Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f46f3290-213e-357e-85c3-762e6082fd36.roa
File:                     f46f3290-213e-357e-85c3-762e6082fd36.roa (raw, json)
Hash identifier:          XQtPqzLtdywIMiZCrrXVgx/R1cYSPXHfbna3vJhB5cA=
Subject key identifier:   0F:80:80:9C:C0:1F:63:A2:BA:57:6B:B1:DE:D7:F0:5E:15:89:FB:C9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5222F964B574BAD4A42180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f46f3290-213e-357e-85c3-762e6082fd36.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:80b9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:22:f9:64:b5:74:ba:d4:a4:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=a332ce0c-4471-4d99-952a-7c823be7d914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:0e:6a:f1:17:20:5a:dd:f4:5b:97:c7:24:
                    13:6d:ee:ad:a9:6c:b6:0d:9e:93:f3:d1:25:a4:90:
                    9d:de:f7:2f:29:7f:52:12:59:df:85:12:b7:02:d4:
                    e6:2a:21:e7:63:30:25:44:b6:92:09:6a:da:4d:61:
                    93:c8:f5:72:27:a2:5e:30:14:53:05:25:80:c8:05:
                    55:a3:e9:68:b2:f0:b2:84:cb:d5:9e:21:3a:2b:ff:
                    a1:f4:1c:a6:c6:09:5b:34:22:30:7b:2a:b3:5f:d8:
                    33:f7:d3:19:b5:7a:c0:3b:b4:f5:d4:79:b8:53:b3:
                    2f:b4:d4:1c:bb:57:83:df:f4:dd:00:de:51:ae:97:
                    21:89:08:ff:9d:07:59:77:ad:be:33:41:5d:de:ac:
                    e3:09:e6:a1:21:7f:7b:cd:ba:b6:f1:76:34:c4:19:
                    51:11:3c:d9:b2:0a:34:2b:3d:6f:23:7a:7a:41:41:
                    a1:6c:c9:75:d4:e1:4b:2b:22:71:75:01:bd:25:d5:
                    71:43:82:bc:74:8e:63:39:02:07:f1:96:9b:57:61:
                    8a:3d:4a:b7:81:ee:12:ca:28:05:01:23:83:66:5e:
                    a4:57:44:21:09:92:f8:32:b2:38:b6:f3:fa:42:0e:
                    20:2a:c8:c3:0e:8e:0e:bf:ac:47:5e:3f:51:33:86:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:80:80:9C:C0:1F:63:A2:BA:57:6B:B1:DE:D7:F0:5E:15:89:FB:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f46f3290-213e-357e-85c3-762e6082fd36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:3f:8e:65:b9:b5:04:01:89:b9:4b:04:9c:f0:b0:0a:18:
         52:3e:32:bc:d2:99:4a:b3:ed:c8:5d:6c:e6:2b:8e:69:9e:2c:
         73:5c:8e:9b:53:ee:b1:e2:de:68:c2:0f:24:a8:53:92:3f:fc:
         5e:33:11:d7:42:29:37:15:a0:a9:9a:17:9c:c7:e6:9e:6d:53:
         db:af:26:78:77:c8:db:a6:d2:c4:c8:65:81:12:cf:59:1f:8f:
         fd:0d:86:3c:db:2b:e3:79:63:2c:2a:25:cf:62:06:3f:97:89:
         15:b1:2a:48:42:eb:b3:38:ce:53:a9:ff:42:d5:d4:5d:30:31:
         5c:ed:df:eb:51:4f:94:67:47:50:6e:bd:93:5f:41:19:3d:4a:
         9d:06:40:ce:42:b0:eb:c0:77:30:43:e7:19:41:da:f6:ef:08:
         8d:b5:84:93:ad:94:65:c4:f4:31:cd:b9:62:fd:bf:a3:07:fc:
         30:6e:ba:4e:dc:af:8f:3d:64:2a:bb:8b:11:71:da:4a:c0:2a:
         99:4b:47:29:bc:b8:12:e6:bc:0a:d8:d4:5a:69:a9:8a:36:1e:
         07:08:c5:c3:44:c7:08:e2:61:26:93:01:c6:4f:ab:15:56:ea:
         96:3c:eb:c7:1b:93:e4:38:bf:63:24:c6:77:f2:ed:3b:33:2c:
         34:32:78:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiL5ZLV0utSkIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
YTMzMmNlMGMtNDQ3MS00ZDk5LTk1MmEtN2M4MjNiZTdkOTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jEOavEXIFrd9FuXxyQTbe6tqWy2DZ6T89El
pJCd3vcvKX9SElnfhRK3AtTmKiHnYzAlRLaSCWraTWGTyPVyJ6JeMBRTBSWAyAVV
o+losvCyhMvVniE6K/+h9BymxglbNCIweyqzX9gz99MZtXrAO7T11Hm4U7MvtNQc
u1eD3/TdAN5RrpchiQj/nQdZd62+M0Fd3qzjCeahIX97zbq28XY0xBlRETzZsgo0
Kz1vI3p6QUGhbMl11OFLKyJxdQG9JdVxQ4K8dI5jOQIH8ZabV2GKPUq3ge4SyigF
ASODZl6kV0QhCZL4MrI4tvP6Qg4gKsjDDo4Ov6xHXj9RM4aVgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA+AgJzAH2Oiuldrsd7X8F4VifvJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZjQ2ZjMyOTAtMjEzZS0z
NTdlLTg1YzMtNzYyZTYwODJmZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYC5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFjxP45lubUEAYm5SwSc8LAKGFI+MrzSmUqz7chdbOYrjmmeLHNc
jptT7rHi3mjCDySoU5I//F4zEddCKTcVoKmaF5zH5p5tU9uvJnh3yNum0sTIZYES
z1kfj/0NhjzbK+N5YywqJc9iBj+XiRWxKkhC67M4zlOp/0LV1F0wMVzt3+tRT5Rn
R1BuvZNfQRk9Sp0GQM5CsOvAdzBD5xlB2vbvCI21hJOtlGXE9DHNuWL9v6MH/DBu
uk7cr489ZCq7ixFx2krAKplLRym8uBLmvArY1FppqYo2HgcIxcNExwjiYSaTAcZP
qxVW6pY868cbk+Q4v2Mkxnfy7TszLDQyeGw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:15:56 2025 by rpki-client