Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5d151199-3d68-39d0-bfa4-f996a0d268c2.roa
File:                     5d151199-3d68-39d0-bfa4-f996a0d268c2.roa (raw, json)
Hash identifier:          smyMsBBDUmMm8tEzYLJuJ/0TbPFEBqkqDnbb7MxnyDA=
Subject key identifier:   2F:36:C1:F2:31:C6:8C:34:D5:BB:15:78:83:38:A8:93:DA:0B:17:B1
Certificate issuer:       /CN=5b1072af-9cbd-4f62-8155-d5c95177bece
Certificate serial:       010D0C9F4328584BA7CD1755802C3B54257E57D8
Authority key identifier: 91:50:88:CD:04:0D:5F:38:E5:11:C0:82:96:C8:4D:22:6F:B3:42:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5d151199-3d68-39d0-bfa4-f996a0d268c2.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     29802
IP address blocks:        2605:e240:ff00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:17:55:80:2c:3b:54:25:7e:57:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1072af-9cbd-4f62-8155-d5c95177bece
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=b195d96e-bd53-4b8f-a66c-3c5df546c787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:57:e6:0b:24:c6:f6:ef:9a:61:97:81:6f:55:
                    92:af:26:3c:d3:46:5b:43:f2:1b:3a:67:7b:86:63:
                    6d:89:46:5e:d1:ad:fd:c0:11:de:0d:57:99:62:46:
                    9e:1e:7e:17:5d:aa:60:e7:96:8d:3f:27:44:78:88:
                    71:7c:bc:4a:2f:a5:8c:6c:6d:81:bc:00:64:a8:01:
                    72:73:28:e2:9c:3c:55:f8:6b:1c:5a:e4:e0:11:78:
                    a4:5e:20:44:dd:82:47:d6:5e:a9:5e:c7:70:a7:04:
                    d1:11:df:35:03:23:d6:bd:57:51:e0:42:ed:65:85:
                    bc:18:ed:cd:61:a0:04:6a:7b:b4:db:87:a9:53:79:
                    02:91:1d:92:fe:89:ef:ff:ca:35:b0:b6:1a:2a:76:
                    de:00:80:ea:85:83:1a:8d:72:33:89:67:1e:5c:49:
                    c7:b7:42:44:ed:97:d5:1b:bd:5a:5c:f5:53:5b:4d:
                    17:95:06:e8:36:f1:be:17:c9:3d:19:64:e0:f6:d1:
                    2d:5b:3f:f5:b0:5f:9e:e9:4f:78:c7:68:b8:89:80:
                    30:1d:a3:8f:07:1d:8a:29:5a:48:0a:0b:1d:bb:aa:
                    d4:2d:bd:5d:c1:c2:e2:d0:15:1a:7f:12:49:c3:31:
                    74:e4:4e:d7:b2:b9:9c:95:9d:88:f7:df:8f:65:28:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:36:C1:F2:31:C6:8C:34:D5:BB:15:78:83:38:A8:93:DA:0B:17:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5d151199-3d68-39d0-bfa4-f996a0d268c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.crl

            X509v3 Authority Key Identifier:
                keyid:91:50:88:CD:04:0D:5F:38:E5:11:C0:82:96:C8:4D:22:6F:B3:42:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e240:ff00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:94:b7:7c:3c:ad:72:89:20:cc:5e:87:99:c4:5e:61:59:48:
         53:de:a4:12:33:ab:35:a2:eb:64:b5:3a:94:2b:93:c4:7e:30:
         5f:8f:6f:38:e6:79:0c:57:9d:bb:b5:b1:74:03:67:b1:98:94:
         38:f6:04:a3:d2:3a:d0:4e:40:9b:8a:83:42:c0:f5:61:52:1a:
         a5:e7:38:45:93:6b:65:40:87:ea:fd:6f:10:f4:cc:c6:98:a8:
         ef:97:68:95:b1:e5:52:9b:ab:63:45:22:09:57:5d:58:16:5c:
         5e:48:51:33:97:e5:a0:24:d0:00:63:e5:f1:d4:32:f1:c9:c8:
         b7:be:f1:1b:12:14:1d:5a:d0:bd:b2:13:e4:b9:9c:75:e9:64:
         20:3f:76:c7:f2:19:f0:d5:a1:17:65:c4:85:b1:8b:f4:c0:96:
         3b:85:5d:8e:7e:38:e8:e4:75:5c:a6:cd:22:46:10:40:b5:6a:
         27:86:76:1a:46:ab:af:9a:9d:ae:70:3c:c2:e1:8e:96:11:b7:
         a3:03:5a:5b:55:81:79:7b:92:6a:17:cc:8c:6f:4b:16:4d:0b:
         be:7b:0f:ab:3d:3d:dd:3d:a1:7b:58:d4:ce:f0:b1:c3:55:2c:
         07:70:3f:02:72:22:d4:1c:17:72:e2:5e:ee:7b:c5:5e:b3:4f:
         e9:27:68:ab
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEunzRdVgCw7VCV+V9gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWIxMDcyYWYtOWNiZC00ZjYyLTgxNTUtZDVjOTUxNzdi
ZWNlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
YjE5NWQ5NmUtYmQ1My00YjhmLWE2NmMtM2M1ZGY1NDZjNzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFfmCyTG9u+aYZeBb1WSryY800ZbQ/IbOmd7
hmNtiUZe0a39wBHeDVeZYkaeHn4XXapg55aNPydEeIhxfLxKL6WMbG2BvABkqAFy
cyjinDxV+GscWuTgEXikXiBE3YJH1l6pXsdwpwTREd81AyPWvVdR4ELtZYW8GO3N
YaAEanu024epU3kCkR2S/onv/8o1sLYaKnbeAIDqhYMajXIziWceXEnHt0JE7ZfV
G71aXPVTW00XlQboNvG+F8k9GWTg9tEtWz/1sF+e6U94x2i4iYAwHaOPBx2KKVpI
Cgsdu6rULb1dwcLi0BUafxJJwzF05E7XsrmclZ2I99+PZSijnwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFC82wfIxxow01bsVeIM4qJPaCxexMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81YjEw
NzJhZi05Y2JkLTRmNjItODE1NS1kNWM5NTE3N2JlY2UvNWQxNTExOTktM2Q2OC0z
OWQwLWJmYTQtZjk5NmEwZDI2OGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWIxMDcyYWYtOWNiZC00ZjYyLTgx
NTUtZDVjOTUxNzdiZWNlLzViMTA3MmFmLTljYmQtNGY2Mi04MTU1LWQ1Yzk1MTc3
YmVjZS5jcmwwHwYDVR0jBBgwFoAUkVCIzQQNXzjlEcCClshNIm+zQvowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81YjEwNzJhZi05Y2JkLTRmNjItODE1NS1kNWM5
NTE3N2JlY2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgXiQP8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABZS3fDytcokgzF6HmcReYVlIU96kEjOrNaLrZLU6lCuTxH4wX49v
OOZ5DFedu7WxdANnsZiUOPYEo9I60E5Am4qDQsD1YVIapec4RZNrZUCH6v1vEPTM
xpio75dolbHlUpurY0UiCVddWBZcXkhRM5floCTQAGPl8dQy8cnIt77xGxIUHVrQ
vbIT5LmcdelkID92x/IZ8NWhF2XEhbGL9MCWO4Vdjn446OR1XKbNIkYQQLVqJ4Z2
Gkarr5qdrnA8wuGOlhG3owNaW1WBeXuSahfMjG9LFk0LvnsPqz093T2he1jUzvCx
w1UsB3A/AnIi1BwXcuJe7nvFXrNP6Sdoqw==
-----END CERTIFICATE-----
Generated at Sun Nov 2 00:46:28 2025 by rpki-client