Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1970620-a10f-3a27-ad09-03ade55e9519.roa
File:                     f1970620-a10f-3a27-ad09-03ade55e9519.roa (raw, json)
Hash identifier:          iHnJjOvt1Lp5d70nVXxnZOnM76dhae/IkF9uoTdQfLk=
Subject key identifier:   A4:ED:4A:49:9A:07:2A:B5:B1:C5:FB:50:04:57:ED:81:38:AA:8B:80
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B52A73833CA935D2B231D7600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1970620-a10f-3a27-ad09-03ade55e9519.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     852
IP address blocks:        2001:56a:dff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:38:33:ca:93:5d:2b:23:1d:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=fa525d55-51f3-4a60-8166-482bcfe73387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:94:74:3b:19:4c:ff:e1:93:b7:4f:a6:6b:
                    37:a3:ce:61:26:96:0d:ae:70:c7:f3:bc:e2:56:cf:
                    bb:71:ca:14:29:5b:04:5d:32:a1:33:10:db:47:81:
                    82:db:74:9c:cf:e3:99:29:db:eb:96:35:94:94:c7:
                    6f:02:79:12:5a:b9:5b:6b:a6:69:2f:38:0b:63:19:
                    4a:08:7d:8a:56:f5:ca:f7:eb:16:ea:30:57:f6:da:
                    36:02:7a:ec:2d:3f:f2:81:93:a0:81:ec:79:cd:ea:
                    23:85:7b:26:e1:3b:3b:44:47:bf:84:2c:0b:d8:6a:
                    83:c4:bd:fe:09:fd:6e:58:1d:e2:94:b5:fa:96:b4:
                    c2:b5:b6:ba:a0:4f:7b:76:9c:66:aa:9a:c7:d3:59:
                    7a:d7:0b:3f:80:0a:dc:66:8f:91:ba:a4:94:c9:79:
                    10:d2:95:5b:02:ec:23:a5:de:3c:a3:01:a7:fd:44:
                    b7:b6:82:69:a3:35:29:88:38:25:51:a9:3c:9b:42:
                    a6:76:e4:24:27:4b:c7:b5:3d:c5:e0:34:09:5f:c5:
                    65:0a:f6:31:b9:72:34:8c:1d:27:4d:80:16:24:b2:
                    17:23:8a:2b:5e:43:91:80:18:1e:6f:51:0b:a3:38:
                    60:b3:cb:c6:47:5b:bc:9f:2f:b2:80:e7:78:f3:af:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:ED:4A:49:9A:07:2A:B5:B1:C5:FB:50:04:57:ED:81:38:AA:8B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1970620-a10f-3a27-ad09-03ade55e9519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:dff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:cd:dc:3e:2a:9b:0a:31:28:0f:43:e6:fe:e5:28:ce:d6:bc:
         93:71:2e:75:21:87:33:39:9d:4e:dd:82:51:02:6c:fd:7b:5b:
         3e:72:7e:3b:9e:62:81:2e:b9:b2:50:d0:dd:fb:41:b0:77:ea:
         05:cd:4c:b3:78:a5:b0:89:a7:f6:41:6f:37:8d:b1:3f:72:29:
         60:92:83:1b:58:8a:0e:d5:cd:6a:6c:6c:74:cb:58:a2:73:39:
         51:11:b8:13:18:74:8b:a5:c3:b4:5e:f6:95:0b:39:c8:37:40:
         cb:3b:3e:d2:57:14:0f:d7:63:04:f1:42:6a:a2:7d:70:48:d8:
         ac:b1:61:3b:8a:0b:fe:47:38:e3:ff:5a:8e:7f:16:69:ac:31:
         3d:11:be:8f:73:4f:f7:d9:cd:1c:4d:ed:52:66:10:9f:cd:16:
         a1:99:f7:00:6b:5b:38:27:3c:05:72:3d:5f:84:39:9c:0f:6e:
         b1:2b:d7:70:00:b5:e9:32:a5:1c:2e:ba:2c:70:46:5b:f9:e5:
         12:72:fc:04:e3:6e:c1:58:3b:17:ac:d5:08:71:4d:1f:cd:9e:
         fa:cc:a6:67:a0:1b:ba:96:da:28:36:b8:e4:5b:9a:e1:06:73:
         67:1b:d8:cf:1b:20:44:8e:91:f4:51:8a:dd:04:66:c5:09:4f:
         f3:b9:cf:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSpzgzypNdKyMddgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
ZmE1MjVkNTUtNTFmMy00YTYwLTgxNjYtNDgyYmNmZTczMzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvCUdDsZTP/hk7dPpms3o85hJpYNrnDH87zi
Vs+7ccoUKVsEXTKhMxDbR4GC23Scz+OZKdvrljWUlMdvAnkSWrlba6ZpLzgLYxlK
CH2KVvXK9+sW6jBX9to2AnrsLT/ygZOggex5zeojhXsm4Ts7REe/hCwL2GqDxL3+
Cf1uWB3ilLX6lrTCtba6oE97dpxmqprH01l61ws/gArcZo+RuqSUyXkQ0pVbAuwj
pd48owGn/US3toJpozUpiDglUak8m0KmduQkJ0vHtT3F4DQJX8VlCvYxuXI0jB0n
TYAWJLIXI4orXkORgBgeb1ELozhgs8vGR1u8ny+ygOd4868bVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKTtSkmaByq1scX7UARX7YE4qouAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjE5NzA2MjAtYTEwZi0z
YTI3LWFkMDktMDNhZGU1NWU5NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFat/w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHvN3D4qmwoxKA9D5v7lKM7WvJNxLnUhhzM5nU7dglECbP17Wz5y
fjueYoEuubJQ0N37QbB36gXNTLN4pbCJp/ZBbzeNsT9yKWCSgxtYig7VzWpsbHTL
WKJzOVERuBMYdIulw7Re9pULOcg3QMs7PtJXFA/XYwTxQmqifXBI2KyxYTuKC/5H
OOP/Wo5/FmmsMT0Rvo9zT/fZzRxN7VJmEJ/NFqGZ9wBrWzgnPAVyPV+EOZwPbrEr
13AAtekypRwuuixwRlv55RJy/ATjbsFYOxes1QhxTR/NnvrMpmegG7qW2ig2uORb
muEGc2cb2M8bIESOkfRRit0EZsUJT/O5z84=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:13:42 2025 by rpki-client