Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa
File:                     19707577-a550-35cc-9aa1-82013a93096f.roa (raw, json)
Hash identifier:          5uUpBqINc66NM0gxAV9K8ULEHpZGg3W7MoHfGet72Ok=
Subject key identifier:   DD:99:B1:83:CF:35:C5:BC:6B:36:04:4F:05:6E:85:C9:9E:3A:C9:B4
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584B715CA3AC119D63F2670B3C40
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     14230
IP address blocks:        2001:49f8::/32 maxlen: 48
                          2604:9b00::/32 maxlen: 48
                          2604:ac40::/32 maxlen: 48
                          2607:fb20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a3:ac:11:9d:63:f2:67:0b:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=dbccd1ed-adce-4639-885d-f87fc79af2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:c2:ea:df:f4:ae:96:15:7a:0d:6e:8f:66:
                    a5:b0:ef:e3:7e:6f:35:68:b4:c5:ac:a9:fa:44:58:
                    54:90:90:3f:ab:ff:9b:85:7b:28:29:27:1e:1a:d5:
                    30:3f:3c:dc:ef:15:10:1c:49:ca:89:ce:b4:40:f3:
                    12:d7:09:24:74:1e:f4:57:83:ee:97:7b:8f:45:f9:
                    a3:90:cd:1d:0b:6f:3c:79:a5:e7:91:ae:74:94:c0:
                    72:02:63:0c:a3:e2:4c:08:81:2a:3a:93:ea:e0:71:
                    51:cc:7c:23:f6:a6:bb:ff:f2:d1:9e:d1:3d:13:9f:
                    5f:c5:da:cc:dd:41:2a:91:4c:c7:45:a3:d4:29:29:
                    3d:9c:54:83:31:02:29:16:64:a9:0e:32:c4:04:5c:
                    4f:a8:f9:24:21:78:d5:59:51:67:1e:0d:d7:eb:aa:
                    81:72:1d:c9:d0:db:17:a8:4a:44:ea:04:33:ce:4a:
                    f2:77:e4:b9:62:f6:99:90:71:ce:10:56:4d:e9:41:
                    ac:14:1b:9b:98:43:39:b8:3b:8e:e6:82:5c:a5:20:
                    fe:26:32:d1:46:b1:a2:35:ac:e7:ae:9c:32:fd:30:
                    de:36:f2:76:ec:7a:35:f0:0b:3e:10:a7:d4:a0:30:
                    84:11:0c:b2:92:e5:fc:48:f6:d3:dd:8f:81:e8:38:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:99:B1:83:CF:35:C5:BC:6B:36:04:4F:05:6E:85:C9:9E:3A:C9:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f8::/32
                  2604:9b00::/32
                  2604:ac40::/32
                  2607:fb20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1f:64:a4:e1:6c:9a:fe:c5:36:81:7c:1d:5b:af:23:9a:ab:
         7f:b6:39:7f:c2:dd:42:34:d6:d5:76:85:46:63:dd:9a:db:60:
         3c:c0:1f:f0:0e:4c:30:3b:48:51:73:76:4c:94:61:85:9c:bc:
         7f:4b:4a:b6:d8:eb:85:8b:67:c1:36:3e:f1:81:b3:f6:8b:1f:
         11:30:c8:42:3b:23:4d:5c:15:91:55:4e:1d:48:3e:0a:4c:b8:
         0b:3d:6e:78:3c:83:de:71:7c:f4:b3:26:42:e4:ff:0f:f0:17:
         92:0a:3b:02:13:86:6d:fb:79:31:5f:fa:9e:32:c1:f9:90:ea:
         03:a3:81:ea:88:d7:3c:20:76:38:a7:ac:ac:f7:62:76:dc:d5:
         80:d8:4b:1c:13:55:68:62:dc:22:8d:ef:57:d4:12:1d:4d:3c:
         54:29:f5:30:70:a3:60:43:67:10:e5:b1:65:8d:7e:e2:03:1a:
         56:f0:60:72:76:41:4a:4b:83:fd:0f:ba:04:c3:5c:be:fe:8e:
         e2:68:6d:d2:eb:d1:fa:d0:bc:2b:91:bc:7f:9a:8d:51:62:5b:
         f7:de:1e:5d:48:0f:49:c9:52:70:50:ee:17:8f:db:d7:be:49:
         e8:f8:fd:22:57:57:0a:dd:72:11:db:83:60:5d:4b:b8:a5:90:
         a4:67:5d:a7
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEtxXKOsEZ1j8mcLPEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk
Y2IzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk
ZGJjY2QxZWQtYWRjZS00NjM5LTg4NWQtZjg3ZmM3OWFmMmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ADC6t/0rpYVeg1uj2alsO/jfm81aLTFrKn6
RFhUkJA/q/+bhXsoKSceGtUwPzzc7xUQHEnKic60QPMS1wkkdB70V4Pul3uPRfmj
kM0dC288eaXnka50lMByAmMMo+JMCIEqOpPq4HFRzHwj9qa7//LRntE9E59fxdrM
3UEqkUzHRaPUKSk9nFSDMQIpFmSpDjLEBFxPqPkkIXjVWVFnHg3X66qBch3J0NsX
qEpE6gQzzkryd+S5YvaZkHHOEFZN6UGsFBubmEM5uDuO5oJcpSD+JjLRRrGiNazn
rpwy/TDeNvJ27Ho18As+EKfUoDCEEQyykuX8SPbT3Y+B6DiVnwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFN2ZsYPPNcW8azYETwVuhcmeOsm0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm
MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvMTk3MDc1NzctYTU1MC0z
NWNjLTlhYTEtODIwMTNhOTMwOTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy
YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm
ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0
NTBlZmRjYjMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAIAFJ+AMF
ACYEmwADBQAmBKxAAwUAJgf7IDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPH2Sk4Wya/sU2gXwdW68jmqt/
tjl/wt1CNNbVdoVGY92a22A8wB/wDkwwO0hRc3ZMlGGFnLx/S0q22OuFi2fBNj7x
gbP2ix8RMMhCOyNNXBWRVU4dSD4KTLgLPW54PIPecXz0syZC5P8P8BeSCjsCE4Zt
+3kxX/qeMsH5kOoDo4HqiNc8IHY4p6ys92J23NWA2EscE1VoYtwije9X1BIdTTxU
KfUwcKNgQ2cQ5bFljX7iAxpW8GBydkFKS4P9D7oEw1y+/o7iaG3S69H60Lwrkbx/
mo1RYlv33h5dSA9JyVJwUO4Xj9vXvkno+P0iV1cK3XIR24NgXUu4pZCkZ12n
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:18:02 2025 by rpki-client