Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/eff18ac5-ebba-3dbe-8146-c24c9fe22bc2.roa
File:                     eff18ac5-ebba-3dbe-8146-c24c9fe22bc2.roa (raw, json)
Hash identifier:          t1KX52/XRIZb5smtVQmIA6Fx5swQ4y1nYaOI9LtQXms=
Subject key identifier:   30:27:BA:DC:99:48:5C:CA:C0:97:40:F1:6F:5B:E2:13:6D:09:AD:EB
Certificate issuer:       /CN=51ca7155-bca1-46e1-9945-f2519df32314
Certificate serial:       010D0C9F4328584B8BE21E7C5F33BADD1A79C080
Authority key identifier: F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/eff18ac5-ebba-3dbe-8146-c24c9fe22bc2.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     22604
IP address blocks:        2620:138:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:1e:7c:5f:33:ba:dd:1a:79:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ca7155-bca1-46e1-9945-f2519df32314
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=b7db682b-51d6-497b-ac74-9563182ef04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:04:7b:bb:26:cc:22:41:d3:03:17:46:22:
                    14:17:a8:ba:ba:c5:9c:88:3e:0d:1a:ce:75:54:d8:
                    5c:a1:33:a7:06:11:95:63:d9:3d:f9:da:3b:a4:aa:
                    2b:5a:5d:5b:a2:8c:d8:d6:fd:a4:a4:b7:34:f2:1c:
                    95:5e:2f:03:90:00:36:c2:1f:62:03:fd:ea:a5:3a:
                    48:5d:e7:72:0d:48:3f:0b:d2:80:10:1b:99:4b:26:
                    c4:92:a3:94:42:47:77:f1:32:0f:88:69:c9:43:f4:
                    27:53:87:30:96:35:22:69:86:3c:3c:d5:f5:ce:f1:
                    63:30:0a:15:b6:81:1f:00:b8:28:56:db:3f:1a:97:
                    ae:ed:26:b7:35:cc:35:91:48:7f:e4:f6:2e:87:03:
                    64:cf:08:6d:70:0f:f2:0c:e1:12:3c:76:8f:06:13:
                    9d:a1:c0:03:7e:a5:87:3b:3d:60:f4:2d:22:25:4e:
                    16:93:d3:0c:17:28:07:dc:55:46:85:50:34:ef:96:
                    cc:34:05:fb:17:d3:58:26:02:94:fa:7e:70:2f:36:
                    ef:2c:dd:19:5a:af:ed:fc:54:ed:21:c1:7a:e9:49:
                    ee:0e:3a:4d:2e:ef:b0:88:1b:b3:6e:ce:10:d7:e8:
                    38:3b:73:a2:aa:a2:30:12:b6:97:f6:27:02:e0:c3:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:27:BA:DC:99:48:5C:CA:C0:97:40:F1:6F:5B:E2:13:6D:09:AD:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/eff18ac5-ebba-3dbe-8146-c24c9fe22bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl

            X509v3 Authority Key Identifier:
                keyid:F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:138:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:21:2d:32:a7:95:0e:cf:73:8a:9f:ff:31:2d:ed:2a:2c:f0:
         9d:d4:64:71:96:ab:cd:42:c2:5b:5d:61:af:6e:bc:43:63:2d:
         d2:2f:a7:c5:2c:23:1d:f2:ac:f6:dd:dc:f7:3c:fc:05:9a:fa:
         c1:e0:cf:e0:38:19:c0:23:85:c6:0b:86:f7:c0:ef:1e:b8:75:
         f9:0e:15:72:09:19:67:d7:e7:d0:4e:4f:c0:74:f6:e5:8f:0f:
         b7:22:ca:6b:e1:45:ea:e8:ce:3d:72:94:3c:d5:fc:aa:36:9f:
         f8:78:38:a9:99:41:9e:51:4a:2a:b5:9b:92:13:4a:f3:f9:4f:
         fe:da:23:14:a7:61:b1:bf:f0:25:16:fb:fb:f7:04:3d:87:90:
         56:b7:71:3f:8a:b1:7b:3e:5c:33:32:2e:b4:bd:95:fd:c7:7d:
         15:54:30:f2:b7:12:01:d1:12:c2:24:76:66:28:ee:79:a0:47:
         54:0e:9d:ef:44:38:02:98:55:04:f6:07:ed:2e:29:a8:f5:af:
         4c:a1:93:81:c9:24:29:bb:59:00:ad:95:5b:96:27:89:c7:66:
         32:be:f6:fb:ea:95:39:f9:90:37:54:da:b7:83:df:0b:b2:21:
         3d:1a:d0:b8:c2:1a:df:0a:62:6c:ca:3f:ed:19:de:af:58:ab:
         a5:84:b9:29
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuL4h58XzO63Rp5wIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFjYTcxNTUtYmNhMS00NmUxLTk5NDUtZjI1MTlkZjMy
MzE0MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
YjdkYjY4MmItNTFkNi00OTdiLWFjNzQtOTU2MzE4MmVmMDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhUEe7smzCJB0wMXRiIUF6i6usWciD4NGs51
VNhcoTOnBhGVY9k9+do7pKorWl1boozY1v2kpLc08hyVXi8DkAA2wh9iA/3qpTpI
XedyDUg/C9KAEBuZSybEkqOUQkd38TIPiGnJQ/QnU4cwljUiaYY8PNX1zvFjMAoV
toEfALgoVts/Gpeu7Sa3Ncw1kUh/5PYuhwNkzwhtcA/yDOESPHaPBhOdocADfqWH
Oz1g9C0iJU4Wk9MMFygH3FVGhVA075bMNAX7F9NYJgKU+n5wLzbvLN0ZWq/t/FTt
IcF66UnuDjpNLu+wiBuzbs4Q1+g4O3OiqqIwEraX9icC4MN2OwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDAnutyZSFzKwJdA8W9b4hNtCa3rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81MWNh
NzE1NS1iY2ExLTQ2ZTEtOTk0NS1mMjUxOWRmMzIzMTQvZWZmMThhYzUtZWJiYS0z
ZGJlLTgxNDYtYzI0YzlmZTIyYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTFjYTcxNTUtYmNhMS00NmUxLTk5
NDUtZjI1MTlkZjMyMzE0LzUxY2E3MTU1LWJjYTEtNDZlMS05OTQ1LWYyNTE5ZGYz
MjMxNC5jcmwwHwYDVR0jBBgwFoAU8wjGjISc0h1KHdIwCmmcjY+CqwQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81MWNhNzE1NS1iY2ExLTQ2ZTEtOTk0NS1mMjUx
OWRmMzIzMTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABODAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfiEtMqeVDs9zip//MS3tKizwndRkcZarzULCW11hr268Q2Mt0i+n
xSwjHfKs9t3c9zz8BZr6weDP4DgZwCOFxguG98DvHrh1+Q4VcgkZZ9fn0E5PwHT2
5Y8PtyLKa+FF6ujOPXKUPNX8qjaf+Hg4qZlBnlFKKrWbkhNK8/lP/tojFKdhsb/w
JRb7+/cEPYeQVrdxP4qxez5cMzIutL2V/cd9FVQw8rcSAdESwiR2ZijueaBHVA6d
70Q4AphVBPYH7S4pqPWvTKGTgckkKbtZAK2VW5YnicdmMr72++qVOfmQN1Tat4Pf
C7IhPRrQuMIa3wpibMo/7Rner1irpYS5KQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:40 2025 by rpki-client