Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/d3b04fad-1045-30d6-952d-d673972e65cc.roa
File:                     d3b04fad-1045-30d6-952d-d673972e65cc.roa (raw, json)
Hash identifier:          iCxGbpk7b9T/Q+rYaDvAzrFoYqNsCtB001dhJO6LNJk=
Subject key identifier:   C1:89:5B:67:2B:20:AF:41:31:13:9F:C4:E8:C7:90:AF:28:D7:EF:2A
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584B0CDC2CD64C2A7A50C469C980
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/d3b04fad-1045-30d6-952d-d673972e65cc.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     271
IP address blocks:        2607:f8f0:1680::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:2c:d6:4c:2a:7a:50:c4:69:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=59d4f890-7a5c-49b0-85eb-f582b9dcb3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ee:37:9c:7f:bf:a6:3b:c8:8f:a4:43:e1:3f:
                    52:c3:91:5c:24:26:31:f5:94:0f:12:1c:b3:8a:61:
                    6d:26:2c:af:3d:e4:e8:96:39:76:b3:49:72:0e:c7:
                    70:c0:11:79:fb:8f:3a:be:f5:fa:87:0a:b7:d6:20:
                    7d:ea:5b:a8:42:71:5e:87:76:02:61:d0:89:b1:70:
                    0d:8b:ff:55:68:1d:23:1f:1e:ee:41:92:82:bf:e6:
                    f7:5c:81:e8:2c:16:bd:6f:62:54:d4:99:36:27:a3:
                    df:5e:8c:97:8b:e6:84:16:fb:00:05:43:03:d6:91:
                    a6:a6:62:49:d2:72:5a:9f:e3:1b:50:ab:3b:c1:f7:
                    15:86:7b:ab:5d:25:0b:e4:cc:31:08:ae:a0:15:39:
                    2a:9f:9f:94:33:80:7a:73:04:96:e5:ca:a0:bb:ba:
                    c5:5f:a5:20:9b:33:fa:d6:68:23:af:c2:96:c8:a5:
                    5a:88:8a:95:cd:cc:74:4c:aa:e7:cf:db:55:1b:35:
                    e9:65:4d:ab:1d:f5:b4:6d:be:a1:de:4e:2e:cd:f9:
                    49:04:36:1f:0d:60:10:5e:9b:83:f5:94:02:3c:ed:
                    02:60:ab:13:a8:b0:e1:7f:0f:81:6e:86:ad:a9:4d:
                    37:4b:69:14:e4:e5:56:e6:91:8a:95:6a:a8:5d:4f:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:89:5B:67:2B:20:AF:41:31:13:9F:C4:E8:C7:90:AF:28:D7:EF:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/d3b04fad-1045-30d6-952d-d673972e65cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:1680::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7e:bc:6c:12:0c:60:7b:c6:9f:53:68:92:0a:60:85:64:ee:
         4f:84:c0:3c:c6:91:f4:03:73:da:42:0e:44:db:5b:ad:99:3e:
         5e:a8:85:a8:66:5f:9f:fc:81:6b:4e:33:06:df:33:a4:4f:9a:
         93:5c:56:13:be:7d:b2:66:90:08:0e:0b:52:ea:48:81:b4:cc:
         94:d9:ec:f4:15:34:1c:3c:89:e5:66:a7:b3:60:bb:57:81:8a:
         df:bc:0f:b1:0a:57:8a:0f:9b:c8:7f:0e:e5:5e:c0:bf:bc:3b:
         84:f5:1a:3a:bf:73:ee:41:05:8c:3b:34:6c:ad:17:8b:5f:ed:
         86:0a:85:05:76:c0:38:89:aa:b6:18:ba:a4:d6:0d:c1:79:4d:
         18:e3:bb:46:3a:2c:e7:40:af:b5:c0:5e:08:e8:57:5e:48:fb:
         f2:72:f1:ec:67:a7:20:d1:66:0e:e7:96:54:d5:dc:4f:8b:3c:
         5d:a5:11:18:52:73:93:06:a5:3e:32:83:b9:a7:ac:9e:de:fb:
         df:9b:22:ad:3c:5b:85:a0:5b:c9:62:b7:11:59:97:c4:dc:e4:
         bc:67:e0:f1:0c:46:0f:14:46:fd:a0:6e:36:9e:93:93:e1:75:
         30:c8:82:bf:31:0f:c1:b3:c0:e1:61:56:43:8d:ab:b6:48:65:
         83:18:fd:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3CzWTCp6UMRpyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux
OGNmMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
NTlkNGY4OTAtN2E1Yy00OWIwLTg1ZWItZjU4MmI5ZGNiM2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+43nH+/pjvIj6RD4T9Sw5FcJCYx9ZQPEhyz
imFtJiyvPeToljl2s0lyDsdwwBF5+486vvX6hwq31iB96luoQnFeh3YCYdCJsXAN
i/9VaB0jHx7uQZKCv+b3XIHoLBa9b2JU1Jk2J6PfXoyXi+aEFvsABUMD1pGmpmJJ
0nJan+MbUKs7wfcVhnurXSUL5MwxCK6gFTkqn5+UM4B6cwSW5cqgu7rFX6UgmzP6
1mgjr8KWyKVaiIqVzcx0TKrnz9tVGzXpZU2rHfW0bb6h3k4uzflJBDYfDWAQXpuD
9ZQCPO0CYKsTqLDhfw+BboatqU03S2kU5OVW5pGKlWqoXU9j8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMGJW2crIK9BMROfxOjHkK8o1+8qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi
NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvZDNiMDRmYWQtMTA0NS0z
MGQ2LTk1MmQtZDY3Mzk3MmU2NWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5
MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl
MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli
NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgf48BaA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHl+vGwSDGB7xp9TaJIKYIVk7k+EwDzGkfQDc9pCDkTbW62ZPl6o
hahmX5/8gWtOMwbfM6RPmpNcVhO+fbJmkAgOC1LqSIG0zJTZ7PQVNBw8ieVmp7Ng
u1eBit+8D7EKV4oPm8h/DuVewL+8O4T1Gjq/c+5BBYw7NGytF4tf7YYKhQV2wDiJ
qrYYuqTWDcF5TRjju0Y6LOdAr7XAXgjoV15I+/Jy8exnpyDRZg7nllTV3E+LPF2l
ERhSc5MGpT4yg7mnrJ7e+9+bIq08W4WgW8litxFZl8Tc5Lxn4PEMRg8URv2gbjae
k5PhdTDIgr8xD8GzwOFhVkONq7ZIZYMY/YY=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:58:57 2025 by rpki-client