Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a5891452-f1cb-3e08-aa46-5ab07c2c3edf.roa
File:                     a5891452-f1cb-3e08-aa46-5ab07c2c3edf.roa (raw, json)
Hash identifier:          /7IaKF41tOgZFFrS4xGNKqjZhUf6sbC9OzfkW4o43NY=
Subject key identifier:   7B:CD:5E:CD:FA:76:48:46:7F:F0:78:95:42:17:DD:35:35:22:A1:1C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6D9F2D35D1E9A6AC57A60
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a5891452-f1cb-3e08-aa46-5ab07c2c3edf.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2620:11a:c000::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:d9:f2:d3:5d:1e:9a:6a:c5:7a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=1676a36b-836d-4efe-8dfd-7b716b9ee5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:55:5c:f9:ed:31:ba:b4:d9:17:4e:c1:91:
                    d6:e0:9a:42:db:bf:f5:77:ee:40:85:47:be:6c:88:
                    76:fb:fd:80:0e:97:5f:c8:64:0b:63:75:19:43:41:
                    dd:56:7b:5f:12:6b:8d:9f:81:48:58:a9:62:c9:c1:
                    6f:95:a6:a4:ea:da:f5:08:89:a3:bf:85:2a:a8:aa:
                    0e:ce:42:f6:b4:74:d8:cb:c9:ae:de:dd:91:74:99:
                    c7:36:db:6a:14:fe:d7:16:ab:b1:15:28:1c:ae:a6:
                    79:56:2d:4c:41:5f:18:64:1f:6a:da:f9:e5:eb:67:
                    23:91:2b:07:52:b9:a2:f1:91:43:e4:bf:aa:b3:ea:
                    0b:5f:2c:da:f4:33:f3:9e:28:fb:3e:40:8a:ae:3c:
                    c0:2d:16:12:0a:6c:16:0f:2f:b7:f1:a3:46:cd:b0:
                    2c:55:47:b4:3f:71:54:de:46:0e:99:0c:b1:4b:6d:
                    ff:85:09:15:77:9a:ee:9d:eb:5a:03:7f:fa:b6:1f:
                    db:23:52:b5:47:79:c5:a0:f2:86:b4:80:61:03:c5:
                    b1:b7:b9:78:70:81:b8:1b:46:9d:5e:f8:a4:66:0a:
                    2f:5c:75:84:5b:67:f5:3d:e4:bd:82:0c:62:44:1c:
                    3a:43:11:f5:2f:f9:72:82:3c:5e:9a:ff:19:64:eb:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CD:5E:CD:FA:76:48:46:7F:F0:78:95:42:17:DD:35:35:22:A1:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a5891452-f1cb-3e08-aa46-5ab07c2c3edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c000::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:14:4e:1c:ef:c8:61:a2:8d:ee:7a:fd:b2:a0:22:83:dd:9d:
         db:6d:a7:a6:a8:41:34:a1:f8:df:df:4a:a6:d5:f8:ee:6f:ac:
         0a:50:70:38:aa:45:11:5b:ac:4a:17:8a:56:83:26:e5:ed:31:
         90:2d:53:a2:a2:f8:f1:3d:a4:cf:ee:0a:3a:12:a5:d7:0c:9b:
         1e:76:90:0b:da:6b:b2:7a:69:3e:5a:bd:a0:e0:51:76:47:af:
         e2:1c:8c:b6:8f:38:ad:35:c5:f2:59:c1:82:b6:a2:1f:38:73:
         b1:5b:cd:1c:e7:9a:9a:8a:2d:db:83:49:79:35:71:2e:5d:38:
         05:e8:6a:f8:5a:1b:47:11:8b:e5:e4:22:7c:7b:b2:24:79:ec:
         d8:f6:46:f6:0b:76:bf:e1:4a:2c:cb:ae:5d:2f:88:2b:fb:15:
         b1:e4:26:98:ed:4d:7b:36:3b:e7:4e:a1:c1:db:bc:30:97:01:
         7b:62:cb:ce:d3:a4:a3:38:f1:1c:62:a0:b5:d7:dc:c2:fd:9f:
         b7:25:77:b2:53:12:45:66:18:14:77:8b:8b:19:a8:7c:69:11:
         e8:39:80:1b:23:94:0a:16:e2:68:aa:7c:4a:b0:ee:75:b3:9c:
         2e:3f:82:dc:b7:6f:ca:57:93:18:81:59:cc:5f:54:ac:66:81:
         ab:4c:78:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsT1tny010emmrFemAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk
MTY3NmEzNmItODM2ZC00ZWZlLThkZmQtN2I3MTZiOWVlNWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU9VXPntMbq02RdOwZHW4JpC27/1d+5AhUe+
bIh2+/2ADpdfyGQLY3UZQ0HdVntfEmuNn4FIWKliycFvlaak6tr1CImjv4UqqKoO
zkL2tHTYy8mu3t2RdJnHNttqFP7XFquxFSgcrqZ5Vi1MQV8YZB9q2vnl62cjkSsH
Urmi8ZFD5L+qs+oLXyza9DPznij7PkCKrjzALRYSCmwWDy+38aNGzbAsVUe0P3FU
3kYOmQyxS23/hQkVd5runetaA3/6th/bI1K1R3nFoPKGtIBhA8Wxt7l4cIG4G0ad
XvikZgovXHWEW2f1PeS9ggxiRBw6QxH1L/lygjxemv8ZZOvm/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHvNXs36dkhGf/B4lUIX3TU1IqEcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYTU4OTE0NTItZjFjYi0z
ZTA4LWFhNDYtNWFiMDdjMmMzZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJiABGsAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK8UThzvyGGije56/bKgIoPdndttp6aoQTSh+N/fSqbV+O5vrApQ
cDiqRRFbrEoXilaDJuXtMZAtU6Ki+PE9pM/uCjoSpdcMmx52kAvaa7J6aT5avaDg
UXZHr+IcjLaPOK01xfJZwYK2oh84c7FbzRznmpqKLduDSXk1cS5dOAXoavhaG0cR
i+XkInx7siR57Nj2RvYLdr/hSizLrl0viCv7FbHkJpjtTXs2O+dOocHbvDCXAXti
y87TpKM48RxioLXX3ML9n7cld7JTEkVmGBR3i4sZqHxpEeg5gBsjlAoW4miqfEqw
7nWznC4/gty3b8pXkxiBWcxfVKxmgatMeBI=
-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:17 2025 by rpki-client