Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa
File:                     5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa (raw, json)
Hash identifier:          zz+B7ehGZfJl3D4UsMydaBwsKC1RzwSYx70iLZAlHU0=
Subject key identifier:   EC:25:1E:82:08:6E:6C:00:19:6A:D6:3D:23:8C:62:78:2A:3E:B1:DA
Certificate issuer:       /CN=e1ec92c2-2a27-47bb-a115-e1db2cee0fef
Certificate serial:       010D0C9F4328584B6E92037F47373A25F076A580
Authority key identifier: 16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     32772
IP address blocks:        2604:16e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:92:03:7f:47:37:3a:25:f0:76:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ec92c2-2a27-47bb-a115-e1db2cee0fef
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=e7011d23-99d6-498f-8b6c-5771a3566506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:44:bb:fb:57:17:ab:8c:5b:94:66:d0:3f:
                    3f:99:cb:12:ad:67:bd:a8:48:81:b3:43:2c:99:32:
                    22:27:3a:20:8e:32:94:d4:10:cf:71:32:2d:ea:a6:
                    cc:9a:bf:d6:f1:c5:81:b3:15:7e:24:95:f3:7a:4f:
                    1f:56:bd:86:70:c9:57:26:41:33:58:f6:4e:d2:8e:
                    00:e5:1d:77:b5:fc:01:08:ff:5f:d7:a2:48:13:2c:
                    dd:b1:e9:e2:35:33:13:0a:43:23:a4:cb:61:90:b0:
                    49:84:6f:e7:d8:ef:db:f0:18:b8:b6:74:8f:05:34:
                    a5:f2:97:72:e2:c6:d6:31:54:36:a3:91:26:03:8f:
                    0c:77:f2:ed:d8:c9:42:d6:2f:21:c3:f2:c7:fb:6c:
                    5e:12:83:69:18:8d:45:ae:80:3e:a7:51:8e:86:83:
                    44:44:35:e5:21:48:8b:ec:e2:25:d2:e5:45:7e:65:
                    1c:26:6a:eb:22:96:94:dd:f7:c4:02:3c:85:02:f2:
                    45:98:ca:3d:5c:81:12:3e:ba:ea:70:14:48:f4:82:
                    f3:21:4e:59:f2:af:58:2e:9c:04:a8:76:32:8b:ec:
                    f7:2c:ad:c2:be:e8:34:6c:ca:7a:d3:9d:b7:8d:28:
                    a1:a4:c0:75:98:14:c4:a9:7b:51:54:f3:15:0d:93:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:25:1E:82:08:6E:6C:00:19:6A:D6:3D:23:8C:62:78:2A:3E:B1:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5eec76a0-8b36-33f5-b99a-989cb1cf6f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.crl

            X509v3 Authority Key Identifier:
                keyid:16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:16e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4c:95:97:6b:a0:2a:6d:f0:84:8c:85:8f:1a:0d:1f:59:e5:
         c0:a4:31:d6:eb:b2:00:37:3f:57:77:bf:8f:d0:26:f4:79:9c:
         d9:cd:9e:35:83:6e:c6:b3:fc:90:09:2c:57:c1:5e:ff:3a:3e:
         f0:65:45:eb:a7:15:71:3d:12:5f:88:ec:c1:a0:09:f2:6f:dd:
         62:28:51:b4:2e:a3:e3:14:0c:58:cd:ab:15:3a:3f:49:a1:43:
         8d:70:dc:fd:60:52:e8:65:c7:88:b6:4e:96:fe:62:d6:0d:46:
         42:da:9e:55:ad:07:f4:aa:9f:77:8d:de:72:c2:89:10:c1:de:
         b7:cc:7f:ef:21:eb:ae:e1:c6:e9:3a:09:06:9f:90:ec:8e:92:
         6c:24:23:0a:61:61:90:65:8f:7b:69:bf:29:26:2d:bf:fa:cc:
         71:26:7d:5a:fe:97:9d:a8:e5:c6:16:eb:83:8d:46:69:3a:65:
         1d:33:90:0d:7d:38:65:04:58:48:39:b4:a8:1f:2a:d0:5a:f2:
         8a:66:c5:6f:37:43:82:ec:cb:90:c3:75:7f:60:08:1b:04:d3:
         0e:a4:94:40:5a:65:9c:a2:50:2a:4a:4e:0e:64:d7:85:45:d3:
         90:9e:c1:fc:24:76:26:e8:f2:96:ed:4f:30:08:b2:25:00:98:
         73:38:c4:81
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtukgN/Rzc6JfB2pYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTFlYzkyYzItMmEyNy00N2JiLWExMTUtZTFkYjJjZWUw
ZmVmMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTcwMTFkMjMtOTlkNi00OThmLThiNmMtNTc3MWEzNTY2NTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzydEu/tXF6uMW5Rm0D8/mcsSrWe9qEiBs0Ms
mTIiJzogjjKU1BDPcTIt6qbMmr/W8cWBsxV+JJXzek8fVr2GcMlXJkEzWPZO0o4A
5R13tfwBCP9f16JIEyzdseniNTMTCkMjpMthkLBJhG/n2O/b8Bi4tnSPBTSl8pdy
4sbWMVQ2o5EmA48Md/Lt2MlC1i8hw/LH+2xeEoNpGI1FroA+p1GOhoNERDXlIUiL
7OIl0uVFfmUcJmrrIpaU3ffEAjyFAvJFmMo9XIESPrrqcBRI9ILzIU5Z8q9YLpwE
qHYyi+z3LK3Cvug0bMp60523jSihpMB1mBTEqXtRVPMVDZOktQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOwlHoIIbmwAGWrWPSOMYngqPrHaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMWVj
OTJjMi0yYTI3LTQ3YmItYTExNS1lMWRiMmNlZTBmZWYvNWVlYzc2YTAtOGIzNi0z
M2Y1LWI5OWEtOTg5Y2IxY2Y2ZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTFlYzkyYzItMmEyNy00N2JiLWEx
MTUtZTFkYjJjZWUwZmVmL2UxZWM5MmMyLTJhMjctNDdiYi1hMTE1LWUxZGIyY2Vl
MGZlZi5jcmwwHwYDVR0jBBgwFoAUFlp68QNJg+pK1Z59Au73HSfUDFwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9lMWVjOTJjMi0yYTI3LTQ3YmItYTExNS1lMWRi
MmNlZTBmZWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQW4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAkTJWXa6AqbfCEjIWPGg0fWeXApDHW67IANz9Xd7+P0Cb0eZzZzZ41
g27Gs/yQCSxXwV7/Oj7wZUXrpxVxPRJfiOzBoAnyb91iKFG0LqPjFAxYzasVOj9J
oUONcNz9YFLoZceItk6W/mLWDUZC2p5VrQf0qp93jd5ywokQwd63zH/vIeuu4cbp
OgkGn5DsjpJsJCMKYWGQZY97ab8pJi2/+sxxJn1a/pedqOXGFuuDjUZpOmUdM5AN
fThlBFhIObSoHyrQWvKKZsVvN0OC7MuQw3V/YAgbBNMOpJRAWmWcolAqSk4OZNeF
RdOQnsH8JHYm6PKW7U8wCLIlAJhzOMSB
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:30 2025 by rpki-client