Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/1e605cc6-9ec0-36e0-8fd0-dd2740bc1e83.roa
File:                     1e605cc6-9ec0-36e0-8fd0-dd2740bc1e83.roa (raw, json)
Hash identifier:          iSr28Lh7cPwQxQ3oy16q6gywl7kh+GD7HFxMeD4T3dE=
Subject key identifier:   B3:11:7D:6D:ED:D8:8A:DB:F5:B9:D2:E7:CC:74:CF:09:08:1C:AA:83
Certificate issuer:       /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial:       010D0C9F4328584B48E1B67B7AF11562B86FC000
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/1e605cc6-9ec0-36e0-8fd0-dd2740bc1e83.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     959
IP address blocks:        2606:6240:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b6:7b:7a:f1:15:62:b8:6f:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=c5823b12-0fc7-4227-9e0e-e8eaf3da8b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:62:44:52:1a:e1:dd:3d:3c:77:4e:04:9e:
                    66:cd:2e:93:22:db:09:bd:36:8f:31:4b:87:29:d9:
                    3d:c7:35:12:9e:ef:29:a3:03:72:d6:a4:97:d7:d8:
                    4e:bb:ca:8d:b5:7e:76:e7:3d:8e:8e:07:8e:fe:9f:
                    00:08:c4:13:04:77:6e:ae:b3:3e:b3:5f:6a:37:bd:
                    14:41:e1:1b:9b:e9:93:ef:72:f7:4a:16:44:47:2c:
                    32:9d:63:75:23:b8:59:9a:57:65:80:63:44:ce:16:
                    70:8d:d7:b3:37:7a:54:15:16:6d:8b:39:9a:40:83:
                    f5:53:c1:7e:87:a2:27:68:5c:ef:4e:0a:2a:1a:5b:
                    39:da:e2:99:0a:cf:1b:83:88:39:04:67:c7:54:82:
                    99:17:61:e8:09:5b:bb:10:b1:9c:44:59:41:4c:69:
                    fa:af:cf:6b:5a:86:e2:b6:82:66:aa:73:c8:24:4b:
                    99:06:3d:4f:88:31:10:c1:63:7d:be:87:7c:82:2f:
                    91:9f:11:d5:5f:3d:bb:8f:45:47:3c:5a:0b:25:9c:
                    b1:96:38:0f:c6:a9:c6:f0:83:e0:fe:3b:70:fc:54:
                    17:38:03:5a:63:62:00:fd:f8:03:7e:3b:52:01:08:
                    7e:62:41:7d:ba:51:47:5d:8a:64:46:00:6a:cf:13:
                    89:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:11:7D:6D:ED:D8:8A:DB:F5:B9:D2:E7:CC:74:CF:09:08:1C:AA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/1e605cc6-9ec0-36e0-8fd0-dd2740bc1e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6240:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c4:2b:8c:61:2a:1a:b1:04:b2:e5:ae:4c:95:e6:0f:03:17:
         75:4e:b6:fe:fd:d5:c7:9a:3d:7d:4c:dd:6e:df:55:a3:fd:45:
         be:35:c0:f3:d9:e6:d2:0c:40:f7:1e:f5:03:65:91:1a:fb:81:
         9f:2c:97:6b:2a:13:d7:e5:70:80:fa:7f:1e:b5:5d:63:25:fe:
         e6:67:e9:02:30:83:99:5f:61:07:a8:cb:fd:09:77:1b:ea:5a:
         a9:d4:0a:9c:5e:16:44:2d:9b:a1:0a:e8:8a:a6:e1:c7:de:1f:
         52:ad:bf:24:b4:c2:93:8e:d3:89:b0:28:35:8b:be:75:1b:4d:
         6c:79:02:ef:10:1d:dc:d2:ab:47:b0:c8:49:66:d8:4c:28:8a:
         2f:7e:38:a1:21:65:6a:8b:2a:3d:1f:02:e6:30:b3:b0:17:83:
         f0:d7:fe:ef:fa:57:37:d2:9c:b7:f7:02:33:20:18:67:00:d7:
         97:a7:0b:ca:47:3f:5b:1c:0b:58:53:9e:f4:2f:82:e2:f1:da:
         45:cb:c0:8b:4a:1b:54:c2:00:68:5a:97:d0:09:a9:db:db:df:
         42:1b:73:9f:41:a6:d5:1f:e2:31:fe:22:4e:ac:4d:b7:a6:11:
         97:d8:10:d7:ea:05:f7:db:ac:b8:c1:82:8f:2a:e9:fb:48:7b:
         2e:f7:f4:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4bZ7evEVYrhvwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTllMjYyZDAtM2E2NC00MDJlLTgxZTctNWIwODI5NTk2
NDk0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
YzU4MjNiMTItMGZjNy00MjI3LTllMGUtZThlYWYzZGE4YjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzBiRFIa4d09PHdOBJ5mzS6TItsJvTaPMUuH
Kdk9xzUSnu8powNy1qSX19hOu8qNtX525z2OjgeO/p8ACMQTBHdurrM+s19qN70U
QeEbm+mT73L3ShZERywynWN1I7hZmldlgGNEzhZwjdezN3pUFRZtizmaQIP1U8F+
h6InaFzvTgoqGls52uKZCs8bg4g5BGfHVIKZF2HoCVu7ELGcRFlBTGn6r89rWobi
toJmqnPIJEuZBj1PiDEQwWN9vod8gi+RnxHVXz27j0VHPFoLJZyxljgPxqnG8IPg
/jtw/FQXOANaY2IA/fgDfjtSAQh+YkF9ulFHXYpkRgBqzxOJAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLMRfW3t2Irb9bnS58x0zwkIHKqDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOWUy
NjJkMC0zYTY0LTQwMmUtODFlNy01YjA4Mjk1OTY0OTQvMWU2MDVjYzYtOWVjMC0z
NmUwLThmZDAtZGQyNzQwYmMxZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTllMjYyZDAtM2E2NC00MDJlLTgx
ZTctNWIwODI5NTk2NDk0L2U5ZTI2MmQwLTNhNjQtNDAyZS04MWU3LTViMDgyOTU5
NjQ5NC5jcmwwHwYDVR0jBBgwFoAU0hx5vmE01qRIY+vdBKWSZ+voF7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOWUyNjJkMC0zYTY0LTQwMmUtODFlNy01YjA4
Mjk1OTY0OTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZiQPAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEPEK4xhKhqxBLLlrkyV5g8DF3VOtv791ceaPX1M3W7fVaP9Rb41
wPPZ5tIMQPce9QNlkRr7gZ8sl2sqE9flcID6fx61XWMl/uZn6QIwg5lfYQeoy/0J
dxvqWqnUCpxeFkQtm6EK6Iqm4cfeH1KtvyS0wpOO04mwKDWLvnUbTWx5Au8QHdzS
q0ewyElm2Ewoii9+OKEhZWqLKj0fAuYws7AXg/DX/u/6VzfSnLf3AjMgGGcA15en
C8pHP1scC1hTnvQvguLx2kXLwItKG1TCAGhal9AJqdvb30Ibc59BptUf4jH+Ik6s
TbemEZfYENfqBffbrLjBgo8q6ftIey739LI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:53 2025 by rpki-client