Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/4660259a-08cc-3371-90cd-23e520954c2a.roa
File:                     4660259a-08cc-3371-90cd-23e520954c2a.roa (raw, json)
Hash identifier:          002YdPe1k3jq2WCjB+BUk7pRYDRnL13Gdr/bpQukbF4=
Subject key identifier:   4E:22:80:2E:33:76:1C:49:49:98:43:4B:3C:57:C6:B8:73:48:F7:FC
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F4328584B0A115F554D29F26CACAD0D80
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/4660259a-08cc-3371-90cd-23e520954c2a.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     18460
IP address blocks:        2001:49d0:100:198::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5f:55:4d:29:f2:6c:ac:ad:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=7b1b7aa6-1f35-46b5-b0eb-1491641e9312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:f0:78:73:77:8f:31:6d:9d:d3:43:e9:43:
                    8f:6f:06:ff:7f:d4:a0:4a:a2:9f:ca:0a:9b:75:52:
                    9c:d5:f6:96:72:e9:c7:26:96:3b:f2:e5:33:24:22:
                    0b:8e:8f:d6:2c:16:2e:ac:e5:5c:55:59:57:54:b4:
                    e2:c6:ce:57:f4:48:e4:8b:37:8a:fb:9e:c1:30:eb:
                    5f:0b:ff:c9:80:4f:3b:6a:29:70:5f:2f:c1:81:7a:
                    70:99:5f:d6:4b:a1:d9:4f:96:c2:6a:9c:54:47:34:
                    9f:dc:45:9d:92:d7:ef:d4:c4:6f:a2:9a:11:b1:ad:
                    f2:00:be:31:89:62:3a:af:af:ef:52:2e:50:e2:8e:
                    64:a4:5b:a9:b3:3a:ba:f2:85:2d:0e:0f:2b:75:65:
                    3e:93:e9:9d:c5:53:ca:2a:80:13:d2:8a:69:17:89:
                    37:62:83:b9:70:f8:18:be:bf:17:0f:e8:93:51:63:
                    36:71:1e:57:11:c9:0a:1e:2a:e0:56:75:a4:fd:a7:
                    d6:20:2c:81:a9:88:fe:33:88:c8:fc:5c:3e:0d:21:
                    1d:ac:cd:6a:56:5b:c9:99:34:42:47:d9:a2:08:e4:
                    89:f7:b7:0d:4e:d2:0c:7f:81:6b:57:3e:82:4f:a9:
                    45:87:ec:11:9f:58:b5:77:90:36:f3:dc:6a:ea:05:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:22:80:2E:33:76:1C:49:49:98:43:4B:3C:57:C6:B8:73:48:F7:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/4660259a-08cc-3371-90cd-23e520954c2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:100:198::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:77:62:5d:41:fd:9a:51:39:77:fb:5b:dd:c0:d3:8a:cb:
         0f:6c:db:2d:eb:15:de:95:66:4e:2e:f3:43:c9:7d:be:34:da:
         fa:ad:85:47:03:1b:c7:d0:c6:e1:cf:02:cb:a6:38:24:e5:3d:
         56:66:0e:74:6b:98:2d:85:96:b7:eb:c2:68:89:66:23:1b:f7:
         4f:75:b6:c8:d5:98:25:76:95:a8:ff:91:db:4b:b5:44:19:8b:
         22:d0:19:b9:1d:f7:2d:e2:30:a0:8f:54:ef:c5:83:de:fc:1c:
         81:ca:ef:69:c2:a6:6c:24:90:83:e6:c2:49:a9:71:bb:9d:39:
         4c:1e:15:11:99:c4:93:d7:5f:fe:ea:9a:84:4b:b7:bb:d6:af:
         45:5f:aa:95:e3:01:fd:55:fe:b7:9c:46:82:5a:0b:c3:37:ad:
         94:c7:db:1c:c6:37:31:7c:2c:71:8f:0b:a3:be:e5:35:72:16:
         3d:5f:5a:e2:26:11:a4:ba:c0:c1:84:15:0a:03:14:43:9b:d1:
         09:16:fe:fb:1e:96:1b:b1:0d:33:b5:2a:70:56:f4:ce:55:18:
         dd:3f:e3:ca:2c:14:49:d0:fa:a5:2b:a6:9a:af:81:1d:26:47:
         79:95:ec:7f:c6:d4:36:7b:41:1e:c7:40:49:a8:eb:8b:b6:a0:
         de:d5:2a:93
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEsKEV9VTSnybKytDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4
YWIxMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
N2IxYjdhYTYtMWYzNS00NmI1LWIwZWItMTQ5MTY0MWU5MzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ3weHN3jzFtndND6UOPbwb/f9SgSqKfygqb
dVKc1faWcunHJpY78uUzJCILjo/WLBYurOVcVVlXVLTixs5X9EjkizeK+57BMOtf
C//JgE87ailwXy/BgXpwmV/WS6HZT5bCapxURzSf3EWdktfv1MRvopoRsa3yAL4x
iWI6r6/vUi5Q4o5kpFupszq68oUtDg8rdWU+k+mdxVPKKoAT0oppF4k3YoO5cPgY
vr8XD+iTUWM2cR5XEckKHirgVnWk/afWICyBqYj+M4jI/Fw+DSEdrM1qVlvJmTRC
R9miCOSJ97cNTtIMf4FrVz6CT6lFh+wRn1i1d5A289xq6gVlGQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFE4igC4zdhxJSZhDSzxXxrhzSPf8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx
MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvNDY2MDI1OWEtMDhjYy0z
MzcxLTkwY2QtMjNlNTIwOTU0YzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1
ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky
OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk
MWI5MjhhYjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAFJ0AEA
AZgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAni53Yl1B/ZpROXf7W93A04rLD2zbLesV3pVmTi7zQ8l9vjTa
+q2FRwMbx9DG4c8Cy6Y4JOU9VmYOdGuYLYWWt+vCaIlmIxv3T3W2yNWYJXaVqP+R
20u1RBmLItAZuR33LeIwoI9U78WD3vwcgcrvacKmbCSQg+bCSalxu505TB4VEZnE
k9df/uqahEu3u9avRV+qleMB/VX+t5xGgloLwzetlMfbHMY3MXwscY8Lo77lNXIW
PV9a4iYRpLrAwYQVCgMUQ5vRCRb++x6WG7ENM7UqcFb0zlUY3T/jyiwUSdD6pSum
mq+BHSZHeZXsf8bUNntBHsdASajri7ag3tUqkw==
-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:42 2025 by rpki-client