Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/b12cfdaa-6423-367c-9b22-98354d5a010c.roa
File:                     b12cfdaa-6423-367c-9b22-98354d5a010c.roa (raw, json)
Hash identifier:          KqPyeA9rfVYc8nqkxgE6PS8xRqKaKtD8zYao2yQkPSg=
Subject key identifier:   6B:3B:F7:15:58:7A:01:37:31:35:13:68:99:5E:C6:40:7A:82:04:A0
Certificate issuer:       /CN=1c636f45-fa6a-4556-b6ee-5189124d0893
Certificate serial:       010D0C9F4328584AF7EBE5C246CEF005F12C8AF0
Authority key identifier: 72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/b12cfdaa-6423-367c-9b22-98354d5a010c.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     13327
IP address blocks:        2605:aa00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:e5:c2:46:ce:f0:05:f1:2c:8a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c636f45-fa6a-4556-b6ee-5189124d0893
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=44294f56-430f-45b4-81f1-835509b62a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:d0:d2:9f:e5:49:ff:f4:28:11:db:47:e9:
                    87:38:01:cc:81:a0:76:3a:dc:7d:8e:61:8a:c4:ff:
                    bb:70:62:f8:7f:1b:0b:b4:93:fc:cb:85:f0:77:e2:
                    02:f1:6b:ba:8c:20:7b:65:2d:86:ec:8e:b6:90:6c:
                    71:1b:2a:c0:7b:74:7a:1d:47:b4:ad:1b:4f:b8:4b:
                    7d:e0:b2:d0:b2:b8:fa:88:3e:df:89:9a:55:4c:52:
                    12:73:3a:bb:b4:a6:e3:a9:4e:3a:41:3a:b1:16:c2:
                    d8:2a:85:26:b2:55:b1:6f:41:fd:e4:14:92:42:76:
                    d7:56:7b:24:48:fe:dc:62:9b:7e:af:2a:ed:29:7b:
                    69:7b:3c:aa:da:57:eb:26:0a:72:4d:a9:f5:de:9d:
                    8e:5a:53:b9:d9:38:b9:7e:56:3f:b0:b7:69:c8:1d:
                    7b:0c:29:2a:8a:28:3d:fb:ec:a0:06:9a:5c:59:03:
                    5d:0f:7e:59:03:a0:d3:06:29:f8:a2:81:7e:f6:81:
                    3b:81:29:c8:f6:d7:2b:45:1c:4e:21:47:ba:28:ac:
                    0d:18:bf:1c:be:50:fb:71:35:44:b2:c6:05:41:9d:
                    d6:65:27:09:d1:bd:a9:79:b9:63:b0:96:be:6a:d4:
                    ed:2d:94:91:c5:eb:f2:b2:b1:4d:40:10:a4:dd:d2:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3B:F7:15:58:7A:01:37:31:35:13:68:99:5E:C6:40:7A:82:04:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/b12cfdaa-6423-367c-9b22-98354d5a010c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.crl

            X509v3 Authority Key Identifier:
                keyid:72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:aa00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e0:1f:0d:a9:3c:1e:d6:2b:8e:c9:6c:cc:ae:cb:bd:c4:81:
         5e:7c:46:3d:59:99:0a:79:78:4e:da:e3:ff:dd:ee:56:9d:c2:
         0d:12:bd:12:21:a3:5f:92:b2:62:cf:fa:e3:f7:7b:e5:b6:38:
         0a:08:17:b8:1f:a9:9d:87:d7:21:15:86:01:e7:53:90:f3:63:
         5f:7e:60:12:a0:f2:16:33:59:09:2b:f3:dd:6e:62:2d:7b:13:
         c1:7e:62:e5:b6:22:01:38:39:56:93:59:32:82:dd:32:d9:66:
         73:7c:d5:61:51:a0:38:8b:8c:97:af:bf:c1:46:5d:09:04:42:
         43:b0:20:02:d9:5c:4c:18:de:76:1c:46:e5:1d:9d:86:bb:8f:
         fc:67:f0:e0:41:f3:d0:4d:a4:8f:71:f1:2c:ec:b0:75:cd:e1:
         05:4b:f3:ba:6d:c9:9c:9d:e5:55:d2:01:fa:19:77:94:3e:b8:
         fa:c5:fd:ae:63:c3:b6:73:ee:bc:66:69:de:d3:5c:62:fd:38:
         55:e9:12:5b:0a:e6:8f:93:e9:77:a8:b9:0b:5c:97:c2:ff:ff:
         2b:d0:99:e3:f6:d0:76:a9:91:e1:e6:03:2e:0d:5d:68:c5:89:
         d9:7c:42:0b:8c:23:49:1a:09:64:d8:6d:7c:cd:53:af:57:4c:
         4f:1e:f6:72
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr36+XCRs7wBfEsivAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM2MzZmNDUtZmE2YS00NTU2LWI2ZWUtNTE4OTEyNGQw
ODkzMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk
NDQyOTRmNTYtNDMwZi00NWI0LTgxZjEtODM1NTA5YjYyYTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndLQ0p/lSf/0KBHbR+mHOAHMgaB2Otx9jmGK
xP+7cGL4fxsLtJP8y4Xwd+IC8Wu6jCB7ZS2G7I62kGxxGyrAe3R6HUe0rRtPuEt9
4LLQsrj6iD7fiZpVTFISczq7tKbjqU46QTqxFsLYKoUmslWxb0H95BSSQnbXVnsk
SP7cYpt+ryrtKXtpezyq2lfrJgpyTan13p2OWlO52Ti5flY/sLdpyB17DCkqiig9
++ygBppcWQNdD35ZA6DTBin4ooF+9oE7gSnI9tcrRRxOIUe6KKwNGL8cvlD7cTVE
ssYFQZ3WZScJ0b2pebljsJa+atTtLZSRxevysrFNQBCk3dKASwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGs79xVYegE3MTUTaJlexkB6ggSgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xYzYz
NmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5MTI0ZDA4OTMvYjEyY2ZkYWEtNjQyMy0z
NjdjLTliMjItOTgzNTRkNWEwMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWM2MzZmNDUtZmE2YS00NTU2LWI2
ZWUtNTE4OTEyNGQwODkzLzFjNjM2ZjQ1LWZhNmEtNDU1Ni1iNmVlLTUxODkxMjRk
MDg5My5jcmwwHwYDVR0jBBgwFoAUcnrfnS8r1FDBqWTDEQ6QFIhxuP8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xYzYzNmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5
MTI0ZDA4OTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWqADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA74B8NqTwe1iuOyWzMrsu9xIFefEY9WZkKeXhO2uP/3e5WncINEr0S
IaNfkrJiz/rj93vltjgKCBe4H6mdh9chFYYB51OQ82NffmASoPIWM1kJK/PdbmIt
exPBfmLltiIBODlWk1kygt0y2WZzfNVhUaA4i4yXr7/BRl0JBEJDsCAC2VxMGN52
HEblHZ2Gu4/8Z/DgQfPQTaSPcfEs7LB1zeEFS/O6bcmcneVV0gH6GXeUPrj6xf2u
Y8O2c+68Zmne01xi/ThV6RJbCuaPk+l3qLkLXJfC//8r0Jnj9tB2qZHh5gMuDV1o
xYnZfEILjCNJGglk2G18zVOvV0xPHvZy
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:17 2025 by rpki-client