Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/c0efd304-3758-3d51-a7f6-fb959de91d64.roa
File:                     c0efd304-3758-3d51-a7f6-fb959de91d64.roa (raw, json)
Hash identifier:          N68nZdkER1zXUIxGp5tviHas7OxmIej3JwRs5kxXxTA=
Subject key identifier:   23:C4:07:5E:C4:26:2C:C3:C8:CB:7D:3E:20:7F:DA:5C:EE:5E:11:09
Certificate issuer:       /CN=e2e521d7-dbfb-433c-b301-ee863aee12cd
Certificate serial:       010D0C9F4328584B6FF74B3868BFEC40E3CDDB80
Authority key identifier: 5F:BA:B5:53:33:9D:DC:E6:30:1A:F3:9C:79:5A:BB:BC:A8:EB:0B:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/c0efd304-3758-3d51-a7f6-fb959de91d64.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     401835
IP address blocks:        2607:7640::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:4b:38:68:bf:ec:40:e3:cd:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e521d7-dbfb-433c-b301-ee863aee12cd
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=932fae20-aeb7-434c-a9a1-9c854a961a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:2e:a1:fe:b5:1b:3b:66:bd:b4:8e:9d:43:
                    0a:8e:3f:b2:a1:f7:3e:63:c0:66:bc:54:ac:a6:14:
                    cf:5c:81:21:b5:63:09:79:d6:96:be:35:36:6c:81:
                    f4:7f:26:1b:81:d8:17:b7:47:e8:fc:8e:69:d8:51:
                    4c:e8:4d:45:46:a1:13:d3:16:ee:11:4f:d8:1e:b9:
                    a7:db:50:3d:1f:c5:e1:26:94:7a:8f:51:a8:89:d1:
                    ed:c5:a3:c0:74:0b:fd:58:aa:62:e6:75:30:53:19:
                    f2:c6:54:fd:94:50:2d:e6:d2:94:ff:e7:c7:02:b7:
                    c3:2b:96:17:4d:25:99:e9:0e:5d:57:40:a8:d5:ef:
                    43:b1:25:c3:da:2d:92:ab:a2:fa:84:ce:13:41:7f:
                    c0:9d:67:3a:c1:a9:e2:32:64:b2:21:a3:f6:1f:e4:
                    21:6f:e0:30:3e:6d:39:d5:f8:07:ab:7c:07:86:7f:
                    be:db:f5:eb:5f:c6:73:16:d1:66:93:8c:da:4b:34:
                    04:7b:46:20:6a:4a:5e:46:15:01:fe:97:39:c9:41:
                    7a:ec:20:ed:95:aa:ad:4b:29:33:9a:46:db:8a:d3:
                    83:59:62:da:04:56:b9:1c:aa:34:f7:8c:ac:34:44:
                    a9:8d:35:2d:58:24:22:4d:6d:36:b2:b9:ac:bf:0e:
                    0c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:07:5E:C4:26:2C:C3:C8:CB:7D:3E:20:7F:DA:5C:EE:5E:11:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/c0efd304-3758-3d51-a7f6-fb959de91d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.crl

            X509v3 Authority Key Identifier:
                keyid:5F:BA:B5:53:33:9D:DC:E6:30:1A:F3:9C:79:5A:BB:BC:A8:EB:0B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7640::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:50:31:e4:1f:71:31:a2:d7:17:48:02:b2:53:c1:70:42:0b:
         15:bd:be:fe:de:4f:4f:1d:55:b7:79:ec:1a:78:90:a1:44:98:
         f8:d0:11:ce:0b:ed:32:b7:d6:65:a4:bf:c6:9d:60:aa:72:08:
         18:96:15:fa:f5:91:a7:62:ff:8f:cc:51:6a:91:0e:b6:a8:12:
         30:21:c6:1a:6b:b0:22:83:81:a7:1d:8d:73:28:07:78:55:d5:
         a9:3d:53:19:a1:88:a2:04:d9:11:4e:e5:a2:19:d1:b5:b9:82:
         17:97:59:e5:39:94:da:ef:e8:53:8c:a3:5d:84:0d:6d:48:56:
         6b:56:0c:a3:77:df:e2:fb:03:ab:7c:fe:df:9a:d6:75:7f:8b:
         d3:a3:d0:f2:3d:42:dd:fd:67:6a:dd:96:d4:80:9e:66:a3:9c:
         9d:fa:2c:bb:c4:4f:4b:dc:d0:19:49:5b:cd:7e:4f:13:a5:6b:
         28:d2:f2:cc:a8:12:dd:72:e9:1f:66:fa:8d:80:18:51:49:2f:
         cd:4f:5b:98:6a:39:e5:e6:1a:ed:88:88:03:ad:45:db:85:72:
         72:2a:88:2a:21:8e:bc:12:ac:e7:0f:cc:91:cc:58:87:9e:b6:
         5d:ca:30:71:d0:77:52:2f:8d:a8:ae:76:1e:f9:2e:13:34:01:
         a0:ad:9c:1b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtv90s4aL/sQOPN24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTJlNTIxZDctZGJmYi00MzNjLWIzMDEtZWU4NjNhZWUx
MmNkMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk
OTMyZmFlMjAtYWViNy00MzRjLWE5YTEtOWM4NTRhOTYxYTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR8uof61GztmvbSOnUMKjj+yofc+Y8BmvFSs
phTPXIEhtWMJedaWvjU2bIH0fyYbgdgXt0fo/I5p2FFM6E1FRqET0xbuEU/YHrmn
21A9H8XhJpR6j1GoidHtxaPAdAv9WKpi5nUwUxnyxlT9lFAt5tKU/+fHArfDK5YX
TSWZ6Q5dV0Co1e9DsSXD2i2Sq6L6hM4TQX/AnWc6waniMmSyIaP2H+Qhb+AwPm05
1fgHq3wHhn++2/XrX8ZzFtFmk4zaSzQEe0YgakpeRhUB/pc5yUF67CDtlaqtSykz
mkbbitODWWLaBFa5HKo094ysNESpjTUtWCQiTW02srmsvw4MVwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCPEB17EJizDyMt9PiB/2lzuXhEJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMmU1
MjFkNy1kYmZiLTQzM2MtYjMwMS1lZTg2M2FlZTEyY2QvYzBlZmQzMDQtMzc1OC0z
ZDUxLWE3ZjYtZmI5NTlkZTkxZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTJlNTIxZDctZGJmYi00MzNjLWIz
MDEtZWU4NjNhZWUxMmNkL2UyZTUyMWQ3LWRiZmItNDMzYy1iMzAxLWVlODYzYWVl
MTJjZC5jcmwwHwYDVR0jBBgwFoAUX7q1UzOd3OYwGvOceVq7vKjrCxIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9lMmU1MjFkNy1kYmZiLTQzM2MtYjMwMS1lZTg2
M2FlZTEyY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgd2QAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMlAx5B9xMaLXF0gCslPBcEILFb2+/t5PTx1Vt3nsGniQoUSY+NAR
zgvtMrfWZaS/xp1gqnIIGJYV+vWRp2L/j8xRapEOtqgSMCHGGmuwIoOBpx2NcygH
eFXVqT1TGaGIogTZEU7lohnRtbmCF5dZ5TmU2u/oU4yjXYQNbUhWa1YMo3ff4vsD
q3z+35rWdX+L06PQ8j1C3f1nat2W1ICeZqOcnfosu8RPS9zQGUlbzX5PE6VrKNLy
zKgS3XLpH2b6jYAYUUkvzU9bmGo55eYa7YiIA61F24VyciqIKiGOvBKs5w/MkcxY
h562XcowcdB3Ui+NqK52HvkuEzQBoK2cGw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:47:17 2025 by rpki-client