Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3d8fee9-c846-3939-93da-e4b162d9ec26.roa
File:                     a3d8fee9-c846-3939-93da-e4b162d9ec26.roa (raw, json)
Hash identifier:          aR4OXUX4Juer4K/QCrZ4hRmUYYI1nqBJ7d+1D3tuT2s=
Subject key identifier:   F8:0F:E8:B6:BE:29:23:73:D9:AE:14:F6:93:68:B6:9F:7F:95:55:D9
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B3556EBA28492D458513638C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3d8fee9-c846-3939-93da-e4b162d9ec26.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     11055
IP address blocks:        2604:7a00:ff83::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:eb:a2:84:92:d4:58:51:36:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=2028b6ef-c591-4b53-aa86-d2d2612bfd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:a2:54:a3:68:66:0a:e2:c7:52:2a:45:ad:
                    5d:fa:d6:01:26:ca:4a:e2:77:20:a3:6d:25:70:62:
                    60:d6:86:3f:30:63:e2:fc:a5:ff:45:7b:7b:b1:1d:
                    6f:2c:53:0b:d8:55:0e:89:93:ee:22:0b:09:b7:7e:
                    8b:64:d1:75:ea:e2:bb:5d:73:ac:b4:08:a0:0c:5b:
                    30:4f:1e:ff:c4:3f:48:ad:2a:e1:91:f2:08:46:2a:
                    b5:3a:e1:4e:f0:14:d6:13:82:da:ba:dc:44:af:b0:
                    04:aa:fa:b6:85:04:f7:13:4d:7b:59:04:93:93:04:
                    3b:22:b5:10:c2:0a:1b:a2:b0:13:a5:0b:70:fd:7f:
                    94:1e:e7:4c:4a:b9:de:43:94:85:e4:df:14:1f:fb:
                    53:39:8d:58:81:b3:44:3a:97:01:d8:e7:f5:1f:a6:
                    54:98:f5:6d:55:76:e0:f8:bd:d2:c6:ad:10:b5:33:
                    95:1c:7d:16:10:57:2c:04:90:5d:1f:27:9b:d6:0f:
                    97:2b:2b:ab:61:2c:4c:70:a6:15:3c:51:3e:d5:c0:
                    e0:39:02:9f:d9:1b:51:8b:6c:f3:8c:f0:90:c0:11:
                    87:b0:84:09:f8:fb:b5:6f:bb:4f:34:ce:5d:6b:ce:
                    ef:ae:99:3b:b3:4d:7e:74:da:e0:27:f0:19:c2:05:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0F:E8:B6:BE:29:23:73:D9:AE:14:F6:93:68:B6:9F:7F:95:55:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3d8fee9-c846-3939-93da-e4b162d9ec26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:ff83::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:1b:45:47:c6:5b:39:e4:ef:86:89:7e:71:c9:30:e9:10:de:
         2e:65:b2:0f:b6:85:76:67:00:75:08:4d:03:28:81:12:e6:4e:
         eb:87:e1:91:b9:c5:90:32:33:a6:c4:85:26:8c:db:2f:d1:f9:
         be:bb:01:c1:c6:99:68:b6:9c:49:1b:a3:2d:8f:70:f7:ec:0e:
         a3:d6:79:a5:54:d9:6a:ad:15:b6:7d:bf:3b:bd:25:9e:83:83:
         1a:e2:56:90:81:4e:ca:76:91:67:5a:f1:d8:9a:e2:e0:74:47:
         86:42:1c:d4:e4:f2:d3:44:00:4c:d0:f2:9e:ba:fe:bb:ec:78:
         08:53:b9:7d:c4:14:94:35:5f:78:9b:50:58:1f:82:e0:a1:1e:
         da:e1:ca:ac:e9:3a:d4:c1:4d:52:d1:1a:05:7e:70:cb:cf:bc:
         0e:3e:90:ea:e6:69:c7:35:50:d3:63:60:18:f7:cb:ad:6e:ed:
         89:32:d2:83:87:38:4f:e0:aa:ed:72:cc:e3:92:60:a0:91:2d:
         f5:4a:c1:6a:89:2e:c6:6a:02:3b:43:99:b5:d9:a4:b3:58:f2:
         af:75:0b:d5:07:b6:73:b7:1e:dc:0f:81:6d:bd:26:f4:a1:55:
         d8:f2:43:43:e7:5a:43:54:27:f8:5c:0a:0d:18:41:56:3f:56:
         6c:7d:50:2f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs1VuuihJLUWFE2OMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk
MjAyOGI2ZWYtYzU5MS00YjUzLWFhODYtZDJkMjYxMmJmZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aqiVKNoZgrix1IqRa1d+tYBJspK4ncgo20l
cGJg1oY/MGPi/KX/RXt7sR1vLFML2FUOiZPuIgsJt36LZNF16uK7XXOstAigDFsw
Tx7/xD9IrSrhkfIIRiq1OuFO8BTWE4LautxEr7AEqvq2hQT3E017WQSTkwQ7IrUQ
wgoborATpQtw/X+UHudMSrneQ5SF5N8UH/tTOY1YgbNEOpcB2Of1H6ZUmPVtVXbg
+L3Sxq0QtTOVHH0WEFcsBJBdHyeb1g+XKyurYSxMcKYVPFE+1cDgOQKf2RtRi2zz
jPCQwBGHsIQJ+Pu1b7tPNM5da87vrpk7s01+dNrgJ/AZwgXjywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPgP6La+KSNz2a4U9pNotp9/lVXZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYTNkOGZlZTktYzg0Ni0z
OTM5LTkzZGEtZTRiMTYyZDllYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgR6AP+D
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJYbRUfGWznk74aJfnHJMOkQ3i5lsg+2hXZnAHUITQMogRLmTuuH
4ZG5xZAyM6bEhSaM2y/R+b67AcHGmWi2nEkboy2PcPfsDqPWeaVU2WqtFbZ9vzu9
JZ6DgxriVpCBTsp2kWda8dia4uB0R4ZCHNTk8tNEAEzQ8p66/rvseAhTuX3EFJQ1
X3ibUFgfguChHtrhyqzpOtTBTVLRGgV+cMvPvA4+kOrmacc1UNNjYBj3y61u7Yky
0oOHOE/gqu1yzOOSYKCRLfVKwWqJLsZqAjtDmbXZpLNY8q91C9UHtnO3HtwPgW29
JvShVdjyQ0PnWkNUJ/hcCg0YQVY/Vmx9UC8=
-----END CERTIFICATE-----
Generated at Sat Sep 20 02:28:05 2025 by rpki-client