Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b75772e6-b6f2-31df-99cc-035f3aba2b1f.roa
File:                     b75772e6-b6f2-31df-99cc-035f3aba2b1f.roa (raw, json)
Hash identifier:          MUdYvXru4rVCTBOnrB+UXqa28CDrCqF5vMnADy64+AI=
Subject key identifier:   57:BE:3B:3F:2C:DA:31:41:1A:1C:B9:27:2D:BC:08:C5:28:68:01:58
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584B377AE9119339633AC1638C00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b75772e6-b6f2-31df-99cc-035f3aba2b1f.roa
Signing time:             Tue 16 Sep 2025 19:24:48 +0000
ROA not before:           Tue 16 Sep 2025 19:24:48 +0000
ROA not after:            Mon 15 Dec 2025 20:24:48 +0000
asID:                     54253
IP address blocks:        2603:c0f4:1200::/39 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:37:7a:e9:11:93:39:63:3a:c1:63:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 16 19:24:48 2025 GMT
            Not After : Dec 15 20:24:48 2025 GMT
        Subject: CN=d76971d4-250b-4431-811a-abd6dec4d249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:ff:6c:35:53:74:e6:44:2c:20:fd:8f:c3:
                    e8:5b:5f:b0:8d:d8:9e:4c:39:91:88:85:42:6a:b7:
                    5e:10:a0:fd:0d:90:26:96:bd:01:af:d4:4c:71:a7:
                    5e:f7:cd:a0:3d:bf:c9:0a:21:8b:1d:69:0c:88:6f:
                    54:83:70:2c:46:90:59:5a:e0:9f:7a:c4:15:39:41:
                    2c:22:e7:18:00:a6:43:99:08:26:2e:5f:9d:ae:f7:
                    e9:98:a9:9b:65:61:cf:c6:d6:b0:af:d4:e5:96:a0:
                    b9:6e:62:09:ed:8d:32:39:0a:92:8c:83:81:23:4b:
                    ba:d2:47:63:e0:ef:44:4a:b9:99:81:d5:6a:5b:6d:
                    86:fc:ce:33:e7:5a:c0:ad:6c:57:57:05:e6:06:ea:
                    f1:78:a4:84:22:1f:f4:c9:51:87:c7:d0:be:61:4a:
                    06:92:94:99:31:06:5e:c1:47:d0:b9:d5:af:a2:11:
                    ca:ad:32:65:a2:09:1e:1d:fb:be:5e:eb:2c:dc:de:
                    97:e2:91:70:87:10:f8:f9:99:a4:4d:fd:4f:f4:99:
                    48:8a:12:f3:d4:56:98:06:e2:8f:c9:6c:16:54:8b:
                    d1:6d:87:ec:e0:9f:91:24:3b:13:00:0c:ba:c3:b7:
                    cb:3d:79:8f:be:5f:51:52:13:65:ab:30:13:ac:34:
                    cb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BE:3B:3F:2C:DA:31:41:1A:1C:B9:27:2D:BC:08:C5:28:68:01:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b75772e6-b6f2-31df-99cc-035f3aba2b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c0f4:1200::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b3:aa:ae:c3:0c:fd:86:4a:39:a1:e2:31:9c:3e:4b:7a:08:
         2b:2c:38:87:8c:36:8e:bd:df:1d:c5:22:91:03:2a:17:95:29:
         5e:b9:0b:1e:a9:34:2a:dd:bb:e9:bd:0c:c3:ef:c8:21:59:c1:
         c6:e9:d0:92:e3:47:93:73:5c:d2:b4:8c:48:02:8f:7f:d7:a2:
         d5:d6:94:e5:40:56:5b:d3:11:ef:e9:fc:91:08:ff:8f:eb:1b:
         37:b2:0c:44:19:80:b6:ba:42:50:b5:50:36:69:54:92:ca:11:
         39:d9:61:82:ed:47:81:0a:e6:ab:a5:c9:56:01:b1:5f:8d:0e:
         6d:73:ea:f9:b8:73:ba:2d:0a:c7:78:22:29:88:f4:35:7f:1b:
         fc:b0:da:8a:b3:41:84:a1:5f:36:ad:23:0f:2f:4d:cd:63:b9:
         1c:62:b6:a3:97:d1:05:7a:15:d5:0a:11:5b:31:8a:5c:ba:67:
         37:11:82:73:d7:16:26:1f:ed:68:61:75:56:00:de:dc:94:36:
         6d:e4:3e:1c:3a:b2:46:27:b8:44:67:60:e4:a6:57:d8:4d:28:
         fd:28:5b:b9:c3:fe:62:30:58:02:d5:f0:0e:f2:c9:27:7d:d9:
         48:cd:79:e1:52:a1:32:82:8f:0f:73:e4:9d:d8:4b:83:48:c2:
         59:2a:c6:c2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEs3eukRkzljOsFjjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDkxNjE5MjQ0OFoXDTI1MTIxNTIwMjQ0OFowLzEtMCsGA1UEAxMk
ZDc2OTcxZDQtMjUwYi00NDMxLTgxMWEtYWJkNmRlYzRkMjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwH/bDVTdOZELCD9j8PoW1+wjdieTDmRiIVC
ardeEKD9DZAmlr0Br9RMcade982gPb/JCiGLHWkMiG9Ug3AsRpBZWuCfesQVOUEs
IucYAKZDmQgmLl+drvfpmKmbZWHPxtawr9TllqC5bmIJ7Y0yOQqSjIOBI0u60kdj
4O9ESrmZgdVqW22G/M4z51rArWxXVwXmBurxeKSEIh/0yVGHx9C+YUoGkpSZMQZe
wUfQudWvohHKrTJlogkeHfu+Xuss3N6X4pFwhxD4+ZmkTf1P9JlIihLz1FaYBuKP
yWwWVIvRbYfs4J+RJDsTAAy6w7fLPXmPvl9RUhNlqzATrDTLgwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFe+Oz8s2jFBGhy5Jy28CMUoaAFYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjc1NzcyZTYtYjZmMi0z
MWRmLTk5Y2MtMDM1ZjNhYmEyYjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPA9BIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAobOqrsMM/YZKOaHiMZw+S3oIKyw4h4w2jr3fHcUikQMqF5UpXrkL
Hqk0Kt276b0Mw+/IIVnBxunQkuNHk3Nc0rSMSAKPf9ei1daU5UBWW9MR7+n8kQj/
j+sbN7IMRBmAtrpCULVQNmlUksoROdlhgu1HgQrmq6XJVgGxX40ObXPq+bhzui0K
x3giKYj0NX8b/LDairNBhKFfNq0jDy9NzWO5HGK2o5fRBXoV1QoRWzGKXLpnNxGC
c9cWJh/taGF1VgDe3JQ2beQ+HDqyRie4RGdg5KZX2E0o/ShbucP+YjBYAtXwDvLJ
J33ZSM154VKhMoKPD3PkndhLg0jCWSrGwg==
-----END CERTIFICATE-----
Generated at Thu Oct 9 03:11:05 2025 by rpki-client