Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa
File:                     0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa (raw, json)
Hash identifier:          cUXgFMUeeHm6dgh1isO/g+j+hweF+u0WHj822pCKK0U=
Subject key identifier:   A8:84:0B:02:D1:C9:F5:67:96:68:B7:5C:90:BE:9D:62:A4:28:3C:CE
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B52A737C0E61BB1394BEAFA80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     852
IP address blocks:        2001:56b:9ff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:37:c0:e6:1b:b1:39:4b:ea:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=dd2b1c09-6079-46ee-8418-5bc6f5e0d473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:aa:69:a5:57:6c:37:50:1c:14:99:f4:f1:82:
                    1d:80:00:9d:81:cf:57:bc:71:63:83:f1:3f:eb:40:
                    60:0d:31:49:74:99:07:f8:6d:1b:da:7c:f3:ea:a0:
                    01:e8:09:14:81:35:42:ff:e2:f5:00:08:21:59:07:
                    5d:35:e4:25:8a:68:bd:c0:40:00:07:7c:4f:a5:74:
                    c6:30:f9:e9:8f:a1:02:32:4e:24:de:52:9c:85:42:
                    c6:77:be:f2:c0:17:8b:b5:50:23:58:05:6b:c3:4a:
                    a4:29:a6:ca:41:11:6a:4d:84:f9:75:42:71:8a:c6:
                    9d:c2:a1:31:fd:0a:28:d9:07:21:da:d3:2a:7d:9a:
                    b9:a3:ed:6c:29:b8:21:5f:b1:f6:60:77:78:a7:da:
                    f4:1c:c4:1f:d5:8e:c9:9c:26:e3:58:44:94:8d:f4:
                    8e:48:41:7b:c8:89:01:99:65:bd:a8:8b:ba:e4:f2:
                    73:fe:98:b3:1d:49:ab:17:73:dc:d3:eb:93:b3:54:
                    0e:b6:08:02:48:97:31:a7:7e:eb:0e:05:9f:2b:33:
                    67:fc:13:ac:5a:70:5b:de:c0:9f:f6:28:50:fb:d1:
                    d2:36:b3:2f:02:00:28:a3:85:27:aa:b9:60:2c:5a:
                    bd:33:9c:2c:6d:c4:17:21:56:f7:c9:c9:6d:7a:4b:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:84:0B:02:D1:C9:F5:67:96:68:B7:5C:90:BE:9D:62:A4:28:3C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a5:f5:d7:18:68:e9:82:b3:14:d9:18:14:51:cc:70:a5:19:
         29:cf:2f:3b:ea:b1:5e:04:d6:7b:1c:a7:93:63:ef:6e:aa:fc:
         15:80:84:2a:51:d9:b1:08:e8:49:fd:dc:8c:43:00:5c:23:3e:
         f3:af:ce:9b:93:4c:9e:8b:d7:33:b9:ae:82:c0:76:ac:63:35:
         61:d5:c0:31:25:d5:04:bb:4c:d4:30:60:5f:d5:3e:a9:af:5f:
         35:1a:b9:b4:7b:08:ba:6a:03:dd:24:b1:b0:64:d3:7b:6f:41:
         ac:8a:c3:e6:3d:84:82:21:fd:b7:43:e7:19:19:52:0b:4d:e6:
         e1:7d:39:00:0f:c8:e7:a1:12:e6:43:c1:31:e4:fa:ee:41:2e:
         ed:1b:93:0f:94:c2:45:40:96:05:d0:fe:5a:4a:8e:52:81:7c:
         4f:ed:c4:a6:73:a2:00:48:d5:4d:4a:75:da:4a:0a:05:6b:f7:
         f5:22:ce:74:1e:23:9f:a9:07:18:a0:aa:c9:9c:df:6e:67:be:
         20:eb:b4:8a:24:45:9f:35:0c:1b:b2:a9:5b:03:bd:7c:f8:43:
         4e:e0:f3:de:5d:7a:80:b2:fb:6a:3a:8b:18:0b:5d:b5:c8:9b:
         3a:a6:5f:67:cc:2a:8a:b7:9e:69:79:0b:d3:e4:39:08:ed:a4:
         3d:6b:7d:81
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzfA5huxOUvq+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
ZGQyYjFjMDktNjA3OS00NmVlLTg0MTgtNWJjNmY1ZTBkNDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgapppVdsN1AcFJn08YIdgACdgc9XvHFjg/E/
60BgDTFJdJkH+G0b2nzz6qAB6AkUgTVC/+L1AAghWQddNeQlimi9wEAAB3xPpXTG
MPnpj6ECMk4k3lKchULGd77ywBeLtVAjWAVrw0qkKabKQRFqTYT5dUJxisadwqEx
/Qoo2Qch2tMqfZq5o+1sKbghX7H2YHd4p9r0HMQf1Y7JnCbjWESUjfSOSEF7yIkB
mWW9qIu65PJz/pizHUmrF3Pc0+uTs1QOtggCSJcxp37rDgWfKzNn/BOsWnBb3sCf
9ihQ+9HSNrMvAgAoo4UnqrlgLFq9M5wsbcQXIVb3ycltekvKhQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKiECwLRyfVnlmi3XJC+nWKkKDzOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDM4NjI4OWItMWUxMS0z
ZTdlLWFkOWItYWU2NDMxOGU0OGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFa5/w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGOl9dcYaOmCsxTZGBRRzHClGSnPLzvqsV4E1nscp5Nj726q/BWA
hCpR2bEI6En93IxDAFwjPvOvzpuTTJ6L1zO5roLAdqxjNWHVwDEl1QS7TNQwYF/V
PqmvXzUaubR7CLpqA90ksbBk03tvQayKw+Y9hIIh/bdD5xkZUgtN5uF9OQAPyOeh
EuZDwTHk+u5BLu0bkw+UwkVAlgXQ/lpKjlKBfE/txKZzogBI1U1KddpKCgVr9/Ui
znQeI5+pBxigqsmc325nviDrtIokRZ81DBuyqVsDvXz4Q07g895deoCy+2o6ixgL
XbXImzqmX2fMKoq3nml5C9PkOQjtpD1rfYE=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:24 2025 by rpki-client