Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/9b9d4e0e-0339-3f33-9a61-64acb33f5e44.roa
File:                     9b9d4e0e-0339-3f33-9a61-64acb33f5e44.roa (raw, json)
Hash identifier:          gv4ca2sg22gniAKDw6/QPUnp8DDnkY9ndJi6BI3EEgs=
Subject key identifier:   95:08:B1:20:2D:EB:4D:49:B9:F5:9F:D7:6B:48:8B:3F:0E:05:DC:E4
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F4328584B821CCEBDA4ED3992CD07F480
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/9b9d4e0e-0339-3f33-9a61-64acb33f5e44.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     149020
IP address blocks:        2602:fa08:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:ce:bd:a4:ed:39:92:cd:07:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=eed5147b-7fd7-4a1b-a4d3-8d3a383b6876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:ff:4d:16:ca:2f:ae:8f:53:91:ce:99:ac:
                    0e:57:24:b3:63:6d:ab:e9:ea:4a:65:ad:77:89:82:
                    6a:15:a3:af:ae:2e:c9:48:f8:e5:57:33:62:39:31:
                    d7:83:6c:36:96:75:13:4e:5a:35:0b:b2:2e:61:bc:
                    43:c7:f6:19:06:4d:e9:07:85:f0:bd:cd:48:79:06:
                    01:77:b7:b2:c5:79:3d:2e:5c:d0:38:b0:c7:30:1c:
                    0f:8a:e2:7e:6e:38:cd:22:19:39:1a:42:a0:f4:31:
                    fd:c2:b6:7e:ea:b7:e7:9d:c6:d4:b4:e6:c5:37:03:
                    24:52:ba:1a:0b:99:83:c1:f6:cf:cf:c3:09:c0:89:
                    21:58:90:51:fb:04:10:fd:c3:b6:e3:5e:31:fd:11:
                    60:4e:f9:50:6b:a0:d0:a8:07:7d:44:7c:75:73:60:
                    1b:7c:c6:c3:fa:3b:ed:0d:0b:21:b7:a4:60:17:b9:
                    88:20:79:6a:e9:89:ab:25:e6:59:04:14:9e:85:11:
                    de:62:99:0e:f9:64:de:53:1f:40:15:65:50:55:88:
                    99:97:8a:ba:d6:4a:b6:3f:c1:99:33:1b:93:e3:e0:
                    96:2d:27:8b:88:fe:c5:79:68:74:61:58:52:e0:ce:
                    d1:58:dd:aa:c5:9b:8e:09:42:05:00:9f:fa:03:f8:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:08:B1:20:2D:EB:4D:49:B9:F5:9F:D7:6B:48:8B:3F:0E:05:DC:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/9b9d4e0e-0339-3f33-9a61-64acb33f5e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:10:c2:a6:9d:c1:d7:df:ec:98:77:c8:85:0d:31:c2:7e:a7:
         53:04:03:2c:70:5b:ec:10:6a:e7:e5:13:31:ae:9b:54:26:4d:
         42:22:b7:31:77:4a:40:1c:6d:bf:8e:4e:09:5c:17:98:3e:71:
         4e:40:0d:35:9d:84:0c:f9:1a:c9:7d:22:13:c2:2c:55:89:6a:
         29:e6:d4:38:95:91:c2:55:99:9a:63:48:0c:1c:d3:23:04:83:
         eb:5a:b9:a7:3a:67:43:40:e6:89:d0:1e:d8:8d:67:8a:5b:e2:
         44:5f:19:8f:69:d9:92:5e:9f:78:6b:e7:ee:77:d3:29:ce:62:
         a4:86:d9:b9:22:c0:76:7d:68:9d:ad:d8:05:db:6a:f6:78:f0:
         d0:87:88:0b:ff:38:ab:76:06:3e:13:cf:45:77:14:7d:d1:9c:
         1f:0e:37:b8:2c:0f:a0:75:bb:45:9c:fe:c3:ed:1c:ed:dc:43:
         ce:a8:1f:ad:c7:ef:91:c9:d7:4b:43:d2:73:7b:2c:a9:5e:3c:
         ef:fd:93:bf:a9:d0:16:ec:a2:0d:ed:c5:bb:e0:ba:ac:98:34:
         88:a9:6c:c0:03:dc:13:e1:d3:4e:b1:26:b6:2b:b2:9e:2b:39:
         af:2d:dd:b4:49:11:e9:f4:fb:87:56:0d:36:fd:e6:14:ac:76:
         db:dc:42:d0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHM69pO05ks0H9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU0MWUwMjItNDE0Zi00NWY1LTk0MjYtYTc2NDNkYjFl
YzhkMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
ZWVkNTE0N2ItN2ZkNy00YTFiLWE0ZDMtOGQzYTM4M2I2ODc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6X/TRbKL66PU5HOmawOVySzY22r6epKZa13
iYJqFaOvri7JSPjlVzNiOTHXg2w2lnUTTlo1C7IuYbxDx/YZBk3pB4Xwvc1IeQYB
d7eyxXk9LlzQOLDHMBwPiuJ+bjjNIhk5GkKg9DH9wrZ+6rfnncbUtObFNwMkUroa
C5mDwfbPz8MJwIkhWJBR+wQQ/cO2414x/RFgTvlQa6DQqAd9RHx1c2AbfMbD+jvt
DQsht6RgF7mIIHlq6YmrJeZZBBSehRHeYpkO+WTeUx9AFWVQVYiZl4q61kq2P8GZ
MxuT4+CWLSeLiP7FeWh0YVhS4M7RWN2qxZuOCUIFAJ/6A/iQXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJUIsSAt601JufWf12tIiz8OBdzkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81NTQx
ZTAyMi00MTRmLTQ1ZjUtOTQyNi1hNzY0M2RiMWVjOGQvOWI5ZDRlMGUtMDMzOS0z
ZjMzLTlhNjEtNjRhY2IzM2Y1ZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNTU0MWUwMjItNDE0Zi00NWY1LTk0
MjYtYTc2NDNkYjFlYzhkLzU1NDFlMDIyLTQxNGYtNDVmNS05NDI2LWE3NjQzZGIx
ZWM4ZC5jcmwwHwYDVR0jBBgwFoAU9XJmm/or1eRYLh/qGspnJJZrP6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81NTQxZTAyMi00MTRmLTQ1ZjUtOTQyNi1hNzY0
M2RiMWVjOGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6CABQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABYQwqadwdff7Jh3yIUNMcJ+p1MEAyxwW+wQauflEzGum1QmTUIi
tzF3SkAcbb+OTglcF5g+cU5ADTWdhAz5Gsl9IhPCLFWJainm1DiVkcJVmZpjSAwc
0yMEg+tauac6Z0NA5onQHtiNZ4pb4kRfGY9p2ZJen3hr5+530ynOYqSG2bkiwHZ9
aJ2t2AXbavZ48NCHiAv/OKt2Bj4Tz0V3FH3RnB8ON7gsD6B1u0Wc/sPtHO3cQ86o
H63H75HJ10tD0nN7LKlePO/9k7+p0Bbsog3txbvguqyYNIipbMAD3BPh006xJrYr
sp4rOa8t3bRJEen0+4dWDTb95hSsdtvcQtA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:34 2025 by rpki-client