Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5769d0ad-74ef-368e-8866-31ff1ff02b2b.roa
File:                     5769d0ad-74ef-368e-8866-31ff1ff02b2b.roa (raw, json)
Hash identifier:          NEGeX+QwO0cXnj8dX28TWSvj3my5mNJfvpKAlnXWj50=
Subject key identifier:   B0:9A:37:99:CA:88:F8:B8:09:7D:19:AA:D2:71:27:5F:71:96:43:AC
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584B153C1C5ABBE0192A9D63FC80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5769d0ad-74ef-368e-8866-31ff1ff02b2b.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2606:7bc0:1065::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:1c:5a:bb:e0:19:2a:9d:63:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=35d00809-47af-4ee3-906b-bf4a4ec433be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:2a:69:55:01:b0:96:ca:ff:d7:92:bd:6b:
                    fc:dd:ac:78:e3:30:9d:a1:83:7c:31:ae:83:89:e9:
                    cf:af:e0:41:dd:10:b3:f7:79:0e:da:b0:62:46:d9:
                    48:bd:f6:4f:81:d9:f6:55:ff:c2:c8:51:46:bd:3b:
                    7b:08:a8:fc:f3:85:ef:ec:de:01:6a:89:29:78:55:
                    ec:55:9f:a3:6d:10:15:9d:bc:91:43:b4:7e:47:66:
                    0b:d4:7f:9d:89:56:0a:c5:27:36:c7:3a:78:30:cd:
                    14:1a:24:d1:2a:12:e6:1b:ac:c2:ad:20:e3:ec:25:
                    ec:f3:0d:57:e5:23:de:a0:8b:e0:48:7a:06:06:ad:
                    23:c3:ab:df:01:78:56:0c:0b:55:c4:78:7e:92:ec:
                    e6:7b:73:6b:07:45:c6:39:03:d7:54:f0:1b:c4:f3:
                    1e:7e:c5:2c:76:93:3e:ba:d2:78:6c:ff:9b:e7:8d:
                    59:81:70:b4:37:7f:44:77:87:3b:61:75:db:ba:52:
                    24:78:21:88:4a:7e:ca:c2:fb:90:0b:36:fd:6a:2f:
                    da:7d:52:56:5c:27:da:4b:fa:42:a8:5a:f6:4f:7c:
                    5a:60:b3:3a:7e:9a:f4:0a:0e:e2:d0:58:8a:aa:9e:
                    25:f0:23:21:f0:e7:6e:36:e2:af:4c:ec:cc:11:b7:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9A:37:99:CA:88:F8:B8:09:7D:19:AA:D2:71:27:5F:71:96:43:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5769d0ad-74ef-368e-8866-31ff1ff02b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6a:9c:84:73:11:1f:4f:46:6f:f9:eb:09:49:47:04:7b:56:
         5a:a4:32:c2:5c:cb:1f:e4:66:4c:eb:d4:01:94:a8:99:3e:30:
         7f:ca:c0:66:1f:0f:f9:4d:68:8c:01:80:fb:17:94:c1:00:66:
         88:c0:f8:dc:8c:cb:77:28:f8:77:b2:aa:44:52:13:4d:7e:71:
         8b:ce:31:55:55:b4:ed:d2:ae:04:26:e0:10:01:76:cd:9a:af:
         44:1a:d4:08:05:76:4a:c6:0b:20:c2:58:2a:be:57:2b:71:3c:
         39:9e:bd:04:95:0a:bd:3c:f3:71:c0:07:ef:bb:ae:50:59:b8:
         04:dc:44:69:76:e6:6d:70:82:57:80:94:eb:4a:ce:a7:c8:8f:
         56:ee:5e:04:b8:4b:0d:65:79:72:ac:85:da:c8:18:2a:1b:1e:
         19:bb:f9:99:fc:ae:cc:f3:6c:8b:01:5b:e6:0d:0d:41:35:8e:
         fe:3f:46:1f:05:93:0c:d2:de:b0:d7:74:ee:2e:72:37:d2:46:
         28:a7:af:14:cb:93:33:68:e9:b8:42:98:b2:72:b6:26:b0:87:
         ff:81:b1:a2:f6:ea:f3:01:1d:a6:59:23:c7:71:34:4e:75:c7:
         a7:2f:a1:70:72:54:ed:de:b9:01:56:b6:92:70:8c:7b:bf:43:
         ac:bc:ae:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsVPBxau+AZKp1j/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk
MzVkMDA4MDktNDdhZi00ZWUzLTkwNmItYmY0YTRlYzQzM2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvYqaVUBsJbK/9eSvWv83ax44zCdoYN8Ma6D
ienPr+BB3RCz93kO2rBiRtlIvfZPgdn2Vf/CyFFGvTt7CKj884Xv7N4BaokpeFXs
VZ+jbRAVnbyRQ7R+R2YL1H+diVYKxSc2xzp4MM0UGiTRKhLmG6zCrSDj7CXs8w1X
5SPeoIvgSHoGBq0jw6vfAXhWDAtVxHh+kuzme3NrB0XGOQPXVPAbxPMefsUsdpM+
utJ4bP+b541ZgXC0N39Ed4c7YXXbulIkeCGISn7KwvuQCzb9ai/afVJWXCfaS/pC
qFr2T3xaYLM6fpr0Cg7i0FiKqp4l8CMh8OduNuKvTOzMEbcBnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLCaN5nKiPi4CX0ZqtJxJ19xlkOsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNTc2OWQwYWQtNzRlZi0z
NjhlLTg4NjYtMzFmZjFmZjAyYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABZqnIRzER9PRm/56wlJRwR7VlqkMsJcyx/kZkzr1AGUqJk+MH/K
wGYfD/lNaIwBgPsXlMEAZojA+NyMy3co+HeyqkRSE01+cYvOMVVVtO3SrgQm4BAB
ds2ar0Qa1AgFdkrGCyDCWCq+VytxPDmevQSVCr0883HAB++7rlBZuATcRGl25m1w
gleAlOtKzqfIj1buXgS4Sw1leXKshdrIGCobHhm7+Zn8rszzbIsBW+YNDUE1jv4/
Rh8FkwzS3rDXdO4ucjfSRiinrxTLkzNo6bhCmLJytiawh/+BsaL26vMBHaZZI8dx
NE51x6cvoXByVO3euQFWtpJwjHu/Q6y8rto=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:22:57 2025 by rpki-client