Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa
File:                     b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa (raw, json)
Hash identifier:          BZt+hrAcvgE2C5UWfurZSPqQ+HUuDInomkp4Pmm9Zj0=
Subject key identifier:   EC:C0:52:28:98:52:D0:35:EB:0E:43:76:08:97:B8:0C:45:62:3F:AE
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5141B84A133BDF956C6E4180
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7861
IP address blocks:        2001:56b:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:b8:4a:13:3b:df:95:6c:6e:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=40e9fb6d-27c6-49a4-a117-1c6750d9202c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:9f:1f:9a:36:e7:5a:a2:c3:7a:d9:87:0d:
                    55:a4:ff:36:f7:bd:b9:15:43:0e:1a:70:63:6c:f8:
                    16:d3:ff:b5:4d:e4:75:a2:a7:1d:7b:a5:a0:15:d2:
                    bd:61:c5:25:23:b1:1a:7d:bd:5c:29:ae:b3:f3:55:
                    8c:c5:43:34:84:b8:2f:e7:df:d3:3e:c4:e4:fb:56:
                    ac:33:dc:64:ef:c8:b4:f8:0f:33:b1:6b:cb:79:8f:
                    f8:52:62:37:bb:a1:81:42:72:80:c1:07:aa:85:ea:
                    be:b3:2b:c8:c3:ff:8a:f1:4b:85:5e:94:61:90:fc:
                    5a:20:60:c7:30:ff:21:0c:3f:62:30:9a:4c:d8:5f:
                    98:77:51:04:1e:dc:52:af:4d:ba:5f:bc:bd:d6:6a:
                    59:f7:ab:ce:83:bf:d9:b1:fe:78:c3:8b:b1:8c:3a:
                    6e:80:4f:97:82:0e:d6:c3:8a:eb:d6:d3:04:e5:5b:
                    45:36:16:41:14:bf:c2:3a:d1:c8:1f:97:3a:ab:68:
                    22:de:8f:ee:de:5f:e5:59:7a:93:c4:55:89:9b:6c:
                    cb:00:80:01:8d:99:77:69:e0:fa:e0:09:31:5c:0f:
                    c1:92:16:79:c8:7a:56:41:b9:b1:9c:7f:d5:16:77:
                    f4:f0:5c:85:69:36:9d:67:5b:31:08:09:4f:d7:70:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C0:52:28:98:52:D0:35:EB:0E:43:76:08:97:B8:0C:45:62:3F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f5:a6:e8:69:4a:70:44:b1:5c:43:2c:87:ef:5b:90:d3:24:54:
         03:38:8c:4e:4d:cc:ca:2a:47:97:da:d7:fd:82:ba:ed:58:54:
         be:fe:b4:65:d5:6e:50:d5:64:87:1d:d2:0b:5c:25:31:39:1c:
         e5:a0:9d:51:97:fe:69:d8:4f:24:e8:12:05:45:92:83:dc:3a:
         aa:e8:a6:27:97:0d:95:c3:8c:8f:a8:04:50:e1:cf:3e:aa:7a:
         17:09:9c:c7:9e:18:a0:49:c8:09:ef:73:d9:81:6c:eb:9a:2a:
         46:ad:5d:8a:b1:78:7b:74:9a:6f:da:01:66:d0:65:94:1f:53:
         e6:fc:92:e6:43:03:1e:0f:48:ce:e2:56:e3:d2:1d:96:44:1b:
         56:0b:e8:c2:95:e9:2c:4d:60:80:a4:3e:21:9a:a9:41:83:3d:
         ce:46:58:a0:90:e3:e5:f2:00:40:25:1e:c7:6d:74:c5:49:59:
         2c:1b:e2:49:c7:2b:94:a3:ef:6f:fd:1c:9c:7d:31:7e:d7:f3:
         21:cd:2b:62:b2:5b:fe:93:82:14:eb:cc:04:29:e2:0a:63:fe:
         54:15:51:ff:f5:c2:fa:e8:50:0d:0f:56:3f:e8:88:57:fc:fb:
         18:76:37:e4:05:a9:91:e4:54:19:4e:a0:1d:69:5b:af:23:c8:
         13:0c:e2:1d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtRQbhKEzvflWxuQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
NDBlOWZiNmQtMjdjNi00OWE0LWExMTctMWM2NzUwZDkyMDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/GfH5o251qiw3rZhw1VpP829725FUMOGnBj
bPgW0/+1TeR1oqcde6WgFdK9YcUlI7Eafb1cKa6z81WMxUM0hLgv59/TPsTk+1as
M9xk78i0+A8zsWvLeY/4UmI3u6GBQnKAwQeqheq+syvIw/+K8UuFXpRhkPxaIGDH
MP8hDD9iMJpM2F+Yd1EEHtxSr026X7y91mpZ96vOg7/Zsf54w4uxjDpugE+Xgg7W
w4rr1tME5VtFNhZBFL/COtHIH5c6q2gi3o/u3l/lWXqTxFWJm2zLAIABjZl3aeD6
4AkxXA/BkhZ5yHpWQbmxnH/VFnf08FyFaTadZ1sxCAlP13CyRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOzAUiiYUtA16w5DdgiXuAxFYj+uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYjdlMjBmMjktZDVkNS0z
MmY4LThmNWItNzcyZTg1MWQwMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFawAP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAPWm6GlKcESxXEMsh+9bkNMkVAM4jE5NzMoqR5fa1/2Cuu1YVL7+
tGXVblDVZIcd0gtcJTE5HOWgnVGX/mnYTyToEgVFkoPcOqropieXDZXDjI+oBFDh
zz6qehcJnMeeGKBJyAnvc9mBbOuaKkatXYqxeHt0mm/aAWbQZZQfU+b8kuZDAx4P
SM7iVuPSHZZEG1YL6MKV6SxNYICkPiGaqUGDPc5GWKCQ4+XyAEAlHsdtdMVJWSwb
4knHK5Sj72/9HJx9MX7X8yHNK2KyW/6TghTrzAQp4gpj/lQVUf/1wvroUA0PVj/o
iFf8+xh2N+QFqZHkVBlOoB1pW68jyBMM4h0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:13:33 2025 by rpki-client