Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bac4515f-d3d1-3e27-8339-d055e249c5d6.roa
File:                     bac4515f-d3d1-3e27-8339-d055e249c5d6.roa (raw, json)
Hash identifier:          MGoeg9bYgOO4nVH4ghJnXeoQRAJLqX+ws1jjbXHTmzU=
Subject key identifier:   4F:E2:89:0F:E1:4D:1C:90:F6:66:05:C7:A4:88:64:8F:2A:DA:7F:3D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F525AAEF69BB3648DDAE700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bac4515f-d3d1-3e27-8339-d055e249c5d6.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8b6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:5a:ae:f6:9b:b3:64:8d:da:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=6ab884e9-1ca4-48f4-a6fb-d99f1a2e41ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:1e:4a:f3:35:2c:e8:9c:06:ec:ce:ef:e6:
                    78:96:24:8b:46:18:75:d0:d4:bf:14:5a:16:27:d9:
                    59:5c:0e:c5:de:46:39:a3:a3:9a:e7:d9:a4:98:0a:
                    2b:41:44:c3:cb:1d:63:55:ad:e4:10:fd:b5:e2:a2:
                    f0:97:d1:52:ea:67:38:3c:ae:8d:76:ad:e9:04:e7:
                    1d:8f:19:6e:1c:31:f1:42:7d:ea:93:03:0a:0f:85:
                    70:e3:5b:43:c8:fe:11:f1:db:9c:f3:95:53:40:ad:
                    c5:c5:6b:59:6b:97:08:9e:48:79:1d:09:8b:35:8f:
                    13:69:0c:8a:ce:c1:b2:a0:3b:ca:61:25:e6:42:df:
                    f1:2a:0b:d6:d1:d4:83:f3:b3:9c:69:c5:7c:99:2d:
                    ad:61:df:43:61:73:e9:74:fc:63:ff:8b:cb:09:ab:
                    8a:6c:d0:0c:dd:14:f4:4f:0d:9e:74:b5:8f:5d:15:
                    02:95:99:76:07:76:f1:96:a5:94:47:5d:ca:df:22:
                    03:ee:d4:a2:48:d5:03:f1:ad:1a:35:b3:39:d3:73:
                    df:46:d7:44:93:30:1e:d9:7c:ee:61:ef:0a:a2:19:
                    a3:df:52:e3:40:8c:0c:d8:29:f0:55:f1:d4:3c:82:
                    d1:44:fd:d8:88:3a:7a:0f:0d:43:44:08:6a:b3:72:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E2:89:0F:E1:4D:1C:90:F6:66:05:C7:A4:88:64:8F:2A:DA:7F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bac4515f-d3d1-3e27-8339-d055e249c5d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8b6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c2:23:e1:5c:a5:d5:b2:7f:9e:e2:59:44:54:05:f9:bb:d4:
         4e:f8:35:71:18:a4:ba:74:a3:e9:4e:bc:ed:e5:ad:1f:ea:b6:
         9e:7e:e1:f6:3a:b2:b2:91:67:55:88:fc:13:3c:85:94:9c:df:
         0c:14:a5:4c:39:3a:b0:55:c7:54:8c:ee:9c:76:6b:47:86:e5:
         01:3e:a7:00:13:78:20:67:e0:12:e1:f4:19:f5:f3:30:84:e3:
         72:cb:5e:83:6c:c9:46:dc:2d:34:82:46:46:9a:5a:ce:4a:af:
         01:3b:7c:75:f8:c0:78:2b:ac:68:fb:75:f2:d2:25:98:f3:5b:
         2e:07:bb:fc:ab:0f:69:c7:52:6a:b8:e7:c6:82:97:13:0d:bf:
         61:93:ad:91:45:a1:18:a2:49:70:34:2e:1b:cd:cf:00:04:f3:
         ed:4d:de:4e:9b:bd:60:a1:14:39:b5:4c:f6:ee:9a:21:a2:45:
         ea:8a:b9:68:d0:40:d0:7c:81:2b:a2:53:f4:65:c4:2a:d1:70:
         35:34:4d:3a:3c:d1:fc:d3:f5:d0:c7:94:61:01:d7:42:a6:47:
         4b:e7:b3:fb:f3:78:19:82:bb:ae:20:b3:ef:7b:53:ff:7b:f6:
         2d:f8:f0:d0:2a:2d:41:ee:af:fe:ca:32:e1:bb:ba:ff:ed:a7:
         a7:c1:83:07
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Ulqu9puzZI3a5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
NmFiODg0ZTktMWNhNC00OGY0LWE2ZmItZDk5ZjFhMmU0MWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VUeSvM1LOicBuzO7+Z4liSLRhh10NS/FFoW
J9lZXA7F3kY5o6Oa59mkmAorQUTDyx1jVa3kEP214qLwl9FS6mc4PK6Ndq3pBOcd
jxluHDHxQn3qkwMKD4Vw41tDyP4R8duc85VTQK3FxWtZa5cInkh5HQmLNY8TaQyK
zsGyoDvKYSXmQt/xKgvW0dSD87OcacV8mS2tYd9DYXPpdPxj/4vLCauKbNAM3RT0
Tw2edLWPXRUClZl2B3bxlqWUR13K3yID7tSiSNUD8a0aNbM503PfRtdEkzAe2Xzu
Ye8Kohmj31LjQIwM2CnwVfHUPILRRP3YiDp6Dw1DRAhqs3J5MQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE/iiQ/hTRyQ9mYFx6SIZI8q2n89MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYmFjNDUxNWYtZDNkMS0z
ZTI3LTgzMzktZDA1NWUyNDljNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYtq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAHCI+FcpdWyf57iWURUBfm71E74NXEYpLp0o+lOvO3lrR/qtp5+
4fY6srKRZ1WI/BM8hZSc3wwUpUw5OrBVx1SM7px2a0eG5QE+pwATeCBn4BLh9Bn1
8zCE43LLXoNsyUbcLTSCRkaaWs5KrwE7fHX4wHgrrGj7dfLSJZjzWy4Hu/yrD2nH
Umq458aClxMNv2GTrZFFoRiiSXA0LhvNzwAE8+1N3k6bvWChFDm1TPbumiGiReqK
uWjQQNB8gSuiU/RlxCrRcDU0TTo80fzT9dDHlGEB10KmR0vns/vzeBmCu64gs+97
U/979i348NAqLUHur/7KMuG7uv/tp6fBgwc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:13 2025 by rpki-client