Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/cc3dfddb-931e-3475-adbf-d18cf2d6bd1b.roa
File:                     cc3dfddb-931e-3475-adbf-d18cf2d6bd1b.roa (raw, json)
Hash identifier:          z7cMG7sqIwB7OH0x0m8scFT4bjAM2TXlqk+pIfMMgMs=
Subject key identifier:   F1:5D:78:DA:72:A8:FB:83:24:7E:3E:2A:4A:1D:79:5A:69:52:D2:4D
Certificate issuer:       /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial:       010D0C9F4328584B95A787175DB534E485069500
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/cc3dfddb-931e-3475-adbf-d18cf2d6bd1b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     19233
IP address blocks:        2604:50:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:87:17:5d:b5:34:e4:85:06:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=a9a3024e-bb0e-4c69-b70b-76d1949fbb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:53:ec:b6:07:52:c0:30:f6:2b:03:3b:07:7a:
                    53:9b:47:d2:09:2e:32:50:62:e1:01:13:91:40:40:
                    ed:1f:8c:d4:d0:ff:8b:c0:21:42:5f:c7:05:2a:b3:
                    94:60:c9:47:8f:fa:73:ef:44:61:82:d1:63:7b:92:
                    d9:91:51:07:25:dc:14:a8:9f:57:ca:77:0c:39:a0:
                    4e:9d:8d:98:c8:5d:6c:c0:9e:a9:7a:f8:14:a1:1f:
                    93:cd:63:a1:c1:20:ef:d4:b5:bd:80:7a:1b:8a:7b:
                    9f:d3:9f:9a:a4:61:4a:e9:a3:f0:3a:b1:8e:ef:77:
                    75:fb:9c:65:41:fb:ae:5d:65:2a:dc:9f:f6:2e:a5:
                    3a:42:31:20:91:b1:38:2a:bf:76:7f:9d:d7:a0:b7:
                    5e:41:1d:0c:42:2a:03:5d:cc:93:f2:93:c0:7d:49:
                    79:8b:0b:8c:50:c4:9c:69:d4:62:b0:1e:ef:1a:9b:
                    01:1e:33:b7:ac:98:9f:28:5a:b1:20:18:12:4b:f3:
                    ac:c2:83:cd:c6:52:47:07:94:aa:07:f1:c0:78:c7:
                    2d:da:48:8e:d8:48:1e:e4:ee:eb:d9:75:ba:8b:1a:
                    c4:73:21:e5:90:c9:bb:9b:fb:c0:29:57:2e:f7:c0:
                    82:72:a6:61:87:fe:d9:73:d9:b8:6e:c2:1a:77:53:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5D:78:DA:72:A8:FB:83:24:7E:3E:2A:4A:1D:79:5A:69:52:D2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/cc3dfddb-931e-3475-adbf-d18cf2d6bd1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:50:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:73:2a:fd:9d:6d:a4:79:57:b1:83:51:42:64:a7:7f:db:
         c1:75:94:5d:99:9f:fc:4a:d8:e0:06:df:25:fe:82:7d:e7:47:
         d1:1c:2a:d5:e4:62:30:2a:87:39:f1:26:40:40:1b:29:2c:d8:
         e4:7e:8c:d1:c1:ad:71:b1:29:17:36:be:d3:f4:90:a5:64:98:
         44:5b:ee:f3:9e:df:0b:66:ac:2f:c3:6a:02:a5:c9:de:64:c4:
         ef:f3:f0:ba:c2:0a:07:98:7b:04:02:a5:3f:f7:09:7c:7c:8d:
         5e:99:52:15:30:87:c3:b7:13:ec:b1:ae:3e:1b:7d:ab:b2:70:
         14:a0:33:20:f5:a9:5a:59:f7:9e:a6:1b:d0:e1:01:18:20:84:
         7f:53:69:5c:3a:03:8a:28:03:42:fb:90:17:cd:7d:1b:a4:18:
         fe:f0:e9:38:89:f0:5f:33:84:08:fe:32:64:84:b6:30:fb:1a:
         4b:f0:a3:d5:99:96:b4:17:61:f5:17:0a:89:f7:eb:a6:11:be:
         e0:80:0c:1e:5b:cd:9d:e8:46:09:f3:ca:44:08:e9:2c:bc:8c:
         32:36:29:5e:90:03:24:08:6a:9d:86:f8:39:fa:65:8b:e5:1f:
         7a:e1:17:40:19:a6:a1:d2:3a:f5:5e:ef:14:4e:20:f3:70:7e:
         c1:c1:af:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuVp4cXXbU05IUGlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzM0MzMxYjUtYmEyNS00ZDJlLWFkM2EtY2U5ZmY2NTI0
ZTFmMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
YTlhMzAyNGUtYmIwZS00YzY5LWI3MGItNzZkMTk0OWZiYjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFPstgdSwDD2KwM7B3pTm0fSCS4yUGLhAROR
QEDtH4zU0P+LwCFCX8cFKrOUYMlHj/pz70RhgtFje5LZkVEHJdwUqJ9XyncMOaBO
nY2YyF1swJ6pevgUoR+TzWOhwSDv1LW9gHobinuf05+apGFK6aPwOrGO73d1+5xl
QfuuXWUq3J/2LqU6QjEgkbE4Kr92f53XoLdeQR0MQioDXcyT8pPAfUl5iwuMUMSc
adRisB7vGpsBHjO3rJifKFqxIBgSS/OswoPNxlJHB5SqB/HAeMct2kiO2Ege5O7r
2XW6ixrEcyHlkMm7m/vAKVcu98CCcqZhh/7Zc9m4bsIad1P+4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPFdeNpyqPuDJH4+KkodeVppUtJNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MzQz
MzFiNS1iYTI1LTRkMmUtYWQzYS1jZTlmZjY1MjRlMWYvY2MzZGZkZGItOTMxZS0z
NDc1LWFkYmYtZDE4Y2YyZDZiZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzM0MzMxYjUtYmEyNS00ZDJlLWFk
M2EtY2U5ZmY2NTI0ZTFmLzczNDMzMWI1LWJhMjUtNGQyZS1hZDNhLWNlOWZmNjUy
NGUxZi5jcmwwHwYDVR0jBBgwFoAUtDfNtpDxLVPt3hfHzpoiRJMO6vYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MzQzMzFiNS1iYTI1LTRkMmUtYWQzYS1jZTlm
ZjY1MjRlMWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQAUAAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADtBcyr9nW2keVexg1FCZKd/28F1lF2Zn/xK2OAG3yX+gn3nR9Ec
KtXkYjAqhznxJkBAGyks2OR+jNHBrXGxKRc2vtP0kKVkmERb7vOe3wtmrC/DagKl
yd5kxO/z8LrCCgeYewQCpT/3CXx8jV6ZUhUwh8O3E+yxrj4bfauycBSgMyD1qVpZ
956mG9DhARgghH9TaVw6A4ooA0L7kBfNfRukGP7w6TiJ8F8zhAj+MmSEtjD7Gkvw
o9WZlrQXYfUXCon366YRvuCADB5bzZ3oRgnzykQI6Sy8jDI2KV6QAyQIap2G+Dn6
ZYvlH3rhF0AZpqHSOvVe7xROIPNwfsHBr4c=
-----END CERTIFICATE-----
Generated at Wed Oct 22 00:41:28 2025 by rpki-client