Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa
File:                     2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa (raw, json)
Hash identifier:          sg+epZVod5qmB+A3/yEqB0wD1gGYALpMTs6jFn2WRv0=
Subject key identifier:   12:10:25:26:F6:A5:D3:71:34:8C:1C:C1:9C:F7:0E:F5:D6:03:28:70
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584B0B76B0FAAAAE6A2229C5C080
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     394285
IP address blocks:        2606:a100:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b0:fa:aa:ae:6a:22:29:c5:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=c798bbd1-5750-40e7-82ae-58e50733d37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ef:09:ed:3c:6d:91:43:85:9a:ce:f7:de:65:
                    54:32:ed:7e:e9:57:73:72:31:0a:86:55:98:55:29:
                    5e:d1:28:6a:4f:c8:22:95:aa:d1:99:64:68:0e:1c:
                    cc:1b:fa:59:7a:c5:6a:b6:92:f1:1c:22:d8:ab:76:
                    02:a1:f8:79:3e:9d:29:83:e0:3f:39:6f:7a:70:45:
                    44:8d:b0:b7:d4:5e:95:a8:fe:56:64:8d:72:bd:aa:
                    a8:4b:da:57:8d:89:7d:19:e7:86:ef:d4:68:54:bc:
                    9e:b4:8d:7b:4d:60:15:ff:55:0f:96:b2:4d:11:0e:
                    9e:97:26:22:12:ad:17:a4:81:22:e6:fb:ff:82:e3:
                    4d:8d:e7:66:b9:3c:fa:6e:17:9a:4d:f8:01:34:a7:
                    22:f7:83:50:55:8f:f6:62:66:5b:aa:53:2d:da:24:
                    2c:a5:9e:13:f0:fc:ae:74:6d:ea:e5:42:6e:04:cd:
                    6b:21:79:65:6c:0e:77:f3:25:78:cb:a7:fd:ff:89:
                    c9:87:e0:0c:81:bb:75:10:1c:83:f3:6a:46:30:aa:
                    29:63:bf:26:3c:d3:1b:e9:8a:b2:39:f2:f9:18:94:
                    b2:3a:74:36:54:8d:a3:02:93:d7:43:8f:1c:00:24:
                    4d:30:57:d5:cf:32:b2:39:8d:87:f5:e8:47:59:4e:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:10:25:26:F6:A5:D3:71:34:8C:1C:C1:9C:F7:0E:F5:D6:03:28:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2649b7f5-5a43-34f6-b9a6-a430a10c17cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:7000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:90:19:16:b8:5d:68:63:35:32:32:4b:b0:17:74:14:fa:75:
         5f:ce:d2:e6:33:02:39:2f:30:a2:6b:58:e5:56:aa:e5:37:5e:
         11:f7:70:f8:39:7f:30:22:ad:bb:76:4b:e1:e7:e2:5c:eb:21:
         66:6d:ca:e0:e8:6d:4f:ec:0b:5b:f8:a8:ac:e6:06:65:7e:da:
         dd:ec:09:3f:8f:c8:ce:56:9d:b0:05:aa:8d:1b:11:dd:73:6c:
         6a:3e:5a:16:ab:52:93:04:4d:03:9b:9c:51:d5:ab:ca:fb:3a:
         6f:db:17:cb:c0:53:c3:f6:01:6b:2f:68:38:e5:88:40:31:11:
         d5:e8:d3:04:7b:f0:9d:e0:f6:f1:7a:cd:6e:ac:a5:ff:0a:d7:
         67:8c:c5:50:5c:88:01:2f:af:5d:c8:8a:be:1d:94:9c:ec:5a:
         4f:53:af:70:8f:cd:a2:1e:fb:89:d3:32:73:30:a4:d2:7c:81:
         2c:46:86:85:6a:60:06:f7:39:2b:1f:7b:f1:fe:42:ca:e9:5e:
         c1:9b:a5:11:75:9f:f9:13:fc:11:d3:36:be:33:84:6e:ec:a9:
         dd:fd:00:ab:e4:7a:24:00:0e:72:6d:8e:73:4f:db:6a:26:9b:
         c2:82:76:6e:b8:e2:00:51:5a:3c:24:9d:40:3e:38:37:6e:cb:
         40:05:a7:2d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsLdrD6qq5qIinFwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk
Yzc5OGJiZDEtNTc1MC00MGU3LTgyYWUtNThlNTA3MzNkMzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku8J7TxtkUOFms733mVUMu1+6VdzcjEKhlWY
VSle0ShqT8gilarRmWRoDhzMG/pZesVqtpLxHCLYq3YCofh5Pp0pg+A/OW96cEVE
jbC31F6VqP5WZI1yvaqoS9pXjYl9GeeG79RoVLyetI17TWAV/1UPlrJNEQ6elyYi
Eq0XpIEi5vv/guNNjedmuTz6bheaTfgBNKci94NQVY/2YmZbqlMt2iQspZ4T8Pyu
dG3q5UJuBM1rIXllbA538yV4y6f9/4nJh+AMgbt1EByD82pGMKopY78mPNMb6Yqy
OfL5GJSyOnQ2VI2jApPXQ48cACRNMFfVzzKyOY2H9ehHWU6sjQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBIQJSb2pdNxNIwcwZz3DvXWAyhwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvMjY0OWI3ZjUtNWE0My0z
NGY2LWI5YTYtYTQzMGExMGMxN2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgahAHAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEJAZFrhdaGM1MjJLsBd0FPp1X87S5jMCOS8womtY5Vaq5TdeEfdw
+Dl/MCKtu3ZL4efiXOshZm3K4OhtT+wLW/iorOYGZX7a3ewJP4/IzladsAWqjRsR
3XNsaj5aFqtSkwRNA5ucUdWryvs6b9sXy8BTw/YBay9oOOWIQDER1ejTBHvwneD2
8XrNbqyl/wrXZ4zFUFyIAS+vXciKvh2UnOxaT1OvcI/Noh77idMyczCk0nyBLEaG
hWpgBvc5Kx978f5CyulewZulEXWf+RP8EdM2vjOEbuyp3f0Aq+R6JAAOcm2Oc0/b
aiabwoJ2brjiAFFaPCSdQD44N27LQAWnLQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 12:44:35 2025 by rpki-client