Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1c3866cd-264e-3add-bc34-f053e76d5e30.roa
File:                     1c3866cd-264e-3add-bc34-f053e76d5e30.roa (raw, json)
Hash identifier:          93us/UkLKYPiXQ3ENV1a/iP2Ru/eoMUhbd7h8lTGP7E=
Subject key identifier:   7B:48:F5:70:1B:33:26:1D:C8:A5:85:87:9D:49:11:99:96:3E:65:B7
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B52A73B055A8CFF86AD026C80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1c3866cd-264e-3add-bc34-f053e76d5e30.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     852
IP address blocks:        2001:56b:9fe0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:3b:05:5a:8c:ff:86:ad:02:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=ee1c6c2e-7294-4bed-8d40-05ba2564d68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a8:ab:6f:24:8e:2a:32:18:e9:d5:e5:a9:2f:
                    65:1e:6a:19:76:96:ce:f6:ad:93:ce:ab:61:d0:43:
                    f5:a7:ab:79:ff:22:85:56:e0:2d:25:c0:a1:b7:65:
                    e6:f1:80:d6:a6:32:5d:6c:62:91:54:5c:29:8f:29:
                    68:45:ea:a9:a3:c4:3e:6c:bc:79:8a:03:65:86:ed:
                    16:2e:e9:94:9d:20:f9:ba:ea:cd:59:d5:4a:03:07:
                    9f:7f:7b:7d:fc:7b:f9:a0:f7:2b:c2:20:c6:40:2a:
                    22:c9:a0:bc:6a:74:de:dc:e7:22:a1:3c:12:64:03:
                    6c:bc:1b:9d:66:66:2a:2e:47:f6:72:aa:94:a7:de:
                    02:5d:97:e8:8a:53:9e:4e:e1:b4:36:21:8a:5c:30:
                    3e:22:0a:42:dd:e3:a3:39:93:ef:d5:1d:0b:35:26:
                    49:ab:b7:d4:96:b4:cf:3a:f5:f1:97:35:a6:bf:ed:
                    3c:72:0d:42:7d:83:5d:d0:14:0d:4d:90:3b:1f:99:
                    d7:ec:ab:af:95:a0:8d:0f:9e:70:34:46:4b:1f:24:
                    ca:0e:09:d9:1b:50:f1:63:4f:9b:e5:35:d2:fe:ef:
                    65:00:99:b0:5d:30:19:ce:0c:da:da:65:61:e9:8b:
                    4f:ac:79:d7:c9:3e:74:64:40:51:ec:5a:da:c2:fc:
                    97:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:48:F5:70:1B:33:26:1D:C8:A5:85:87:9D:49:11:99:96:3E:65:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1c3866cd-264e-3add-bc34-f053e76d5e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9fe0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:a2:b7:41:4a:2f:0d:19:40:6a:6a:dc:88:ef:8a:6d:1b:06:
         58:55:b7:61:90:4d:8f:af:23:f7:d5:d8:39:47:a0:3e:ad:61:
         72:3c:1d:0f:1f:ba:c7:10:75:4d:6a:01:4a:44:9b:8a:af:f2:
         91:ef:da:f2:4d:5c:54:87:cc:fd:33:56:5f:67:a3:94:cf:e7:
         e3:74:81:41:ea:17:52:99:ef:2b:b5:7e:32:6e:76:2c:f2:73:
         aa:ec:5e:4b:66:ca:86:8b:e7:5e:f8:d7:84:fa:bc:67:83:e3:
         b6:ca:fc:45:ad:ea:56:ad:62:08:39:04:74:d3:f9:a5:06:a6:
         30:d1:d0:db:9d:64:c9:c7:07:42:d0:23:bc:d6:85:1b:80:b0:
         f3:67:d1:f9:89:52:94:c0:9e:a5:d6:9c:9c:bb:17:a2:37:3f:
         bb:2a:bc:af:dc:5e:5a:1d:60:16:48:27:a4:7d:6e:ad:11:ea:
         d5:44:03:33:d7:61:d2:d7:30:e1:fe:3a:06:78:57:fd:39:63:
         e5:7e:60:4b:f2:5c:99:74:0d:0f:8d:d8:28:a5:d8:8f:5b:06:
         67:51:40:9e:f2:f4:9e:aa:93:56:bc:24:ba:dd:ad:03:f8:49:
         91:ed:95:34:ca:48:27:e7:fd:6d:5d:7b:99:10:3e:c7:f6:0a:
         a1:ce:91:4b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzsFWoz/hq0CbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
ZWUxYzZjMmUtNzI5NC00YmVkLThkNDAtMDViYTI1NjRkNjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqirbySOKjIY6dXlqS9lHmoZdpbO9q2Tzqth
0EP1p6t5/yKFVuAtJcCht2Xm8YDWpjJdbGKRVFwpjyloReqpo8Q+bLx5igNlhu0W
LumUnSD5uurNWdVKAweff3t9/Hv5oPcrwiDGQCoiyaC8anTe3OcioTwSZANsvBud
ZmYqLkf2cqqUp94CXZfoilOeTuG0NiGKXDA+IgpC3eOjOZPv1R0LNSZJq7fUlrTP
OvXxlzWmv+08cg1CfYNd0BQNTZA7H5nX7KuvlaCND55wNEZLHyTKDgnZG1DxY0+b
5TXS/u9lAJmwXTAZzgza2mVh6YtPrHnXyT50ZEBR7FrawvyXoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHtI9XAbMyYdyKWFh51JEZmWPmW3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMWMzODY2Y2QtMjY0ZS0z
YWRkLWJjMzQtZjA1M2U3NmQ1ZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFa5/g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL+it0FKLw0ZQGpq3Ijvim0bBlhVt2GQTY+vI/fV2DlHoD6tYXI8
HQ8fuscQdU1qAUpEm4qv8pHv2vJNXFSHzP0zVl9no5TP5+N0gUHqF1KZ7yu1fjJu
dizyc6rsXktmyoaL517414T6vGeD47bK/EWt6latYgg5BHTT+aUGpjDR0NudZMnH
B0LQI7zWhRuAsPNn0fmJUpTAnqXWnJy7F6I3P7sqvK/cXlodYBZIJ6R9bq0R6tVE
AzPXYdLXMOH+OgZ4V/05Y+V+YEvyXJl0DQ+N2Cil2I9bBmdRQJ7y9J6qk1a8JLrd
rQP4SZHtlTTKSCfn/W1de5kQPsf2CqHOkUs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:06 2025 by rpki-client