:5c:3e:ea:8b:7d:5e:
         95:82:67:13:ca:75:60:ef:01:c3:cb:ad:dd:2a:2b:4d:2d:b7:
         85:29:e8:80:64:17:11:8c:a5:df:6a:0f:01:9c:b4:21:61:38:
         6d:9a:1e:c4:b9:b6:da:fe:18:ed:7c:29:d7:2f:9e:3b:de:93:
         fc:4e:39:0c:dc:4b:38:af:f8:64:0d:c6:f8:8a:c1:35:23:11:
         f2:96:2a:20:c8:70:24:26:26:db:33:76:14:7b:e0:a7:3b:9c:
         2d:34:7f:e6:34:66:25:ce:1f:39:2c:e8:d9:6d:c7:d5:3a:22:
         a9:9a:fd:33:27:fa:d0:c7:72:f5:05:e0:2b:cd:fe:b2:2a:d2:
         29:cb:8f:49:be:d3:74:93:c9:d7:db:90:85:fb:37:8d:19:0c:
         19:4e:86:51:7f:15:f9:6e:47:f7:e0:1d:54:df:a7:a3:cf:cc:
         5b:cb:e9:79:ea:9c:e3:76:c7:81:d4:a7:a4:c5:50:a4:06:bb:
         cb:74:c1:23:21:c1:4d:77:a8:19:8d:5f:1f:0e:6e:05:ac:47:
         7f:fa:11:bf:3c:2b:6a:70:2b:26:a2:f7:44:65:0a:76:fa:de:
         15:c8:78:ff:6d:28:3c:80:21:ae:e8:d7:51:92:02:91:16:67:
         c2:cd:58:5a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtKW5Vn4vGzdMdwfUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUyNzk5MTgtZjViMS00M2Y3LTk3NDgtOTVhYTBjNjQ2
OWYzMB4XDTI1MDkyMzEzNDIwM1oXDTI1MTIyMjE0NDIwM1owLzEtMCsGA1UEAxMk
YzM4ZmIwNmEtYmMzMC00MDUzLTgwNjctYjI3ZTExZmNkYzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxODJdAO7jjT5EVFM0EIbfS0wsmw6xT8Kb/q
D2Ad6SHGejASduZOCct7bsrgUGQpQF0a/LOCejIY1JPi3K1vwVhn72oIjiWeEylJ
/rVZdhrILOuiPgOm9ZuZyigpWZxCFoEc/hrZFBE+FRYBjBFSXLcL6MRLzIpPaR2k
yyHpBtzElhJIZNPhVxqkFdacdA8ZV7V4+yKHH2sHhsGmTKlUORpLZHMvjhay+w2z
MEbLOFunIHUuD5meTSOxHx9NJH/iH05QID+qj2TLhMVHqxT14r3Zm/lG5VPtzBJU
3/LSO7m6JNoRVQKQmBnYDuDDUvaKIpItHw3Lehk+fU53SNI47wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDA4u90tG2t30k9IB2eRTew0TuFPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3
OTkxOC1mNWIxLTQzZjctOTc0OC05NWFhMGM2NDY5ZjMvZjI2NDk3MTUtZTdhNS0z
NTMwLWFmZWUtMDRlNmVhYzRmZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDUyNzk5MTgtZjViMS00M2Y3LTk3
NDgtOTVhYTBjNjQ2OWYzLzA1Mjc5OTE4LWY1YjEtNDNmNy05NzQ4LTk1YWEwYzY0
NjlmMy5jcmwwHwYDVR0jBBgwFoAUcgH1iAdeZMnpAPYfP2ut8NzCz9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3OTkxOC1mNWIxLTQzZjctOTc0OC05NWFh
MGM2NDY5ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf3mCUM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGPU6EkbBvZDd1Tuflw+6ot9XpWCZxPKdWDvAcPLrd0qK00tt4Up
6IBkFxGMpd9qDwGctCFhOG2aHsS5ttr+GO18Kdcvnjvek/xOOQzcSziv+GQNxviK
wTUjEfKWKiDIcCQmJtszdhR74Kc7nC00f+Y0ZiXOHzks6Nltx9U6Iqma/TMn+tDH
cvUF4CvN/rIq0inLj0m+03STydfbkIX7N40ZDBlOhlF/FfluR/fgHVTfp6PPzFvL
6XnqnON2x4HUp6TFUKQGu8t0wSMhwU13qBmNXx8ObgWsR3/6Eb88K2pwKyai90Rl
Cnb63hXIeP9tKDyAIa7o11GSApEWZ8LNWFo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:28 2025 by rpki-client