Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/91c34401-fc68-3649-8105-db34fe81bcb3.roa
File:                     91c34401-fc68-3649-8105-db34fe81bcb3.roa (raw, json)
Hash identifier:          H1+7IFqXdQE4Ezhe6h5A4zb9FdNcejlj+pTeQaTTIeI=
Subject key identifier:   F5:C0:D4:21:86:A5:86:E9:68:AF:95:56:C1:36:69:3B:8D:AF:24:74
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584B620225A24C0691083DB64380
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/91c34401-fc68-3649-8105-db34fe81bcb3.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        2602:f66c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:25:a2:4c:06:91:08:3d:b6:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=9e9a9fa5-ad1f-47b2-a0d6-8e9dbbb17594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b8:c2:66:c8:1f:a6:2f:3e:d1:9b:a3:94:ce:
                    72:aa:9c:ac:2d:ab:c4:bd:99:4e:e3:b7:6b:58:62:
                    2b:61:12:a3:3d:5d:e8:8b:73:c0:4f:ff:25:91:98:
                    77:9e:ad:1c:d7:d5:9a:1c:27:d6:42:99:66:39:7b:
                    3f:9a:e8:f7:63:38:a4:d8:94:25:e7:c0:35:a3:66:
                    ff:80:04:60:ca:41:7e:a3:ad:95:5c:ea:0a:14:f0:
                    3a:12:52:09:4c:e6:fe:51:dc:24:96:96:e1:37:6d:
                    72:bd:f5:72:6e:d1:12:41:4f:54:55:cf:39:66:94:
                    a4:ad:46:3d:a7:1e:3d:ed:89:55:d5:21:a8:80:ff:
                    5f:44:b0:57:cf:ce:79:ca:29:90:3b:b9:1f:8c:de:
                    62:99:c1:32:84:d4:71:16:f8:50:31:52:ea:54:b4:
                    69:f0:da:6d:e3:67:a2:a5:26:79:e7:db:6a:80:2d:
                    60:d6:bd:12:06:19:83:41:14:d4:7a:24:67:50:1b:
                    da:e8:bb:1d:10:23:2a:e1:fd:ca:94:76:8e:2a:f1:
                    fc:90:d1:24:a8:c5:8d:94:b4:f2:14:ee:3a:12:74:
                    24:d3:72:14:16:2a:95:22:56:2c:3f:71:34:34:b1:
                    f8:c2:7b:36:db:f6:55:5b:10:b9:32:81:90:fe:98:
                    40:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C0:D4:21:86:A5:86:E9:68:AF:95:56:C1:36:69:3B:8D:AF:24:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/91c34401-fc68-3649-8105-db34fe81bcb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f7:3b:3e:74:c8:0d:69:5b:c1:26:74:77:de:34:c8:63:2e:
         62:d2:dd:23:d8:d3:f9:73:4c:5a:33:92:c4:d4:f9:a4:f2:eb:
         02:5c:27:37:d3:95:43:9b:f3:a3:4c:c3:12:c5:0d:b9:01:9a:
         a8:1f:ff:1c:df:1b:51:79:cd:cf:6e:80:a4:2b:6f:16:cb:81:
         58:19:4e:34:55:c2:7c:4a:f9:55:a6:0d:73:98:0b:52:42:c2:
         56:f1:57:8d:31:f8:c4:5b:65:e0:1f:33:69:4d:30:7b:ab:68:
         ad:16:b5:80:3f:7f:fc:ae:9f:28:30:1d:bd:2b:1f:73:b8:07:
         dd:fd:18:27:35:b0:19:f2:42:10:f8:92:9b:c5:d1:89:ed:10:
         87:7e:ac:aa:f3:de:c1:20:bb:98:09:06:6e:53:01:1e:57:d1:
         93:b7:90:d8:93:ee:f2:5a:a9:f1:ed:d8:90:2d:30:61:75:a4:
         a0:ae:c5:8e:a5:f5:34:4b:44:46:fa:e4:94:f1:44:c4:44:1c:
         55:3a:a0:75:c3:8b:df:80:a7:bd:48:bf:e6:b8:7f:e4:e5:9b:
         61:10:e9:13:8d:1b:8e:cf:37:a9:10:f7:35:e5:f0:bf:03:50:
         be:5b:4c:82:78:d1:fd:14:96:32:91:ba:50:9e:76:65:ef:f0:
         84:b4:8f:d2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtiAiWiTAaRCD22Q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1
MjgxMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk
OWU5YTlmYTUtYWQxZi00N2IyLWEwZDYtOGU5ZGJiYjE3NTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7jCZsgfpi8+0ZujlM5yqpysLavEvZlO47dr
WGIrYRKjPV3oi3PAT/8lkZh3nq0c19WaHCfWQplmOXs/muj3Yzik2JQl58A1o2b/
gARgykF+o62VXOoKFPA6ElIJTOb+UdwklpbhN21yvfVybtESQU9UVc85ZpSkrUY9
px497YlV1SGogP9fRLBXz855yimQO7kfjN5imcEyhNRxFvhQMVLqVLRp8Npt42ei
pSZ559tqgC1g1r0SBhmDQRTUeiRnUBva6LsdECMq4f3KlHaOKvH8kNEkqMWNlLTy
FO46EnQk03IUFiqVIlYsP3E0NLH4wns22/ZVWxC5MoGQ/phA9wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPXA1CGGpYbpaK+VVsE2aTuNryR0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl
MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvOTFjMzQ0MDEtZmM2OC0z
NjQ5LTgxMDUtZGIzNGZlODFiY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0
ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw
NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx
NjEzMDUyODEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2bAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOPc7PnTIDWlbwSZ0d940yGMuYtLdI9jT+XNMWjOSxNT5pPLrAlwn
N9OVQ5vzo0zDEsUNuQGaqB//HN8bUXnNz26ApCtvFsuBWBlONFXCfEr5VaYNc5gL
UkLCVvFXjTH4xFtl4B8zaU0we6torRa1gD9//K6fKDAdvSsfc7gH3f0YJzWwGfJC
EPiSm8XRie0Qh36sqvPewSC7mAkGblMBHlfRk7eQ2JPu8lqp8e3YkC0wYXWkoK7F
jqX1NEtERvrklPFExEQcVTqgdcOL34CnvUi/5rh/5OWbYRDpE40bjs83qRD3NeXw
vwNQvltMgnjR/RSWMpG6UJ52Ze/whLSP0g==
-----END CERTIFICATE-----
Generated at Tue Oct 14 03:21:10 2025 by rpki-client