Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa
File:                     9d0b6b72-0245-3b5d-b7db-598515453663.roa (raw, json)
Hash identifier:          E+Qtu7GOptf3mWGfsoYTrXiWR8G9a05eeae75gPhBGc=
Subject key identifier:   64:7B:E9:AF:90:61:14:16:D3:DD:63:FC:26:A9:1F:E6:F9:45:A6:9D
Certificate issuer:       /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial:       010D0C9F4328584B5141BDFBC045248525B14CE0
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     237
IP address blocks:        2001:48a8:7800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:bd:fb:c0:45:24:85:25:b1:4c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=85e32e4b-f34e-4dc4-9d44-500541500c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:fe:60:c0:23:3d:ed:6c:d5:c6:37:d9:d8:
                    6a:44:b0:1e:4f:73:8c:b5:42:df:d0:a8:59:57:5e:
                    b4:9f:1e:83:90:8a:91:13:36:a0:9b:bd:22:95:6f:
                    97:bd:01:ef:cb:11:f6:8f:4a:48:e2:16:d6:88:86:
                    1d:2c:df:12:0b:23:d0:6e:26:64:a2:d7:05:b2:c1:
                    f4:71:b1:5c:77:32:70:36:28:0a:fe:77:fe:32:a2:
                    90:e8:81:e7:09:fc:86:00:c6:23:bb:43:14:36:18:
                    3a:9e:fa:b1:24:e1:1a:20:1a:94:82:ec:af:83:00:
                    69:3a:b7:d7:b5:de:51:e6:c8:c8:59:03:3c:90:1f:
                    7d:c8:46:5d:cd:3d:b4:b7:92:47:45:b3:30:50:c5:
                    9b:bd:30:5e:35:3a:b0:f2:0e:dc:ee:88:33:bd:20:
                    a1:68:1a:a9:66:8f:9d:45:8a:07:5f:e4:88:52:90:
                    66:4a:2f:b9:4c:a4:6d:98:2b:00:7d:ea:30:97:32:
                    2f:9a:40:cc:f6:44:72:34:12:39:3c:1e:78:e4:29:
                    41:13:a0:fd:e3:37:fe:8e:74:a4:9b:1d:92:61:48:
                    96:4b:8f:d7:f6:3a:1d:7c:6e:9e:ba:73:de:29:e7:
                    7f:50:d0:5c:7a:65:95:c3:ee:26:c5:5d:ba:e0:cc:
                    c1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7B:E9:AF:90:61:14:16:D3:DD:63:FC:26:A9:1F:E6:F9:45:A6:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/9d0b6b72-0245-3b5d-b7db-598515453663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a8:7800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:26:ce:b1:58:a0:dc:ab:50:79:63:7f:b4:22:4f:94:b3:
         30:fe:0f:b1:98:2a:bf:46:f5:23:26:40:fa:1c:87:b2:62:ca:
         f0:b9:0c:b1:40:d1:d4:d3:e1:f7:e7:88:be:45:5e:ea:b4:ef:
         53:c3:fd:d4:30:3e:c9:cb:3b:13:be:85:36:b2:c1:5e:81:d0:
         12:a7:13:a5:ff:59:a6:e5:2b:9c:54:e0:88:63:e1:8d:12:62:
         2c:70:bb:84:d7:83:fd:c5:4f:c0:94:23:cf:72:2d:2a:88:28:
         b9:ce:20:ba:a7:13:45:54:ea:9b:f8:82:a2:5a:27:a0:75:90:
         74:97:f4:d6:5e:72:7d:a2:ff:10:ba:83:81:a9:47:56:7c:47:
         ad:37:f0:68:39:c4:c8:7b:48:88:44:a5:e4:c5:2f:5c:05:11:
         86:23:29:00:da:ee:22:86:f2:62:7e:67:c0:88:8c:5c:29:fb:
         bb:e8:41:3d:d6:27:75:e7:8f:5f:32:26:ca:81:08:20:89:f8:
         97:cd:15:17:17:8a:01:de:35:d3:38:ec:d3:01:f5:46:f7:67:
         cf:c3:4e:61:19:b7:6b:fd:70:27:18:cc:61:68:85:d3:0c:63:
         82:dd:4f:c4:f4:54:41:3a:de:45:75:28:e2:ab:06:4a:dc:9f:
         2d:3a:c3:5c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtRQb37wEUkhSWxTOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj
NTdkMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
ODVlMzJlNGItZjM0ZS00ZGM0LTlkNDQtNTAwNTQxNTAwYzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHf+YMAjPe1s1cY32dhqRLAeT3OMtULf0KhZ
V160nx6DkIqREzagm70ilW+XvQHvyxH2j0pI4hbWiIYdLN8SCyPQbiZkotcFssH0
cbFcdzJwNigK/nf+MqKQ6IHnCfyGAMYju0MUNhg6nvqxJOEaIBqUguyvgwBpOrfX
td5R5sjIWQM8kB99yEZdzT20t5JHRbMwUMWbvTBeNTqw8g7c7ogzvSChaBqpZo+d
RYoHX+SIUpBmSi+5TKRtmCsAfeowlzIvmkDM9kRyNBI5PB545ClBE6D94zf+jnSk
mx2SYUiWS4/X9jodfG6eunPeKed/UNBcemWVw+4mxV264MzBoQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGR76a+QYRQW091j/CapH+b5RaadMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4
YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvOWQwYjZiNzItMDI0NS0z
YjVkLWI3ZGItNTk4NTE1NDUzNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw
OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy
YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk
MWU0MmM1N2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAFIqHgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZOkmzrFYoNyrUHljf7QiT5SzMP4PsZgqv0b1IyZA+hyHsmLK8LkM
sUDR1NPh9+eIvkVe6rTvU8P91DA+ycs7E76FNrLBXoHQEqcTpf9ZpuUrnFTgiGPh
jRJiLHC7hNeD/cVPwJQjz3ItKogouc4guqcTRVTqm/iColonoHWQdJf01l5yfaL/
ELqDgalHVnxHrTfwaDnEyHtIiESl5MUvXAURhiMpANruIobyYn5nwIiMXCn7u+hB
PdYndeePXzImyoEIIIn4l80VFxeKAd410zjs0wH1Rvdnz8NOYRm3a/1wJxjMYWiF
0wxjgt1PxPRUQTreRXUo4qsGStyfLTrDXA==
-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:32 2025 by rpki-client