Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa
File:                     f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa (raw, json)
Hash identifier:          DkMfTPjL8hZi0/ZwwHdGaRGCTpjkQejM7I+mqwMMf30=
Subject key identifier:   12:90:52:3F:5C:C4:C4:A7:E0:39:54:BA:AF:B8:C5:52:E1:78:29:5F
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584B6E91FA9FE70B5A5E8274C780
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     396422
IP address blocks:        2604:81c0:3d5::/48 maxlen: 48
                          2604:81c0:3d5c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:fa:9f:e7:0b:5a:5e:82:74:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=60738af8-9c4d-4ec2-b67d-f73e09e06130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:e4:55:c5:77:12:d3:0b:56:51:40:03:f3:
                    f7:98:d8:36:03:cb:0b:6a:ae:6b:66:68:9e:f2:4a:
                    fc:2f:a6:af:bc:1a:e6:fa:33:b7:36:3e:2b:85:74:
                    9b:7b:c0:13:78:79:ec:a3:6b:86:23:9d:f3:e1:1a:
                    02:ef:9a:09:76:a7:a2:a4:f5:08:e0:2f:5c:04:40:
                    f4:9c:4a:a0:86:b1:31:f6:80:7c:26:69:47:7f:db:
                    3c:96:62:7b:f7:3d:a1:15:73:ec:0e:64:2d:ee:de:
                    dc:65:ce:29:1a:ea:32:85:45:f9:bc:df:d5:16:37:
                    fd:32:8b:e6:2d:52:21:9d:0e:14:78:e1:4b:bd:ec:
                    4b:db:89:0d:3a:eb:71:9d:8e:c5:1c:f9:5b:1c:18:
                    12:2a:3a:a9:7c:cc:82:01:26:75:f1:4c:de:36:6d:
                    0a:fa:58:30:7d:ad:75:53:ad:6e:34:e0:03:6b:d7:
                    2a:9d:82:48:52:c8:d0:98:15:d7:8c:d0:35:b9:d8:
                    a3:b8:65:ac:62:7e:da:02:20:22:05:a1:86:d4:b2:
                    0b:0a:ce:9b:47:31:0c:f1:6c:f8:cb:6d:32:de:e5:
                    04:82:37:fa:d2:81:4b:60:ae:e0:eb:fc:b6:58:24:
                    c6:4a:08:fb:ac:59:3b:87:44:25:0a:43:05:19:d3:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:90:52:3F:5C:C4:C4:A7:E0:39:54:BA:AF:B8:C5:52:E1:78:29:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:81c0:3d5::/48
                  2604:81c0:3d5c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:48:0f:a6:01:17:82:2d:b9:1f:1e:1a:91:b9:5e:f1:42:03:
         d3:ca:b9:cd:43:16:a7:4b:4d:d4:4e:dd:5b:25:8b:19:65:89:
         94:13:66:07:d3:d5:eb:64:cf:db:80:f1:f1:56:3b:60:ce:36:
         9a:fc:b3:c3:ab:3a:58:5d:c4:fb:fd:ef:ef:53:a7:ce:f2:a5:
         c7:0c:14:81:21:58:ab:4a:0b:83:51:8c:06:a9:48:f6:82:7c:
         55:92:29:ab:a2:fc:ac:0e:e0:3e:af:fa:26:aa:54:4c:a3:51:
         b6:64:38:e9:26:04:db:47:57:23:28:39:85:06:2e:86:43:d7:
         95:b1:d9:ba:43:bf:5b:d8:62:83:df:e2:56:bc:d7:c8:10:4f:
         ba:e3:7d:b5:50:f8:1f:f4:7c:4e:76:ad:ba:16:07:9d:49:15:
         d1:58:a1:a8:b2:8a:c0:eb:bc:b5:aa:10:3d:da:f1:e3:c1:2b:
         1d:4b:d0:d5:91:76:05:ec:4d:b7:58:4e:4c:c7:dc:ce:ba:b1:
         36:34:08:ce:ec:4b:2c:6e:17:e9:05:2a:2c:42:fd:09:29:ab:
         69:a9:48:e3:37:05:2a:3e:71:6c:62:c4:2a:19:2b:bc:e0:c2:
         5d:ac:5e:74:cd:60:3c:d3:5d:54:df:cc:a7:4b:25:77:26:f9:
         dc:c8:ef:d9
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEtukfqf5wtaXoJ0x4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU2MzQ2ZjItNjZmYi00YWM5LThiMGMtMWY4YmJiZmM4
NTkzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NjA3MzhhZjgtOWM0ZC00ZWMyLWI2N2QtZjczZTA5ZTA2MTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmTkVcV3EtMLVlFAA/P3mNg2A8sLaq5rZmie
8kr8L6avvBrm+jO3Nj4rhXSbe8ATeHnso2uGI53z4RoC75oJdqeipPUI4C9cBED0
nEqghrEx9oB8JmlHf9s8lmJ79z2hFXPsDmQt7t7cZc4pGuoyhUX5vN/VFjf9Movm
LVIhnQ4UeOFLvexL24kNOutxnY7FHPlbHBgSKjqpfMyCASZ18UzeNm0K+lgwfa11
U61uNOADa9cqnYJIUsjQmBXXjNA1udijuGWsYn7aAiAiBaGG1LILCs6bRzEM8Wz4
y20y3uUEgjf60oFLYK7g6/y2WCTGSgj7rFk7h0QlCkMFGdMsFQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFBKQUj9cxMSn4DlUuq+4xVLheClfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTYz
NDZmMi02NmZiLTRhYzktOGIwYy0xZjhiYmJmYzg1OTMvZjdhZThiYmUtM2ViNC0z
OGQ4LWJkOTktMzA4NjcwNTI1YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWU2MzQ2ZjItNjZmYi00YWM5LThi
MGMtMWY4YmJiZmM4NTkzLzVlNjM0NmYyLTY2ZmItNGFjOS04YjBjLTFmOGJiYmZj
ODU5My5jcmwwHwYDVR0jBBgwFoAUJkCK/RbbhxHG2cZwZUqe3PK7k2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTYzNDZmMi02NmZiLTRhYzktOGIwYy0xZjhi
YmJmYzg1OTMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgSBwAPV
AwcAJgSBwD1cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACJID6YBF4ItuR8eGpG5XvFCA9PKuc1DFqdLTdRO
3VslixlliZQTZgfT1etkz9uA8fFWO2DONpr8s8OrOlhdxPv97+9Tp87ypccMFIEh
WKtKC4NRjAapSPaCfFWSKaui/KwO4D6v+iaqVEyjUbZkOOkmBNtHVyMoOYUGLoZD
15Wx2bpDv1vYYoPf4la818gQT7rjfbVQ+B/0fE52rboWB51JFdFYoaiyisDrvLWq
ED3a8ePBKx1L0NWRdgXsTbdYTkzH3M66sTY0CM7sSyxuF+kFKixC/Qkpq2mpSOM3
BSo+cWxixCoZK7zgwl2sXnTNYDzTXVTfzKdLJXcm+dzI79k=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:14 2025 by rpki-client