Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92f0680b-e796-36b3-b4ea-1e5867685d3a.roa
File:                     92f0680b-e796-36b3-b4ea-1e5867685d3a.roa (raw, json)
Hash identifier:          odMK/HwAmOIL8YiVjZPMaaML2q5/TuMfrI8wSNM5ik8=
Subject key identifier:   9C:12:73:84:72:51:95:E5:02:DF:6B:A4:0A:2F:22:68:91:10:40:5B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B3DB897DBF595AC9360FB6034
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92f0680b-e796-36b3-b4ea-1e5867685d3a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22332
IP address blocks:        2001:470:363::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:97:db:f5:95:ac:93:60:fb:60:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=695dadaa-b3bf-42d3-adb6-ff11da8b8608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:fe:cd:a0:5b:0e:e4:cd:b0:9a:7c:0d:9a:
                    6b:9e:bd:bd:49:b6:09:63:9b:84:a6:7d:2d:d4:e7:
                    cb:d1:fa:61:98:78:fa:f1:ad:7d:7b:56:bd:a5:4e:
                    73:f9:35:3f:4b:3b:18:42:fd:69:85:6d:ff:cc:ee:
                    47:57:1a:a1:db:01:d1:1c:59:03:fb:dd:d7:48:12:
                    15:4f:c2:b7:f9:56:33:0b:01:6a:24:03:35:3f:9e:
                    54:2e:09:c5:15:1e:cf:58:de:4c:d9:d8:43:72:b9:
                    0f:43:88:1b:71:b1:4e:df:13:c2:e3:8b:6c:a1:f1:
                    0f:32:00:cd:8f:98:0c:19:73:de:bc:d3:11:87:af:
                    9d:0e:a6:a7:30:d7:73:21:39:7a:a0:ab:bc:7c:51:
                    cf:5b:b2:17:5f:a4:0e:71:d3:e2:e0:d9:5e:71:1d:
                    d1:15:3e:51:60:8e:65:36:6f:64:f5:b5:87:55:62:
                    2b:b5:86:ff:50:30:42:81:10:13:6a:6c:59:76:aa:
                    3d:6f:18:9e:15:9e:2f:be:1a:83:b8:3e:2d:0e:a5:
                    dc:d2:ac:46:d0:fd:a3:44:4a:e8:31:f4:d6:fd:89:
                    02:ab:0b:ab:8d:16:2d:cd:2b:31:3d:97:44:3b:1e:
                    25:1a:3c:bc:8f:91:2a:1a:26:c5:fa:c3:ff:13:70:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:12:73:84:72:51:95:E5:02:DF:6B:A4:0A:2F:22:68:91:10:40:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92f0680b-e796-36b3-b4ea-1e5867685d3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:363::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:33:4e:e6:33:27:2d:c2:89:a1:9d:8b:97:64:88:90:95:fd:
         8b:30:d0:e5:02:b5:68:d7:8d:43:76:34:f9:29:fe:3d:2f:14:
         60:42:b6:87:71:1d:17:72:a0:9f:4a:3f:3c:8b:dc:7c:d5:53:
         37:6c:a5:02:83:fd:b8:48:67:93:05:57:3b:75:11:a0:cd:e5:
         fa:16:6a:f5:1b:b4:54:25:f4:57:12:c7:58:0f:f0:4e:0f:10:
         65:5c:27:5e:6c:81:c3:90:07:1f:11:47:3c:1b:82:3f:a7:ff:
         1d:a8:30:e2:04:49:17:bd:8a:d1:7c:87:8c:63:b4:b8:88:7c:
         f2:b1:cc:f6:a6:b6:a9:b6:a6:35:fb:e2:2d:19:58:c6:1a:d4:
         1f:89:4b:f5:30:4c:9d:83:1a:f0:cd:7d:7c:69:75:61:e0:36:
         22:7c:03:f2:6f:27:78:8d:57:d8:94:4b:9e:a9:38:78:e7:14:
         ba:08:bb:37:30:a6:6f:a4:fc:62:f2:a7:9f:df:21:b5:ed:41:
         04:74:34:08:83:0c:fc:cd:ac:91:49:a0:63:eb:d7:a8:91:4f:
         2a:ef:d0:85:b4:93:b0:86:e2:da:e6:73:6f:93:ab:99:a7:14:
         30:28:4e:e4:89:0c:5a:2b:63:de:cc:c9:2f:50:9a:dd:89:96:
         3b:b1:3d:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uJfb9ZWsk2D7YDQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
Njk1ZGFkYWEtYjNiZi00MmQzLWFkYjYtZmYxMWRhOGI4NjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS7+zaBbDuTNsJp8DZprnr29SbYJY5uEpn0t
1OfL0fphmHj68a19e1a9pU5z+TU/SzsYQv1phW3/zO5HVxqh2wHRHFkD+93XSBIV
T8K3+VYzCwFqJAM1P55ULgnFFR7PWN5M2dhDcrkPQ4gbcbFO3xPC44tsofEPMgDN
j5gMGXPevNMRh6+dDqanMNdzITl6oKu8fFHPW7IXX6QOcdPi4NlecR3RFT5RYI5l
Nm9k9bWHVWIrtYb/UDBCgRATamxZdqo9bxieFZ4vvhqDuD4tDqXc0qxG0P2jREro
MfTW/YkCqwurjRYtzSsxPZdEOx4lGjy8j5EqGibF+sP/E3DWUwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJwSc4RyUZXlAt9rpAovImiREEBbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTJmMDY4MGItZTc5Ni0z
NmIzLWI0ZWEtMWU1ODY3Njg1ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHMzTuYzJy3CiaGdi5dkiJCV/Ysw0OUCtWjXjUN2NPkp/j0vFGBC
todxHRdyoJ9KPzyL3HzVUzdspQKD/bhIZ5MFVzt1EaDN5foWavUbtFQl9FcSx1gP
8E4PEGVcJ15sgcOQBx8RRzwbgj+n/x2oMOIESRe9itF8h4xjtLiIfPKxzPamtqm2
pjX74i0ZWMYa1B+JS/UwTJ2DGvDNfXxpdWHgNiJ8A/JvJ3iNV9iUS56pOHjnFLoI
uzcwpm+k/GLyp5/fIbXtQQR0NAiDDPzNrJFJoGPr16iRTyrv0IW0k7CG4trmc2+T
q5mnFDAoTuSJDForY97MyS9Qmt2JljuxPQM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:14 2025 by rpki-client