Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9406a531-7b73-4b68-8163-42e28af103bb/0a662c1b-bf53-3f39-aeab-04b4a39c4ef9.roa
File:                     0a662c1b-bf53-3f39-aeab-04b4a39c4ef9.roa (raw, json)
Hash identifier:          oZXI6402VOGsGlVo/g7uy/mlARCg6UVhqSir85seiO8=
Subject key identifier:   A2:CD:DE:8D:E8:EB:83:0C:A3:B0:88:3C:E9:ED:B0:E0:31:F8:FF:A7
Certificate issuer:       /CN=9406a531-7b73-4b68-8163-42e28af103bb
Certificate serial:       010D0C9F4328584B3126F142D0B3BA31AE45B940
Authority key identifier: 4C:52:97:EF:CB:F7:A5:FC:A5:98:6B:EB:57:DD:26:02:D3:C0:22:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9406a531-7b73-4b68-8163-42e28af103bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9406a531-7b73-4b68-8163-42e28af103bb/0a662c1b-bf53-3f39-aeab-04b4a39c4ef9.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     16920
IP address blocks:        2620:10a:a0ba::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9406a531-7b73-4b68-8163-42e28af103bb/9406a531-7b73-4b68-8163-42e28af103bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9406a531-7b73-4b68-8163-42e28af103bb/9406a531-7b73-4b68-8163-42e28af103bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9406a531-7b73-4b68-8163-42e28af103bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f1:42:d0:b3:ba:31:ae:45:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9406a531-7b73-4b68-8163-42e28af103bb
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=ba394175-2a7e-4aed-a43f-3090a6306a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:2a:f6:26:ef:2c:dc:12:0a:ba:1c:4b:63:
                    d4:90:ee:f7:ed:e0:7c:a1:7e:16:f5:7e:57:6e:56:
                    d0:b3:56:74:c5:62:d7:24:41:db:5f:70:64:1a:0b:
                    a9:70:cd:86:c4:8a:6b:a8:dd:0f:6b:1e:17:18:e5:
                    22:0e:b9:c8:bd:ef:d2:ee:48:ae:00:4c:dd:08:03:
                    99:d3:55:e9:6c:44:b8:3e:e0:63:77:26:c2:34:43:
                    21:7d:81:66:a0:5d:84:be:af:61:b2:91:e8:26:7d:
                    30:0d:49:c9:4a:8d:42:3d:5b:04:9f:5a:94:9d:7f:
                    00:25:9a:1a:cf:a0:34:2a:0a:56:0e:09:7a:e1:56:
                    17:1e:e4:f1:fa:5f:17:07:2e:d9:3f:72:53:85:9b:
                    6a:1c:d9:48:d0:05:8b:03:c2:72:4b:5f:f3:0e:05:
                    3e:54:fd:1d:3b:0b:e2:dd:06:84:5e:a8:00:be:9f:
                    86:60:cf:12:2f:ed:9e:9d:66:8e:b0:b4:14:44:73:
                    2f:a5:fd:ef:e4:d9:4f:0a:86:e8:7e:a0:9e:13:dc:
                    f3:57:e0:b3:27:46:8c:74:f0:57:ae:06:b9:41:0d:
                    e8:a6:8d:ff:1d:ba:1e:a9:79:82:90:14:f4:43:2f:
                    d6:4e:d3:a8:8e:fa:ad:c4:78:a9:aa:5a:71:30:34:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CD:DE:8D:E8:EB:83:0C:A3:B0:88:3C:E9:ED:B0:E0:31:F8:FF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9406a531-7b73-4b68-8163-42e28af103bb/0a662c1b-bf53-3f39-aeab-04b4a39c4ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9406a531-7b73-4b68-8163-42e28af103bb/9406a531-7b73-4b68-8163-42e28af103bb.crl

            X509v3 Authority Key Identifier:
                keyid:4C:52:97:EF:CB:F7:A5:FC:A5:98:6B:EB:57:DD:26:02:D3:C0:22:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9406a531-7b73-4b68-8163-42e28af103bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:a0ba::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:60:e5:fa:c9:54:bf:39:57:95:e7:14:0c:69:02:1c:3b:68:
         d4:ea:f8:c7:f1:6e:85:bf:be:e6:a4:13:d1:03:cc:34:fb:2d:
         e8:ab:22:36:6b:a2:dd:a0:8b:92:f5:52:86:9b:1e:cc:e5:02:
         c1:db:29:71:c4:4b:64:a4:72:43:a5:f9:10:e5:25:cb:48:db:
         f4:1f:1d:91:16:3e:70:51:c0:50:36:21:ab:f7:1c:66:e2:c4:
         c8:67:82:51:79:63:ff:89:e5:a6:6b:e2:b3:d3:0e:b1:d4:6c:
         ea:3b:36:b4:ac:c9:d4:92:61:9e:5a:a6:cd:e0:5a:dd:92:84:
         93:23:04:c4:37:4a:3c:db:9d:c7:2e:6e:b2:1c:bf:03:45:f6:
         40:cb:3d:60:3c:86:9a:94:44:9e:97:0d:e0:ec:11:c0:93:f0:
         c1:1a:6e:c2:d7:f9:40:eb:15:5c:eb:7e:ce:9a:c0:96:70:34:
         00:4f:10:cd:af:8c:06:3a:30:7f:8f:8b:a5:de:3d:ad:d2:c1:
         d0:cc:35:f3:55:b7:b5:42:4d:1b:4f:bd:4d:bc:75:44:48:2f:
         2f:f6:4f:51:04:c7:ab:9e:9e:5a:2e:e6:23:df:a8:4e:8f:2d:
         02:07:e4:51:8f:5b:32:73:44:08:6d:7c:8f:34:3e:9e:73:31:
         04:02:34:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsxJvFC0LO6Ma5FuUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQwNmE1MzEtN2I3My00YjY4LTgxNjMtNDJlMjhhZjEw
M2JiMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk
YmEzOTQxNzUtMmE3ZS00YWVkLWE0M2YtMzA5MGE2MzA2YTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgkq9ibvLNwSCrocS2PUkO737eB8oX4W9X5X
blbQs1Z0xWLXJEHbX3BkGgupcM2GxIprqN0Pax4XGOUiDrnIve/S7kiuAEzdCAOZ
01XpbES4PuBjdybCNEMhfYFmoF2Evq9hspHoJn0wDUnJSo1CPVsEn1qUnX8AJZoa
z6A0KgpWDgl64VYXHuTx+l8XBy7ZP3JThZtqHNlI0AWLA8JyS1/zDgU+VP0dOwvi
3QaEXqgAvp+GYM8SL+2enWaOsLQURHMvpf3v5NlPCobofqCeE9zzV+CzJ0aMdPBX
rga5QQ3opo3/HboeqXmCkBT0Qy/WTtOojvqtxHipqlpxMDTNdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKLN3o3o64MMo7CIPOntsOAx+P+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NDA2
YTUzMS03YjczLTRiNjgtODE2My00MmUyOGFmMTAzYmIvMGE2NjJjMWItYmY1My0z
ZjM5LWFlYWItMDRiNGEzOWM0ZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTQwNmE1MzEtN2I3My00YjY4LTgx
NjMtNDJlMjhhZjEwM2JiLzk0MDZhNTMxLTdiNzMtNGI2OC04MTYzLTQyZTI4YWYx
MDNiYi5jcmwwHwYDVR0jBBgwFoAUTFKX78v3pfylmGvrV90mAtPAIlIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85NDA2YTUzMS03YjczLTRiNjgtODE2My00MmUy
OGFmMTAzYmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCqC6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHFg5frJVL85V5XnFAxpAhw7aNTq+MfxboW/vuakE9EDzDT7Leir
IjZrot2gi5L1UoabHszlAsHbKXHES2SkckOl+RDlJctI2/QfHZEWPnBRwFA2Iav3
HGbixMhnglF5Y/+J5aZr4rPTDrHUbOo7NrSsydSSYZ5aps3gWt2ShJMjBMQ3Sjzb
nccubrIcvwNF9kDLPWA8hpqURJ6XDeDsEcCT8MEabsLX+UDrFVzrfs6awJZwNABP
EM2vjAY6MH+Pi6XePa3SwdDMNfNVt7VCTRtPvU28dURILy/2T1EEx6uenlou5iPf
qE6PLQIH5FGPWzJzRAhtfI80Pp5zMQQCNDk=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:53 2025 by rpki-client