Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/398f2ffb-5b1d-3528-bebf-3d730bdc21d3.roa
File:                     398f2ffb-5b1d-3528-bebf-3d730bdc21d3.roa (raw, json)
Hash identifier:          Nh/QZC/fI3GfQd3XHta//YDiKEWMiEIFgUkPi8+z/b4=
Subject key identifier:   6D:C2:8B:DE:BF:68:1F:DC:9A:3E:44:D8:EE:91:D3:A0:38:73:91:C1
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584B758CA04134FA5D410F75E7C0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/398f2ffb-5b1d-3528-bebf-3d730bdc21d3.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     15169
IP address blocks:        2605:ef80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a0:41:34:fa:5d:41:0f:75:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=7208d378-e53e-4d09-a00d-5f3b2a5a5070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:29:10:c6:b7:cb:88:50:c1:df:00:57:ae:
                    c3:2c:91:ca:73:b9:3f:89:1b:bc:6f:52:54:55:6c:
                    85:84:c3:7b:24:9c:c5:16:d1:50:5a:8e:96:07:ba:
                    7c:0b:dc:d8:b7:be:2b:f9:ba:d8:16:43:71:76:f5:
                    41:55:ec:52:f2:59:5f:13:91:4e:9d:81:c7:a7:21:
                    a8:e0:11:43:78:ed:93:1c:61:6f:74:eb:04:66:66:
                    e5:3a:cf:83:a9:45:cc:3c:c8:9b:0d:ac:3d:99:d4:
                    61:be:d1:88:2c:03:5e:f6:57:ec:b6:1d:91:7e:1f:
                    41:32:da:e1:18:77:1e:31:84:75:9d:05:c6:22:af:
                    79:05:31:38:d9:d7:1e:31:1b:b9:b3:3b:af:b8:be:
                    cb:f9:ed:20:2c:d6:69:18:31:f6:33:20:ec:3b:9b:
                    91:13:52:36:b6:51:65:7f:ae:0a:94:47:b7:87:14:
                    d3:2e:d7:61:64:3a:24:71:86:0e:de:60:a5:dc:d1:
                    ce:9e:3e:20:99:1a:7b:b7:78:e7:98:61:44:ee:1b:
                    f0:33:fd:5c:79:5e:cc:37:83:5e:a8:cd:4e:c9:59:
                    96:d6:45:fa:49:7c:83:e7:d0:e4:c7:97:c4:14:9d:
                    65:61:d9:22:c2:9b:bb:e4:9c:23:2a:d2:a4:82:26:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C2:8B:DE:BF:68:1F:DC:9A:3E:44:D8:EE:91:D3:A0:38:73:91:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/398f2ffb-5b1d-3528-bebf-3d730bdc21d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ef80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:c2:6b:df:32:f2:61:f1:99:34:ca:23:88:ef:93:cf:82:b2:
         db:c7:20:54:44:f1:db:b8:4c:90:a4:8b:9e:d6:29:02:a4:91:
         23:f6:7c:24:d2:bd:f5:b5:17:83:7d:72:e9:5b:38:52:c9:3e:
         a0:da:fe:0c:93:ef:9b:35:d5:b0:8c:8f:4f:4b:da:fe:6e:b6:
         06:f7:84:15:35:ba:6b:8e:95:c6:38:d9:1a:11:1a:fa:31:c9:
         63:0d:71:f2:34:1f:66:ef:40:f1:1e:76:0c:02:1a:e2:62:67:
         59:b2:27:89:77:76:2b:d6:88:ad:21:91:92:c5:b9:14:7d:36:
         31:81:4d:dd:c3:9b:0d:0e:f0:0e:27:19:de:34:3b:89:52:83:
         0d:b9:30:31:13:58:a2:5d:ca:27:17:9e:04:64:70:c7:f4:55:
         e3:72:69:11:ca:fa:32:e9:b7:8e:37:10:38:3b:d2:7a:61:b7:
         2f:a3:10:70:35:ea:44:cc:b6:4a:1f:73:18:cd:fc:77:dc:05:
         9c:f9:36:65:06:1b:6d:73:78:85:e0:a8:81:1b:ee:e5:ef:37:
         c1:5c:1e:4c:6c:7c:dd:fa:3b:d2:6c:05:41:63:ec:3e:94:27:
         75:b4:a1:6a:bb:09:4e:16:d7:1a:4c:64:00:8a:36:24:08:42:
         f4:dc:8c:b7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt1jKBBNPpdQQ9158AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk
NzIwOGQzNzgtZTUzZS00ZDA5LWEwMGQtNWYzYjJhNWE1MDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X0pEMa3y4hQwd8AV67DLJHKc7k/iRu8b1JU
VWyFhMN7JJzFFtFQWo6WB7p8C9zYt74r+brYFkNxdvVBVexS8llfE5FOnYHHpyGo
4BFDeO2THGFvdOsEZmblOs+DqUXMPMibDaw9mdRhvtGILANe9lfsth2Rfh9BMtrh
GHceMYR1nQXGIq95BTE42dceMRu5szuvuL7L+e0gLNZpGDH2MyDsO5uRE1I2tlFl
f64KlEe3hxTTLtdhZDokcYYO3mCl3NHOnj4gmRp7t3jnmGFE7hvwM/1ceV7MN4Ne
qM1OyVmW1kX6SXyD59Dkx5fEFJ1lYdkiwpu75JwjKtKkgiaVWQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG3Ci96/aB/cmj5E2O6R06A4c5HBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMzk4ZjJmZmItNWIxZC0z
NTI4LWJlYmYtM2Q3MzBiZGMyMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXvgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDIwmvfMvJh8Zk0yiOI75PPgrLbxyBURPHbuEyQpIue1ikCpJEj9nwk
0r31tReDfXLpWzhSyT6g2v4Mk++bNdWwjI9PS9r+brYG94QVNbprjpXGONkaERr6
McljDXHyNB9m70DxHnYMAhriYmdZsieJd3Yr1oitIZGSxbkUfTYxgU3dw5sNDvAO
JxneNDuJUoMNuTAxE1iiXconF54EZHDH9FXjcmkRyvoy6beONxA4O9J6YbcvoxBw
NepEzLZKH3MYzfx33AWc+TZlBhttc3iF4KiBG+7l7zfBXB5MbHzd+jvSbAVBY+w+
lCd1tKFquwlOFtcaTGQAijYkCEL03Iy3
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:20:49 2025 by rpki-client