Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c27fc5e-8fb6-3798-9b00-b2da4a033d9f.roa
File:                     9c27fc5e-8fb6-3798-9b00-b2da4a033d9f.roa (raw, json)
Hash identifier:          Yv/D0/MtouVfzPtU9FTxIcpmRqfOKTOxkJC79f4NO3U=
Subject key identifier:   00:2D:9E:6C:99:6C:81:D5:0B:53:D5:35:92:6D:BC:A7:CD:D0:A1:9A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B46170596477E801755139280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c27fc5e-8fb6-3798-9b00-b2da4a033d9f.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     23673
IP address blocks:        2001:470:25e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:17:05:96:47:7e:80:17:55:13:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=1372de36-a884-463b-9feb-3af8e21eab25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:e5:90:8e:b8:75:ed:7f:19:01:7d:3c:83:
                    ff:41:20:8c:d3:d4:64:42:10:72:01:6c:ae:a3:30:
                    70:3a:a5:1e:48:a6:06:6f:25:fb:4e:9b:59:02:86:
                    b7:4c:40:b1:b0:d0:34:5a:35:67:b1:8e:d7:60:c1:
                    01:f8:df:8b:1a:bd:a4:cf:c6:88:7d:bc:52:fc:06:
                    9b:87:2d:59:aa:05:26:ea:46:b7:14:e1:4e:fc:a8:
                    48:ca:1c:83:6e:33:d4:09:20:b4:ec:e8:36:cb:85:
                    a2:82:92:fc:9f:e4:42:4c:da:7c:d3:7e:ae:de:9a:
                    6a:d8:14:17:d8:42:59:ce:26:96:f5:bf:6d:1f:bd:
                    75:d7:06:f7:6f:29:bd:b9:3e:53:68:d9:72:f8:1d:
                    16:0c:5d:98:68:63:ee:d3:7f:5e:c2:14:8a:f0:d2:
                    99:ba:7f:4c:7c:58:c1:f9:ca:74:87:a7:14:5f:be:
                    ce:25:12:81:db:25:1a:38:76:08:31:be:b3:71:b3:
                    46:35:ff:70:7a:77:7c:39:75:e6:8c:58:a6:42:73:
                    51:2c:d1:81:26:1b:61:6f:a5:15:fa:f0:15:c8:f6:
                    6f:f4:89:aa:ea:0c:f1:bb:3a:19:25:a6:46:03:25:
                    f7:08:da:34:29:f0:4b:2c:17:61:92:5e:9a:d2:b7:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2D:9E:6C:99:6C:81:D5:0B:53:D5:35:92:6D:BC:A7:CD:D0:A1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c27fc5e-8fb6-3798-9b00-b2da4a033d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:25e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:84:92:24:ad:08:a5:fc:0e:fc:41:db:5b:31:bf:c7:a2:20:
         67:d1:dd:26:0e:1b:70:34:bd:bc:34:8f:70:53:7b:c0:67:f1:
         05:c3:d0:f6:45:ed:e9:7c:d6:aa:f0:86:de:79:1f:a2:53:55:
         36:71:06:e3:9a:f7:b6:82:74:b5:72:80:bc:7b:78:b8:1a:d0:
         a2:30:10:5f:ef:79:b3:66:85:be:46:bd:06:1a:a1:c8:26:2a:
         8d:ba:30:4b:0b:da:3c:8f:c6:e7:8e:bf:70:06:ad:0e:c3:c8:
         5a:32:47:20:c7:38:6a:5b:83:52:a9:6e:76:51:c8:1d:c7:f6:
         d0:ac:5e:47:4e:77:c7:4a:48:b1:56:47:28:19:56:15:e0:b3:
         ac:f6:79:c0:96:94:b6:d8:62:85:0a:2b:35:5f:2f:0c:7b:fc:
         99:58:fe:55:33:b2:0c:aa:4b:cd:cb:41:60:b8:0c:a2:f7:59:
         1b:e5:70:53:6b:e0:dc:7a:f6:a2:ac:e9:b8:34:be:24:fe:e6:
         49:bc:5d:1d:34:ef:c3:94:47:3a:77:2e:e1:ac:3d:a5:2e:cd:
         a7:ba:dc:c2:9f:5d:44:86:5d:dc:99:76:00:99:0f:4b:2f:53:
         5e:78:1c:9d:de:5f:89:b0:63:46:d6:a1:f3:54:df:73:00:1c:
         d9:5a:07:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtGFwWWR36AF1UTkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk
MTM3MmRlMzYtYTg4NC00NjNiLTlmZWItM2FmOGUyMWVhYjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaHlkI64de1/GQF9PIP/QSCM09RkQhByAWyu
ozBwOqUeSKYGbyX7TptZAoa3TECxsNA0WjVnsY7XYMEB+N+LGr2kz8aIfbxS/Aab
hy1ZqgUm6ka3FOFO/KhIyhyDbjPUCSC07Og2y4WigpL8n+RCTNp8036u3ppq2BQX
2EJZziaW9b9tH7111wb3bym9uT5TaNly+B0WDF2YaGPu039ewhSK8NKZun9MfFjB
+cp0h6cUX77OJRKB2yUaOHYIMb6zcbNGNf9wend8OXXmjFimQnNRLNGBJhthb6UV
+vAVyPZv9Imq6gzxuzoZJaZGAyX3CNo0KfBLLBdhkl6a0rdcRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAAtnmyZbIHVC1PVNZJtvKfN0KGaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWMyN2ZjNWUtOGZiNi0z
Nzk4LTliMDAtYjJkYTRhMDMzZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD2EkiStCKX8DvxB21sxv8eiIGfR3SYOG3A0vbw0j3BTe8Bn8QXD
0PZF7el81qrwht55H6JTVTZxBuOa97aCdLVygLx7eLga0KIwEF/vebNmhb5GvQYa
ocgmKo26MEsL2jyPxueOv3AGrQ7DyFoyRyDHOGpbg1KpbnZRyB3H9tCsXkdOd8dK
SLFWRygZVhXgs6z2ecCWlLbYYoUKKzVfLwx7/JlY/lUzsgyqS83LQWC4DKL3WRvl
cFNr4Nx69qKs6bg0viT+5km8XR0078OURzp3LuGsPaUuzae63MKfXUSGXdyZdgCZ
D0svU154HJ3eX4mwY0bWofNU33MAHNlaB/8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:40:47 2025 by rpki-client