Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0366b212-bc0f-30f9-baec-e5a537914813.roa
File:                     0366b212-bc0f-30f9-baec-e5a537914813.roa (raw, json)
Hash identifier:          ZiDviAYejFRNNmjOrneqwXXHguAgxJM8xMHEasTLA2w=
Subject key identifier:   DE:62:01:A6:DC:DF:AB:86:AF:D5:60:4F:E0:CA:CB:0A:19:AD:49:BA
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B64CE3FB9B1B2333CC2910380
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0366b212-bc0f-30f9-baec-e5a537914813.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     12041
IP address blocks:        2001:500:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:3f:b9:b1:b2:33:3c:c2:91:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=3d9b919c-f404-4d2b-b937-87f7afde4533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:6a:22:e3:91:e1:7b:32:2c:2e:c1:31:a2:
                    29:87:41:ab:ce:73:4a:e4:fc:a3:52:5f:64:86:4b:
                    ca:a4:80:f6:54:06:ad:33:4a:83:fa:f4:05:7a:ab:
                    ef:7e:f2:97:ad:f9:a8:65:4e:c4:4b:c8:4a:39:1e:
                    6e:9b:d3:ba:c4:53:0d:40:1c:79:e8:55:cc:bb:8e:
                    b4:d5:27:0a:47:ba:4f:52:65:29:04:db:1e:83:45:
                    9a:8f:26:ac:00:99:82:1a:27:46:03:b5:61:32:f1:
                    c8:d8:cf:24:3e:9e:c3:53:b9:5d:98:5f:8f:8c:ba:
                    9f:c4:06:e9:19:26:91:52:0b:8d:2c:8a:28:59:96:
                    fd:6d:ac:a7:a6:48:cc:b0:49:57:60:5a:33:d0:35:
                    0e:e6:f4:3a:bc:e0:20:aa:f4:57:2a:3a:d0:52:ae:
                    ea:df:ff:d8:81:cf:f8:9b:97:b8:9e:55:43:d0:99:
                    ba:22:fb:78:c4:80:81:fd:d8:83:16:8b:a6:07:07:
                    d1:30:9c:7d:ae:d7:81:ae:e2:87:48:da:9d:d2:75:
                    57:7c:7c:07:12:cb:28:be:7b:0f:fa:a5:3e:ff:13:
                    9e:94:db:cf:ce:fb:6f:bf:6c:a1:76:cf:25:93:53:
                    6a:02:d5:5c:ac:43:39:d7:92:54:28:16:d7:d7:06:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:62:01:A6:DC:DF:AB:86:AF:D5:60:4F:E0:CA:CB:0A:19:AD:49:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/0366b212-bc0f-30f9-baec-e5a537914813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d4:56:5a:68:f5:0a:df:eb:6a:73:50:4a:93:87:92:f9:48:
         a9:05:64:b9:26:0b:df:ed:62:f9:83:6c:a8:c1:d7:cf:77:51:
         dd:0a:ec:3a:63:2c:95:70:78:8f:f5:b8:25:74:06:19:f4:4e:
         3c:8d:4f:cb:b0:6a:09:93:6b:fd:b5:ae:e2:b6:90:34:44:f5:
         78:05:77:fb:e7:83:4c:04:4f:ac:d1:65:b8:95:d9:d2:20:98:
         76:87:a7:24:81:1e:84:06:d3:2b:67:bd:f1:fe:c7:0f:d2:3d:
         fa:e1:c2:e3:f1:96:3a:f2:ce:00:81:79:63:13:11:db:c4:ee:
         8d:01:da:90:4d:f3:66:2b:29:7c:7f:29:60:f3:8c:df:f5:6d:
         dc:87:6f:30:23:e2:9e:c2:01:76:56:6e:1c:e7:cd:35:6e:3e:
         69:07:e2:df:47:48:b1:df:5f:89:bb:98:6d:1b:b5:63:17:04:
         77:80:b4:1c:ec:e2:33:c6:a4:43:32:7b:05:26:00:5e:10:75:
         de:84:a7:c5:93:92:b9:c8:fb:2d:24:78:6f:56:bb:da:e3:e2:
         9e:9d:79:4a:0a:d6:1d:cd:8d:c0:0e:f6:2e:3d:85:72:18:66:
         68:6a:70:61:88:fa:ba:26:c6:ff:f1:fc:1b:78:ce:05:c8:d8:
         40:36:07:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtkzj+5sbIzPMKRA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
M2Q5YjkxOWMtZjQwNC00ZDJiLWI5MzctODdmN2FmZGU0NTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2NqIuOR4XsyLC7BMaIph0GrznNK5PyjUl9k
hkvKpID2VAatM0qD+vQFeqvvfvKXrfmoZU7ES8hKOR5um9O6xFMNQBx56FXMu460
1ScKR7pPUmUpBNseg0WajyasAJmCGidGA7VhMvHI2M8kPp7DU7ldmF+PjLqfxAbp
GSaRUguNLIooWZb9baynpkjMsElXYFoz0DUO5vQ6vOAgqvRXKjrQUq7q3//Ygc/4
m5e4nlVD0Jm6Ivt4xICB/diDFoumBwfRMJx9rteBruKHSNqd0nVXfHwHEssovnsP
+qU+/xOelNvPzvtvv2yhds8lk1NqAtVcrEM515JUKBbX1wb7WQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN5iAabc36uGr9VgT+DKywoZrUm6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDM2NmIyMTItYmMwZi0z
MGY5LWJhZWMtZTVhNTM3OTE0ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGDUVlpo9Qrf62pzUEqTh5L5SKkFZLkmC9/tYvmDbKjB1893Ud0K
7DpjLJVweI/1uCV0Bhn0TjyNT8uwagmTa/21ruK2kDRE9XgFd/vng0wET6zRZbiV
2dIgmHaHpySBHoQG0ytnvfH+xw/SPfrhwuPxljryzgCBeWMTEdvE7o0B2pBN82Yr
KXx/KWDzjN/1bdyHbzAj4p7CAXZWbhznzTVuPmkH4t9HSLHfX4m7mG0btWMXBHeA
tBzs4jPGpEMyewUmAF4Qdd6Ep8WTkrnI+y0keG9Wu9rj4p6deUoK1h3NjcAO9i49
hXIYZmhqcGGI+romxv/x/Bt4zgXI2EA2Bz4=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:32 2025 by rpki-client