Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa
File:                     634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa (raw, json)
Hash identifier:          bryw6gwkFoF0EKsbM3WLLhBsraXM4+cODU6DpLSTeoc=
Subject key identifier:   91:41:0A:6C:E1:BF:18:69:09:42:16:0D:3B:A5:A3:3D:0B:4C:D5:16
Certificate issuer:       /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
Certificate serial:       010D0C9F4328584B4616FC6134EED17532E5C060
Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2620:ab:a002::/48 maxlen: 48
                          2620:ab:a003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:16:fc:61:34:ee:d1:75:32:e5:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=b0bc0195-7bba-4702-a22c-10e4422f9977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ad:36:7f:d3:7c:96:2e:61:fd:29:21:53:bf:
                    35:34:2c:5e:1a:2d:b1:3a:1f:30:fa:69:68:26:c2:
                    c2:53:2b:9f:3d:0d:78:b6:30:00:66:37:35:83:2d:
                    7c:a7:fa:6b:2f:d1:ec:83:ac:74:25:5b:ce:8b:aa:
                    b8:c4:0d:fd:d6:68:03:0e:de:3c:54:fc:6f:7f:74:
                    91:02:6b:4a:f6:78:40:47:04:f4:c7:1e:67:7c:10:
                    02:09:97:14:eb:25:d3:00:26:5b:e4:f9:f8:96:6c:
                    94:4e:95:bc:51:ad:6c:fb:cd:12:a4:90:ce:b6:fe:
                    8f:6d:cb:c5:d0:a6:48:ce:f7:37:0b:f6:65:20:75:
                    e7:e4:d1:7d:8e:a4:45:14:21:92:d4:41:49:8b:dd:
                    a5:a0:52:1d:b3:b0:24:01:a0:55:89:ed:e3:2b:49:
                    30:06:95:7e:a7:b0:a7:0d:60:d9:fb:76:50:a1:dd:
                    6e:02:d5:54:ea:5e:e0:d1:ce:b2:55:c6:e2:ee:e6:
                    00:f6:fb:00:ff:ee:85:78:ac:57:78:2e:1b:de:f3:
                    58:16:e7:a9:a0:6b:f1:35:f1:0b:e3:72:a6:67:38:
                    87:2b:52:fd:ee:3c:79:49:2b:5a:f9:63:45:3a:29:
                    8a:10:c3:cc:20:f1:7f:1c:1a:ee:9a:dc:31:99:e5:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:41:0A:6C:E1:BF:18:69:09:42:16:0D:3B:A5:A3:3D:0B:4C:D5:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/634a2861-dde0-3fbf-a17a-9eb56b63ffb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ab:a002::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e3:7b:96:52:75:d3:e1:71:33:67:60:14:37:63:e7:4a:3e:
         ab:b9:a8:27:13:22:34:ee:e6:0a:87:7d:99:2f:04:41:2b:3f:
         c6:d1:b8:53:eb:20:f0:d0:eb:49:83:b4:af:85:3d:33:9c:e6:
         87:f8:ac:f4:e0:e9:14:3b:c5:47:84:b9:a4:de:d2:8a:bc:ea:
         fb:46:89:9b:a8:9e:f0:e0:70:6b:4f:b7:29:62:af:a3:14:63:
         de:fc:65:d8:1b:13:fd:7c:bb:65:ee:f6:1b:60:50:d2:a8:17:
         04:0c:a9:36:0b:53:87:f5:31:55:fc:83:4f:68:c7:d9:b4:af:
         de:8c:65:25:fe:9d:10:76:fb:e8:fd:87:3b:11:d4:c0:24:c0:
         ff:46:31:30:67:24:41:18:8c:e0:3b:40:8e:1d:4a:3c:b0:85:
         1e:0f:ea:3a:4e:20:7d:ef:08:ac:c4:32:2b:f7:b6:0a:c8:06:
         e3:ef:e9:21:53:a0:4f:c3:5a:07:29:ad:05:b9:79:36:92:eb:
         a7:d3:ed:fc:5f:c6:ff:7e:29:d8:05:9b:43:8d:2e:b1:7b:ed:
         a8:19:07:a5:51:11:ae:bc:a6:66:7c:a7:76:c5:6f:c0:6f:25:
         3f:8b:e8:93:28:bc:99:72:fe:2a:d1:a5:be:04:fc:a0:44:38:
         26:94:a3:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtGFvxhNO7RdTLlwGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzliNmIyZmMtMzQyMi00NmU3LWI2MzctN2I4ZGNiODRi
ZmYxMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk
YjBiYzAxOTUtN2JiYS00NzAyLWEyMmMtMTBlNDQyMmY5OTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq02f9N8li5h/SkhU781NCxeGi2xOh8w+mlo
JsLCUyufPQ14tjAAZjc1gy18p/prL9Hsg6x0JVvOi6q4xA391mgDDt48VPxvf3SR
AmtK9nhARwT0xx5nfBACCZcU6yXTACZb5Pn4lmyUTpW8Ua1s+80SpJDOtv6PbcvF
0KZIzvc3C/ZlIHXn5NF9jqRFFCGS1EFJi92loFIds7AkAaBVie3jK0kwBpV+p7Cn
DWDZ+3ZQod1uAtVU6l7g0c6yVcbi7uYA9vsA/+6FeKxXeC4b3vNYFuepoGvxNfEL
43KmZziHK1L97jx5SSta+WNFOimKEMPMIPF/HBrumtwxmeVBFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJFBCmzhvxhpCUIWDTuloz0LTNUWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zOWI2
YjJmYy0zNDIyLTQ2ZTctYjYzNy03YjhkY2I4NGJmZjEvNjM0YTI4NjEtZGRlMC0z
ZmJmLWExN2EtOWViNTZiNjNmZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzliNmIyZmMtMzQyMi00NmU3LWI2
MzctN2I4ZGNiODRiZmYxLzM5YjZiMmZjLTM0MjItNDZlNy1iNjM3LTdiOGRjYjg0
YmZmMS5jcmwwHwYDVR0jBBgwFoAU9Xm1K1wSfAvIzQB1QiwV/G+mN3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zOWI2YjJmYy0zNDIyLTQ2ZTctYjYzNy03Yjhk
Y2I4NGJmZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAq6AC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABPje5ZSddPhcTNnYBQ3Y+dKPqu5qCcTIjTu5gqHfZkvBEErP8bR
uFPrIPDQ60mDtK+FPTOc5of4rPTg6RQ7xUeEuaTe0oq86vtGiZuonvDgcGtPtyli
r6MUY978ZdgbE/18u2Xu9htgUNKoFwQMqTYLU4f1MVX8g09ox9m0r96MZSX+nRB2
++j9hzsR1MAkwP9GMTBnJEEYjOA7QI4dSjywhR4P6jpOIH3vCKzEMiv3tgrIBuPv
6SFToE/DWgcprQW5eTaS66fT7fxfxv9+KdgFm0ONLrF77agZB6VREa68pmZ8p3bF
b8BvJT+L6JMovJly/irRpb4E/KBEOCaUoy4=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:55 2025 by rpki-client