Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa
File:                     e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa (raw, json)
Hash identifier:          jnbWk8NyhSCJb1ZgO8yIfmXzpN/0lxwwXct9GU53oe0=
Subject key identifier:   F8:36:C6:BE:5F:FC:CB:D2:C8:B1:49:FD:9C:C0:73:6F:9B:71:8A:B0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52255B3D3926CF04772480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8218::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:25:5b:3d:39:26:cf:04:77:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=3a96878e-e034-43ae-9e76-2f7237869840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:71:48:7a:84:ef:b1:75:28:2f:61:6d:6f:d5:
                    df:56:0f:66:2e:d7:d1:3c:9e:a1:a0:a4:3b:6a:9e:
                    a6:5e:9b:c0:fc:77:37:8e:e0:c9:04:2e:f7:5f:57:
                    46:f3:df:34:ba:17:dc:48:79:9a:b0:c4:89:b9:68:
                    70:c1:cf:1f:bf:3a:bf:ce:b7:d1:cc:1e:85:2c:1f:
                    ec:b5:e3:07:60:ad:b1:44:90:5f:c3:64:f4:0b:89:
                    e4:0a:9f:d2:16:fb:f9:f1:39:95:2a:b4:83:e3:0d:
                    2d:21:eb:fb:89:e1:ff:70:95:59:35:aa:e2:3a:6a:
                    d2:86:fe:90:f7:66:c9:9d:67:cd:e4:d4:6e:48:f1:
                    50:56:22:58:61:75:b2:7b:9c:b0:86:92:6b:2a:ee:
                    78:fa:1a:0c:df:6a:8f:0b:05:1d:08:c4:2d:5d:66:
                    57:80:67:fb:78:19:72:54:d5:a5:92:6a:17:ad:21:
                    92:6d:df:8e:2d:13:06:e4:51:da:4a:a7:cf:b4:97:
                    b5:33:4e:53:33:cb:dd:93:b5:e8:d3:5d:8f:17:c9:
                    a9:a2:12:17:95:95:83:0a:86:5f:32:f4:40:6b:4a:
                    95:6b:2f:11:66:d5:4a:48:35:a3:6d:d0:37:2e:49:
                    3e:d8:3f:00:37:30:0b:c5:5b:42:ca:c4:3d:d0:99:
                    18:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:36:C6:BE:5F:FC:CB:D2:C8:B1:49:FD:9C:C0:73:6F:9B:71:8A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8218::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:94:a1:fb:12:01:9a:b4:c0:7b:70:aa:c4:0d:ab:04:b1:60:
         7d:4e:1a:8c:f5:a4:fb:29:50:eb:c4:c7:cc:ca:7e:df:e3:be:
         4e:9e:c8:e7:4c:2f:a1:33:a8:9b:41:20:c3:26:02:93:f3:99:
         e9:f9:04:8c:92:78:23:f1:32:3a:eb:38:c7:82:48:10:79:67:
         16:d6:a0:c0:83:00:70:89:9c:7d:cc:20:af:06:78:11:70:11:
         ab:4f:28:ce:7e:e7:fe:ad:04:c2:da:64:c7:5c:44:5c:bb:2e:
         ae:f9:21:ea:2e:3a:fe:ac:09:dc:26:01:54:25:4e:53:85:26:
         87:29:99:d0:05:8f:f8:9b:52:21:7e:03:7a:ae:78:1b:c9:5b:
         c5:62:2d:88:a2:61:ca:ec:92:05:34:84:01:0c:cf:ef:6b:79:
         87:60:03:51:15:44:d4:27:4d:ef:88:73:2d:f2:34:71:75:94:
         fa:d5:1d:05:dd:bc:90:fb:30:a8:be:6b:f8:ad:e6:48:4d:7b:
         91:04:7d:f1:00:59:92:7f:ad:c1:47:3c:f4:3f:36:a1:18:19:
         68:dc:6f:f2:97:cc:28:02:64:f2:50:e5:45:10:37:77:2e:1a:
         ad:42:07:71:1d:20:f8:34:9c:f0:d0:e7:e6:6e:18:72:14:7b:
         d5:24:2b:8a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiVbPTkmzwR3JIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
M2E5Njg3OGUtZTAzNC00M2FlLTllNzYtMmY3MjM3ODY5ODQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3FIeoTvsXUoL2Ftb9XfVg9mLtfRPJ6hoKQ7
ap6mXpvA/Hc3juDJBC73X1dG8980uhfcSHmasMSJuWhwwc8fvzq/zrfRzB6FLB/s
teMHYK2xRJBfw2T0C4nkCp/SFvv58TmVKrSD4w0tIev7ieH/cJVZNariOmrShv6Q
92bJnWfN5NRuSPFQViJYYXWye5ywhpJrKu54+hoM32qPCwUdCMQtXWZXgGf7eBly
VNWlkmoXrSGSbd+OLRMG5FHaSqfPtJe1M05TM8vdk7Xo012PF8mpohIXlZWDCoZf
MvRAa0qVay8RZtVKSDWjbdA3Lkk+2D8ANzALxVtCysQ90JkYTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPg2xr5f/MvSyLFJ/ZzAc2+bcYqwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZTI5NzdjNjQtMzVhMS0z
M2UyLWJhZDUtM2I0YTdhZjJhOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYIY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEmUofsSAZq0wHtwqsQNqwSxYH1OGoz1pPspUOvEx8zKft/jvk6e
yOdML6EzqJtBIMMmApPzmen5BIySeCPxMjrrOMeCSBB5ZxbWoMCDAHCJnH3MIK8G
eBFwEatPKM5+5/6tBMLaZMdcRFy7Lq75IeouOv6sCdwmAVQlTlOFJocpmdAFj/ib
UiF+A3queBvJW8ViLYiiYcrskgU0hAEMz+9reYdgA1EVRNQnTe+Icy3yNHF1lPrV
HQXdvJD7MKi+a/it5khNe5EEffEAWZJ/rcFHPPQ/NqEYGWjcb/KXzCgCZPJQ5UUQ
N3cuGq1CB3EdIPg0nPDQ5+ZuGHIUe9UkK4o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:46 2025 by rpki-client