Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6b69ee8c-db0b-3c88-bafb-62da4d05381a.roa
File:                     6b69ee8c-db0b-3c88-bafb-62da4d05381a.roa (raw, json)
Hash identifier:          /mdgpZ3EtzarKcE8eCMZ5Trhl4C1H/bxixZ1AMHa4+s=
Subject key identifier:   4C:58:8A:85:37:11:FE:63:C6:97:D7:B3:51:FD:56:2B:70:FE:9D:B6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F525328DE002649CD433C78
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6b69ee8c-db0b-3c88-bafb-62da4d05381a.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:811d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:53:28:de:00:26:49:cd:43:3c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=c69098ad-30e9-494c-afeb-0d23d2d88500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:6a:b0:91:ec:2f:56:ff:f6:79:e0:08:29:
                    33:ec:f2:1d:88:e1:0f:20:3f:8c:39:aa:73:cb:0d:
                    b3:84:04:2b:e4:61:9a:99:71:9e:21:09:ce:9a:35:
                    61:2f:8e:26:3a:af:9c:39:9a:4a:a7:22:97:99:1e:
                    36:8f:7f:a2:b1:fa:be:14:23:db:3e:32:d3:56:c8:
                    36:a7:c4:d1:49:00:77:ba:05:ea:a6:40:88:2c:5d:
                    bf:c8:e0:76:c0:64:2e:fe:35:d9:bc:6b:aa:c6:28:
                    2d:da:d4:59:8a:7d:6c:87:bd:5c:5b:93:59:62:99:
                    f3:df:95:55:29:bf:ca:33:ab:08:8b:e2:d9:34:18:
                    28:25:54:bb:64:81:4d:aa:75:62:69:7f:9f:44:c0:
                    b1:d8:d0:d9:b4:35:ca:84:af:47:37:d2:ba:09:25:
                    fe:9b:2d:dd:40:3c:8f:23:16:e4:d1:6e:9d:35:e5:
                    33:ca:3a:1a:ac:e2:59:6e:ca:b9:ea:d3:6c:77:f0:
                    87:88:d3:03:d0:41:2b:5c:53:7d:37:af:64:b2:2b:
                    ef:d4:87:5b:a9:8b:9b:5a:e1:38:65:ca:6f:86:4f:
                    cd:bd:30:22:c3:90:02:60:97:4c:78:a8:29:04:c4:
                    50:d1:39:7e:8d:f8:25:4b:ea:ce:d4:ce:1e:18:ab:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:58:8A:85:37:11:FE:63:C6:97:D7:B3:51:FD:56:2B:70:FE:9D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6b69ee8c-db0b-3c88-bafb-62da4d05381a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:811d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:40:e6:a3:f4:ae:ce:a9:fa:82:01:4b:c0:84:0c:c8:b2:33:
         ca:e0:70:dc:f8:15:99:4f:54:a8:1f:51:6c:ad:a6:59:6e:14:
         ad:3b:b1:36:d6:f3:bc:3b:13:14:71:be:b3:02:a0:79:ab:13:
         51:13:9e:42:55:fd:3c:c3:fc:88:58:eb:f7:5e:4c:98:b6:73:
         89:33:6c:65:e1:af:3d:1d:d5:41:7e:76:ab:2f:92:9e:81:d3:
         77:b4:50:4e:12:c8:10:cd:6c:e8:98:65:85:78:8a:be:fb:61:
         40:e0:fa:a1:50:d6:ba:96:1a:8e:29:38:ac:f7:6f:7f:3e:63:
         d4:52:8f:0e:17:ce:56:66:6f:4d:80:31:14:d2:0a:ae:8d:e7:
         cb:a6:95:8b:6e:17:7a:4f:2b:e0:6c:07:de:4b:79:46:81:f4:
         fe:07:a8:df:f1:8e:3f:79:dc:a2:d1:ae:e0:5f:c6:2a:6e:28:
         70:ec:74:0f:2c:c3:3f:9b:a4:7b:bf:4e:9a:56:89:1d:d7:99:
         bb:92:a6:c9:49:c5:62:2c:0d:a4:e5:46:8d:b7:30:7e:0b:aa:
         de:70:50:7b:db:12:44:df:56:cf:d7:72:86:51:cc:8e:31:cf:
         bd:db:bd:d7:f9:de:46:f7:e3:db:dc:88:c7:eb:f0:ed:ed:bc:
         57:59:68:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UlMo3gAmSc1DPHgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
YzY5MDk4YWQtMzBlOS00OTRjLWFmZWItMGQyM2QyZDg4NTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj29qsJHsL1b/9nngCCkz7PIdiOEPID+MOapz
yw2zhAQr5GGamXGeIQnOmjVhL44mOq+cOZpKpyKXmR42j3+isfq+FCPbPjLTVsg2
p8TRSQB3ugXqpkCILF2/yOB2wGQu/jXZvGuqxigt2tRZin1sh71cW5NZYpnz35VV
Kb/KM6sIi+LZNBgoJVS7ZIFNqnViaX+fRMCx2NDZtDXKhK9HN9K6CSX+my3dQDyP
Ixbk0W6dNeUzyjoarOJZbsq56tNsd/CHiNMD0EErXFN9N69ksivv1IdbqYubWuE4
Zcpvhk/NvTAiw5ACYJdMeKgpBMRQ0Tl+jfglS+rO1M4eGKuzPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFExYioU3Ef5jxpfXs1H9Vitw/p22MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNmI2OWVlOGMtZGIwYi0z
Yzg4LWJhZmItNjJkYTRkMDUzODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIBA5qP0rs6p+oIBS8CEDMiyM8rgcNz4FZlPVKgfUWytplluFK07
sTbW87w7ExRxvrMCoHmrE1ETnkJV/TzD/IhY6/deTJi2c4kzbGXhrz0d1UF+dqsv
kp6B03e0UE4SyBDNbOiYZYV4ir77YUDg+qFQ1rqWGo4pOKz3b38+Y9RSjw4XzlZm
b02AMRTSCq6N58umlYtuF3pPK+BsB95LeUaB9P4HqN/xjj953KLRruBfxipuKHDs
dA8swz+bpHu/TppWiR3XmbuSpslJxWIsDaTlRo23MH4Lqt5wUHvbEkTfVs/XcoZR
zI4xz73bvdf53kb349vciMfr8O3tvFdZaJM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:30 2025 by rpki-client