Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ffb1d1d0-a24d-3355-8d93-589c4541e3a3.roa
File:                     ffb1d1d0-a24d-3355-8d93-589c4541e3a3.roa (raw, json)
Hash identifier:          mjDSTnrTDgkLSPq7/zchWFmJFmw2ulhKoF/aLZtqymc=
Subject key identifier:   EC:1B:5F:3F:58:16:6F:1E:63:74:27:67:E7:E7:99:8C:F6:69:B0:EB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B0B76CD61DEE49343F137D6C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ffb1d1d0-a24d-3355-8d93-589c4541e3a3.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2620:11a:c01c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:cd:61:de:e4:93:43:f1:37:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=0c59fc7e-af8e-4c1c-b735-0ae11b6a1d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:00:dc:10:82:ab:2d:20:5a:bd:b8:40:4f:6d:
                    cc:fa:6f:69:1d:69:b9:48:cd:f8:1d:d5:b3:a5:e9:
                    48:ca:f7:a6:e3:5e:d3:b7:1c:b6:91:35:47:94:99:
                    dd:44:5f:d9:79:25:9d:4c:f4:dd:8f:08:ff:63:0e:
                    79:78:2b:62:56:28:e8:f6:67:60:59:4c:aa:cb:b6:
                    b2:6a:b6:f8:23:12:46:56:97:fe:d8:72:8b:dc:ad:
                    2d:e9:2b:6b:94:07:8b:9e:ae:a2:fa:6d:44:35:88:
                    6c:b7:23:46:b4:af:2e:79:31:96:f3:04:3e:49:b3:
                    b5:4a:89:fb:29:58:8d:f4:6b:db:a4:d8:f5:fc:f7:
                    bb:f1:82:24:27:26:eb:2e:1b:86:cd:15:b6:94:5e:
                    ea:8b:95:b6:d1:a7:b7:f5:9a:7c:2c:6f:1f:cc:49:
                    cb:43:79:d4:72:ab:42:69:41:91:63:e4:f9:35:5f:
                    fc:5c:4e:fe:f7:8d:8f:8f:08:26:a6:e2:11:1c:8e:
                    46:be:1b:88:7d:e2:db:cb:f3:f0:59:20:14:52:f8:
                    e7:19:03:bd:19:22:5a:cb:d2:b0:47:fc:93:14:0b:
                    7d:b3:0a:97:09:5b:ea:88:04:6e:bf:53:0d:f9:60:
                    8c:1e:ef:5a:12:42:c8:a7:87:3c:57:58:33:ac:c5:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1B:5F:3F:58:16:6F:1E:63:74:27:67:E7:E7:99:8C:F6:69:B0:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ffb1d1d0-a24d-3355-8d93-589c4541e3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c01c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:d5:aa:68:5c:d1:2a:75:19:23:ea:2b:99:3e:25:37:29:b9:
         0d:d5:92:2d:9d:27:3f:b1:03:b3:24:4e:a0:61:54:57:e1:22:
         87:68:77:eb:be:36:13:c1:c8:4e:62:6b:13:8d:2f:f6:d2:97:
         89:7e:f2:d4:8a:ac:13:1d:20:94:b7:52:1b:6f:e7:48:e0:fe:
         18:43:a2:f4:99:14:69:61:2b:33:c9:08:c2:00:62:16:c8:7d:
         ba:93:81:e9:51:bf:6d:f8:6e:bd:32:0b:a5:71:75:52:11:c0:
         3b:30:6b:c7:e7:07:07:75:f5:c2:36:7b:23:79:c1:44:a2:5f:
         8d:da:51:87:cf:c2:72:fd:e6:6e:90:51:8a:60:20:5a:d8:98:
         3c:b2:ed:32:5e:e5:aa:d0:d5:74:56:3b:43:2d:52:37:67:b9:
         f9:f2:99:84:85:33:71:43:70:89:35:c7:14:4c:9c:e8:63:c8:
         34:d2:2b:e8:ed:b4:ce:e7:d9:b7:4b:45:a7:08:15:aa:44:22:
         35:9a:2a:67:9b:d4:c5:67:fe:40:f9:57:8d:ff:c9:12:80:b4:
         d6:b2:54:9e:c4:23:ae:e4:ad:27:fb:ba:aa:56:17:eb:44:fd:
         65:0a:af:bb:db:f3:99:c4:8d:e1:18:d9:24:65:dc:68:e1:4f:
         b2:f1:98:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsLds1h3uSTQ/E31sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk
MGM1OWZjN2UtYWY4ZS00YzFjLWI3MzUtMGFlMTFiNmExZDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQDcEIKrLSBavbhAT23M+m9pHWm5SM34HdWz
pelIyvem417Ttxy2kTVHlJndRF/ZeSWdTPTdjwj/Yw55eCtiVijo9mdgWUyqy7ay
arb4IxJGVpf+2HKL3K0t6StrlAeLnq6i+m1ENYhstyNGtK8ueTGW8wQ+SbO1Son7
KViN9GvbpNj1/Pe78YIkJybrLhuGzRW2lF7qi5W20ae39Zp8LG8fzEnLQ3nUcqtC
aUGRY+T5NV/8XE7+942PjwgmpuIRHI5GvhuIfeLby/PwWSAUUvjnGQO9GSJay9Kw
R/yTFAt9swqXCVvqiARuv1MN+WCMHu9aEkLIp4c8V1gzrMV72QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOwbXz9YFm8eY3QnZ+fnmYz2abDrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZmZiMWQxZDAtYTI0ZC0z
MzU1LThkOTMtNTg5YzQ1NDFlM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGsAc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ/Vqmhc0Sp1GSPqK5k+JTcpuQ3Vki2dJz+xA7MkTqBhVFfhIodo
d+u+NhPByE5iaxONL/bSl4l+8tSKrBMdIJS3Uhtv50jg/hhDovSZFGlhKzPJCMIA
YhbIfbqTgelRv234br0yC6VxdVIRwDswa8fnBwd19cI2eyN5wUSiX43aUYfPwnL9
5m6QUYpgIFrYmDyy7TJe5arQ1XRWO0MtUjdnufnymYSFM3FDcIk1xxRMnOhjyDTS
K+jttM7n2bdLRacIFapEIjWaKmeb1MVn/kD5V43/yRKAtNayVJ7EI67krSf7uqpW
F+tE/WUKr7vb85nEjeEY2SRl3GjhT7LxmKA=
-----END CERTIFICATE-----
Generated at Thu Oct 9 05:49:16 2025 by rpki-client