Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/9d1c259a-f15b-3f17-9109-6d1388de2dd8.roa
File:                     9d1c259a-f15b-3f17-9109-6d1388de2dd8.roa (raw, json)
Hash identifier:          3zByEoXTmm/fNGNo6tgWRJHT2A7ps/uRgOBUi9VLxM8=
Subject key identifier:   B1:57:3F:A8:E0:8A:57:41:DA:DA:2D:09:DC:34:0B:88:B1:D6:AF:80
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584B3AEC41AC48BB9344A5F7CF80
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/9d1c259a-f15b-3f17-9109-6d1388de2dd8.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     2639
IP address blocks:        2607:13c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:41:ac:48:bb:93:44:a5:f7:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=140aca42-da27-4a83-b2df-9cc316a766ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:8d:c5:dd:f6:53:80:0a:fe:57:e8:d2:53:
                    55:b4:e9:6f:78:ab:34:59:d4:4e:2e:d4:af:40:73:
                    a6:20:34:86:1f:3a:2e:18:20:9b:23:91:64:01:c5:
                    f3:12:58:01:66:20:33:1f:e9:93:9b:1a:14:f1:56:
                    2f:07:3c:ca:ae:27:20:0f:57:05:93:f5:1d:cc:21:
                    33:f0:7c:cd:a6:65:59:b7:e7:9a:d2:a3:52:bb:b9:
                    40:f0:2c:ac:91:78:30:13:1a:58:2a:d3:e3:98:b4:
                    75:d7:4d:f6:07:fe:7f:25:47:ae:5b:cd:2c:0d:ea:
                    e8:d5:db:ec:a7:c6:4d:d9:7e:f5:5d:70:68:b1:7b:
                    e6:70:8f:92:58:ca:98:00:c0:21:26:e2:c6:ae:05:
                    34:fb:63:80:bc:ed:2f:42:20:5d:28:26:53:e0:3e:
                    16:8b:61:ef:f7:33:ea:c9:10:bf:f2:fa:cf:a7:80:
                    51:2c:f7:6a:4c:b4:9e:1b:0f:2f:d9:5b:19:2d:58:
                    24:50:b2:2d:5e:c6:ee:93:7d:33:e4:a2:21:3a:75:
                    e3:8c:f2:fd:a9:63:a4:f6:08:c8:3f:f0:9b:56:5c:
                    45:05:9b:b7:8f:0c:25:ad:34:38:36:13:a9:51:e2:
                    e1:96:4c:99:cb:a9:70:71:71:ac:53:7e:1e:dd:cf:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:57:3F:A8:E0:8A:57:41:DA:DA:2D:09:DC:34:0B:88:B1:D6:AF:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/9d1c259a-f15b-3f17-9109-6d1388de2dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:13c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:39:89:07:e3:0f:8b:69:46:c6:d6:ca:eb:2d:79:30:f5:3f:
         70:49:ee:53:64:d8:ab:4e:fd:5b:b5:d9:57:f3:4d:57:b8:c8:
         26:07:10:2c:ff:75:a9:82:2b:ff:77:2d:e6:f3:5d:29:22:2c:
         84:9a:d0:a7:12:b7:ca:4c:e2:72:6a:aa:0a:e8:23:55:f1:4d:
         a9:fd:da:2e:ae:72:9b:e3:75:45:17:f9:ad:e2:16:a9:af:83:
         54:f6:09:81:ee:5e:16:47:94:20:00:60:0e:00:47:8c:e5:1e:
         aa:b7:cb:57:ac:27:81:ea:69:5c:27:20:0d:cf:90:6b:a5:39:
         4f:a0:71:09:6b:a5:14:c4:98:68:ef:f3:75:00:8c:dd:2a:07:
         7f:28:8e:d9:5e:07:55:0e:76:3b:94:69:38:18:f5:10:a2:3e:
         1d:aa:c0:00:7e:38:f6:f4:77:22:a3:79:ae:ec:88:66:25:b7:
         7b:f4:2c:bb:92:80:da:14:d1:13:ba:05:68:b4:ea:0d:1d:81:
         d4:01:03:4f:bf:d0:35:8b:07:44:d7:fa:e1:cc:ad:36:59:ef:
         9a:62:ef:d3:63:03:73:fa:fd:39:c8:b8:09:ab:74:3e:7b:75:
         c4:a6:b1:46:6a:46:cc:31:6d:0b:6b:2c:3f:51:fc:d6:43:5a:
         37:b9:13:2b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs67EGsSLuTRKX3z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgwZjkyOTgtODAyOS00Mjg1LTg5ZDctMjczMDgzNDFi
MmUwMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk
MTQwYWNhNDItZGEyNy00YTgzLWIyZGYtOWNjMzE2YTc2NmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk32Nxd32U4AK/lfo0lNVtOlveKs0WdROLtSv
QHOmIDSGHzouGCCbI5FkAcXzElgBZiAzH+mTmxoU8VYvBzzKricgD1cFk/UdzCEz
8HzNpmVZt+ea0qNSu7lA8CyskXgwExpYKtPjmLR11032B/5/JUeuW80sDero1dvs
p8ZN2X71XXBosXvmcI+SWMqYAMAhJuLGrgU0+2OAvO0vQiBdKCZT4D4Wi2Hv9zPq
yRC/8vrPp4BRLPdqTLSeGw8v2VsZLVgkULItXsbuk30z5KIhOnXjjPL9qWOk9gjI
P/CbVlxFBZu3jwwlrTQ4NhOpUeLhlkyZy6lwcXGsU34e3c/kGQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLFXP6jgildB2totCdw0C4ix1q+AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mODBm
OTI5OC04MDI5LTQyODUtODlkNy0yNzMwODM0MWIyZTAvOWQxYzI1OWEtZjE1Yi0z
ZjE3LTkxMDktNmQxMzg4ZGUyZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjgwZjkyOTgtODAyOS00Mjg1LTg5
ZDctMjczMDgzNDFiMmUwL2Y4MGY5Mjk4LTgwMjktNDI4NS04OWQ3LTI3MzA4MzQx
YjJlMC5jcmwwHwYDVR0jBBgwFoAUZ2/fmN3Fstann5/PDklcOGTRROcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mODBmOTI5OC04MDI5LTQyODUtODlkNy0yNzMw
ODM0MWIyZTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcTwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCFOYkH4w+LaUbG1srrLXkw9T9wSe5TZNirTv1btdlX801XuMgmBxAs
/3Wpgiv/dy3m810pIiyEmtCnErfKTOJyaqoK6CNV8U2p/dournKb43VFF/mt4hap
r4NU9gmB7l4WR5QgAGAOAEeM5R6qt8tXrCeB6mlcJyANz5BrpTlPoHEJa6UUxJho
7/N1AIzdKgd/KI7ZXgdVDnY7lGk4GPUQoj4dqsAAfjj29Hcio3mu7IhmJbd79Cy7
koDaFNETugVotOoNHYHUAQNPv9A1iwdE1/rhzK02We+aYu/TYwNz+v05yLgJq3Q+
e3XEprFGakbMMW0Layw/UfzWQ1o3uRMr
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:35:00 2025 by rpki-client