Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/181ff2e4-75b4-3954-8253-7776a070680a.roa
File:                     181ff2e4-75b4-3954-8253-7776a070680a.roa (raw, json)
Hash identifier:          kd7q+UETo8C9qX2wBrEhnVE7+C5UzGPjRcb2+uxalqs=
Subject key identifier:   1D:BF:A9:64:0A:D0:21:BA:C0:26:BD:CF:C1:37:3F:39:8C:24:D0:65
Certificate issuer:       /CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Certificate serial:       010D0C9F4328584B48E1BEB135BD9007A836CB40
Authority key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/181ff2e4-75b4-3954-8253-7776a070680a.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2602:fcee:ff8::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:be:b1:35:bd:90:07:a8:36:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=2c690b82-806a-4987-a617-ba6840b757c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c6:fc:fb:e7:87:7b:ff:b9:9d:f1:e4:11:ba:
                    2f:0b:23:1a:a0:eb:d2:95:2f:c7:e8:8d:ba:80:e9:
                    35:95:5f:28:0e:c8:d2:57:83:47:00:0d:4b:89:05:
                    84:5c:9c:b6:a3:c3:c9:0c:1a:09:f6:b0:0a:cc:6f:
                    1f:db:5d:e4:79:a7:54:90:2f:11:11:31:a2:d0:e1:
                    26:4c:9d:e1:1d:fe:9c:c5:76:f6:1c:5e:da:40:4c:
                    39:be:26:e3:7c:b1:6e:6d:60:55:20:e8:50:94:e4:
                    97:2d:1d:0a:fd:7a:77:91:25:ab:ec:66:0d:83:a9:
                    77:dc:af:39:db:0a:8b:dd:f3:14:f2:3a:68:e0:8b:
                    51:49:7a:80:7a:2c:33:63:17:3b:a1:17:8e:ed:b9:
                    ad:c9:74:80:9b:b0:50:8d:75:b8:d6:82:52:ab:eb:
                    a1:e4:8f:35:87:05:4d:97:b5:e1:4d:04:2d:c2:fe:
                    95:ef:fc:0f:95:3c:93:18:64:d5:19:30:ff:ad:44:
                    de:f1:b0:13:a6:a4:e7:ef:9c:8d:e3:c4:27:85:7f:
                    20:4b:da:22:4f:65:02:f6:69:81:6b:58:c1:7d:25:
                    33:33:f5:69:e5:24:e3:cc:68:06:f8:63:62:bf:b9:
                    36:94:1d:b5:76:08:f9:f7:f4:54:9c:2e:d1:d3:b5:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BF:A9:64:0A:D0:21:BA:C0:26:BD:CF:C1:37:3F:39:8C:24:D0:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/181ff2e4-75b4-3954-8253-7776a070680a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcee:ff8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:6d:c9:d7:c0:ad:b2:cc:1c:10:35:01:12:10:51:b0:25:29:
         70:23:40:01:30:eb:c5:44:55:05:b3:80:24:60:9e:b6:87:d3:
         b2:8c:9a:e6:e1:03:cb:61:c3:8d:42:1a:93:f7:07:97:78:27:
         e4:54:b2:b8:34:f4:32:fb:f4:05:95:f3:2c:ed:ee:a6:10:89:
         44:ed:13:f3:92:fc:de:68:c1:28:62:86:17:01:de:21:68:f3:
         2d:16:5d:45:af:7a:77:c6:97:1b:9f:85:dd:01:0f:14:1e:b8:
         86:a8:ac:69:83:c8:ac:53:94:9f:9f:13:fa:5b:1c:32:34:bf:
         e4:65:c9:f2:c4:0c:39:04:e9:48:4e:d4:e3:e7:fe:e9:57:86:
         1b:61:fa:eb:19:f3:cc:ae:78:ff:e6:3c:32:69:6c:29:58:a3:
         6a:f2:65:cd:9c:3e:2e:0f:b6:7c:c5:fc:9a:2f:30:4a:83:ec:
         b2:d5:19:0a:57:92:c3:81:bf:d3:21:74:f2:d9:0c:d7:13:eb:
         f7:f8:b9:8a:0b:c2:89:4b:28:c2:36:55:57:4c:35:62:9c:1d:
         7c:17:a3:ff:4a:46:8a:10:59:91:ad:0b:c9:cf:e1:5a:fe:02:
         9b:3b:f6:1c:b7:6b:ce:0a:5d:8f:33:dc:c5:81:4a:0a:c0:f7:
         b3:29:05:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4b6xNb2QB6g2y0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE4MTZhZTYtNTE4Ni00NGY3LWFlNWItZWMxMzM4Yjdh
NzdhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
MmM2OTBiODItODA2YS00OTg3LWE2MTctYmE2ODQwYjc1N2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksb8++eHe/+5nfHkEbovCyMaoOvSlS/H6I26
gOk1lV8oDsjSV4NHAA1LiQWEXJy2o8PJDBoJ9rAKzG8f213keadUkC8RETGi0OEm
TJ3hHf6cxXb2HF7aQEw5vibjfLFubWBVIOhQlOSXLR0K/Xp3kSWr7GYNg6l33K85
2wqL3fMU8jpo4ItRSXqAeiwzYxc7oReO7bmtyXSAm7BQjXW41oJSq+uh5I81hwVN
l7XhTQQtwv6V7/wPlTyTGGTVGTD/rUTe8bATpqTn75yN48QnhX8gS9oiT2UC9mmB
a1jBfSUzM/Vp5STjzGgG+GNiv7k2lB21dgj59/RUnC7R07W+8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB2/qWQK0CG6wCa9z8E3PzmMJNBlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMTgx
NmFlNi01MTg2LTQ0ZjctYWU1Yi1lYzEzMzhiN2E3N2EvMTgxZmYyZTQtNzViNC0z
OTU0LTgyNTMtNzc3NmEwNzA2ODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTE4MTZhZTYtNTE4Ni00NGY3LWFl
NWItZWMxMzM4YjdhNzdhL2UxODE2YWU2LTUxODYtNDRmNy1hZTViLWVjMTMzOGI3
YTc3YS5jcmwwHwYDVR0jBBgwFoAUzs4Ag6hVUyVkoML7oxzNirrmnAIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lMTgxNmFlNi01MTg2LTQ0ZjctYWU1Yi1lYzEz
MzhiN2E3N2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgL87g/4
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHBtydfArbLMHBA1ARIQUbAlKXAjQAEw68VEVQWzgCRgnraH07KM
mubhA8thw41CGpP3B5d4J+RUsrg09DL79AWV8yzt7qYQiUTtE/OS/N5owShihhcB
3iFo8y0WXUWvenfGlxufhd0BDxQeuIaorGmDyKxTlJ+fE/pbHDI0v+RlyfLEDDkE
6UhO1OPn/ulXhhth+usZ88yueP/mPDJpbClYo2ryZc2cPi4PtnzF/JovMEqD7LLV
GQpXksOBv9MhdPLZDNcT6/f4uYoLwolLKMI2VVdMNWKcHXwXo/9KRooQWZGtC8nP
4Vr+Aps79hy3a84KXY8z3MWBSgrA97MpBRU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:51:26 2025 by rpki-client