Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c1c4f9ae-4c3d-3c34-a5b3-f508fdc4ede4.roa
File:                     c1c4f9ae-4c3d-3c34-a5b3-f508fdc4ede4.roa (raw, json)
Hash identifier:          2AytjI22ORzGmAIVFHqLultDr+6AuVRCQHAc/GniD1I=
Subject key identifier:   F7:12:32:B9:82:68:11:27:4B:60:10:2C:B0:BB:F3:20:C6:78:D6:2F
Certificate issuer:       /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial:       010D0C9F4328584B6A6203F5642211EFEE903A80
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c1c4f9ae-4c3d-3c34-a5b3-f508fdc4ede4.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     198304
IP address blocks:        2602:f92a:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:03:f5:64:22:11:ef:ee:90:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=517ed008-2c7f-42b6-9403-09970123f40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:6f:8d:c9:a0:8d:0f:96:d5:13:0d:a5:6b:
                    8d:65:c5:85:79:14:eb:cb:c3:d2:1c:79:a4:0e:f6:
                    4f:87:70:70:dd:fd:3d:a7:ad:a0:88:63:ee:fd:9c:
                    b4:61:39:35:54:ad:8f:a1:09:ac:fb:cf:7d:c6:d9:
                    d9:11:f6:16:b2:74:08:09:f3:d3:52:56:fe:dd:1e:
                    36:9f:5b:fb:67:28:ac:92:99:3f:7d:60:81:aa:05:
                    c6:f6:11:47:d1:52:e3:40:c5:cb:2c:67:31:e4:9f:
                    b9:30:32:5c:2c:b3:e8:1a:2e:0f:33:5a:cd:d6:d4:
                    48:10:01:ce:9c:bb:ac:e2:0d:67:0c:64:32:3e:98:
                    ce:2e:68:4e:d2:e7:26:e8:d0:c2:28:93:98:2d:01:
                    5c:55:a8:69:47:54:33:cd:9f:68:16:c8:12:b1:79:
                    39:0c:88:78:be:84:3c:a5:e6:71:96:f8:01:48:a2:
                    71:c9:be:e6:b4:15:7f:19:7d:8e:7e:3f:68:e3:02:
                    b5:54:a1:a0:1d:39:73:76:6a:f2:fc:1d:c9:b5:78:
                    10:12:a0:5d:b9:11:53:5f:ec:04:48:10:99:09:a2:
                    98:41:e8:03:83:a4:c6:15:a5:93:62:6b:22:31:c7:
                    f7:ad:a6:ce:ad:6e:1d:1d:35:fe:d6:77:f4:1e:54:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:12:32:B9:82:68:11:27:4B:60:10:2C:B0:BB:F3:20:C6:78:D6:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/c1c4f9ae-4c3d-3c34-a5b3-f508fdc4ede4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl

            X509v3 Authority Key Identifier:
                keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:72:5a:b2:7c:c8:d8:d2:a5:ee:b1:5b:8e:1f:26:d9:ac:bd:
         48:3c:3b:48:b6:d3:d8:06:42:3b:f2:71:da:60:48:6b:6a:45:
         c2:c0:d8:62:c4:d3:20:cc:15:a9:bc:36:b0:b3:ac:74:fb:21:
         71:d3:28:56:ec:bd:cc:6b:86:2c:10:5f:9b:b4:28:91:fa:5f:
         83:43:4a:1d:9f:6f:43:82:6b:bf:15:52:78:0b:98:6b:c6:3d:
         18:fb:a9:06:3c:22:dd:da:2c:bc:16:43:92:32:d1:1c:60:c4:
         c8:4e:ef:71:fb:91:52:78:06:84:6f:fd:98:81:7e:e3:50:ab:
         71:8d:c3:bf:4b:17:51:ce:4c:33:2a:cd:52:1f:df:57:03:40:
         45:b8:e6:e4:e0:c0:e0:69:76:81:c7:da:25:4e:09:cf:df:4b:
         b3:57:9c:19:22:12:99:64:45:74:90:0e:1b:50:c6:c3:a0:97:
         80:9f:94:83:b8:a2:cc:0c:0d:cd:20:73:a7:6a:3f:21:58:09:
         4c:80:2c:a9:8e:df:17:81:ff:22:cd:6f:4d:71:70:ce:2a:68:
         97:84:df:af:ff:31:7a:26:6f:b8:2c:45:9b:60:d5:b2:a5:b1:
         6c:0d:6f:c0:6c:53:26:9c:de:05:fd:7a:55:25:aa:bb:c1:df:
         ff:27:ac:43
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtqYgP1ZCIR7+6QOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3
MTFkMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
NTE3ZWQwMDgtMmM3Zi00MmI2LTk0MDMtMDk5NzAxMjNmNDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIdvjcmgjQ+W1RMNpWuNZcWFeRTry8PSHHmk
DvZPh3Bw3f09p62giGPu/Zy0YTk1VK2PoQms+899xtnZEfYWsnQICfPTUlb+3R42
n1v7Zyiskpk/fWCBqgXG9hFH0VLjQMXLLGcx5J+5MDJcLLPoGi4PM1rN1tRIEAHO
nLus4g1nDGQyPpjOLmhO0ucm6NDCKJOYLQFcVahpR1QzzZ9oFsgSsXk5DIh4voQ8
peZxlvgBSKJxyb7mtBV/GX2Ofj9o4wK1VKGgHTlzdmry/B3JtXgQEqBduRFTX+wE
SBCZCaKYQegDg6TGFaWTYmsiMcf3rabOrW4dHTX+1nf0HlQGyQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPcSMrmCaBEnS2AQLLC78yDGeNYvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVh
ZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvYzFjNGY5YWUtNGMzZC0z
YzM0LWE1YjMtZjUwOGZkYzRlZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGY1YWRhYzctZWQ4Ni00YjI0LTkx
MWQtNzE2ZjJjOTQ3MTFkL2RmNWFkYWM3LWVkODYtNGIyNC05MTFkLTcxNmYyYzk0
NzExZC5jcmwwHwYDVR0jBBgwFoAUZYTA+4uOlUw5iwUkbJv3KvYU7kIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZm
MmM5NDcxMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5KqAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAenJasnzI2NKl7rFbjh8m2ay9SDw7SLbT2AZCO/Jx2mBIa2pFwsDY
YsTTIMwVqbw2sLOsdPshcdMoVuy9zGuGLBBfm7Qokfpfg0NKHZ9vQ4JrvxVSeAuY
a8Y9GPupBjwi3dosvBZDkjLRHGDEyE7vcfuRUngGhG/9mIF+41CrcY3Dv0sXUc5M
MyrNUh/fVwNARbjm5ODA4Gl2gcfaJU4Jz99Ls1ecGSISmWRFdJAOG1DGw6CXgJ+U
g7iizAwNzSBzp2o/IVgJTIAsqY7fF4H/Is1vTXFwzipol4Tfr/8xeiZvuCxFm2DV
sqWxbA1vwGxTJpzeBf16VSWqu8Hf/yesQw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:06:09 2025 by rpki-client