Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/d3471925-05be-3c85-ab53-85a480c61d14.roa
File:                     d3471925-05be-3c85-ab53-85a480c61d14.roa (raw, json)
Hash identifier:          2UIx9tluavAOiuxDCqsN/0AyVf39OsAJdtHhcUfGnFc=
Subject key identifier:   8C:3B:EA:67:0D:49:2C:8F:17:0F:8A:16:FE:44:0C:52:5A:F8:91:82
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584B4FDC75235E8EC749D957A780
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/d3471925-05be-3c85-ab53-85a480c61d14.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     396908
IP address blocks:        2602:f956:3a::/48 maxlen: 48
                          2602:f956:3b::/48 maxlen: 48
                          2602:f956:3c::/48 maxlen: 48
                          2602:f956:3d::/48 maxlen: 48
                          2602:f956:3e::/48 maxlen: 48
                          2602:f956:3f::/48 maxlen: 48
                          2602:f956:40::/48 maxlen: 48
                          2602:f956:41::/48 maxlen: 48
                          2602:f956:42::/48 maxlen: 48
                          2602:f956:43::/48 maxlen: 48
                          2602:f956:44::/48 maxlen: 48
                          2602:f956:45::/48 maxlen: 48
                          2602:f956:46::/48 maxlen: 48
                          2602:f956:47::/48 maxlen: 48
                          2602:f956:48::/48 maxlen: 48
                          2602:f956:49::/48 maxlen: 48
                          2602:f956:4a::/48 maxlen: 48
                          2602:f956:4b::/48 maxlen: 48
                          2602:f956:4c::/48 maxlen: 48
                          2602:f956:4d::/48 maxlen: 48
                          2602:f956:4e::/48 maxlen: 48
                          2602:f956:4f::/48 maxlen: 48
                          2602:f956:50::/48 maxlen: 48
                          2602:f956:51::/48 maxlen: 48
                          2602:f956:52::/48 maxlen: 48
                          2602:f956:53::/48 maxlen: 48
                          2602:f956:54::/48 maxlen: 48
                          2602:f956:55::/48 maxlen: 48
                          2602:f956:56::/48 maxlen: 48
                          2602:f956:57::/48 maxlen: 48
                          2602:f956:58::/48 maxlen: 48
                          2602:f956:59::/48 maxlen: 48
                          2602:f956:5a::/48 maxlen: 48
                          2602:f956:5b::/48 maxlen: 48
                          2602:f956:5c::/48 maxlen: 48
                          2602:f956:5d::/48 maxlen: 48
                          2602:f956:5e::/48 maxlen: 48
                          2602:f956:5f::/48 maxlen: 48
                          2602:f956:60::/48 maxlen: 48
                          2602:f956:61::/48 maxlen: 48
                          2602:f956:62::/48 maxlen: 48
                          2602:f956:63::/48 maxlen: 48
                          2602:f956:64::/48 maxlen: 48
                          2602:f956:65::/48 maxlen: 48
                          2602:f956:66::/48 maxlen: 48
                          2602:f956:67::/48 maxlen: 48
                          2602:f956:68::/48 maxlen: 48
                          2602:f956:69::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:75:23:5e:8e:c7:49:d9:57:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=d71cb33d-026c-4fa6-904c-a0d2da31a22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:7a:ba:72:4e:57:42:4f:68:49:cd:97:a2:
                    33:c9:cd:57:0f:3e:7d:cc:f4:ff:9f:d3:56:21:7a:
                    ca:6a:8a:a7:b6:36:cf:32:02:36:84:e6:62:17:b0:
                    10:9a:2c:27:18:f5:1e:16:4c:12:da:a1:f3:19:92:
                    1f:6e:e7:0e:87:5a:2c:17:1e:b0:bb:35:ca:b8:fd:
                    58:a2:b1:b6:64:3f:08:ac:eb:e4:50:11:69:af:78:
                    7e:95:8b:25:ee:0b:a5:c1:b7:49:39:8f:24:c8:b8:
                    66:c7:f3:9c:0f:ec:86:7d:d9:96:c8:56:cd:bf:df:
                    a6:71:f4:91:0d:6e:4a:fe:a8:c8:c9:29:3c:a3:2a:
                    90:dc:54:df:07:b4:b5:50:ed:c0:4f:c2:df:ae:3e:
                    0b:00:a7:a0:ba:fd:b1:2c:1f:3c:b8:9e:7a:35:29:
                    bb:b6:55:72:12:4d:ef:dd:18:93:d6:bc:ca:cc:fd:
                    2b:35:93:c7:20:ac:ee:ea:1e:70:b5:c6:a5:9b:a3:
                    fa:af:72:7b:10:b7:17:24:3c:8e:f8:ef:9e:93:5e:
                    b9:0f:5b:98:01:34:6e:07:39:b0:ed:77:3c:a7:da:
                    b7:37:bf:f1:b6:35:4c:0c:d2:d2:05:58:64:9f:f1:
                    5e:04:36:29:b9:89:3e:d5:d1:86:4b:ad:8d:70:29:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3B:EA:67:0D:49:2C:8F:17:0F:8A:16:FE:44:0C:52:5A:F8:91:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/d3471925-05be-3c85-ab53-85a480c61d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:3a::-2602:f956:69:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:2d:65:50:2c:c2:31:c1:ff:36:57:88:8a:d5:e1:0e:fb:35:
         c5:7e:5d:a1:ca:2f:06:be:d2:b9:b5:7b:a1:73:e5:8c:03:7e:
         33:81:6a:69:56:91:8c:74:78:47:d7:18:3d:4f:0a:43:cd:b1:
         3e:a0:ad:4a:61:08:47:b2:d3:f5:87:2b:1a:24:1e:3f:b1:38:
         9e:c4:a0:84:c8:0c:0f:da:a3:7e:83:4c:7a:8a:9d:02:37:33:
         fa:0b:09:bf:f5:70:1b:12:3f:85:72:fa:b9:fc:03:dc:68:4f:
         2e:75:c2:53:8f:65:bb:85:e8:51:0a:9e:5a:d2:e2:bb:45:a0:
         2e:38:59:13:4d:be:9c:5f:5f:b4:3e:32:2c:86:ac:6b:7f:2a:
         11:16:0d:84:2d:95:f1:4b:c7:17:3b:c9:ec:f9:ed:f6:f2:9f:
         31:e8:2a:2c:0a:60:e2:6f:4b:9a:e6:c3:70:34:ec:cd:1b:6e:
         b5:1c:d4:05:22:02:07:b5:32:4c:a5:88:7e:7a:27:f2:94:ad:
         8f:cc:7d:7a:85:6e:2f:79:82:75:35:5a:10:9c:28:a6:2d:c9:
         c6:e9:d4:70:07:69:ce:58:4b:45:fe:75:06:7e:7f:77:bb:3a:
         d7:f7:c0:51:2b:f9:ee:7f:2b:90:b4:7e:ab:85:0a:75:44:3f:
         22:46:63:53
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEtP3HUjXo7HSdlXp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIyYzI3Y2EtZmI3Yy00Y2FkLTlmOWItNGY3NTRmODY0
MjYzMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDcxY2IzM2QtMDI2Yy00ZmE2LTkwNGMtYTBkMmRhMzFhMjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQB6unJOV0JPaEnNl6Izyc1XDz59zPT/n9NW
IXrKaoqntjbPMgI2hOZiF7AQmiwnGPUeFkwS2qHzGZIfbucOh1osFx6wuzXKuP1Y
orG2ZD8IrOvkUBFpr3h+lYsl7gulwbdJOY8kyLhmx/OcD+yGfdmWyFbNv9+mcfSR
DW5K/qjIySk8oyqQ3FTfB7S1UO3AT8Lfrj4LAKeguv2xLB88uJ56NSm7tlVyEk3v
3RiT1rzKzP0rNZPHIKzu6h5wtcalm6P6r3J7ELcXJDyO+O+ek165D1uYATRuBzmw
7Xc8p9q3N7/xtjVMDNLSBVhkn/FeBDYpuYk+1dGGS62NcCm2LwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFIw76mcNSSyPFw+KFv5EDFJa+JGCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJj
MjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1NGY4NjQyNjMvZDM0NzE5MjUtMDViZS0z
Yzg1LWFiNTMtODVhNDgwYzYxZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIyYzI3Y2EtZmI3Yy00Y2FkLTlm
OWItNGY3NTRmODY0MjYzL2ViMmMyN2NhLWZiN2MtNGNhZC05ZjliLTRmNzU0Zjg2
NDI2My5jcmwwHwYDVR0jBBgwFoAUz7laojwbIP8QynSPJVz1CYmivlEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjJjMjdjYS1mYjdjLTRjYWQtOWY5Yi00Zjc1
NGY4NjQyNjMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwEmAvlW
ADoDBwEmAvlWAGgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAcS1lUCzCMcH/NleIitXhDvs1xX5docovBr7S
ubV7oXPljAN+M4FqaVaRjHR4R9cYPU8KQ82xPqCtSmEIR7LT9YcrGiQeP7E4nsSg
hMgMD9qjfoNMeoqdAjcz+gsJv/VwGxI/hXL6ufwD3GhPLnXCU49lu4XoUQqeWtLi
u0WgLjhZE02+nF9ftD4yLIasa38qERYNhC2V8UvHFzvJ7Pnt9vKfMegqLApg4m9L
mubDcDTszRtutRzUBSICB7UyTKWIfnon8pStj8x9eoVuL3mCdTVaEJwopi3JxunU
cAdpzlhLRf51Bn5/d7s61/fAUSv57n8rkLR+q4UKdUQ/IkZjUw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:51:15 2025 by rpki-client