Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9344251a-63d8-49bb-935c-2e451f9e5030/47cd4625-63fb-3e7c-afd0-c07f68b55d5b.roa
File:                     47cd4625-63fb-3e7c-afd0-c07f68b55d5b.roa (raw, json)
Hash identifier:          IR5bZMs60fi1JJUrZ1F1NzIYGFJX/pLDhZ+yaYeJab8=
Subject key identifier:   20:BC:3C:48:1D:C4:13:90:35:47:AE:6C:B5:0E:39:68:15:9B:D7:91
Certificate issuer:       /CN=9344251a-63d8-49bb-935c-2e451f9e5030
Certificate serial:       010D0C9F4328584B291D0212E70A62C54AA166C0
Authority key identifier: 0C:12:36:38:D7:C7:46:4F:8A:08:F1:99:D0:A5:67:EA:B4:D9:5E:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9344251a-63d8-49bb-935c-2e451f9e5030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9344251a-63d8-49bb-935c-2e451f9e5030/47cd4625-63fb-3e7c-afd0-c07f68b55d5b.roa
Signing time:             Thu 11 Sep 2025 15:54:17 +0000
ROA not before:           Thu 11 Sep 2025 15:54:17 +0000
ROA not after:            Wed 10 Dec 2025 16:54:17 +0000
asID:                     46712
IP address blocks:        2605:a500:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9344251a-63d8-49bb-935c-2e451f9e5030/9344251a-63d8-49bb-935c-2e451f9e5030.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9344251a-63d8-49bb-935c-2e451f9e5030/9344251a-63d8-49bb-935c-2e451f9e5030.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9344251a-63d8-49bb-935c-2e451f9e5030.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:1d:02:12:e7:0a:62:c5:4a:a1:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9344251a-63d8-49bb-935c-2e451f9e5030
        Validity
            Not Before: Sep 11 15:54:17 2025 GMT
            Not After : Dec 10 16:54:17 2025 GMT
        Subject: CN=8158fe9e-f0c2-42ae-850a-8ced1f5fc282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:09:ab:6a:c9:df:ac:2e:ea:e1:ca:04:a0:72:
                    a2:97:c9:e3:6e:44:f5:99:ee:3f:1c:06:24:10:bb:
                    a9:4b:a4:2d:5c:23:38:e6:12:40:99:9c:92:f3:f3:
                    49:21:8d:6e:4d:dc:cc:47:c3:98:f8:56:c0:99:6c:
                    04:0c:0b:1b:7f:b8:18:99:6b:1d:18:69:f7:63:18:
                    09:1f:3e:ba:aa:c4:de:03:43:c2:a5:be:8d:db:c4:
                    66:2a:63:0d:f0:b4:c4:a6:3e:91:84:cc:53:ae:b4:
                    e8:d8:49:5a:75:b3:9f:51:76:5b:ee:34:48:5f:71:
                    fc:1a:79:bb:c6:34:ec:7c:d1:4c:60:44:ec:3e:56:
                    7c:1e:f0:18:10:b6:72:27:15:ef:48:4e:f4:37:ba:
                    b6:27:52:df:b1:ee:d5:c9:42:ce:43:61:a3:57:83:
                    36:f7:2f:6c:4f:98:ad:fe:5a:02:60:cc:e0:b9:2d:
                    4e:b3:c8:23:fe:df:9b:96:c2:4b:62:cd:56:0c:25:
                    68:5d:88:21:06:62:dd:2f:83:50:26:c4:73:3d:13:
                    e3:c6:6b:7d:9d:d2:36:b5:5a:07:b5:af:37:e3:2e:
                    9e:ed:e2:48:16:66:8c:3a:6f:71:36:a2:c8:92:34:
                    2a:5e:ef:11:3f:1b:cb:c2:98:1b:65:3b:6f:be:4f:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BC:3C:48:1D:C4:13:90:35:47:AE:6C:B5:0E:39:68:15:9B:D7:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9344251a-63d8-49bb-935c-2e451f9e5030/47cd4625-63fb-3e7c-afd0-c07f68b55d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9344251a-63d8-49bb-935c-2e451f9e5030/9344251a-63d8-49bb-935c-2e451f9e5030.crl

            X509v3 Authority Key Identifier:
                keyid:0C:12:36:38:D7:C7:46:4F:8A:08:F1:99:D0:A5:67:EA:B4:D9:5E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9344251a-63d8-49bb-935c-2e451f9e5030.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a500:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:31:3c:9b:e5:14:f9:4a:0a:d2:61:fd:33:db:4e:61:c1:43:
         89:72:51:53:12:8c:04:dc:5a:4f:b7:8a:39:b2:03:f9:1c:40:
         55:9c:5c:7b:c8:d3:c5:a7:44:f4:d7:f1:e4:d2:3f:29:ad:4d:
         91:26:7c:d3:e8:9f:ce:40:7c:a2:32:53:b5:08:85:03:d7:71:
         31:1c:0d:4b:4a:3c:67:e3:9a:08:73:39:9e:07:1b:84:40:95:
         0a:42:df:ed:81:a0:28:06:c3:07:d7:ce:a9:3d:2e:07:9a:41:
         a5:fe:fd:c4:80:f2:11:84:c3:27:50:25:f8:aa:00:33:54:54:
         8b:c5:16:ad:63:cb:5c:c0:98:7c:8b:09:6e:84:4d:91:52:01:
         5e:ac:87:45:ea:f8:c2:cd:f0:ae:81:dc:c7:21:60:59:33:7f:
         21:f7:7f:a9:ba:0d:cd:18:da:3c:12:a0:50:b7:14:2f:53:f8:
         70:f4:ce:78:24:3b:d1:af:78:d7:b4:da:ab:33:c1:20:e9:20:
         65:95:0c:0f:8f:b1:25:fc:f2:d1:eb:97:95:ca:52:11:22:17:
         ab:6d:34:72:c4:53:6c:0f:33:a6:6f:4a:71:dc:f1:5e:e4:40:
         43:34:51:cc:15:1a:2c:d3:2f:7c:ab:4f:51:40:51:94:28:31:
         84:f2:aa:05
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEspHQIS5wpixUqhZsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NDI1MWEtNjNkOC00OWJiLTkzNWMtMmU0NTFmOWU1
MDMwMB4XDTI1MDkxMTE1NTQxN1oXDTI1MTIxMDE2NTQxN1owLzEtMCsGA1UEAxMk
ODE1OGZlOWUtZjBjMi00MmFlLTg1MGEtOGNlZDFmNWZjMjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwmrasnfrC7q4coEoHKil8njbkT1me4/HAYk
ELupS6QtXCM45hJAmZyS8/NJIY1uTdzMR8OY+FbAmWwEDAsbf7gYmWsdGGn3YxgJ
Hz66qsTeA0PCpb6N28RmKmMN8LTEpj6RhMxTrrTo2EladbOfUXZb7jRIX3H8Gnm7
xjTsfNFMYETsPlZ8HvAYELZyJxXvSE70N7q2J1Lfse7VyULOQ2GjV4M29y9sT5it
/loCYMzguS1Os8gj/t+blsJLYs1WDCVoXYghBmLdL4NQJsRzPRPjxmt9ndI2tVoH
ta834y6e7eJIFmaMOm9xNqLIkjQqXu8RPxvLwpgbZTtvvk96pQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCC8PEgdxBOQNUeubLUOOWgVm9eRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85MzQ0
MjUxYS02M2Q4LTQ5YmItOTM1Yy0yZTQ1MWY5ZTUwMzAvNDdjZDQ2MjUtNjNmYi0z
ZTdjLWFmZDAtYzA3ZjY4YjU1ZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTM0NDI1MWEtNjNkOC00OWJiLTkz
NWMtMmU0NTFmOWU1MDMwLzkzNDQyNTFhLTYzZDgtNDliYi05MzVjLTJlNDUxZjll
NTAzMC5jcmwwHwYDVR0jBBgwFoAUDBI2ONfHRk+KCPGZ0KVn6rTZXqcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy85MzQ0MjUxYS02M2Q4LTQ5YmItOTM1Yy0yZTQ1
MWY5ZTUwMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgWlABAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANTE8m+UU+UoK0mH9M9tOYcFDiXJRUxKMBNxaT7eKObID+RxAVZxc
e8jTxadE9Nfx5NI/Ka1NkSZ80+ifzkB8ojJTtQiFA9dxMRwNS0o8Z+OaCHM5ngcb
hECVCkLf7YGgKAbDB9fOqT0uB5pBpf79xIDyEYTDJ1Al+KoAM1RUi8UWrWPLXMCY
fIsJboRNkVIBXqyHRer4ws3wroHcxyFgWTN/Ifd/qboNzRjaPBKgULcUL1P4cPTO
eCQ70a9417TaqzPBIOkgZZUMD4+xJfzy0euXlcpSESIXq200csRTbA8zpm9Kcdzx
XuRAQzRRzBUaLNMvfKtPUUBRlCgxhPKqBQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:07 2025 by rpki-client