Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c42ecd3-0454-31bb-a424-8a403375a033.roa
File:                     8c42ecd3-0454-31bb-a424-8a403375a033.roa (raw, json)
Hash identifier:          VouYegISmYar48zyg7qgKCEUZvN1sFS1XF3zeC4OMeM=
Subject key identifier:   FE:67:D7:75:F7:32:39:77:37:6E:A1:75:5A:06:16:AC:7E:5F:0D:D1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5259422098A8D8DF5D2180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c42ecd3-0454-31bb-a424-8a403375a033.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:81fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:59:42:20:98:a8:d8:df:5d:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=7b4e0440-f0fc-47c2-825b-f775672a56c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b3:e3:7c:69:ef:bb:8d:17:7a:4d:86:70:38:
                    c6:25:21:bb:26:b6:4e:a4:68:d5:ba:ae:a3:03:50:
                    da:95:14:32:0f:f9:46:92:8f:05:09:b0:07:f9:76:
                    2b:95:35:cc:46:4c:54:4e:8d:e9:2c:e4:97:ad:8d:
                    74:51:33:09:8d:9d:63:e7:ca:f4:37:67:d7:0f:f4:
                    cf:08:00:e8:99:1a:93:e1:94:a0:49:40:c8:6b:67:
                    f0:d9:49:0a:f2:1c:76:36:2d:dd:f7:13:ab:ea:ef:
                    db:a5:52:0e:83:c5:d5:20:4f:5a:09:24:92:d5:42:
                    c2:3e:be:f1:40:aa:c9:5b:52:5f:91:85:4c:b6:a8:
                    ae:ea:59:a0:53:b5:77:94:ac:e3:44:6f:22:ff:76:
                    44:dc:66:d1:bb:f8:d5:e9:f6:e2:ae:0b:f5:3d:72:
                    84:0b:3e:64:fd:20:47:4f:75:da:43:5b:de:da:63:
                    f7:54:47:07:ca:08:00:be:ca:18:1d:34:2b:7a:b6:
                    9b:59:1d:e1:37:c2:7d:b9:f8:4b:8c:e5:b3:33:bf:
                    71:26:ea:10:56:a2:7e:e7:b0:ad:33:6b:5e:55:e6:
                    87:27:43:1e:47:3f:60:3f:21:26:87:b1:55:1f:50:
                    5c:da:79:b6:3c:f4:65:84:ba:81:64:9d:5f:c7:58:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:67:D7:75:F7:32:39:77:37:6E:A1:75:5A:06:16:AC:7E:5F:0D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c42ecd3-0454-31bb-a424-8a403375a033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:18:fe:a9:ce:e1:52:c7:ff:e1:5c:a2:c9:8d:fe:71:97:0f:
         ad:2e:83:1f:88:d0:8b:84:99:71:22:9e:7b:55:a6:9a:17:34:
         b7:cb:b7:c4:48:61:56:0d:94:43:e4:d3:4e:9c:84:bb:0d:d0:
         82:d6:51:bd:33:80:c4:ac:86:f6:89:6d:de:c0:9c:16:f0:7e:
         6e:67:e4:2d:05:77:f0:c1:82:a3:3e:17:99:46:d3:c8:fa:95:
         c4:1b:c9:b9:57:8a:dd:34:e4:89:e9:83:bd:c5:88:9d:c7:d8:
         f6:c5:8a:ac:88:eb:d7:ee:89:7d:82:db:88:61:77:a6:8d:44:
         12:31:28:20:f9:43:4a:73:5e:fb:68:d3:9f:06:2b:71:f6:ff:
         37:b3:71:7b:ce:0f:6c:7d:65:1d:6f:7c:cb:32:b4:11:53:d7:
         00:e2:63:0c:43:5f:3d:19:81:2a:dc:aa:c6:c4:9c:ae:01:28:
         17:2e:14:d3:29:52:f7:d4:e5:ab:5a:47:55:a8:af:25:65:f1:
         9b:6c:b5:e2:4e:98:ed:ff:1d:bd:c6:5a:7f:b7:75:40:dd:df:
         dc:b8:45:be:9c:b6:bf:c3:d9:5c:be:db:75:25:02:b4:36:48:
         12:53:cf:cd:18:55:47:15:e0:cb:ce:a0:ab:66:d8:5e:a7:77:
         46:33:0e:a3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UllCIJio2N9dIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
N2I0ZTA0NDAtZjBmYy00N2MyLTgyNWItZjc3NTY3MmE1NmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLPjfGnvu40Xek2GcDjGJSG7JrZOpGjVuq6j
A1DalRQyD/lGko8FCbAH+XYrlTXMRkxUTo3pLOSXrY10UTMJjZ1j58r0N2fXD/TP
CADomRqT4ZSgSUDIa2fw2UkK8hx2Ni3d9xOr6u/bpVIOg8XVIE9aCSSS1ULCPr7x
QKrJW1JfkYVMtqiu6lmgU7V3lKzjRG8i/3ZE3GbRu/jV6fbirgv1PXKECz5k/SBH
T3XaQ1ve2mP3VEcHyggAvsoYHTQrerabWR3hN8J9ufhLjOWzM79xJuoQVqJ+57Ct
M2teVeaHJ0MeRz9gPyEmh7FVH1Bc2nm2PPRlhLqBZJ1fx1hGSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP5n13X3Mjl3N26hdVoGFqx+Xw3RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOGM0MmVjZDMtMDQ1NC0z
MWJiLWE0MjQtOGE0MDMzNzVhMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYH8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFAY/qnO4VLH/+FcosmN/nGXD60ugx+I0IuEmXEinntVppoXNLfL
t8RIYVYNlEPk006chLsN0ILWUb0zgMSshvaJbd7AnBbwfm5n5C0Fd/DBgqM+F5lG
08j6lcQbyblXit005Inpg73FiJ3H2PbFiqyI69fuiX2C24hhd6aNRBIxKCD5Q0pz
Xvto058GK3H2/zezcXvOD2x9ZR1vfMsytBFT1wDiYwxDXz0ZgSrcqsbEnK4BKBcu
FNMpUvfU5ataR1WoryVl8ZtsteJOmO3/Hb3GWn+3dUDd39y4Rb6ctr/D2Vy+23Ul
ArQ2SBJTz80YVUcV4MvOoKtm2F6nd0YzDqM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:14:09 2025 by rpki-client