Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa
File:                     b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa (raw, json)
Hash identifier:          bp/RYuqJvwMGHC6/2avcb+jWClrcNurEgYqzMdbu8RA=
Subject key identifier:   32:23:89:2C:FC:E0:3B:A7:00:4D:4F:0D:74:F4:F7:F8:96:FE:F6:70
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584B5B074B22590A1E5B97A60200
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     396422
IP address blocks:        2604:81c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:4b:22:59:0a:1e:5b:97:a6:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=c7d9bcca-89e6-46c8-8b7a-27ce92e3f807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a9:14:de:92:24:f6:e2:37:40:6b:0a:d4:40:
                    a4:4a:a3:a4:f4:c2:7b:04:82:59:40:b5:2b:18:b3:
                    e4:37:92:4b:2e:92:c0:21:67:30:39:84:7d:93:10:
                    a2:56:2b:fc:5a:21:76:6b:8d:75:f9:94:78:05:6a:
                    46:e1:4d:0c:78:f2:17:ec:f7:5a:71:7c:fe:ca:9d:
                    69:68:aa:b6:66:d3:22:c3:49:ae:bb:51:14:57:cb:
                    3b:83:b7:29:c7:07:24:1d:34:60:ab:00:61:13:f8:
                    07:99:27:24:9f:23:18:c7:36:b4:8e:d2:b8:00:67:
                    f6:26:0e:a7:5c:c6:c1:3e:7b:48:16:48:32:fe:9c:
                    1a:9d:f2:09:c8:44:1f:34:94:1e:01:6d:f9:e9:23:
                    8c:5e:9c:a8:1f:0b:dd:b2:6a:03:16:01:2a:e8:d2:
                    85:6e:32:33:87:18:eb:3a:f0:25:91:7e:0a:e0:14:
                    18:f4:da:65:a5:0a:4c:de:7a:53:51:15:cb:ad:e3:
                    f8:26:7e:73:4a:58:ed:4d:1f:00:38:46:5a:4a:b7:
                    12:7b:c1:18:aa:87:0e:b6:88:ef:d0:85:e0:5b:ca:
                    e7:22:a9:25:a5:3c:d3:dd:3f:6e:fc:a1:b3:d3:84:
                    9d:c6:fc:68:81:ca:e6:88:51:2b:2b:f8:53:f4:8a:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:23:89:2C:FC:E0:3B:A7:00:4D:4F:0D:74:F4:F7:F8:96:FE:F6:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:81c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:16:9b:ff:38:1c:43:8e:ee:d2:f1:7a:01:bd:0d:9c:ea:0b:
         24:75:7b:09:83:bd:2b:9c:16:fb:cc:b5:cc:3b:9a:6c:27:00:
         c0:3f:41:53:2e:dd:f9:70:95:60:33:f2:7d:3c:41:f2:4c:27:
         57:ab:40:44:2d:38:3d:e1:14:55:33:5e:00:75:3c:85:5e:ce:
         1f:06:78:96:f3:7d:10:f1:fb:42:33:c5:89:63:e9:9c:fd:8c:
         ad:d1:00:fc:71:d0:df:50:5a:1e:93:53:fb:f6:a5:84:89:70:
         4d:7f:fd:5c:ae:db:62:5c:27:1d:69:21:3f:c6:a2:51:fd:cf:
         7f:d4:55:5d:9e:a2:ab:e0:77:cf:1d:d0:2f:bc:8a:c9:8c:24:
         e1:da:72:89:86:0d:37:5e:18:24:f4:56:6e:aa:39:cb:1b:03:
         62:31:3c:5b:36:71:f4:98:f4:71:21:74:2e:90:58:24:13:8e:
         db:08:8e:15:3e:ac:ff:e6:fa:64:56:91:bc:c9:ea:9e:37:12:
         51:7e:6d:28:3b:09:67:8d:51:ab:0e:e5:60:d2:fb:7e:ec:2b:
         eb:9a:bb:4c:b7:11:5b:8e:cd:e4:71:53:03:ad:75:35:d7:cc:
         be:76:27:2e:06:70:0d:d2:fd:b9:53:6d:27:10:74:0a:24:3d:
         b4:04:7a:01
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtbB0siWQoeW5emAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU2MzQ2ZjItNjZmYi00YWM5LThiMGMtMWY4YmJiZmM4
NTkzMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk
YzdkOWJjY2EtODllNi00NmM4LThiN2EtMjdjZTkyZTNmODA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3akU3pIk9uI3QGsK1ECkSqOk9MJ7BIJZQLUr
GLPkN5JLLpLAIWcwOYR9kxCiViv8WiF2a411+ZR4BWpG4U0MePIX7PdacXz+yp1p
aKq2ZtMiw0muu1EUV8s7g7cpxwckHTRgqwBhE/gHmScknyMYxza0jtK4AGf2Jg6n
XMbBPntIFkgy/pwanfIJyEQfNJQeAW356SOMXpyoHwvdsmoDFgEq6NKFbjIzhxjr
OvAlkX4K4BQY9NplpQpM3npTURXLreP4Jn5zSljtTR8AOEZaSrcSe8EYqocOtojv
0IXgW8rnIqklpTzT3T9u/KGz04SdxvxogcrmiFErK/hT9Ir5dQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDIjiSz84DunAE1PDXT09/iW/vZwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTYz
NDZmMi02NmZiLTRhYzktOGIwYy0xZjhiYmJmYzg1OTMvYjAzZDk4MWEtMDNiOS0z
ZjRjLTlhMTEtNWFmZTZhNGUxNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWU2MzQ2ZjItNjZmYi00YWM5LThi
MGMtMWY4YmJiZmM4NTkzLzVlNjM0NmYyLTY2ZmItNGFjOS04YjBjLTFmOGJiYmZj
ODU5My5jcmwwHwYDVR0jBBgwFoAUJkCK/RbbhxHG2cZwZUqe3PK7k2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTYzNDZmMi02NmZiLTRhYzktOGIwYy0xZjhi
YmJmYzg1OTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSBwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBKFpv/OBxDju7S8XoBvQ2c6gskdXsJg70rnBb7zLXMO5psJwDAP0FT
Lt35cJVgM/J9PEHyTCdXq0BELTg94RRVM14AdTyFXs4fBniW830Q8ftCM8WJY+mc
/Yyt0QD8cdDfUFoek1P79qWEiXBNf/1crttiXCcdaSE/xqJR/c9/1FVdnqKr4HfP
HdAvvIrJjCTh2nKJhg03Xhgk9FZuqjnLGwNiMTxbNnH0mPRxIXQukFgkE47bCI4V
Pqz/5vpkVpG8yeqeNxJRfm0oOwlnjVGrDuVg0vt+7CvrmrtMtxFbjs3kcVMDrXU1
18y+dicuBnAN0v25U20nEHQKJD20BHoB
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:55:35 2025 by rpki-client