Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b23a7056-c331-3924-bc3b-70e203f8abb2.roa
File:                     b23a7056-c331-3924-bc3b-70e203f8abb2.roa (raw, json)
Hash identifier:          Q48Wj+aOD38ta74Suv6QC/N6NtOyO1NLfQx5rOlXzEs=
Subject key identifier:   5C:7E:D5:3A:76:55:F3:C2:F2:34:2D:FC:1C:1A:E1:56:03:46:D5:36
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F522CA6400C94B529B86E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b23a7056-c331-3924-bc3b-70e203f8abb2.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:84bc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:2c:a6:40:0c:94:b5:29:b8:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=f173dd00-9094-446d-b930-94cd3f2a7b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:02:23:60:78:9b:19:c7:1e:a2:9b:c4:c8:
                    c6:a9:5d:de:33:49:bb:a0:3b:70:a8:9f:b2:0d:56:
                    e0:f8:a4:ee:a7:f2:88:da:7e:7a:90:0a:64:4a:8a:
                    09:5b:1a:87:fc:25:d1:e9:32:7f:cd:0c:e6:1d:6e:
                    b4:90:f0:60:ab:f7:b7:91:41:23:b4:95:8d:78:71:
                    8e:d6:ce:b9:b8:d7:ba:f3:29:06:32:56:e1:13:1f:
                    b1:6a:3b:9d:46:ce:93:76:12:fd:6f:de:23:0a:a3:
                    26:63:fc:f7:5c:2f:4a:e3:df:73:9b:03:7a:14:b9:
                    2e:f4:b9:79:5f:60:1e:df:f1:8d:0d:c8:66:ed:3d:
                    e4:b5:83:d0:8d:e6:54:f0:04:8a:a5:23:91:72:60:
                    b2:23:87:86:20:ac:10:ff:a7:2a:9a:b8:4c:34:1e:
                    e3:62:73:64:29:87:69:83:56:34:40:7c:18:6a:5a:
                    fa:4c:41:65:60:04:75:ef:1c:2f:7f:27:c8:0b:da:
                    27:bc:da:cc:38:33:98:6f:ea:2f:1a:5f:b3:4f:a1:
                    f1:20:fe:78:aa:6f:c6:dc:aa:18:7d:20:d3:60:12:
                    d1:c8:b5:6c:c6:5c:68:46:d4:b2:e2:d9:b5:cf:4a:
                    1e:bf:88:c3:6e:64:7c:5c:ed:86:7d:20:bd:be:f1:
                    7e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7E:D5:3A:76:55:F3:C2:F2:34:2D:FC:1C:1A:E1:56:03:46:D5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b23a7056-c331-3924-bc3b-70e203f8abb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:84bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a4:7a:ce:bf:64:ae:e2:2f:06:b3:1a:33:0f:83:ea:be:ad:
         c8:64:c5:6e:28:e2:58:31:2e:99:88:85:30:c2:66:03:c5:1f:
         e5:0a:a3:17:ad:a7:18:32:35:4f:09:c2:84:99:e2:fd:46:75:
         ee:d8:d4:0c:2c:95:43:77:89:11:90:85:de:69:06:84:ad:1e:
         00:59:19:06:3a:e5:55:5a:a9:d1:39:d8:40:a4:50:a9:87:4d:
         d2:f8:18:6a:7d:94:8b:b8:95:d4:19:e1:99:9f:cb:80:47:ea:
         08:44:51:e2:36:a4:c9:7c:d5:72:59:98:e8:18:35:7e:4a:79:
         ff:b2:64:5c:5a:1d:c1:c5:d3:01:3a:1b:0f:2c:63:f4:fa:03:
         12:4d:61:d9:23:7b:84:16:a5:fb:2b:55:a7:4e:8f:3e:ef:5a:
         62:88:84:4a:9c:d5:8d:92:8e:86:8b:4c:94:69:d3:97:19:d7:
         d7:80:31:46:7d:d7:3e:ba:72:52:8b:74:6f:60:53:05:ee:d7:
         66:eb:07:60:3b:3c:bd:55:96:6d:7e:a0:07:d5:d6:b1:8e:88:
         4c:5c:cb:ed:41:a3:ca:7f:f1:a5:a4:2e:f3:c2:cb:c4:74:fd:
         fa:bc:fb:0c:a1:b9:b8:0e:0f:8b:28:1c:59:a1:db:7f:4e:cc:
         2a:c9:47:22
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiymQAyUtSm4bgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
ZjE3M2RkMDAtOTA5NC00NDZkLWI5MzAtOTRjZDNmMmE3YjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JkCI2B4mxnHHqKbxMjGqV3eM0m7oDtwqJ+y
DVbg+KTup/KI2n56kApkSooJWxqH/CXR6TJ/zQzmHW60kPBgq/e3kUEjtJWNeHGO
1s65uNe68ykGMlbhEx+xajudRs6TdhL9b94jCqMmY/z3XC9K499zmwN6FLku9Ll5
X2Ae3/GNDchm7T3ktYPQjeZU8ASKpSORcmCyI4eGIKwQ/6cqmrhMNB7jYnNkKYdp
g1Y0QHwYalr6TEFlYAR17xwvfyfIC9onvNrMODOYb+ovGl+zT6HxIP54qm/G3KoY
fSDTYBLRyLVsxlxoRtSy4tm1z0oev4jDbmR8XO2GfSC9vvF+wwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFx+1Tp2VfPC8jQt/Bwa4VYDRtU2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjIzYTcwNTYtYzMzMS0z
OTI0LWJjM2ItNzBlMjAzZjhhYmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYS8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEekes6/ZK7iLwazGjMPg+q+rchkxW4o4lgxLpmIhTDCZgPFH+UK
oxetpxgyNU8JwoSZ4v1Gde7Y1AwslUN3iRGQhd5pBoStHgBZGQY65VVaqdE52ECk
UKmHTdL4GGp9lIu4ldQZ4Zmfy4BH6ghEUeI2pMl81XJZmOgYNX5Kef+yZFxaHcHF
0wE6Gw8sY/T6AxJNYdkje4QWpfsrVadOjz7vWmKIhEqc1Y2SjoaLTJRp05cZ19eA
MUZ91z66clKLdG9gUwXu12brB2A7PL1Vlm1+oAfV1rGOiExcy+1Bo8p/8aWkLvPC
y8R0/fq8+wyhubgOD4soHFmh239OzCrJRyI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:16:21 2025 by rpki-client