Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/3df1a855-b635-3c69-ab60-aab7634aaaaf.roa
File:                     3df1a855-b635-3c69-ab60-aab7634aaaaf.roa (raw, json)
Hash identifier:          /en6AmGKH4mXjfNCul7k8EQ6Vr79x0E+Z+GGcV6Lcbs=
Subject key identifier:   FE:D2:D9:83:8D:E8:5F:DA:73:0B:B7:3D:50:5A:42:B0:A7:DA:58:FD
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F4328584B004BE6F4BD8567283FAC3600
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/3df1a855-b635-3c69-ab60-aab7634aaaaf.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2620:121:5040::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:e6:f4:bd:85:67:28:3f:ac:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=fb974f0d-f6b9-43c8-beac-6501c68daf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:15:59:f8:3f:e3:c4:8e:d8:b8:65:d6:4e:
                    c7:11:3f:6d:e2:dd:36:15:72:09:0f:1e:9c:52:0a:
                    fe:31:02:5b:29:b6:08:d5:fc:35:8f:8c:43:01:33:
                    97:38:c1:74:32:2e:40:fe:e4:2f:d6:79:e9:a6:6d:
                    23:da:40:a3:c3:53:4b:17:9a:48:92:9c:eb:2f:bb:
                    86:65:35:a0:00:d6:0a:7e:dd:db:b4:99:83:24:89:
                    2c:3a:af:f7:39:8d:b7:48:69:ef:1c:5f:a1:a9:cd:
                    bd:8c:90:7d:18:af:cd:c2:b8:ab:4a:08:f8:c9:4d:
                    ad:db:b0:4c:af:25:a1:5e:14:82:66:c7:32:35:63:
                    e7:2c:9c:71:ba:09:1b:d6:38:90:83:2c:8e:ef:1c:
                    74:b4:be:78:62:13:67:8d:d8:d0:33:22:30:39:bd:
                    0b:f0:5b:4d:3a:58:55:3f:67:19:b3:b6:7c:cf:c2:
                    a2:40:80:47:7c:1b:f8:f7:cb:dd:74:94:58:5c:ca:
                    55:73:c2:5b:c9:f6:0d:c9:b5:07:8e:8d:7f:f0:b3:
                    38:9a:59:d5:5a:25:a4:05:c2:ef:dc:75:80:a3:d2:
                    3d:a9:c6:ba:28:a1:67:a0:07:c4:50:1b:8d:fe:a2:
                    23:66:88:fb:b8:52:9b:c4:77:e6:da:1e:30:80:e9:
                    2a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D2:D9:83:8D:E8:5F:DA:73:0B:B7:3D:50:5A:42:B0:A7:DA:58:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/3df1a855-b635-3c69-ab60-aab7634aaaaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:fa:45:71:2a:e7:fb:26:94:58:a4:dc:e3:a8:93:5c:be:
         84:83:91:39:d3:58:1f:c3:39:03:5c:c9:57:6b:e3:7c:e5:cb:
         5b:94:4c:27:98:87:37:9d:29:9c:36:e0:58:eb:5e:90:eb:7f:
         7f:29:e0:62:ca:48:1e:07:40:50:cc:b7:db:f1:aa:f2:87:f8:
         84:f2:20:35:96:3b:80:5c:b1:da:03:16:81:0d:43:11:d6:a2:
         fe:33:ac:e5:0a:1f:22:fb:1e:23:57:2f:5c:38:d8:ab:c6:b3:
         4b:64:8a:61:b0:22:44:14:77:a5:0f:0f:70:56:d7:ce:3a:59:
         fd:ed:43:82:bd:89:85:2c:8c:67:92:23:fd:5e:1d:72:8c:04:
         0b:1b:8a:65:0d:4e:04:82:07:a4:0e:0e:c8:ef:ae:96:5e:11:
         8d:06:34:c3:a2:84:81:9a:b6:08:b8:b8:ef:11:44:c7:c5:bb:
         14:ac:b5:34:ab:ca:6c:98:4a:59:0c:2e:6d:e5:ea:3c:0d:19:
         0a:de:63:f2:98:ca:37:e3:55:eb:be:57:9d:24:05:1e:d8:c5:
         18:5b:c3:7f:71:32:94:79:b7:93:7d:5f:b6:16:ce:d5:90:49:
         cc:f8:a5:7b:30:bd:27:79:1e:d2:03:0e:f4:14:f0:3b:22:cf:
         96:8c:9c:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsAS+b0vYVnKD+sNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDEyZmY5YzctY2VkOC00Y2MyLWIzZDUtYWRmMTg1OWE4
MDhjMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZmI5NzRmMGQtZjZiOS00M2M4LWJlYWMtNjUwMWM2OGRhZjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp4VWfg/48SO2Lhl1k7HET9t4t02FXIJDx6c
Ugr+MQJbKbYI1fw1j4xDATOXOMF0Mi5A/uQv1nnppm0j2kCjw1NLF5pIkpzrL7uG
ZTWgANYKft3btJmDJIksOq/3OY23SGnvHF+hqc29jJB9GK/NwrirSgj4yU2t27BM
ryWhXhSCZscyNWPnLJxxugkb1jiQgyyO7xx0tL54YhNnjdjQMyIwOb0L8FtNOlhV
P2cZs7Z8z8KiQIBHfBv498vddJRYXMpVc8JbyfYNybUHjo1/8LM4mlnVWiWkBcLv
3HWAo9I9qca6KKFnoAfEUBuN/qIjZoj7uFKbxHfm2h4wgOkqAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP7S2YON6F/acwu3PVBaQrCn2lj9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJm
ZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYxODU5YTgwOGMvM2RmMWE4NTUtYjYzNS0z
YzY5LWFiNjAtYWFiNzYzNGFhYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDEyZmY5YzctY2VkOC00Y2MyLWIz
ZDUtYWRmMTg1OWE4MDhjL2QxMmZmOWM3LWNlZDgtNGNjMi1iM2Q1LWFkZjE4NTlh
ODA4Yy5jcmwwHwYDVR0jBBgwFoAUWs2/uXCApKrzjrhYKRFBB5zu/dcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJmZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYx
ODU5YTgwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABIVBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI5X+kVxKuf7JpRYpNzjqJNcvoSDkTnTWB/DOQNcyVdr43zly1uU
TCeYhzedKZw24FjrXpDrf38p4GLKSB4HQFDMt9vxqvKH+ITyIDWWO4BcsdoDFoEN
QxHWov4zrOUKHyL7HiNXL1w42KvGs0tkimGwIkQUd6UPD3BW1846Wf3tQ4K9iYUs
jGeSI/1eHXKMBAsbimUNTgSCB6QODsjvrpZeEY0GNMOihIGatgi4uO8RRMfFuxSs
tTSrymyYSlkMLm3l6jwNGQreY/KYyjfjVeu+V50kBR7YxRhbw39xMpR5t5N9X7YW
ztWQScz4pXswvSd5HtIDDvQU8Dsiz5aMnM4=
-----END CERTIFICATE-----
Generated at Thu Oct 9 20:04:32 2025 by rpki-client