Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04109137-abd8-3ef1-a392-829ef491a41b.roa
File:                     04109137-abd8-3ef1-a392-829ef491a41b.roa (raw, json)
Hash identifier:          q+RRD2bhOHPt7RTVRa7OXAYzGjm7RZgfdgMEnCIDTmc=
Subject key identifier:   3C:9B:E0:96:81:D1:8F:05:19:FF:AA:4B:25:95:6B:C3:0C:CD:5B:62
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B89FC7A47460D03279A060F80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04109137-abd8-3ef1-a392-829ef491a41b.roa
Signing time:             Thu 16 Oct 2025 08:42:09 +0000
ROA not before:           Thu 16 Oct 2025 08:42:09 +0000
ROA not after:            Wed 14 Jan 2026 09:42:09 +0000
asID:                     15169
IP address blocks:        2600:1902:170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:fc:7a:47:46:0d:03:27:9a:06:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 16 08:42:09 2025 GMT
            Not After : Jan 14 09:42:09 2026 GMT
        Subject: CN=b5961c62-4b8b-4e5e-a49c-7cd13e0e2f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c8:9f:53:cd:b4:5e:9d:3a:2f:64:26:8d:ee:
                    c7:fe:f1:ad:33:3f:4d:0d:6f:f9:cd:74:7c:f4:d4:
                    e5:ff:dc:78:4f:c5:10:ac:45:a6:8d:cd:92:c6:b3:
                    b8:d1:f9:0f:e3:9e:bd:8c:80:b4:3a:a2:e1:4c:e7:
                    2b:19:d8:9f:d7:6f:cd:95:70:a2:da:bd:6d:fc:5a:
                    5f:cd:d4:fc:bc:da:c8:12:eb:a5:24:b3:a2:d4:e0:
                    b9:e9:e4:50:df:c2:67:84:b3:55:0b:bf:d3:e7:e7:
                    11:dc:ba:7b:0f:f4:30:04:ad:e4:24:24:49:ee:63:
                    df:ec:00:ce:29:ad:65:7a:47:bc:4b:f4:7d:77:3f:
                    12:0d:3d:35:01:bf:91:96:af:d6:eb:3b:52:16:25:
                    ef:12:97:7c:92:14:cb:a8:40:a6:18:88:f4:39:02:
                    84:e3:b5:e0:0b:48:24:4c:01:4e:69:fb:2c:6b:f1:
                    c5:33:87:f6:d1:88:17:dc:1d:0e:50:fb:fc:4a:fb:
                    22:1e:f4:39:a3:2a:eb:14:d1:d8:f9:ec:c8:8b:d6:
                    4f:a2:6e:c2:5a:fb:dc:03:87:67:a5:69:26:fc:43:
                    a3:74:b5:c8:7b:74:04:e1:ee:14:5e:c7:d8:77:72:
                    9a:1b:f6:6f:de:f9:bb:82:9a:3a:78:18:c0:c8:c2:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9B:E0:96:81:D1:8F:05:19:FF:AA:4B:25:95:6B:C3:0C:CD:5B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04109137-abd8-3ef1-a392-829ef491a41b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:45:c3:78:d7:7e:8b:15:ab:bc:b1:e9:9a:f4:06:0d:96:dc:
         fa:5a:7a:46:47:c2:6a:c9:0a:96:cc:4c:f1:b2:a2:d4:69:ca:
         d4:66:9f:dd:0b:24:74:8f:a1:76:8c:2c:92:7a:b5:c5:46:37:
         ec:1d:ce:48:ea:8f:82:61:e7:e5:77:3e:fb:63:0c:98:79:57:
         8c:dc:5d:f2:34:bd:7b:36:6b:6e:e8:c9:98:ea:d8:59:6c:2d:
         b0:e0:cf:94:a1:15:48:77:0c:5c:cb:67:49:76:3e:21:e5:5e:
         d6:41:27:e1:75:9c:44:66:51:9b:0c:13:1f:15:3c:43:fe:33:
         66:27:94:e4:61:32:f5:0d:fa:e3:7d:e0:60:56:a5:c3:f4:a7:
         c0:04:ec:fa:2b:f8:c8:a4:99:7c:69:8b:72:bd:f1:2e:03:0f:
         2d:99:f5:fe:64:9d:46:f6:5e:84:ee:f5:b3:1c:26:a6:a6:a7:
         03:d3:33:35:99:b4:04:96:56:31:83:dc:a3:45:79:f5:6e:7c:
         b4:71:73:49:3c:17:da:47:f0:99:dd:f5:67:b5:28:f1:b3:41:
         1c:de:fe:93:5a:9e:d8:f4:ec:5b:2f:44:0a:a9:e5:48:35:9e:
         75:5d:bb:3f:e7:56:0e:08:ea:3a:57:81:c3:9e:c4:1e:a1:e9:
         bf:3d:a5:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuJ/HpHRg0DJ5oGD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAxNjA4NDIwOVoXDTI2MDExNDA5NDIwOVowLzEtMCsGA1UEAxMk
YjU5NjFjNjItNGI4Yi00ZTVlLWE0OWMtN2NkMTNlMGUyZjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicifU820Xp06L2Qmje7H/vGtMz9NDW/5zXR8
9NTl/9x4T8UQrEWmjc2SxrO40fkP4569jIC0OqLhTOcrGdif12/NlXCi2r1t/Fpf
zdT8vNrIEuulJLOi1OC56eRQ38JnhLNVC7/T5+cR3Lp7D/QwBK3kJCRJ7mPf7ADO
Ka1leke8S/R9dz8SDT01Ab+Rlq/W6ztSFiXvEpd8khTLqECmGIj0OQKE47XgC0gk
TAFOafssa/HFM4f20YgX3B0OUPv8SvsiHvQ5oyrrFNHY+ezIi9ZPom7CWvvcA4dn
pWkm/EOjdLXIe3QE4e4UXsfYd3KaG/Zv3vm7gpo6eBjAyMK4rwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDyb4JaB0Y8FGf+qSyWVa8MMzVtiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDQxMDkxMzctYWJkOC0z
ZWYxLWEzOTItODI5ZWY0OTFhNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgFw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKVFw3jXfosVq7yx6Zr0Bg2W3PpaekZHwmrJCpbMTPGyotRpytRm
n90LJHSPoXaMLJJ6tcVGN+wdzkjqj4Jh5+V3PvtjDJh5V4zcXfI0vXs2a27oyZjq
2FlsLbDgz5ShFUh3DFzLZ0l2PiHlXtZBJ+F1nERmUZsMEx8VPEP+M2YnlORhMvUN
+uN94GBWpcP0p8AE7Por+MikmXxpi3K98S4DDy2Z9f5knUb2XoTu9bMcJqampwPT
MzWZtASWVjGD3KNFefVufLRxc0k8F9pH8Jnd9We1KPGzQRze/pNantj07FsvRAqp
5Ug1nnVduz/nVg4I6jpXgcOexB6h6b89pZQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:41 2025 by rpki-client