Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/1caee2e0-468c-3132-8bcf-027645336789.roa
File:                     1caee2e0-468c-3132-8bcf-027645336789.roa (raw, json)
Hash identifier:          JjRXVK9Pl8ZrblAhF+CzMPxKTcZrmNJhA1LXY8cjpzs=
Subject key identifier:   6E:4A:30:BB:6D:81:96:46:7F:56:B4:6C:B8:EA:B7:1F:B5:19:72:6A
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F4328584B8EACDFF0C79722AE82297F60
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/1caee2e0-468c-3132-8bcf-027645336789.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     19471
IP address blocks:        2606:6b00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:df:f0:c7:97:22:ae:82:29:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=c278c58a-56af-42f1-ab9b-1cf9206570a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7f:a2:32:0e:9a:8d:98:87:33:62:cd:0e:03:
                    89:6f:ac:fe:f6:b5:7b:60:a1:93:d2:20:73:72:00:
                    ff:2a:87:a2:67:7e:c6:26:0a:fd:dc:4e:9b:5d:81:
                    88:40:96:ac:e4:db:0d:94:ac:8d:d9:18:8b:fe:c8:
                    cb:b1:45:53:ec:f7:b0:87:55:19:4b:13:34:30:39:
                    f8:5d:10:3b:8a:f3:41:69:42:9e:24:af:59:1e:2a:
                    27:e5:85:31:90:7a:34:8d:94:34:24:ec:1d:0f:b0:
                    9f:72:31:75:32:fa:aa:23:32:ef:25:3b:35:11:2e:
                    ec:31:d9:eb:2a:c3:3f:29:f6:6d:ea:2a:5b:c3:cf:
                    1a:61:31:30:de:85:04:7a:e0:2a:cd:1d:e3:58:f8:
                    eb:35:ce:7d:2d:c6:78:ab:64:2c:8b:7d:a1:fc:0b:
                    ef:f6:f6:8c:78:f5:23:9c:c4:7c:8a:a4:a9:b4:31:
                    c4:49:7b:22:a8:f9:e7:93:48:e5:f8:f4:12:d6:08:
                    03:c4:c2:28:ca:0b:d6:d3:15:cb:6e:4b:96:25:09:
                    60:bd:b7:dc:22:f2:1a:06:ac:1b:27:26:3b:7c:ba:
                    02:5e:01:65:e8:62:96:4c:4f:13:27:31:a9:c7:83:
                    37:02:85:6a:95:da:da:3f:82:cb:81:55:8c:e3:13:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4A:30:BB:6D:81:96:46:7F:56:B4:6C:B8:EA:B7:1F:B5:19:72:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/1caee2e0-468c-3132-8bcf-027645336789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f3:8b:31:94:98:e3:eb:cf:ca:c5:08:3d:1a:29:d8:2f:5b:
         7b:d6:fe:17:b1:1a:87:05:fe:4f:b8:5e:aa:36:e7:f9:34:7b:
         26:0b:41:c9:b9:c8:0b:66:b6:ea:37:75:97:4b:76:98:ef:7e:
         96:cb:8d:7e:46:a4:49:40:9a:03:09:52:97:e0:ee:06:d5:39:
         0c:7f:37:75:b0:6d:02:6c:0d:aa:1b:f1:a0:2f:ac:3f:c3:fe:
         52:6f:fd:c0:0d:34:05:5d:12:7d:f7:6e:ed:4d:ab:50:b2:4b:
         81:02:0c:92:6e:9e:35:5e:13:4f:67:ba:1e:93:62:6e:06:a1:
         35:36:1a:5f:d8:f8:d0:71:e0:df:f5:0d:0a:d7:05:21:09:a8:
         c7:a4:b8:d1:2b:1a:a8:72:ee:c2:9f:1f:3f:92:ff:b6:c1:d1:
         4a:b2:d9:fb:9f:76:63:0c:f5:cf:e1:44:c8:58:51:32:df:96:
         d2:cc:c0:c7:0a:13:f5:12:08:41:79:e2:23:1b:a9:e2:cb:9d:
         49:c3:d2:d1:24:a1:f7:58:a1:b9:97:69:1b:53:33:dc:48:99:
         c3:cc:13:69:ff:33:30:89:59:a7:8a:fd:4b:c1:a9:97:f6:44:
         5e:09:da:bc:64:25:1b:16:ed:5a:61:dc:cf:7e:49:00:2b:19:
         a4:60:f1:68
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuOrN/wx5ciroIpf2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZj
NWIwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
YzI3OGM1OGEtNTZhZi00MmYxLWFiOWItMWNmOTIwNjU3MGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH+iMg6ajZiHM2LNDgOJb6z+9rV7YKGT0iBz
cgD/KoeiZ37GJgr93E6bXYGIQJas5NsNlKyN2RiL/sjLsUVT7Pewh1UZSxM0MDn4
XRA7ivNBaUKeJK9ZHion5YUxkHo0jZQ0JOwdD7CfcjF1MvqqIzLvJTs1ES7sMdnr
KsM/KfZt6ipbw88aYTEw3oUEeuAqzR3jWPjrNc59LcZ4q2Qsi32h/Avv9vaMePUj
nMR8iqSptDHESXsiqPnnk0jl+PQS1ggDxMIoygvW0xXLbkuWJQlgvbfcIvIaBqwb
JyY7fLoCXgFl6GKWTE8TJzGpx4M3AoVqldraP4LLgVWM4xNAgwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG5KMLttgZZGf1a0bLjqtx+1GXJqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDll
YWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvMWNhZWUyZTAtNDY4Yy0z
MTMyLThiY2YtMDI3NjQ1MzM2Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ5ZWFhMDctOTNiZC00ZjJiLWI5
YzYtYWMxZDQxMDZjNWIwL2U0OWVhYTA3LTkzYmQtNGYyYi1iOWM2LWFjMWQ0MTA2
YzViMC5jcmwwHwYDVR0jBBgwFoAUDTlc4w0fvbZ5ih1QYOz8YldDgDUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFk
NDEwNmM1YjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZrADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBW84sxlJjj68/KxQg9GinYL1t71v4XsRqHBf5PuF6qNuf5NHsmC0HJ
ucgLZrbqN3WXS3aY736Wy41+RqRJQJoDCVKX4O4G1TkMfzd1sG0CbA2qG/GgL6w/
w/5Sb/3ADTQFXRJ9927tTatQskuBAgySbp41XhNPZ7oek2JuBqE1Nhpf2PjQceDf
9Q0K1wUhCajHpLjRKxqocu7Cnx8/kv+2wdFKstn7n3ZjDPXP4UTIWFEy35bSzMDH
ChP1EghBeeIjG6niy51Jw9LRJKH3WKG5l2kbUzPcSJnDzBNp/zMwiVmniv1LwamX
9kReCdq8ZCUbFu1aYdzPfkkAKxmkYPFo
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:08:12 2025 by rpki-client