Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7710ac76-9493-3dac-85db-3c072834d8d9.roa
File:                     7710ac76-9493-3dac-85db-3c072834d8d9.roa (raw, json)
Hash identifier:          kIg+j4kX/CMFps9bGnKCahtyXpMi1Fw5ozdqbieBE/4=
Subject key identifier:   DC:E1:5E:97:F9:45:F0:61:30:6C:EB:FC:BC:9C:CE:3B:E7:8A:90:DB
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584B99D7991C21541D5BAA346A40
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7710ac76-9493-3dac-85db-3c072834d8d9.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     45396
IP address blocks:        2607:f4e8:ac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:99:1c:21:54:1d:5b:aa:34:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=40460264-63ec-4237-8253-e608e4d4dab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:4f:8d:07:f0:f3:2c:f8:df:04:99:5c:fd:
                    b4:63:1f:5a:94:21:10:99:a2:11:94:52:a5:4c:fb:
                    11:0c:16:14:93:1e:4b:4f:8d:76:f2:fc:85:a2:26:
                    1b:9d:6f:b7:eb:fe:1e:af:cd:f9:c2:f5:fe:13:31:
                    cd:b5:ac:b1:3f:83:fc:3e:29:c1:9b:ce:2a:4a:86:
                    63:67:10:23:67:f3:c1:08:49:32:86:6b:29:c2:48:
                    97:c2:6a:bf:17:b2:f0:33:a3:53:a8:37:cb:ca:b8:
                    e8:f8:37:e5:a1:9c:a9:eb:66:7f:e4:da:be:79:06:
                    4e:83:87:46:29:00:f3:de:ba:bb:71:92:42:ca:61:
                    fa:cd:8e:67:3a:c0:64:87:97:a2:24:ee:10:11:6e:
                    5d:ac:c6:1b:95:df:95:65:23:a8:56:fe:d7:67:28:
                    6f:90:7a:b4:58:72:ea:06:d1:ba:14:dc:d7:3e:89:
                    c7:6a:59:9c:13:99:d7:be:aa:ae:7b:9f:aa:ed:b2:
                    05:f3:c2:ac:3e:cd:bc:13:6f:27:8b:5e:46:83:cf:
                    e7:57:0a:e0:ad:fd:50:47:53:d6:ed:4e:52:21:3d:
                    74:88:17:59:e5:4a:fb:01:df:25:8c:34:6e:eb:8a:
                    64:cf:04:f5:b7:8e:f2:17:fe:85:32:6d:06:4f:64:
                    6c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:5E:97:F9:45:F0:61:30:6C:EB:FC:BC:9C:CE:3B:E7:8A:90:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7710ac76-9493-3dac-85db-3c072834d8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:9c:99:a1:95:65:db:79:0d:ee:a9:58:e6:55:3a:20:e7:
         24:f2:69:4c:dd:b8:3a:a3:a3:ff:2a:36:5f:94:8a:62:90:f6:
         55:63:76:2c:3e:ba:6a:02:0f:65:78:af:a2:d8:cd:40:1a:8e:
         52:83:12:7a:a0:80:85:10:b4:43:89:28:51:3b:70:8a:f0:05:
         41:c4:f2:66:fc:6d:25:08:10:cd:52:14:8c:9e:32:e8:64:a6:
         52:c9:32:96:db:68:08:f3:13:9b:6d:49:a8:05:8e:48:10:52:
         20:02:de:38:4d:e5:23:e9:66:f8:ac:c9:64:ce:3b:3e:3c:1a:
         fe:4e:c0:68:bb:91:c0:65:b9:a5:00:c2:44:9d:9e:24:3a:19:
         d7:94:9b:97:57:86:26:46:2e:00:ce:d6:e4:e8:64:97:4b:59:
         70:11:4d:71:e8:00:29:ad:65:19:bb:eb:7b:fb:12:83:82:26:
         bc:2f:18:f0:02:a6:cb:46:9d:a3:b7:60:8d:a8:60:e5:08:e0:
         06:80:d5:77:3f:19:22:4d:8c:0a:d0:98:99:e3:6d:c0:e8:9e:
         e0:4b:38:2c:a7:60:84:52:e7:ef:85:6e:72:76:27:e0:fa:ec:
         80:82:b1:95:6f:5d:1e:46:68:e6:85:8a:b0:56:c6:f6:ea:e5:
         ec:82:85:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ15kcIVQdW6o0akAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
NDA0NjAyNjQtNjNlYy00MjM3LTgyNTMtZTYwOGU0ZDRkYWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloVPjQfw8yz43wSZXP20Yx9alCEQmaIRlFKl
TPsRDBYUkx5LT4128vyFoiYbnW+36/4er835wvX+EzHNtayxP4P8PinBm84qSoZj
ZxAjZ/PBCEkyhmspwkiXwmq/F7LwM6NTqDfLyrjo+DfloZyp62Z/5Nq+eQZOg4dG
KQDz3rq7cZJCymH6zY5nOsBkh5eiJO4QEW5drMYbld+VZSOoVv7XZyhvkHq0WHLq
BtG6FNzXPonHalmcE5nXvqque5+q7bIF88KsPs28E28ni15Gg8/nVwrgrf1QR1PW
7U5SIT10iBdZ5Ur7Ad8ljDRu64pkzwT1t47yF/6FMm0GT2RsZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNzhXpf5RfBhMGzr/LyczjvnipDbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvNzcxMGFjNzYtOTQ5My0z
ZGFjLTg1ZGItM2MwNzI4MzRkOGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf06ACs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACJ9nJmhlWXbeQ3uqVjmVTog5yTyaUzduDqjo/8qNl+UimKQ9lVj
diw+umoCD2V4r6LYzUAajlKDEnqggIUQtEOJKFE7cIrwBUHE8mb8bSUIEM1SFIye
MuhkplLJMpbbaAjzE5ttSagFjkgQUiAC3jhN5SPpZvisyWTOOz48Gv5OwGi7kcBl
uaUAwkSdniQ6GdeUm5dXhiZGLgDO1uToZJdLWXARTXHoACmtZRm763v7EoOCJrwv
GPACpstGnaO3YI2oYOUI4AaA1Xc/GSJNjArQmJnjbcDonuBLOCynYIRS5++FbnJ2
J+D67ICCsZVvXR5GaOaFirBWxvbq5eyChc8=
-----END CERTIFICATE-----
Generated at Thu Oct 23 05:28:17 2025 by rpki-client