Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa
File:                     89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa (raw, json)
Hash identifier:          r/DVC7tklhfKy0yGJpuXuaITx6UOCGUbHnHZuaQH5Nw=
Subject key identifier:   38:BE:16:44:F2:09:4A:4F:A3:F4:EE:52:92:DF:2F:19:61:31:DB:F2
Certificate issuer:       /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
Certificate serial:       010D0C9F4328584B891765087B9DBE95A7E1FF20
Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     14717
IP address blocks:        2607:fd90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:65:08:7b:9d:be:95:a7:e1:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=ef0aefca-8b7c-4837-947c-37ae844bb0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:80:d1:d5:3a:91:be:09:be:e7:b2:6b:10:
                    19:7c:0f:2b:85:8f:a9:d1:7b:ea:03:54:28:97:a0:
                    26:3a:4d:04:7f:99:dc:98:40:52:f6:7d:99:b6:5a:
                    4b:d6:e7:8e:ea:7b:56:ec:09:bb:19:2f:97:7b:2a:
                    fc:a0:5c:9c:cf:9e:1f:d4:04:d9:c7:70:9e:90:7c:
                    8e:43:53:15:95:c5:95:b3:d9:8f:55:57:72:81:6b:
                    b6:18:eb:14:ef:82:6c:37:a4:c0:f7:f6:21:11:6a:
                    61:9a:30:a7:c5:a4:2e:e3:a7:20:cf:0a:7d:87:ee:
                    40:66:06:09:86:36:af:ad:c2:c8:1d:66:4b:e1:38:
                    60:c5:b1:c0:43:8c:ff:7a:05:27:59:67:1e:90:22:
                    c7:5d:8f:2a:66:f1:32:ff:d8:97:4d:de:16:ac:bc:
                    3c:0a:ab:4f:c9:eb:63:94:68:af:08:3b:6f:67:4f:
                    87:ac:7b:83:32:6b:85:d5:30:76:3c:f6:76:97:9d:
                    3c:e1:bd:9d:9c:c8:4e:9c:16:8d:b4:39:64:f1:ec:
                    54:7c:43:02:cb:29:8f:5e:7f:cc:1d:f3:a3:9e:90:
                    79:5c:10:40:c4:d7:96:af:5d:42:b2:a2:e9:39:5b:
                    e9:00:00:70:b2:39:73:71:6f:50:6e:89:52:e2:1d:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BE:16:44:F2:09:4A:4F:A3:F4:EE:52:92:DF:2F:19:61:31:DB:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl

            X509v3 Authority Key Identifier:
                keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fd90::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:8c:cb:ce:65:05:69:3d:b1:67:ca:49:93:94:d7:15:06:f0:
         ec:20:40:b0:ee:01:f2:53:a3:84:d7:3d:74:85:0a:d0:f6:c6:
         0b:88:14:c0:b5:5d:d4:e9:47:4e:26:5d:1f:ef:e4:f4:c2:ad:
         73:84:17:93:43:d4:3c:38:3e:40:69:5b:fa:5c:a9:9c:ba:87:
         cb:39:be:39:2c:7e:9c:04:30:93:72:a0:46:a6:7e:4d:f0:29:
         ec:3e:ba:ee:39:46:9f:32:b5:34:07:36:0a:30:9a:d3:0a:79:
         c0:d3:3d:ad:f6:d3:8c:52:a8:4d:56:01:16:4c:c8:91:10:c9:
         1c:10:4a:f0:6a:79:75:6b:d7:cc:d8:30:bf:8a:15:5c:5e:f4:
         02:04:dd:8a:39:43:58:ba:06:f5:7a:e8:b0:7a:df:3f:99:8c:
         df:15:30:ef:76:b7:85:d4:19:ca:88:d7:7e:fe:e3:5c:45:cf:
         1a:07:39:f0:66:c0:0e:f4:68:ed:e1:72:fc:84:06:c4:ce:b7:
         e3:2c:83:d9:44:63:5a:d9:73:90:57:1e:01:36:88:1c:5a:bf:
         b6:3a:0b:c8:70:8d:b6:b1:df:1f:16:b9:6e:29:7f:95:4f:77:
         dc:3b:84:68:97:5e:14:93:8a:32:d3:17:bb:6a:95:79:a2:cb:
         d8:19:5c:a9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuJF2UIe52+lafh/yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3
ZTA1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
ZWYwYWVmY2EtOGI3Yy00ODM3LTk0N2MtMzdhZTg0NGJiMGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnGA0dU6kb4JvueyaxAZfA8rhY+p0XvqA1Qo
l6AmOk0Ef5ncmEBS9n2ZtlpL1ueO6ntW7Am7GS+Xeyr8oFycz54f1ATZx3CekHyO
Q1MVlcWVs9mPVVdygWu2GOsU74JsN6TA9/YhEWphmjCnxaQu46cgzwp9h+5AZgYJ
hjavrcLIHWZL4ThgxbHAQ4z/egUnWWcekCLHXY8qZvEy/9iXTd4WrLw8CqtPyetj
lGivCDtvZ0+HrHuDMmuF1TB2PPZ2l5084b2dnMhOnBaNtDlk8exUfEMCyymPXn/M
HfOjnpB5XBBAxNeWr11CsqLpOVvpAABwsjlzcW9QbolS4h3RXwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDi+FkTyCUpPo/TuUpLfLxlhMdvyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1
YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvODljZWI3M2MtYjNmNy0z
Y2YzLWE3MDctYTU4MWU1M2FmZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi
MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj
N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx
N2VhYzdlMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9kDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCYjMvOZQVpPbFnykmTlNcVBvDsIECw7gHyU6OE1z10hQrQ9sYLiBTA
tV3U6UdOJl0f7+T0wq1zhBeTQ9Q8OD5AaVv6XKmcuofLOb45LH6cBDCTcqBGpn5N
8CnsPrruOUafMrU0BzYKMJrTCnnA0z2t9tOMUqhNVgEWTMiREMkcEErwanl1a9fM
2DC/ihVcXvQCBN2KOUNYugb1euiwet8/mYzfFTDvdreF1BnKiNd+/uNcRc8aBznw
ZsAO9Gjt4XL8hAbEzrfjLIPZRGNa2XOQVx4BNogcWr+2OgvIcI22sd8fFrluKX+V
T3fcO4Rol14Uk4oy0xe7apV5osvYGVyp
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:24 2025 by rpki-client