Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/92d8eb7d-be5e-3a7b-908a-9895775b02db.roa
File:                     92d8eb7d-be5e-3a7b-908a-9895775b02db.roa (raw, json)
Hash identifier:          zLPZ3Mfq/zksx5yF1/58TgIHYtIogirFOaD1wx/wED4=
Subject key identifier:   8A:0C:97:84:6E:8A:04:5C:B6:63:B8:40:C7:74:E6:70:72:D4:77:B4
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584B8EACEFFC4A813D50C46B7480
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/92d8eb7d-be5e-3a7b-908a-9895775b02db.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     11260
IP address blocks:        2604:db00::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ef:fc:4a:81:3d:50:c4:6b:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=9d0eb009-cc63-4aa6-a878-bc23f28cb3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:24:44:82:c1:7a:34:55:e1:3c:e2:ca:1f:
                    c7:4f:84:1a:26:77:71:86:e3:de:44:ec:93:8c:17:
                    69:66:e4:d2:73:ea:50:e7:39:d9:c4:65:d2:64:ce:
                    a2:d3:a5:7e:0e:73:71:e7:b9:72:4d:97:7d:bd:1c:
                    bf:58:a7:fd:ce:60:09:8a:bc:56:0c:23:e8:57:5d:
                    57:de:2d:d0:99:01:11:ad:16:0e:eb:55:39:18:3f:
                    d4:6d:63:d9:59:58:3b:4f:e9:20:cb:19:e0:27:1f:
                    5c:ee:b6:85:d6:9a:cd:53:1e:ba:a6:28:05:26:84:
                    77:fb:ae:b3:b5:e5:f7:8d:4e:9b:44:21:af:04:60:
                    1b:50:f9:55:ba:04:c4:26:e0:39:b5:cd:83:35:55:
                    25:bd:24:2d:49:0d:2d:b4:fd:0f:33:d1:da:65:1a:
                    47:03:54:29:ee:6e:29:54:80:68:e3:fe:21:72:80:
                    f8:38:ba:af:94:3b:69:c4:a0:ef:c1:5b:24:59:58:
                    18:6e:37:46:94:c4:0b:e4:d9:72:66:4b:00:ae:dd:
                    b4:35:ba:22:13:4b:13:80:46:f5:1b:41:c3:63:07:
                    3e:cb:6e:16:6e:f3:f3:6d:fd:86:d1:77:d9:b7:d8:
                    8f:38:b8:ad:f4:52:ab:f8:c9:53:0b:2c:cc:0f:38:
                    80:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0C:97:84:6E:8A:04:5C:B6:63:B8:40:C7:74:E6:70:72:D4:77:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/92d8eb7d-be5e-3a7b-908a-9895775b02db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:db00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ff:8d:7e:6e:4a:4c:7b:d6:85:77:ae:36:6d:2f:17:37:24:
         82:c3:91:2f:9e:ab:18:40:77:e7:15:41:1f:6c:8d:e2:15:b0:
         b3:6c:5f:df:a6:45:bb:c2:f8:8f:b7:7e:e7:8f:26:41:9a:82:
         7c:4c:15:54:77:01:0b:f5:79:4f:9c:bd:c2:cc:0c:cd:99:55:
         90:9e:1c:d3:b2:1e:2e:c0:ce:70:ad:43:9c:7f:23:a1:b1:ce:
         68:4a:2f:ea:fb:3b:58:9d:15:8b:19:0b:98:dc:c2:82:e3:9b:
         b7:28:42:49:c6:ef:73:04:9b:21:63:11:d7:d4:2e:1d:c8:13:
         e5:e6:4b:9c:e6:69:f1:36:00:2f:98:95:a3:66:18:e9:ca:e5:
         d9:fc:95:e9:c6:22:ec:01:10:7b:53:37:37:ab:22:15:93:f4:
         77:a3:11:5e:df:60:59:da:90:ed:f3:5c:dc:3b:ab:5f:04:9a:
         c2:c0:c2:39:22:ea:cc:33:17:36:d4:e5:39:6a:e1:82:5b:c2:
         ab:e7:c0:76:ab:d1:7e:d3:f4:b4:12:fb:bf:a5:49:25:8f:ac:
         3e:cb:21:ac:c5:20:73:d4:0c:37:7f:b3:ba:54:2a:5d:2c:9f:
         50:0c:13:b9:41:ce:c6:d5:9a:e4:59:cb:1e:06:0a:02:cc:70:
         ef:25:53:ba
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuOrO/8SoE9UMRrdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj
MDU0MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
OWQwZWIwMDktY2M2My00YWE2LWE4NzgtYmMyM2YyOGNiM2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DskRILBejRV4Tziyh/HT4QaJndxhuPeROyT
jBdpZuTSc+pQ5znZxGXSZM6i06V+DnNx57lyTZd9vRy/WKf9zmAJirxWDCPoV11X
3i3QmQERrRYO61U5GD/UbWPZWVg7T+kgyxngJx9c7raF1prNUx66pigFJoR3+66z
teX3jU6bRCGvBGAbUPlVugTEJuA5tc2DNVUlvSQtSQ0ttP0PM9HaZRpHA1Qp7m4p
VIBo4/4hcoD4OLqvlDtpxKDvwVskWVgYbjdGlMQL5NlyZksArt20NboiE0sTgEb1
G0HDYwc+y24WbvPzbf2G0XfZt9iPOLit9FKr+MlTCyzMDziA/QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIoMl4RuigRctmO4QMd05nBy1He0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4
ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvOTJkOGViN2QtYmU1ZS0z
YTdiLTkwOGEtOTg5NTc3NWIwMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw
NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz
YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3
YmM3M2MwNTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTbADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBp/41+bkpMe9aFd642bS8XNySCw5EvnqsYQHfnFUEfbI3iFbCzbF/f
pkW7wviPt37njyZBmoJ8TBVUdwEL9XlPnL3CzAzNmVWQnhzTsh4uwM5wrUOcfyOh
sc5oSi/q+ztYnRWLGQuY3MKC45u3KEJJxu9zBJshYxHX1C4dyBPl5kuc5mnxNgAv
mJWjZhjpyuXZ/JXpxiLsARB7Uzc3qyIVk/R3oxFe32BZ2pDt81zcO6tfBJrCwMI5
IurMMxc21OU5auGCW8Kr58B2q9F+0/S0Evu/pUklj6w+yyGsxSBz1Aw3f7O6VCpd
LJ9QDBO5Qc7G1ZrkWcseBgoCzHDvJVO6
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:55:52 2025 by rpki-client