Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa
File:                     0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa (raw, json)
Hash identifier:          1cF6npnp0Rs5nOBYd2DFbJL2rDr/DZBs/sD1GUyxFaE=
Subject key identifier:   0F:84:DA:CE:28:5B:DE:39:7D:84:1E:10:54:98:8F:D1:65:2E:46:E2
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F4328584B0B769B4C9F110578BEACB660
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        2620:121:5050::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:9b:4c:9f:11:05:78:be:ac:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=0800dd87-7847-4227-80a3-d7d1abffd041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:ac:ba:1d:e4:26:2f:0d:14:56:ec:54:19:
                    92:cd:13:89:42:f5:21:15:79:50:8b:55:d9:ba:33:
                    3a:94:ca:dd:bb:02:07:38:50:84:c0:81:e3:1a:03:
                    1d:a1:f8:d9:d4:e5:98:68:0a:26:c6:74:30:3c:e9:
                    ff:de:c4:cf:9e:38:30:b1:b9:f0:ee:c4:e9:e1:30:
                    bc:ea:ba:1c:67:50:3b:45:19:92:e7:c8:84:44:27:
                    cd:f0:93:ef:e5:27:7a:55:9b:2b:71:ba:e1:84:a4:
                    d4:9e:d0:c3:e6:39:d1:6e:dd:c8:9a:a5:73:c4:2c:
                    37:1c:83:fa:9d:8c:40:8d:37:a7:e4:6d:ab:f8:98:
                    20:7f:a6:4c:c5:65:bc:cd:66:23:aa:72:cd:9d:08:
                    7b:3d:db:84:e8:05:b3:d2:51:8c:13:8e:05:d4:c0:
                    5a:7f:e2:67:34:9c:97:56:9e:88:bf:89:13:70:de:
                    8b:70:cc:72:8f:e1:5a:24:fb:63:d0:65:2c:4b:69:
                    aa:a5:6a:ad:2d:a1:3c:a1:b3:cb:02:75:ed:ab:be:
                    6b:4a:df:7d:37:17:41:02:a0:10:ca:5d:8c:1b:11:
                    d7:0d:71:89:60:3f:90:95:bf:11:c1:b0:be:b4:03:
                    51:d8:45:0b:d4:b7:e2:ec:0b:78:e9:33:35:92:03:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:84:DA:CE:28:5B:DE:39:7D:84:1E:10:54:98:8F:D1:65:2E:46:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/0a077c48-e1ac-3ce6-a6a3-f851702cf723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5050::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:46:82:c3:ae:bc:d2:1a:21:16:98:ee:bf:62:10:1a:97:c4:
         de:10:d3:47:3c:e9:49:a1:69:58:3b:d3:d0:7a:96:5f:6f:96:
         5b:a7:e6:e4:89:19:cc:98:32:75:3e:f3:37:b2:1c:d4:13:44:
         cd:63:32:cb:58:17:0a:3f:84:c2:8a:b1:85:df:51:9d:34:97:
         38:82:68:90:c5:8c:3f:b5:c9:b9:d1:b9:69:1b:64:10:49:09:
         a2:89:b3:36:84:80:63:dd:f7:be:de:7c:c6:0c:ab:57:0e:23:
         df:7c:96:e5:35:26:df:65:28:73:81:cb:40:a2:67:1a:ba:cf:
         66:ff:44:47:62:de:13:f0:1f:3e:59:80:57:ac:06:61:b1:d6:
         9b:05:44:27:30:66:50:9c:77:d4:18:33:33:65:a2:e6:61:5c:
         46:5f:07:66:f3:b7:f2:54:99:79:d7:5d:bc:17:1c:8c:7d:9e:
         1d:48:0b:fb:e7:85:f7:df:80:5a:e3:2d:31:b8:ed:78:c4:13:
         8c:33:03:c6:23:10:09:41:24:ad:21:b9:d0:de:c1:4d:1f:ca:
         80:69:ff:37:cd:7c:0b:4c:3f:33:1e:1c:45:ef:3b:f6:81:2f:
         76:21:aa:df:d6:ab:ef:74:1c:a7:94:b0:db:73:f2:75:0f:31:
         bd:6d:c0:85
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsLdptMnxEFeL6stmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDEyZmY5YzctY2VkOC00Y2MyLWIzZDUtYWRmMTg1OWE4
MDhjMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk
MDgwMGRkODctNzg0Ny00MjI3LTgwYTMtZDdkMWFiZmZkMDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZasuh3kJi8NFFbsVBmSzROJQvUhFXlQi1XZ
ujM6lMrduwIHOFCEwIHjGgMdofjZ1OWYaAomxnQwPOn/3sTPnjgwsbnw7sTp4TC8
6rocZ1A7RRmS58iERCfN8JPv5Sd6VZsrcbrhhKTUntDD5jnRbt3ImqVzxCw3HIP6
nYxAjTen5G2r+Jggf6ZMxWW8zWYjqnLNnQh7PduE6AWz0lGME44F1MBaf+JnNJyX
Vp6Iv4kTcN6LcMxyj+FaJPtj0GUsS2mqpWqtLaE8obPLAnXtq75rSt99NxdBAqAQ
yl2MGxHXDXGJYD+Qlb8RwbC+tANR2EUL1Lfi7At46TM1kgNC9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA+E2s4oW945fYQeEFSYj9FlLkbiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJm
ZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYxODU5YTgwOGMvMGEwNzdjNDgtZTFhYy0z
Y2U2LWE2YTMtZjg1MTcwMmNmNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDEyZmY5YzctY2VkOC00Y2MyLWIz
ZDUtYWRmMTg1OWE4MDhjL2QxMmZmOWM3LWNlZDgtNGNjMi1iM2Q1LWFkZjE4NTlh
ODA4Yy5jcmwwHwYDVR0jBBgwFoAUWs2/uXCApKrzjrhYKRFBB5zu/dcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJmZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYx
ODU5YTgwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABIVBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGdGgsOuvNIaIRaY7r9iEBqXxN4Q00c86UmhaVg709B6ll9vllun
5uSJGcyYMnU+8zeyHNQTRM1jMstYFwo/hMKKsYXfUZ00lziCaJDFjD+1ybnRuWkb
ZBBJCaKJszaEgGPd977efMYMq1cOI998luU1Jt9lKHOBy0CiZxq6z2b/REdi3hPw
Hz5ZgFesBmGx1psFRCcwZlCcd9QYMzNlouZhXEZfB2bzt/JUmXnXXbwXHIx9nh1I
C/vnhfffgFrjLTG47XjEE4wzA8YjEAlBJK0hudDewU0fyoBp/zfNfAtMPzMeHEXv
O/aBL3Yhqt/Wq+90HKeUsNtz8nUPMb1twIU=
-----END CERTIFICATE-----
Generated at Thu Oct 9 20:04:37 2025 by rpki-client