Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ccba0499-14d0-36d4-83eb-70bfed7dc543.roa
File:                     ccba0499-14d0-36d4-83eb-70bfed7dc543.roa (raw, json)
Hash identifier:          OteHmHOFrwAf5d65bjwwE4KzAluxDfxNnZeTvCpDZUo=
Subject key identifier:   C1:83:2A:E9:74:C6:D2:EA:76:50:59:19:19:C0:15:D2:E9:00:0A:4A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F522A2575CB9F4CED6CDEC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ccba0499-14d0-36d4-83eb-70bfed7dc543.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:2a:25:75:cb:9f:4c:ed:6c:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=197ca1bb-ce76-4456-85ba-50966bc820b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:88:9a:df:40:7d:be:38:81:d8:4f:f0:9e:e6:
                    78:cc:31:c7:ea:0a:dd:41:d7:6a:7e:3c:03:c0:8c:
                    08:5d:37:c4:ae:be:0f:c2:07:af:d5:cc:bd:dc:0f:
                    5c:be:90:21:96:ff:40:73:c2:9f:4f:23:3e:09:43:
                    1d:98:1b:d2:39:92:4e:02:f7:bc:1a:0a:77:d7:dc:
                    da:b8:84:69:16:9b:ef:89:25:05:60:ac:1e:39:ec:
                    0b:a6:ba:8f:cf:f5:7f:5d:4b:2e:4f:f9:3a:ee:7d:
                    1f:39:e8:35:41:77:07:da:a5:58:87:ab:2d:ea:54:
                    3d:99:40:da:81:00:1c:d5:fb:f1:8c:14:4c:bf:1a:
                    5f:d7:f0:ac:a9:e2:79:e3:25:32:e1:8d:93:c2:52:
                    e3:6b:c3:24:b5:c9:0d:cc:49:c9:60:f6:7a:5e:51:
                    9d:76:d0:fc:73:49:e4:ec:17:41:57:73:7e:c0:e8:
                    df:58:80:2c:00:d3:96:eb:13:91:c6:68:3f:92:a9:
                    15:4f:9c:98:96:6c:a1:49:62:9a:f4:84:ae:eb:b4:
                    b2:9e:a4:d2:13:7c:5e:83:80:9c:19:7e:e4:01:55:
                    ce:ca:02:6a:6d:1c:07:2a:f7:16:14:a5:d2:ce:8c:
                    69:0a:b3:c7:19:0e:cb:c2:9f:04:3b:08:ea:6f:3d:
                    f5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:83:2A:E9:74:C6:D2:EA:76:50:59:19:19:C0:15:D2:E9:00:0A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ccba0499-14d0-36d4-83eb-70bfed7dc543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:69:06:b4:d0:6c:84:7f:dc:6f:13:ae:26:91:59:4b:b7:
         60:72:6c:74:93:87:e7:6f:c6:ab:1e:8c:a7:7a:ce:62:06:b1:
         06:d0:cb:e9:6b:fa:b2:b5:fa:98:7d:40:dd:61:64:15:f7:a0:
         0a:d5:8a:e1:24:fb:0f:48:41:92:62:ba:ae:75:e8:3c:8e:80:
         51:55:00:8c:88:a2:81:03:25:0f:53:27:3f:10:5b:31:18:c3:
         2b:df:e6:81:f3:9e:cf:4d:69:f3:36:9f:0f:7f:14:d7:ba:68:
         86:8d:24:26:14:89:32:f9:49:8a:a3:51:0a:ad:37:d8:7f:57:
         45:64:d3:85:89:6a:af:c3:36:03:a5:e2:20:0d:4f:ce:0e:86:
         63:d4:a2:58:81:f3:10:9f:36:2b:3c:c6:51:d8:d2:da:9c:50:
         9a:1f:c1:82:81:f4:f1:c5:87:d2:66:e4:10:03:87:72:79:2d:
         ec:3c:21:a2:d2:60:60:bf:28:de:74:a3:95:c4:c7:51:40:34:
         0a:3d:1e:ba:c9:89:11:a2:d1:3b:35:e5:ea:92:4f:74:c9:da:
         07:ad:91:57:36:ff:48:b9:5f:6d:8b:c1:bb:16:92:25:44:84:
         e4:d6:f3:16:f4:06:f7:f1:ab:b4:6a:fd:04:bf:1f:51:a0:56:
         98:23:7d:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UioldcufTO1s3sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
MTk3Y2ExYmItY2U3Ni00NDU2LTg1YmEtNTA5NjZiYzgyMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIia30B9vjiB2E/wnuZ4zDHH6grdQddqfjwD
wIwIXTfErr4Pwgev1cy93A9cvpAhlv9Ac8KfTyM+CUMdmBvSOZJOAve8Ggp319za
uIRpFpvviSUFYKweOewLprqPz/V/XUsuT/k67n0fOeg1QXcH2qVYh6st6lQ9mUDa
gQAc1fvxjBRMvxpf1/CsqeJ54yUy4Y2TwlLja8MktckNzEnJYPZ6XlGddtD8c0nk
7BdBV3N+wOjfWIAsANOW6xORxmg/kqkVT5yYlmyhSWKa9ISu67SynqTSE3xeg4Cc
GX7kAVXOygJqbRwHKvcWFKXSzoxpCrPHGQ7Lwp8EOwjqbz317QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMGDKul0xtLqdlBZGRnAFdLpAApKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvY2NiYTA0OTktMTRkMC0z
NmQ0LTgzZWItNzBiZmVkN2RjNTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAqlaQa00GyEf9xvE64mkVlLt2BybHSTh+dvxqsejKd6zmIGsQbQ
y+lr+rK1+ph9QN1hZBX3oArViuEk+w9IQZJiuq516DyOgFFVAIyIooEDJQ9TJz8Q
WzEYwyvf5oHzns9NafM2nw9/FNe6aIaNJCYUiTL5SYqjUQqtN9h/V0Vk04WJaq/D
NgOl4iANT84OhmPUoliB8xCfNis8xlHY0tqcUJofwYKB9PHFh9Jm5BADh3J5Lew8
IaLSYGC/KN50o5XEx1FANAo9HrrJiRGi0Ts15eqST3TJ2getkVc2/0i5X22LwbsW
kiVEhOTW8xb0Bvfxq7Rq/QS/H1GgVpgjfQQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:57 2025 by rpki-client