Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa
File:                     b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa (raw, json)
Hash identifier:          2KPpUCNmDp3CqdCb6Sgex2e3aEXz2aG6Tj68scXkTAc=
Subject key identifier:   02:38:9D:27:08:02:83:AA:4F:EB:43:7E:2F:0D:20:5D:37:45:AD:0B
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584B3AEC419724278CAD27523540
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     400780
IP address blocks:        2607:13c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:41:97:24:27:8c:ad:27:52:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=0899eb3c-3b23-40ba-9960-da995539ba37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:da:66:ec:74:ac:a7:0c:18:72:2c:3a:26:
                    56:5d:13:f0:5c:23:e6:8e:98:f7:0c:ed:5f:6c:8f:
                    79:02:83:01:87:02:c9:37:3d:44:f5:02:fe:79:ba:
                    c7:5b:0b:b4:14:3b:10:9e:e2:b6:33:26:37:54:e3:
                    a5:8f:27:89:13:a7:bd:c4:60:75:b1:a8:4e:4b:1c:
                    23:8e:25:04:12:a8:af:ad:47:26:5d:9e:dc:0d:09:
                    23:40:ed:da:f7:71:d7:4c:2a:1c:22:ff:d4:94:82:
                    20:fe:28:91:9a:05:28:04:9f:87:ef:9b:f4:a2:86:
                    0c:e4:16:e9:77:b0:26:7f:e2:36:3e:fa:69:2b:23:
                    a2:57:3c:46:aa:ef:f1:62:e1:48:8b:05:b8:70:cc:
                    b7:23:99:4a:9f:fd:72:39:a1:bc:6b:79:a3:80:94:
                    73:7d:7a:16:e6:67:e1:dc:5c:b8:e3:41:d9:66:c0:
                    ce:a5:de:87:1c:05:4d:63:e9:b1:e6:0b:a2:1d:7e:
                    0d:5c:0e:b5:d9:a1:62:7a:21:1d:f8:9b:c9:e4:6d:
                    11:8e:e9:d0:0a:e3:3f:f1:b2:ef:13:e8:56:98:21:
                    25:d3:33:b2:d3:bf:16:ce:6c:f7:bb:38:c0:74:ad:
                    3e:90:d4:bd:72:e3:bc:58:db:f1:25:4d:df:8f:a5:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:38:9D:27:08:02:83:AA:4F:EB:43:7E:2F:0D:20:5D:37:45:AD:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/b7b5c6c0-6ff4-33b6-83ec-a19743d7b16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:13c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b9:34:71:83:33:dc:7f:ae:6e:b6:f8:95:d2:92:a6:a7:0a:
         b1:23:b4:3a:ba:04:56:a5:ca:55:bc:16:2d:5e:c7:db:ff:6a:
         e3:71:c1:29:14:a9:73:a8:3b:9a:4f:24:8e:26:ee:c4:19:3a:
         70:c5:2a:3e:72:22:2c:6f:b2:7d:d4:bf:e7:91:0d:5b:b8:46:
         61:6f:ea:c6:a4:f7:45:36:77:0b:b1:81:d5:23:26:d7:3d:83:
         92:bd:3a:3f:98:f3:56:22:ab:70:2b:8f:d8:ff:0b:30:36:68:
         d6:d0:b4:30:df:88:05:f7:c4:6d:0d:74:36:97:ff:d8:59:5a:
         42:99:4a:e6:3f:f2:71:c3:9b:5c:29:0b:db:36:c2:4e:5f:d0:
         2c:5b:64:88:1b:86:ec:f4:0c:7f:a3:af:76:0c:e8:d3:f4:1f:
         17:6a:eb:51:9b:16:5e:32:0c:74:89:76:0c:7e:ed:1b:c4:c4:
         8c:58:0a:da:50:5f:64:74:70:22:62:bb:cb:58:f9:1e:66:7f:
         a0:ba:06:6f:4b:6a:f1:ed:6f:d5:ee:51:7b:04:6a:a6:9f:62:
         c1:60:a0:a3:a4:3c:72:a9:d1:77:d1:05:98:5e:a3:90:a1:52:
         f8:2a:0a:a7:6b:d4:11:10:5f:f5:dd:a6:b0:1a:05:ce:b2:4f:
         7e:3c:93:8c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs67EGXJCeMrSdSNUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgwZjkyOTgtODAyOS00Mjg1LTg5ZDctMjczMDgzNDFi
MmUwMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk
MDg5OWViM2MtM2IyMy00MGJhLTk5NjAtZGE5OTU1MzliYTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn/aZux0rKcMGHIsOiZWXRPwXCPmjpj3DO1f
bI95AoMBhwLJNz1E9QL+ebrHWwu0FDsQnuK2MyY3VOOljyeJE6e9xGB1sahOSxwj
jiUEEqivrUcmXZ7cDQkjQO3a93HXTCocIv/UlIIg/iiRmgUoBJ+H75v0ooYM5Bbp
d7Amf+I2PvppKyOiVzxGqu/xYuFIiwW4cMy3I5lKn/1yOaG8a3mjgJRzfXoW5mfh
3Fy440HZZsDOpd6HHAVNY+mx5guiHX4NXA612aFieiEd+JvJ5G0RjunQCuM/8bLv
E+hWmCEl0zOy078Wzmz3uzjAdK0+kNS9cuO8WNvxJU3fj6UXXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAI4nScIAoOqT+tDfi8NIF03Ra0LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mODBm
OTI5OC04MDI5LTQyODUtODlkNy0yNzMwODM0MWIyZTAvYjdiNWM2YzAtNmZmNC0z
M2I2LTgzZWMtYTE5NzQzZDdiMTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjgwZjkyOTgtODAyOS00Mjg1LTg5
ZDctMjczMDgzNDFiMmUwL2Y4MGY5Mjk4LTgwMjktNDI4NS04OWQ3LTI3MzA4MzQx
YjJlMC5jcmwwHwYDVR0jBBgwFoAUZ2/fmN3Fstann5/PDklcOGTRROcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mODBmOTI5OC04MDI5LTQyODUtODlkNy0yNzMw
ODM0MWIyZTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcTwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAquTRxgzPcf65utviV0pKmpwqxI7Q6ugRWpcpVvBYtXsfb/2rjccEp
FKlzqDuaTySOJu7EGTpwxSo+ciIsb7J91L/nkQ1buEZhb+rGpPdFNncLsYHVIybX
PYOSvTo/mPNWIqtwK4/Y/wswNmjW0LQw34gF98RtDXQ2l//YWVpCmUrmP/Jxw5tc
KQvbNsJOX9AsW2SIG4bs9Ax/o692DOjT9B8XautRmxZeMgx0iXYMfu0bxMSMWAra
UF9kdHAiYrvLWPkeZn+gugZvS2rx7W/V7lF7BGqmn2LBYKCjpDxyqdF30QWYXqOQ
oVL4Kgqna9QREF/13aawGgXOsk9+PJOM
-----END CERTIFICATE-----
Generated at Tue Oct 21 16:09:21 2025 by rpki-client