Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa
File:                     2659cabb-8358-3f3a-a793-2978e3142187.roa (raw, json)
Hash identifier:          gZm2UNAfWo7NCxvE0j2wJvpEOTsKLtp0CmZUSvRZaoo=
Subject key identifier:   4E:EB:65:E0:E5:54:3E:67:BC:E4:65:76:11:0C:76:C1:7A:76:0A:77
Certificate issuer:       /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial:       010D0C9F4328584B2761774B1E59CB5762FE3818
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     4
IP address blocks:        2001:500:200::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:77:4b:1e:59:cb:57:62:fe:38:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=3d215adb-32b8-4b7f-af99-e04709fb08c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:77:3d:65:8e:61:c2:32:ac:1e:bf:03:35:f2:
                    b4:96:2b:c3:86:f1:d5:ee:21:67:e8:80:7c:24:f2:
                    ea:79:7d:c9:31:81:0b:b6:88:bc:56:f1:55:01:e0:
                    3f:63:3d:f6:01:c0:62:76:68:01:2a:b9:95:23:e3:
                    18:d1:cf:3c:69:b7:e3:1d:0d:c8:7f:07:30:7e:a7:
                    f0:47:d5:73:56:72:0c:9a:b7:1a:2d:98:a4:71:fa:
                    16:76:52:07:cd:b8:63:c9:cb:31:eb:fd:a3:51:92:
                    91:95:55:16:ba:e9:4d:91:e8:d5:c8:b6:3f:86:4b:
                    d5:bb:a4:ec:4a:3f:7f:26:16:a9:31:9b:f7:dc:8a:
                    49:91:f8:ac:05:73:74:53:6b:80:b0:68:29:22:eb:
                    b4:49:d5:f8:c9:f7:3f:ec:d0:3a:80:76:27:1a:8e:
                    0b:8c:b0:b7:ea:88:05:86:65:de:57:3b:37:db:1c:
                    70:cf:40:7d:00:f3:2c:71:47:0b:0d:6f:84:f5:19:
                    d9:0f:e9:0b:f2:c9:9f:cb:98:4c:36:90:38:f5:a4:
                    ed:ef:b9:e4:d1:2a:b1:e2:e6:7f:f5:8f:29:db:3e:
                    da:04:79:e8:11:43:4d:01:a9:51:11:69:91:94:b9:
                    74:e6:d2:ad:d0:9d:6e:57:ab:4e:0f:4b:b2:d8:bd:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EB:65:E0:E5:54:3E:67:BC:E4:65:76:11:0C:76:C1:7A:76:0A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl

            X509v3 Authority Key Identifier:
                keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:bb:d7:2e:78:8a:8f:d9:89:88:7c:30:bf:4a:22:6a:12:ec:
         68:bc:8d:bf:a9:ea:76:71:6d:ee:01:87:ad:9d:5e:cf:05:9e:
         b0:1f:63:19:2b:cc:bc:39:99:63:41:ef:cf:9d:eb:11:05:67:
         40:4a:2d:d1:cb:0e:2d:e5:38:59:d9:ab:29:80:b9:db:36:87:
         99:c2:51:46:61:88:00:e9:09:46:6d:3a:ce:e0:7d:48:8e:57:
         05:aa:e5:f7:44:10:69:47:aa:66:fe:ae:ad:3e:cc:c1:95:5c:
         0a:f2:37:65:36:6c:ee:b5:2f:8a:a8:bf:70:6c:f9:d2:7b:32:
         b7:da:48:b3:8a:d1:66:06:ab:d4:fa:68:b5:4a:2d:5d:92:28:
         b7:59:25:2b:a1:78:94:b0:34:42:2a:b4:1d:9e:3f:3e:71:05:
         6a:fd:51:92:57:ac:d5:22:d1:41:08:03:82:75:20:b6:7d:10:
         8e:77:e4:b6:df:2d:6c:82:36:40:e5:ce:18:26:4c:94:f5:36:
         75:ff:f7:bb:21:1f:c5:ae:fb:17:dc:51:06:32:9c:09:57:51:
         6b:8c:c4:d2:d1:bd:5e:be:2e:88:92:ab:05:f8:a9:a7:6b:f2:
         12:89:da:09:78:26:9f:54:15:51:d6:50:68:3e:dc:08:98:6e:
         2c:a5:57:4e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsnYXdLHlnLV2L+OBgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk
ZWEzMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk
M2QyMTVhZGItMzJiOC00YjdmLWFmOTktZTA0NzA5ZmIwOGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHc9ZY5hwjKsHr8DNfK0livDhvHV7iFn6IB8
JPLqeX3JMYELtoi8VvFVAeA/Yz32AcBidmgBKrmVI+MY0c88abfjHQ3Ifwcwfqfw
R9VzVnIMmrcaLZikcfoWdlIHzbhjycsx6/2jUZKRlVUWuulNkejVyLY/hkvVu6Ts
Sj9/JhapMZv33IpJkfisBXN0U2uAsGgpIuu0SdX4yfc/7NA6gHYnGo4LjLC36ogF
hmXeVzs32xxwz0B9APMscUcLDW+E9RnZD+kL8smfy5hMNpA49aTt77nk0Sqx4uZ/
9Y8p2z7aBHnoEUNNAalREWmRlLl05tKt0J1uV6tOD0uy2L1u5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE7rZeDlVD5nvORldhEMdsF6dgp3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0
YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvMjY1OWNhYmItODM1OC0z
ZjNhLWE3OTMtMjk3OGUzMTQyMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz
YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4
ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz
MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFAAIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHO71y54io/ZiYh8ML9KImoS7Gi8jb+p6nZxbe4Bh62dXs8FnrAf
YxkrzLw5mWNB78+d6xEFZ0BKLdHLDi3lOFnZqymAuds2h5nCUUZhiADpCUZtOs7g
fUiOVwWq5fdEEGlHqmb+rq0+zMGVXAryN2U2bO61L4qov3Bs+dJ7MrfaSLOK0WYG
q9T6aLVKLV2SKLdZJSuheJSwNEIqtB2ePz5xBWr9UZJXrNUi0UEIA4J1ILZ9EI53
5LbfLWyCNkDlzhgmTJT1NnX/97shH8Wu+xfcUQYynAlXUWuMxNLRvV6+LoiSqwX4
qadr8hKJ2gl4Jp9UFVHWUGg+3AiYbiylV04=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:35 2025 by rpki-client