Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b1537c-e993-385a-af26-4c5dbf12578e.roa
File:                     69b1537c-e993-385a-af26-4c5dbf12578e.roa (raw, json)
Hash identifier:          18Jc1l29WW7l9k25kAV2AAdxLCuBe4h3vhKxo0hIO1g=
Subject key identifier:   8A:9C:EE:92:C7:D3:82:22:C7:71:5F:28:B3:8E:C3:66:3A:32:E1:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA48505803DA683991B000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b1537c-e993-385a-af26-4c5dbf12578e.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        2601:402:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:48:50:58:03:da:68:39:91:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=4c9a40e8-6cbd-43d0-8256-b9f6d77c95c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b3:ef:de:d5:f8:65:e6:e8:d1:67:e0:61:ea:
                    4c:c1:c4:3b:a9:d8:1f:01:d3:e6:cd:b2:37:ea:e0:
                    f8:a7:31:35:31:66:3c:4b:27:1e:cd:b3:d6:66:b6:
                    fd:57:ec:f7:e3:be:cb:56:76:c2:ec:8c:a7:31:ed:
                    21:a0:7e:fd:3d:66:0f:d4:08:6a:0a:17:97:e4:73:
                    ac:57:1e:b9:20:c3:5f:40:e1:6e:0a:cb:d7:93:78:
                    46:90:7c:57:0e:0f:4e:9f:42:87:7c:e4:c8:d4:de:
                    29:cf:be:e9:64:4f:06:f7:e6:46:b5:3c:78:b7:23:
                    5c:da:e9:67:74:02:41:a3:59:59:68:25:03:62:c6:
                    5d:3d:09:16:4e:72:c8:6c:ed:d6:8e:0e:b9:69:5e:
                    c4:10:c7:6d:4d:7f:0b:d7:16:16:0d:fe:db:67:cf:
                    e6:f6:db:e7:82:db:2f:ff:d6:ce:b8:d5:64:dc:6a:
                    4d:4e:6d:0f:e0:19:d8:bd:bc:db:96:55:2d:ed:7b:
                    48:76:f0:c5:6e:96:03:6e:b8:9c:7a:c0:63:6d:64:
                    4b:83:84:ee:7a:8d:ca:c2:21:06:b9:3a:7b:c5:b8:
                    38:76:fe:e7:69:75:28:25:30:43:54:c3:c4:ee:8f:
                    58:d0:f1:c7:b0:65:f7:ad:ec:b5:5f:4e:26:ab:4b:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9C:EE:92:C7:D3:82:22:C7:71:5F:28:B3:8E:C3:66:3A:32:E1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b1537c-e993-385a-af26-4c5dbf12578e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:402:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:24:e0:ab:57:bf:e7:22:ea:2f:3a:ee:72:30:5f:4e:6e:
         47:d3:65:0f:ca:fc:e3:c9:88:98:cf:22:2e:7e:18:ca:2d:33:
         fd:bf:a4:a8:e0:3a:77:f8:97:d3:ca:17:cf:f5:61:3f:c5:79:
         e6:07:2c:1a:7e:e2:e0:19:db:22:2f:77:41:57:6a:1e:19:04:
         67:2a:6e:24:d9:9a:26:a4:07:53:5e:cc:03:e2:b7:f0:89:56:
         f8:47:09:b9:65:43:98:97:9a:c4:c3:20:40:c9:09:13:9d:23:
         0d:b0:88:f7:db:25:80:b8:78:4b:c9:70:37:e5:ee:55:f3:1a:
         fc:d8:16:46:bb:7f:cf:b5:a4:ad:80:22:dd:74:fd:f0:94:73:
         1c:47:93:fd:90:60:c6:76:3f:a5:4f:d1:81:5c:0f:00:f6:31:
         9d:e2:13:64:ac:f8:87:ac:87:a6:3d:f6:3d:3f:22:fc:f5:14:
         2a:c8:b0:ae:2c:59:0e:14:07:a7:6f:f1:05:98:16:ab:f6:b3:
         70:f1:4f:f8:59:63:2c:c6:ab:e7:c5:00:0f:fa:b2:32:2a:dd:
         8f:1c:56:7c:7a:85:69:53:49:80:3b:a0:d5:41:e4:4f:be:6c:
         e3:d9:22:5d:c6:b3:f5:54:d5:e2:ca:4d:58:e1:95:49:73:02:
         72:cb:29:f9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqkhQWAPaaDmRsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
NGM5YTQwZTgtNmNiZC00M2QwLTgyNTYtYjlmNmQ3N2M5NWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLPv3tX4Zebo0WfgYepMwcQ7qdgfAdPmzbI3
6uD4pzE1MWY8SycezbPWZrb9V+z3477LVnbC7IynMe0hoH79PWYP1AhqCheX5HOs
Vx65IMNfQOFuCsvXk3hGkHxXDg9On0KHfOTI1N4pz77pZE8G9+ZGtTx4tyNc2uln
dAJBo1lZaCUDYsZdPQkWTnLIbO3Wjg65aV7EEMdtTX8L1xYWDf7bZ8/m9tvngtsv
/9bOuNVk3GpNTm0P4BnYvbzbllUt7XtIdvDFbpYDbricesBjbWRLg4Tueo3KwiEG
uTp7xbg4dv7naXUoJTBDVMPE7o9Y0PHHsGX3rey1X04mq0vkQQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIqc7pLH04Iix3FfKLOOw2Y6MuG1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjliMTUzN2MtZTk5My0z
ODVhLWFmMjYtNGM1ZGJmMTI1NzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEEAoAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIx4k4KtXv+ci6i867nIwX05uR9NlD8r848mImM8iLn4Yyi0z/b+k
qOA6d/iX08oXz/VhP8V55gcsGn7i4BnbIi93QVdqHhkEZypuJNmaJqQHU17MA+K3
8IlW+EcJuWVDmJeaxMMgQMkJE50jDbCI99slgLh4S8lwN+XuVfMa/NgWRrt/z7Wk
rYAi3XT98JRzHEeT/ZBgxnY/pU/RgVwPAPYxneITZKz4h6yHpj32PT8i/PUUKsiw
rixZDhQHp2/xBZgWq/azcPFP+FljLMar58UAD/qyMirdjxxWfHqFaVNJgDug1UHk
T75s49kiXcaz9VTV4spNWOGVSXMCcssp+Q==
-----END CERTIFICATE-----
Generated at Tue Oct 21 19:46:37 2025 by rpki-client