Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8484f6dc-8ec4-3f52-81bb-17ca048efdb9.roa
File:                     8484f6dc-8ec4-3f52-81bb-17ca048efdb9.roa (raw, json)
Hash identifier:          fPJ0EUT59M1vdRxuAdIEzPH2a2KOXxK4cBJm2KBnGBE=
Subject key identifier:   34:46:F7:BB:C4:EA:45:F4:7E:71:EA:11:39:A2:44:5B:5B:14:E2:05
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D88029670BD009104D9C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8484f6dc-8ec4-3f52-81bb-17ca048efdb9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     7843
IP address blocks:        2001:1998:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:88:02:96:70:bd:00:91:04:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8e769fed-2236-4029-a2d3-ce2a6cda953d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:17:dd:be:54:c8:6d:62:2b:f0:a1:8f:c8:
                    11:80:ad:c2:9b:0b:be:d9:3f:c2:c5:98:91:bc:82:
                    06:9a:01:0e:83:e9:36:c2:b3:b2:e4:96:b8:39:72:
                    e3:8d:92:55:1a:a3:39:f6:76:e1:e2:ed:72:df:c3:
                    2d:6e:44:81:29:5e:ce:6d:01:98:23:73:c9:a8:25:
                    0b:b1:4c:fc:e5:ac:40:42:81:dc:e9:83:5b:a8:2b:
                    e3:9f:5f:49:de:ad:90:a3:02:f5:78:9e:17:fb:d5:
                    40:c4:1a:5a:7c:37:f5:05:2d:00:09:c5:8c:18:d7:
                    24:7b:60:d0:df:17:c0:d0:65:eb:f0:f5:2e:b1:64:
                    11:cf:c6:3d:77:b2:96:db:da:74:85:0d:d8:60:3e:
                    bc:9c:9a:a5:95:19:9c:13:ca:ae:bb:0f:4f:00:cb:
                    45:7f:f2:e6:58:fa:17:4e:1c:82:59:e1:97:24:58:
                    5c:98:15:f0:5e:43:fb:3f:14:76:5f:06:aa:c3:09:
                    e3:6d:a7:1f:2d:a7:64:05:eb:85:8b:8e:03:85:39:
                    c8:23:57:8d:51:af:9e:fa:c4:95:33:60:00:ec:77:
                    51:41:47:52:3d:24:5b:d2:a3:a3:3f:8d:f1:c5:8c:
                    d7:65:74:ff:78:21:44:e8:57:9f:43:95:5a:00:58:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:46:F7:BB:C4:EA:45:F4:7E:71:EA:11:39:A2:44:5B:5B:14:E2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8484f6dc-8ec4-3f52-81bb-17ca048efdb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1998:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:13:fc:ef:d2:ed:02:32:6f:4f:70:3f:4f:59:52:14:1d:d6:
         b0:eb:06:36:01:2c:a4:c9:cf:ab:ab:da:6c:e4:5a:02:39:1b:
         06:21:b0:9c:2e:40:2c:53:da:80:2a:da:d1:cd:73:ae:fe:73:
         c2:e9:62:23:9a:e2:fb:8c:55:fe:f8:e4:ad:0d:e3:b6:ec:95:
         f0:bb:db:71:9d:93:99:4e:75:59:0d:87:d2:35:a4:77:07:61:
         58:9f:d7:f6:b1:da:69:ac:1b:c7:84:c5:fb:bf:16:18:a3:66:
         bc:32:51:75:c2:81:16:bf:a5:c1:d5:31:43:4a:35:61:6a:17:
         8f:32:50:62:f7:ce:7f:d3:b7:7d:87:b9:14:ff:24:2b:88:4a:
         e9:4f:45:5d:4e:64:6d:1e:3b:43:b1:70:fc:b7:be:46:43:92:
         ab:6e:44:82:ef:0e:ec:ae:7d:f4:44:e2:82:80:50:8a:4b:26:
         7b:4f:36:8c:08:65:6b:a6:73:d4:4b:45:18:4d:2a:02:dc:02:
         1b:8f:08:a3:a2:eb:97:41:f8:6a:91:5b:50:84:7e:08:43:4b:
         e9:f8:47:0b:e1:16:6d:24:2a:c8:ff:36:59:7c:17:31:c1:c6:
         f5:5b:f1:88:fc:16:22:0c:7a:f5:58:6e:bc:15:d8:24:09:e5:
         4f:8e:e3:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHYgClnC9AJEE2cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
OGU3NjlmZWQtMjIzNi00MDI5LWEyZDMtY2UyYTZjZGE5NTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRAX3b5UyG1iK/Chj8gRgK3Cmwu+2T/CxZiR
vIIGmgEOg+k2wrOy5Ja4OXLjjZJVGqM59nbh4u1y38MtbkSBKV7ObQGYI3PJqCUL
sUz85axAQoHc6YNbqCvjn19J3q2QowL1eJ4X+9VAxBpafDf1BS0ACcWMGNcke2DQ
3xfA0GXr8PUusWQRz8Y9d7KW29p0hQ3YYD68nJqllRmcE8quuw9PAMtFf/LmWPoX
ThyCWeGXJFhcmBXwXkP7PxR2XwaqwwnjbacfLadkBeuFi44DhTnII1eNUa+e+sSV
M2AA7HdRQUdSPSRb0qOjP43xxYzXZXT/eCFE6FefQ5VaAFg9dwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDRG97vE6kX0fnHqETmiRFtbFOIFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODQ4NGY2ZGMtOGVjNC0z
ZjUyLTgxYmItMTdjYTA0OGVmZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZmAAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB4T/O/S7QIyb09wP09ZUhQd1rDrBjYBLKTJz6ur2mzkWgI5GwYh
sJwuQCxT2oAq2tHNc67+c8LpYiOa4vuMVf745K0N47bslfC723Gdk5lOdVkNh9I1
pHcHYVif1/ax2mmsG8eExfu/FhijZrwyUXXCgRa/pcHVMUNKNWFqF48yUGL3zn/T
t32HuRT/JCuISulPRV1OZG0eO0OxcPy3vkZDkqtuRILvDuyuffRE4oKAUIpLJntP
NowIZWumc9RLRRhNKgLcAhuPCKOi65dB+GqRW1CEfghDS+n4RwvhFm0kKsj/Nll8
FzHBxvVb8Yj8FiIMevVYbrwV2CQJ5U+O49o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:36:19 2025 by rpki-client