Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa
File:                     df5148de-ede2-3842-905b-9207fff8922c.roa (raw, json)
Hash identifier:          4zPVRjnDs96nhOyTBTqzy4t7Q/Cx4dAL2y+nAnvT/4U=
Subject key identifier:   77:2C:ED:34:2E:CB:42:FF:21:B0:FE:1D:24:3F:A6:DA:B9:3A:BC:58
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584B1806DA5E3E37FA11A4D30AE0
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     21713
IP address blocks:        2605:c380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:da:5e:3e:37:fa:11:a4:d3:0a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=d1205444-959b-4f64-8ee4-2983f779ba31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:ef:f6:b6:34:96:13:a8:47:27:df:a8:86:
                    6b:96:fd:c7:ea:97:62:76:b2:07:d8:1d:d2:f6:64:
                    89:fd:82:e4:5a:58:75:57:6f:9c:b1:cd:3f:a1:2a:
                    32:e3:6c:c2:7a:2f:68:de:64:eb:2b:9c:78:ed:7d:
                    d5:c4:2d:80:04:89:be:ab:fd:47:18:1e:d0:c6:a4:
                    6f:67:d0:30:72:e7:b0:be:d4:d1:62:a4:7c:4c:a7:
                    49:fb:53:ca:e4:7a:27:18:48:53:09:4f:7e:37:e5:
                    3b:84:41:9b:0e:fa:61:91:3d:ec:a4:40:1b:10:15:
                    8e:57:02:1d:e1:ee:a9:23:4f:cf:fe:81:1d:26:05:
                    c5:d8:93:e1:4e:8f:81:e9:c2:2e:2f:72:21:f1:3c:
                    d8:0d:46:89:77:e7:be:f2:2f:d9:aa:43:a5:82:6b:
                    40:9c:ab:f1:ec:94:33:26:fd:83:49:ad:cc:fd:6e:
                    6a:84:91:86:f1:2e:98:d3:4b:b5:30:5a:50:42:41:
                    7b:dd:79:07:94:08:e7:87:1b:ac:2e:ad:7d:e8:96:
                    27:22:ea:97:b2:03:e5:cd:ba:a4:bd:3e:08:a5:a6:
                    c8:1f:21:f4:c6:25:ac:ee:7f:f9:1a:5b:9e:6e:6f:
                    d6:26:05:8a:b6:3c:99:86:6e:b8:f4:40:d4:86:2e:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2C:ED:34:2E:CB:42:FF:21:B0:FE:1D:24:3F:A6:DA:B9:3A:BC:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/df5148de-ede2-3842-905b-9207fff8922c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:68:a6:3b:12:cf:e8:df:1d:1b:ca:16:73:e0:e1:9b:76:5e:
         d1:46:36:55:93:67:a0:ef:fa:b4:6c:ca:3d:42:96:98:40:fb:
         f3:04:e3:7f:2c:7f:85:bb:97:c7:cf:c0:64:26:dd:32:e6:ae:
         76:cc:11:09:13:a7:27:0f:26:12:d4:e6:23:15:d9:8d:6a:20:
         67:dc:a3:02:43:56:36:18:7b:0b:a3:06:f6:88:37:53:24:12:
         f7:6e:5b:48:6a:7e:7b:6c:ab:6d:c5:34:c9:5f:5f:69:50:b3:
         b2:9c:06:f3:7d:1c:9c:a9:cd:83:62:a7:4b:ae:34:46:5f:39:
         fe:9a:00:9d:a6:1f:36:64:0f:a3:4a:95:92:0e:67:75:aa:8f:
         0f:76:3f:67:20:6e:42:c8:d6:6a:db:10:1d:3d:29:ca:52:b8:
         3b:7e:12:c2:5c:3a:57:55:39:2a:66:5e:78:12:1e:4a:6a:1c:
         f5:90:86:82:42:0d:56:81:1f:a3:a9:f4:da:fa:40:6c:64:33:
         50:b2:bb:e0:fd:85:58:fa:25:9b:82:75:28:96:8e:69:c1:8e:
         d5:c0:d8:0a:c6:53:b3:01:ed:74:4e:61:13:37:f0:a2:76:14:
         d0:29:e0:26:da:36:e9:18:3a:8b:dd:61:f8:94:f5:cc:10:87:
         57:21:f7:80
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsYBtpePjf6EaTTCuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkzMWU3MTctYzFkMS00ZGQ4LTg2M2QtNWMwNmZiNzZm
NDdiMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZDEyMDU0NDQtOTU5Yi00ZjY0LThlZTQtMjk4M2Y3NzliYTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlHv9rY0lhOoRyffqIZrlv3H6pdidrIH2B3S
9mSJ/YLkWlh1V2+csc0/oSoy42zCei9o3mTrK5x47X3VxC2ABIm+q/1HGB7QxqRv
Z9AwcuewvtTRYqR8TKdJ+1PK5HonGEhTCU9+N+U7hEGbDvphkT3spEAbEBWOVwId
4e6pI0/P/oEdJgXF2JPhTo+B6cIuL3Ih8TzYDUaJd+e+8i/ZqkOlgmtAnKvx7JQz
Jv2DSa3M/W5qhJGG8S6Y00u1MFpQQkF73XkHlAjnhxusLq196JYnIuqXsgPlzbqk
vT4IpabIHyH0xiWs7n/5Gluebm/WJgWKtjyZhm649EDUhi5I4QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHcs7TQuy0L/IbD+HSQ/ptq5OrxYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80OTMx
ZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2ZmI3NmY0N2IvZGY1MTQ4ZGUtZWRlMi0z
ODQyLTkwNWItOTIwN2ZmZjg5MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDkzMWU3MTctYzFkMS00ZGQ4LTg2
M2QtNWMwNmZiNzZmNDdiLzQ5MzFlNzE3LWMxZDEtNGRkOC04NjNkLTVjMDZmYjc2
ZjQ3Yi5jcmwwHwYDVR0jBBgwFoAUzkL+cRFxw0kbjbZ7dOQfT+KR3owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80OTMxZTcxNy1jMWQxLTRkZDgtODYzZC01YzA2
ZmI3NmY0N2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXDgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA2aKY7Es/o3x0byhZz4OGbdl7RRjZVk2eg7/q0bMo9QpaYQPvzBON/
LH+Fu5fHz8BkJt0y5q52zBEJE6cnDyYS1OYjFdmNaiBn3KMCQ1Y2GHsLowb2iDdT
JBL3bltIan57bKttxTTJX19pULOynAbzfRycqc2DYqdLrjRGXzn+mgCdph82ZA+j
SpWSDmd1qo8Pdj9nIG5CyNZq2xAdPSnKUrg7fhLCXDpXVTkqZl54Eh5Kahz1kIaC
Qg1WgR+jqfTa+kBsZDNQsrvg/YVY+iWbgnUolo5pwY7VwNgKxlOzAe10TmETN/Ci
dhTQKeAm2jbpGDqL3WH4lPXMEIdXIfeA
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:05:18 2025 by rpki-client