Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa
File:                     ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa (raw, json)
Hash identifier:          c2bl+B4if5yRpc6FSH4LvtWhwqpTX8IQvtvP/u4fBJQ=
Subject key identifier:   C9:F5:07:4E:71:28:DB:D0:D3:D4:4B:FE:4E:C6:0B:E7:61:B9:C4:A9
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584BC53AF9E95125236D8D2D4D00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa
Signing time:             Thu 06 Nov 2025 14:00:41 +0000
ROA not before:           Thu 06 Nov 2025 14:00:41 +0000
ROA not after:            Wed 04 Feb 2026 14:00:41 +0000
asID:                     14061
IP address blocks:        2604:a880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:3a:f9:e9:51:25:23:6d:8d:2d:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Nov  6 14:00:41 2025 GMT
            Not After : Feb  4 14:00:41 2026 GMT
        Subject: CN=0f4726c7-00cc-45c9-af7d-c8d9cc9eed82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:75:43:22:58:c1:3c:a0:a0:e9:be:5f:96:
                    25:e8:9f:5e:e2:50:0a:df:0f:36:0c:e6:43:1a:5c:
                    e9:05:7c:cd:b2:c2:72:8f:c8:4c:bc:f5:88:3a:0e:
                    82:95:13:69:e8:c5:08:b4:33:b8:fc:01:08:43:d4:
                    3b:83:c2:a5:94:ba:70:e7:55:90:48:da:f1:bd:a7:
                    1b:b2:de:27:79:bb:73:60:84:e7:f2:ab:d5:9a:98:
                    9c:21:0d:ac:2b:01:d3:d7:f9:b1:3c:bd:8c:12:ea:
                    69:70:eb:c2:c7:29:13:78:1e:44:9e:f3:b2:f1:a1:
                    5f:50:2b:8b:3a:81:eb:f4:9e:e6:35:c9:6e:f0:d1:
                    43:07:48:b8:7c:4c:09:2b:11:9e:a7:cd:d6:5f:f3:
                    d4:58:6c:ca:b5:4c:25:27:31:7b:37:d8:c7:06:25:
                    33:57:7a:f4:2b:96:69:70:2f:20:77:75:7e:61:c7:
                    3d:aa:b0:dd:9e:4e:71:5e:cf:db:81:35:ba:09:6b:
                    6d:7e:59:a7:09:27:c3:7f:36:b7:09:87:97:65:5c:
                    c5:da:43:f7:a8:10:2b:fb:d9:21:d3:e2:e1:9e:12:
                    d8:7b:32:3c:6f:2a:42:ee:63:37:63:e7:a0:70:e9:
                    6c:95:9c:76:e6:26:a2:9a:16:f9:f1:28:27:b5:63:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F5:07:4E:71:28:DB:D0:D3:D4:4B:FE:4E:C6:0B:E7:61:B9:C4:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ebcd6a6c-403f-3b78-bd97-c1ad15d93c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b0:b1:5c:3f:4d:19:fb:d9:6e:e5:52:27:24:7f:65:f5:5b:
         6e:1a:da:38:0b:a7:ca:d6:47:4c:d7:9c:be:10:ae:e3:04:a2:
         3b:07:64:4e:1d:45:78:d3:76:06:70:19:db:f9:61:ca:c0:bb:
         43:8f:51:8f:e1:d3:61:62:71:99:10:a2:16:6d:04:a4:6b:36:
         95:c2:c9:9a:4c:19:c5:8f:30:a4:59:ef:96:d3:8f:c6:60:c1:
         eb:57:f8:e0:02:92:10:7d:af:4e:8f:eb:2d:56:d8:99:ff:2c:
         00:0d:2d:3b:04:0b:eb:69:c8:50:25:8f:04:67:c9:08:1e:ac:
         73:6b:44:ed:3d:f6:86:66:3a:de:13:75:d7:25:f6:70:74:f7:
         d2:4a:1c:db:80:ef:4a:66:64:e0:e2:ec:4c:64:de:31:fd:e8:
         5e:dd:91:9a:1d:44:03:87:43:13:25:84:0b:a8:15:27:aa:19:
         3f:cc:e5:c9:a5:31:ed:cc:6e:f7:a3:62:f9:55:5c:e4:26:1c:
         c2:b2:64:73:84:fa:e7:e4:59:2b:da:5a:04:2c:4d:e2:ca:1e:
         a2:0d:be:27:50:5c:42:1a:6e:66:82:7c:e5:3b:6f:bd:e2:3e:
         a4:df:cb:2b:6a:dc:e9:6b:b5:cc:d2:52:74:ef:1b:3d:31:df:
         fa:0d:67:77
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvFOvnpUSUjbY0tTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MGY0NzI2YzctMDBjYy00NWM5LWFmN2QtYzhkOWNjOWVlZDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+J1QyJYwTygoOm+X5Yl6J9e4lAK3w82DOZD
GlzpBXzNssJyj8hMvPWIOg6ClRNp6MUItDO4/AEIQ9Q7g8KllLpw51WQSNrxvacb
st4nebtzYITn8qvVmpicIQ2sKwHT1/mxPL2MEuppcOvCxykTeB5EnvOy8aFfUCuL
OoHr9J7mNclu8NFDB0i4fEwJKxGep83WX/PUWGzKtUwlJzF7N9jHBiUzV3r0K5Zp
cC8gd3V+Ycc9qrDdnk5xXs/bgTW6CWttflmnCSfDfza3CYeXZVzF2kP3qBAr+9kh
0+LhnhLYezI8bypC7mM3Y+egcOlslZx25iaimhb58SgntWOKnwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMn1B05xKNvQ09RL/k7GC+dhucSpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZWJjZDZhNmMtNDAzZi0z
Yjc4LWJkOTctYzFhZDE1ZDkzYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSogDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCmsLFcP00Z+9lu5VInJH9l9VtuGto4C6fK1kdM15y+EK7jBKI7B2RO
HUV403YGcBnb+WHKwLtDj1GP4dNhYnGZEKIWbQSkazaVwsmaTBnFjzCkWe+W04/G
YMHrV/jgApIQfa9Oj+stVtiZ/ywADS07BAvrachQJY8EZ8kIHqxza0TtPfaGZjre
E3XXJfZwdPfSShzbgO9KZmTg4uxMZN4x/ehe3ZGaHUQDh0MTJYQLqBUnqhk/zOXJ
pTHtzG73o2L5VVzkJhzCsmRzhPrn5Fkr2loELE3iyh6iDb4nUFxCGm5mgnzlO2+9
4j6k38sratzpa7XM0lJ07xs9Md/6DWd3
-----END CERTIFICATE-----
Generated at Fri Nov 7 02:27:27 2025 by rpki-client