Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d3e48e23-fc91-35a9-957f-e3dc92996c79.roa
File:                     d3e48e23-fc91-35a9-957f-e3dc92996c79.roa (raw, json)
Hash identifier:          Am6wXg40H7pP401xWf7/q1wT18JSr8EBGM+E2yy7k98=
Subject key identifier:   41:A1:12:06:27:49:4E:BE:E0:6D:CF:EE:29:C0:7C:90:6A:C5:DE:19
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CFA6D2934E442990E39C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d3e48e23-fc91-35a9-957f-e3dc92996c79.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        2600:6000:fd53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:fa:6d:29:34:e4:42:99:0e:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=87bfeb43-1969-44ab-951c-2ab2178919ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:f3:1d:7a:fb:e1:13:36:33:bb:45:f8:df:
                    3e:81:2f:c5:fc:d8:4b:9e:b3:a7:8a:1d:5b:95:60:
                    99:cf:74:f2:6b:87:15:2e:29:8b:94:bc:87:fb:fc:
                    08:79:d5:81:f5:ca:38:ec:7b:c8:68:6e:a6:2a:f0:
                    49:fb:3e:71:cb:0c:9e:c3:e7:ac:4f:d4:b2:de:a7:
                    2e:cb:4e:0b:81:b6:73:ad:75:ce:9c:23:84:b1:82:
                    b9:12:75:2c:1d:47:db:e0:1f:b0:d2:75:f7:ba:3a:
                    73:fd:f0:7c:d8:1f:d7:d1:2f:24:29:78:25:fd:b6:
                    76:12:d1:50:50:77:66:b1:e1:e9:2a:2f:e1:8a:fd:
                    df:20:30:98:00:48:6f:06:57:b9:04:7d:eb:cf:cd:
                    42:4a:f1:4f:f9:ed:4c:e4:78:2e:55:2b:8c:c0:6e:
                    60:46:f3:db:a0:fd:52:df:7c:d4:32:2f:ba:c1:8a:
                    8e:b4:92:2d:26:cf:6e:98:38:99:42:3f:a5:bf:97:
                    15:41:55:af:43:8e:cf:52:29:b1:b4:79:a2:b4:e8:
                    99:92:9e:8e:fc:bb:fd:b9:16:b2:e0:ed:2d:55:a0:
                    6a:01:9f:d3:7f:7d:7d:3a:b3:d8:ac:19:98:6f:b4:
                    66:a4:19:63:15:14:d2:e7:7c:38:86:89:be:dd:3a:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A1:12:06:27:49:4E:BE:E0:6D:CF:EE:29:C0:7C:90:6A:C5:DE:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d3e48e23-fc91-35a9-957f-e3dc92996c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:fd53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:40:8d:19:f2:3d:80:3f:55:05:d4:5c:0d:d8:1d:55:44:2c:
         4a:57:1a:bb:d8:60:13:04:c8:c1:7a:c8:ef:b2:20:12:68:4e:
         08:a8:d2:f2:bd:81:0e:d8:45:7f:e8:03:0a:c2:2e:a4:f7:ca:
         6f:32:d4:2b:05:7b:5d:ea:ec:e4:2e:11:5f:5c:b0:aa:83:a5:
         74:0d:04:00:82:a5:ef:a6:f5:9d:f1:09:b1:ea:bd:54:7b:f2:
         f6:61:25:e5:45:56:13:e9:c8:6e:22:11:d7:df:d4:21:a2:99:
         c7:f2:14:bb:6e:f6:0a:f8:a7:99:43:3d:e0:0a:90:cd:52:ea:
         45:4c:ec:3e:c9:e3:33:a4:31:8f:ed:aa:07:c1:49:3b:e4:47:
         68:92:71:79:04:b7:d9:a7:06:c7:95:57:16:f6:82:02:55:e9:
         13:af:e5:67:be:3a:2e:d8:d2:77:94:d3:0e:f9:41:8b:5f:41:
         f4:74:6b:f9:cc:ed:8c:f4:cf:50:0c:89:ce:73:44:55:6d:84:
         14:27:23:a2:3a:a2:84:7d:1c:8b:9e:50:ed:de:06:e0:e2:81:
         41:77:8d:8e:f3:a4:8c:ab:2c:52:59:8d:a8:8b:ae:99:65:9d:
         9f:7d:40:48:3e:ea:50:66:89:fb:d2:4c:95:14:7d:28:57:dd:
         90:0e:98:7b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHPptKTTkQpkOOcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ODdiZmViNDMtMTk2OS00NGFiLTk1MWMtMmFiMjE3ODkxOWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EzzHXr74RM2M7tF+N8+gS/F/NhLnrOnih1b
lWCZz3Tya4cVLimLlLyH+/wIedWB9co47HvIaG6mKvBJ+z5xywyew+esT9Sy3qcu
y04LgbZzrXXOnCOEsYK5EnUsHUfb4B+w0nX3ujpz/fB82B/X0S8kKXgl/bZ2EtFQ
UHdmseHpKi/hiv3fIDCYAEhvBle5BH3rz81CSvFP+e1M5HguVSuMwG5gRvPboP1S
33zUMi+6wYqOtJItJs9umDiZQj+lv5cVQVWvQ47PUimxtHmitOiZkp6O/Lv9uRay
4O0tVaBqAZ/Tf319OrPYrBmYb7RmpBljFRTS53w4hom+3TqE6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEGhEgYnSU6+4G3P7inAfJBqxd4ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDNlNDhlMjMtZmM5MS0z
NWE5LTk1N2YtZTNkYzkyOTk2Yzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBgAP1T
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADJAjRnyPYA/VQXUXA3YHVVELEpXGrvYYBMEyMF6yO+yIBJoTgio
0vK9gQ7YRX/oAwrCLqT3ym8y1CsFe13q7OQuEV9csKqDpXQNBACCpe+m9Z3xCbHq
vVR78vZhJeVFVhPpyG4iEdff1CGimcfyFLtu9gr4p5lDPeAKkM1S6kVM7D7J4zOk
MY/tqgfBSTvkR2iScXkEt9mnBseVVxb2ggJV6ROv5We+Oi7Y0neU0w75QYtfQfR0
a/nM7Yz0z1AMic5zRFVthBQnI6I6ooR9HIueUO3eBuDigUF3jY7zpIyrLFJZjaiL
rpllnZ99QEg+6lBmifvSTJUUfShX3ZAOmHs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:14 2025 by rpki-client