Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa
File:                     b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa (raw, json)
Hash identifier:          HLnXx76neHsiPBm/McO5BHByurl6LCBJcmpN8sGr0sM=
Subject key identifier:   0D:17:21:C3:9B:C0:CC:BE:0D:E3:47:0D:E9:46:4C:5E:E1:FC:AE:4A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5257D890EBED383A017980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8083::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:57:d8:90:eb:ed:38:3a:01:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=4cc0400e-365e-4d3d-86bc-3f4d64d7d118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:09:0d:2e:d3:d5:cf:5d:74:6c:cc:45:db:
                    8e:26:11:36:a9:bc:fd:76:6e:6c:7d:7f:95:e0:1b:
                    7a:d3:05:f9:56:cd:e6:19:c1:61:51:4e:d3:6d:60:
                    90:de:5f:16:c6:bb:4e:4a:23:93:5b:5f:0b:7d:4a:
                    a1:40:80:be:0e:b0:f1:ab:65:f9:aa:03:71:17:d6:
                    8d:2b:98:f5:23:63:40:e1:93:c6:1c:2e:b0:d9:aa:
                    10:33:d6:a8:a8:4b:9d:64:4c:30:bc:36:b0:35:b0:
                    40:79:5d:44:71:d4:47:02:37:bd:b0:4a:96:d9:fc:
                    22:e5:97:b5:8d:1d:99:6c:0a:20:b9:10:7e:61:e9:
                    a1:27:28:5e:60:ae:23:8d:74:74:c0:b5:37:10:43:
                    1d:36:18:e0:5a:88:06:14:11:0e:38:24:f5:dc:d4:
                    a6:53:7e:01:6f:7b:f3:4d:23:ff:b4:19:04:e8:bd:
                    26:33:2f:71:6a:e8:78:4f:37:f7:8a:cb:fa:6f:e5:
                    91:e5:ef:84:f6:f0:c1:40:ea:a6:83:1b:28:36:17:
                    2d:04:22:00:e0:be:e0:ab:34:4c:04:3c:2b:6d:0d:
                    7c:cd:79:8a:38:5f:0d:48:f9:62:b2:72:7d:06:23:
                    bf:fa:eb:a4:bc:b2:ac:4c:81:ca:f1:0f:95:8a:78:
                    bd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:17:21:C3:9B:C0:CC:BE:0D:E3:47:0D:E9:46:4C:5E:E1:FC:AE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8083::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a4:4c:0e:f0:26:c7:92:30:57:20:74:7e:48:06:d6:d0:f9:
         ec:5b:6f:e7:86:01:c5:55:af:1d:85:1a:7e:37:a3:1f:17:13:
         f0:75:1d:6c:66:14:0b:29:61:a0:57:2b:b8:b7:c6:59:f5:74:
         bd:3f:d7:6f:9f:6a:38:5c:cf:ee:b8:ae:ef:93:c0:41:bf:41:
         82:06:5f:f5:98:8e:c9:66:80:40:e1:34:02:ee:47:15:d8:3f:
         21:09:69:f6:14:74:ba:b4:c6:ab:7f:00:5e:e5:54:86:80:17:
         dd:ce:13:61:f9:34:aa:06:0e:34:4b:3c:7e:7d:44:58:36:8e:
         30:76:8e:f7:ee:e9:da:79:47:b8:c6:8b:02:aa:a2:ed:ae:50:
         c2:bb:f5:86:9d:02:36:3d:07:cc:e7:47:a5:8f:a9:08:b2:94:
         a4:67:8c:79:34:c9:2e:1a:7b:91:1c:d7:d1:7b:a3:0b:a2:b4:
         cb:96:2a:3b:9e:d8:87:0d:ef:88:00:e0:4c:c0:d9:2b:c2:a2:
         aa:f6:88:ec:13:57:04:48:fa:ee:03:f1:35:39:d8:83:47:81:
         8a:61:a9:ec:bb:cd:e0:df:5c:d1:a0:11:78:8e:0e:3a:82:8e:
         c3:84:00:87:41:76:a8:e8:73:1d:13:9c:32:b0:a2:30:6a:9e:
         3e:6d:c6:b7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UlfYkOvtODoBeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
NGNjMDQwMGUtMzY1ZS00ZDNkLTg2YmMtM2Y0ZDY0ZDdkMTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQkJDS7T1c9ddGzMRduOJhE2qbz9dm5sfX+V
4Bt60wX5Vs3mGcFhUU7TbWCQ3l8WxrtOSiOTW18LfUqhQIC+DrDxq2X5qgNxF9aN
K5j1I2NA4ZPGHC6w2aoQM9aoqEudZEwwvDawNbBAeV1EcdRHAje9sEqW2fwi5Ze1
jR2ZbAoguRB+YemhJyheYK4jjXR0wLU3EEMdNhjgWogGFBEOOCT13NSmU34Bb3vz
TSP/tBkE6L0mMy9xauh4Tzf3isv6b+WR5e+E9vDBQOqmgxsoNhctBCIA4L7gqzRM
BDwrbQ18zXmKOF8NSPlisnJ9BiO/+uukvLKsTIHK8Q+Vini9PwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA0XIcObwMy+DeNHDelGTF7h/K5KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjdlOGJkMjctZjFiNi0z
OThkLWJiMzMtOWIzMDg1MmU1YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYCD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG+kTA7wJseSMFcgdH5IBtbQ+exbb+eGAcVVrx2FGn43ox8XE/B1
HWxmFAspYaBXK7i3xln1dL0/12+fajhcz+64ru+TwEG/QYIGX/WYjslmgEDhNALu
RxXYPyEJafYUdLq0xqt/AF7lVIaAF93OE2H5NKoGDjRLPH59RFg2jjB2jvfu6dp5
R7jGiwKqou2uUMK79YadAjY9B8znR6WPqQiylKRnjHk0yS4ae5Ec19F7owuitMuW
Kjue2IcN74gA4EzA2SvCoqr2iOwTVwRI+u4D8TU52INHgYphqey7zeDfXNGgEXiO
DjqCjsOEAIdBdqjocx0TnDKwojBqnj5txrc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:16:04 2025 by rpki-client