Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa
File:                     c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa (raw, json)
Hash identifier:          f5tX4XEl602oMY0L5VcEPDVw/qKo/g3I4oGgY3vngsI=
Subject key identifier:   18:F8:4E:97:09:B6:05:3F:E4:A1:29:0A:0E:5E:56:86:C9:BD:0A:72
Certificate issuer:       /CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
Certificate serial:       010D0C9F4328584B0746A6ADD040EE55016A2CC0
Authority key identifier: 8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     26277
IP address blocks:        2607:3fc0:2b::/48 maxlen: 48
                          2607:3fc0:2c::/48 maxlen: 48
                          2607:3fc0:2d::/48 maxlen: 48
                          2607:3fc0:2e::/48 maxlen: 48
                          2607:3fc0:2f::/48 maxlen: 48
                          2607:3fc0:30::/48 maxlen: 48
                          2607:3fc0:31::/48 maxlen: 48
                          2607:3fc0:32::/48 maxlen: 48
                          2607:3fc0:33::/48 maxlen: 48
                          2607:3fc0:34::/48 maxlen: 48
                          2607:3fc0:35::/48 maxlen: 48
                          2607:3fc0:36::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:a6:ad:d0:40:ee:55:01:6a:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=c19a2730-07a7-4291-b2b6-59bdafaa2917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:43:5d:39:1b:27:5f:ba:58:8b:8a:e3:66:83:
                    9d:6a:fd:46:e7:8a:03:e2:4c:ed:38:c9:98:d7:1f:
                    19:bf:9f:fd:72:64:8f:37:7c:d3:df:09:de:b4:cd:
                    3f:b2:d0:5c:8f:06:b9:de:83:a8:25:70:2d:f9:05:
                    7b:db:2f:18:f1:a4:16:d6:b6:6f:be:2a:80:74:34:
                    8c:55:6d:72:72:d2:89:ca:f9:b4:1d:f3:1b:7e:e7:
                    dc:35:2a:a9:32:dd:dd:a7:b6:92:32:8f:25:2c:0a:
                    3d:24:1c:65:e5:57:fc:3b:f1:2d:b0:c4:5f:d7:b0:
                    af:af:d5:6d:e3:cb:69:e6:99:7a:54:01:01:58:28:
                    24:8b:13:05:bc:56:20:83:1b:96:79:69:19:f4:f5:
                    6a:c3:09:4a:e3:97:85:3b:5f:1a:d4:6f:0a:04:ae:
                    04:34:5b:5e:7e:a8:59:bf:29:60:57:3d:39:35:6d:
                    99:3b:fe:95:7a:b2:23:3d:77:91:ea:12:ec:41:78:
                    dd:fe:b6:fa:26:dc:f0:8d:c8:01:18:2f:a6:41:08:
                    ce:00:ac:40:11:6a:9f:94:69:8f:ae:aa:1f:af:43:
                    54:59:74:a5:52:0c:8b:24:e7:e7:55:72:21:6a:7d:
                    7f:ac:e1:c5:27:5b:a3:e1:ad:a3:39:65:88:b6:1c:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F8:4E:97:09:B6:05:3F:E4:A1:29:0A:0E:5E:56:86:C9:BD:0A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/c5cfa568-492b-3aa3-98df-5d9aae4fe8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl

            X509v3 Authority Key Identifier:
                keyid:8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3fc0:2b::-2607:3fc0:36:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cb:cc:8e:6d:ef:b4:2c:57:d8:ad:57:6f:f9:28:ff:77:61:
         35:ad:5b:f6:35:c5:7a:22:b6:a3:53:67:75:b6:e4:a8:1a:8c:
         de:97:7c:7a:7f:5e:ce:48:28:f8:40:d5:96:77:8a:30:a1:16:
         66:47:4e:3c:48:0f:e7:33:9e:f0:35:1f:34:a7:2e:96:95:55:
         9d:98:51:15:50:83:ab:ea:f9:4b:c6:bc:b1:4b:7d:2b:f0:f3:
         84:5c:69:10:ea:4f:ad:41:0b:ca:a9:19:e2:0d:8b:55:04:0e:
         41:62:13:83:68:b2:f2:31:38:fc:66:c6:01:bc:2c:a2:d8:f1:
         7c:ee:2d:9b:a2:5b:54:91:30:cf:ed:3a:c9:68:f9:cf:9b:55:
         3b:e3:25:61:96:39:a9:1c:b8:c2:7d:06:58:ca:77:aa:af:ff:
         c0:40:0a:96:d0:a3:0a:f2:ae:62:c6:d0:18:13:6f:61:d2:85:
         d2:65:3e:3a:e6:cb:74:12:cc:f4:f2:70:e5:e8:c4:3b:a4:5d:
         21:58:5b:fb:ba:6c:54:67:fb:ac:1e:cb:bf:b4:79:fd:5f:64:
         02:5b:1b:68:25:a7:26:26:8a:62:54:18:fe:1b:ba:44:5f:f2:
         df:86:ab:22:f9:c4:01:56:14:e2:9f:e6:e5:73:3e:d1:ec:ad:
         63:0e:fa:cf
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEsHRqat0EDuVQFqLMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmMwODM2YzUtMGMzOC00MWEyLTkxN2QtYzlkZjAwOWYx
YTMxMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
YzE5YTI3MzAtMDdhNy00MjkxLWIyYjYtNTliZGFmYWEyOTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0NdORsnX7pYi4rjZoOdav1G54oD4kztOMmY
1x8Zv5/9cmSPN3zT3wnetM0/stBcjwa53oOoJXAt+QV72y8Y8aQW1rZvviqAdDSM
VW1yctKJyvm0HfMbfufcNSqpMt3dp7aSMo8lLAo9JBxl5Vf8O/EtsMRf17Cvr9Vt
48tp5pl6VAEBWCgkixMFvFYggxuWeWkZ9PVqwwlK45eFO18a1G8KBK4ENFtefqhZ
vylgVz05NW2ZO/6VerIjPXeR6hLsQXjd/rb6JtzwjcgBGC+mQQjOAKxAEWqflGmP
rqofr0NUWXSlUgyLJOfnVXIhan1/rOHFJ1uj4a2jOWWIthx0QQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFBj4TpcJtgU/5KEpCg5eVobJvQpyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82YzA4
MzZjNS0wYzM4LTQxYTItOTE3ZC1jOWRmMDA5ZjFhMzEvYzVjZmE1NjgtNDkyYi0z
YWEzLTk4ZGYtNWQ5YWFlNGZlOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmMwODM2YzUtMGMzOC00MWEyLTkx
N2QtYzlkZjAwOWYxYTMxLzZjMDgzNmM1LTBjMzgtNDFhMi05MTdkLWM5ZGYwMDlm
MWEzMS5jcmwwHwYDVR0jBBgwFoAUjoANjk1AtYtlb3DuxgVvu0c5AJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82YzA4MzZjNS0wYzM4LTQxYTItOTE3ZC1jOWRm
MDA5ZjFhMzEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmBz/A
ACsDBwAmBz/AADYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAYMvMjm3vtCxX2K1Xb/ko/3dhNa1b9jXFeiK2
o1NndbbkqBqM3pd8en9ezkgo+EDVlneKMKEWZkdOPEgP5zOe8DUfNKculpVVnZhR
FVCDq+r5S8a8sUt9K/DzhFxpEOpPrUELyqkZ4g2LVQQOQWITg2iy8jE4/GbGAbws
otjxfO4tm6JbVJEwz+06yWj5z5tVO+MlYZY5qRy4wn0GWMp3qq//wEAKltCjCvKu
YsbQGBNvYdKF0mU+OubLdBLM9PJw5ejEO6RdIVhb+7psVGf7rB7Lv7R5/V9kAlsb
aCWnJiaKYlQY/hu6RF/y34arIvnEAVYU4p/m5XM+0eytYw76zw==
-----END CERTIFICATE-----
Generated at Sat Oct 11 15:51:25 2025 by rpki-client