Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa
File:                     52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa (raw, json)
Hash identifier:          14Fayq97d99hlCnGKuN+YtszhqVackkcek68EDGMVcI=
Subject key identifier:   C6:07:A8:B5:11:15:80:99:79:0C:66:03:7C:FE:9A:52:E5:32:4E:E1
Certificate issuer:       /CN=c634bf2d-3875-4079-9788-431e36d8743a
Certificate serial:       010D0C9F4328584BA9326E29F69B751389065140
Authority key identifier: 8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     400718
IP address blocks:        2620:73:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:6e:29:f6:9b:75:13:89:06:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c634bf2d-3875-4079-9788-431e36d8743a
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=c975f367-4414-486c-be5a-0808031379d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:f5:f4:af:09:f7:81:27:c6:4b:3b:c5:5b:
                    c0:34:27:17:01:c5:0e:e0:66:c7:b9:a1:2d:73:89:
                    2a:da:82:ff:40:a2:a5:ac:ec:17:d1:c0:f7:5d:19:
                    82:a6:d9:31:4c:ba:d5:f6:14:36:1c:76:79:8d:31:
                    bd:96:e9:db:ab:06:9f:77:1f:20:14:a2:a8:6a:57:
                    44:a5:fb:43:f5:e3:47:cc:2d:1b:47:cf:20:96:61:
                    27:9c:f7:57:96:87:50:b7:14:3c:cc:f9:f0:a9:17:
                    0b:75:47:bc:05:4d:e1:3c:de:89:4a:f6:f4:ad:87:
                    2e:44:d3:8f:cc:73:0b:df:05:c8:15:da:60:42:6a:
                    dd:e5:4f:dc:d7:f0:aa:6c:9a:d8:bf:78:69:ac:22:
                    4a:68:d3:b7:b9:6f:6f:57:cd:e6:da:f6:ed:62:ab:
                    6b:98:6f:84:f5:36:7d:2f:0a:cb:0f:44:92:b1:61:
                    95:7f:39:f2:04:74:f3:fc:26:c3:8b:75:18:90:c0:
                    25:5f:ea:d8:c7:ac:31:7a:a2:f1:ff:60:40:7c:28:
                    57:36:f8:05:5b:58:06:03:0e:49:d2:89:d5:7b:4d:
                    74:f5:77:87:71:12:fe:1c:1e:a4:fc:15:38:93:3c:
                    ad:70:d3:c3:ca:b8:cd:e3:66:2b:d3:7c:8a:57:1f:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:07:A8:B5:11:15:80:99:79:0C:66:03:7C:FE:9A:52:E5:32:4E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/52f61cea-059a-3b97-8b1a-e4b9bcc7703b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a/c634bf2d-3875-4079-9788-431e36d8743a.crl

            X509v3 Authority Key Identifier:
                keyid:8F:39:E7:00:D8:69:92:10:87:82:FF:BB:46:16:9E:64:9A:86:D5:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c634bf2d-3875-4079-9788-431e36d8743a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:73:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c2:6b:79:0d:92:c1:b2:b9:27:90:ca:4f:01:dd:9f:93:90:
         28:29:0a:57:73:9b:35:e7:bc:01:2f:f9:8b:2d:9c:1f:74:c3:
         b7:f1:ca:cd:b1:dd:0c:3e:05:eb:0e:8d:6a:ba:a7:b0:a6:a2:
         d1:63:f5:30:d6:3f:7b:f2:ff:4f:fa:43:d9:9b:74:cf:4f:05:
         fe:bb:a3:75:d4:97:4f:32:3b:7a:93:76:58:3b:d7:07:f2:0b:
         bd:b5:61:9e:2a:a6:7c:30:6f:eb:67:07:aa:90:d6:05:4b:17:
         bf:fd:fe:55:29:64:0d:59:b7:6d:0b:07:10:96:b2:f6:1d:67:
         65:4b:54:09:f8:5d:f3:b3:02:51:0e:c1:30:62:53:22:2b:3c:
         4f:b3:98:f0:d6:b0:fc:03:f4:0c:4b:8d:91:bf:1f:ad:0a:29:
         df:11:51:19:4c:4b:2f:10:87:f1:96:c1:be:35:10:b7:6d:d1:
         31:b3:f7:64:11:5b:ef:51:e4:6d:26:d3:30:e7:fb:49:a0:b4:
         03:79:0a:b5:09:2d:ae:54:b6:d9:12:a9:4a:e6:99:dc:ea:32:
         aa:86:32:2f:54:c3:49:fa:7d:29:83:58:c1:f7:79:0e:29:4b:
         b0:d4:df:3c:90:06:21:f3:4f:e5:2a:9a:ee:98:92:db:d9:06:
         24:18:4a:bc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEupMm4p9pt1E4kGUUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYzNGJmMmQtMzg3NS00MDc5LTk3ODgtNDMxZTM2ZDg3
NDNhMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
Yzk3NWYzNjctNDQxNC00ODZjLWJlNWEtMDgwODAzMTM3OWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPv19K8J94Enxks7xVvANCcXAcUO4GbHuaEt
c4kq2oL/QKKlrOwX0cD3XRmCptkxTLrV9hQ2HHZ5jTG9lunbqwafdx8gFKKoaldE
pftD9eNHzC0bR88glmEnnPdXlodQtxQ8zPnwqRcLdUe8BU3hPN6JSvb0rYcuRNOP
zHML3wXIFdpgQmrd5U/c1/CqbJrYv3hprCJKaNO3uW9vV83m2vbtYqtrmG+E9TZ9
LwrLD0SSsWGVfznyBHTz/CbDi3UYkMAlX+rYx6wxeqLx/2BAfChXNvgFW1gGAw5J
0onVe0109XeHcRL+HB6k/BU4kzytcNPDyrjN42Yr03yKVx9XbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMYHqLURFYCZeQxmA3z+mlLlMk7hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNjM0
YmYyZC0zODc1LTQwNzktOTc4OC00MzFlMzZkODc0M2EvNTJmNjFjZWEtMDU5YS0z
Yjk3LThiMWEtZTRiOWJjYzc3MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzYzNGJmMmQtMzg3NS00MDc5LTk3
ODgtNDMxZTM2ZDg3NDNhL2M2MzRiZjJkLTM4NzUtNDA3OS05Nzg4LTQzMWUzNmQ4
NzQzYS5jcmwwHwYDVR0jBBgwFoAUjznnANhpkhCHgv+7RhaeZJqG1cIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNjM0YmYyZC0zODc1LTQwNzktOTc4OC00MzFl
MzZkODc0M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAcyAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA3Ca3kNksGyuSeQyk8B3Z+TkCgpCldzmzXnvAEv+YstnB90w7fx
ys2x3Qw+BesOjWq6p7CmotFj9TDWP3vy/0/6Q9mbdM9PBf67o3XUl08yO3qTdlg7
1wfyC721YZ4qpnwwb+tnB6qQ1gVLF7/9/lUpZA1Zt20LBxCWsvYdZ2VLVAn4XfOz
AlEOwTBiUyIrPE+zmPDWsPwD9AxLjZG/H60KKd8RURlMSy8Qh/GWwb41ELdt0TGz
92QRW+9R5G0m0zDn+0mgtAN5CrUJLa5UttkSqUrmmdzqMqqGMi9Uw0n6fSmDWMH3
eQ4pS7DU3zyQBiHzT+Uqmu6YktvZBiQYSrw=
-----END CERTIFICATE-----
Generated at Mon Nov 3 14:47:51 2025 by rpki-client