Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4834fa76-34fe-3b4b-b654-210b0d429d12.roa
File:                     4834fa76-34fe-3b4b-b654-210b0d429d12.roa (raw, json)
Hash identifier:          /dSiZOqcClUZfHmVRp/ktxU6YXvMO9f8Fk64iYneZok=
Subject key identifier:   A8:35:3B:B7:07:0E:D3:CF:DC:C5:58:2C:39:00:E3:6A:BB:A7:59:0D
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584B3556E3A276ADEDDE7566A780
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4834fa76-34fe-3b4b-b654-210b0d429d12.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2606:dc00:ff01::/48 maxlen: 48
                          2606:dc00:ff02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e3:a2:76:ad:ed:de:75:66:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=03806957-a8e6-4dab-ab0f-fcc321505042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:20:fa:3b:f7:71:58:af:3e:35:ee:53:cd:d2:
                    dd:f8:1a:0f:29:fb:89:85:9e:ce:fd:39:ae:93:b2:
                    cf:9e:7b:52:53:a0:c0:a5:41:56:af:8f:93:1a:23:
                    46:eb:3b:02:0d:c0:f1:7d:69:65:32:27:29:48:c7:
                    78:a7:b0:0a:d3:a2:7c:6a:eb:46:5d:c6:e3:ef:d9:
                    13:ec:79:31:8b:29:c7:58:9d:10:85:d3:bc:c4:8f:
                    8f:81:d7:e4:26:79:23:eb:f8:87:13:87:4a:5a:d2:
                    db:5b:c9:5c:5e:d9:6d:35:5b:c7:ad:9a:17:e4:d3:
                    19:ec:80:4c:96:13:2a:87:0d:ae:ce:08:d9:88:e0:
                    53:5c:5c:d2:85:2e:06:3a:d2:12:d8:b3:94:37:f9:
                    2c:17:5a:d2:01:52:25:35:3b:b8:d5:13:45:05:9c:
                    60:1e:2b:be:0f:b8:bd:fa:d7:d2:3c:ad:47:44:6c:
                    f3:ab:cf:d1:19:11:99:a7:45:90:d1:de:a5:86:7c:
                    c2:c2:38:6a:82:d4:8c:eb:54:d2:f4:16:e9:36:80:
                    7b:bf:9d:29:61:ba:e1:b1:a9:9e:d0:0f:f6:ea:15:
                    e2:72:eb:83:c4:df:6b:51:f0:f6:7a:fb:2f:c4:a0:
                    a4:11:e9:55:4b:2c:13:e2:96:a3:cd:f8:2e:a4:1d:
                    ce:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:35:3B:B7:07:0E:D3:CF:DC:C5:58:2C:39:00:E3:6A:BB:A7:59:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4834fa76-34fe-3b4b-b654-210b0d429d12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dc00:ff01::-2606:dc00:ff02:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:52:a5:dc:19:c6:a0:b6:07:83:b7:81:4e:0f:87:de:81:b4:
         53:9a:98:51:1d:5e:30:f3:28:9a:ae:b2:3a:e2:01:3e:fd:d1:
         fb:08:32:f7:e7:65:e8:88:78:96:6a:e9:9b:16:10:15:d8:d8:
         aa:f7:f4:aa:bd:96:83:12:a4:0f:a3:96:4f:5a:0e:09:e9:8f:
         91:12:53:82:e4:c1:43:73:43:e1:35:45:1a:c7:7d:fa:3b:88:
         f0:25:3c:24:ed:75:60:ce:95:29:b2:e8:45:55:c1:b5:15:dd:
         97:26:45:14:3f:04:33:6a:b2:2e:7a:b6:5e:7b:4c:a0:5f:02:
         c3:c5:53:03:f7:d7:74:de:96:53:58:7e:24:06:13:8d:9f:70:
         b2:2d:49:bd:fa:f0:be:1f:a8:01:88:f4:9f:1b:0f:41:4a:76:
         8e:59:b7:f2:da:82:1b:29:ee:62:80:38:f4:d2:24:ea:53:88:
         4a:14:19:07:7a:2a:7b:c7:00:4c:b7:ed:5c:75:77:bc:d8:1f:
         5a:91:43:05:09:94:23:0f:a8:64:79:39:62:7b:c5:ea:73:8b:
         bb:86:06:53:00:eb:9a:02:0d:b9:2c:61:43:eb:8d:fe:86:8f:
         01:fb:e8:66:50:cf:1c:55:83:33:d1:9f:f1:7f:55:50:cd:5b:
         22:c3:55:de
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEs1VuOidq3t3nVmp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk
MDM4MDY5NTctYThlNi00ZGFiLWFiMGYtZmNjMzIxNTA1MDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCD6O/dxWK8+Ne5TzdLd+BoPKfuJhZ7O/Tmu
k7LPnntSU6DApUFWr4+TGiNG6zsCDcDxfWllMicpSMd4p7AK06J8autGXcbj79kT
7HkxiynHWJ0QhdO8xI+PgdfkJnkj6/iHE4dKWtLbW8lcXtltNVvHrZoX5NMZ7IBM
lhMqhw2uzgjZiOBTXFzShS4GOtIS2LOUN/ksF1rSAVIlNTu41RNFBZxgHiu+D7i9
+tfSPK1HRGzzq8/RGRGZp0WQ0d6lhnzCwjhqgtSM61TS9BbpNoB7v50pYbrhsame
0A/26hXicuuDxN9rUfD2evsvxKCkEelVSywT4pajzfgupB3ObwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFKg1O7cHDtPP3MVYLDkA42q7p1kNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNDgzNGZhNzYtMzRmZS0z
YjRiLWI2NTQtMjEwYjBkNDI5ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmBtwA
/wEDBwAmBtwA/wIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAIFKl3BnGoLYHg7eBTg+H3oG0U5qYUR1eMPMo
mq6yOuIBPv3R+wgy9+dl6Ih4lmrpmxYQFdjYqvf0qr2WgxKkD6OWT1oOCemPkRJT
guTBQ3ND4TVFGsd9+juI8CU8JO11YM6VKbLoRVXBtRXdlyZFFD8EM2qyLnq2XntM
oF8Cw8VTA/fXdN6WU1h+JAYTjZ9wsi1Jvfrwvh+oAYj0nxsPQUp2jlm38tqCGynu
YoA49NIk6lOIShQZB3oqe8cATLftXHV3vNgfWpFDBQmUIw+oZHk5YnvF6nOLu4YG
UwDrmgINuSxhQ+uN/oaPAfvoZlDPHFWDM9Gf8X9VUM1bIsNV3g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:56:30 2025 by rpki-client