Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/05b705f9-2747-319c-8d29-77e805edc6bd.roa
File:                     05b705f9-2747-319c-8d29-77e805edc6bd.roa (raw, json)
Hash identifier:          Y24TSn3mwaaNMS5Krl41dV8AFshJ3nk05n0ehs4qWmc=
Subject key identifier:   E2:0C:3F:64:AA:91:39:FF:73:45:1A:D1:B8:FA:E4:8D:67:54:CF:AF
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584B477C67D1641D9C6FAE7307C0
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/05b705f9-2747-319c-8d29-77e805edc6bd.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     21957
IP address blocks:        2605:f440:5653::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:67:d1:64:1d:9c:6f:ae:73:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=8fb2a8a5-f950-4208-8810-63cf1c03988c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:ec:46:2c:fe:fc:d4:3b:32:46:a9:a5:da:
                    c5:74:52:bc:c8:c6:0d:a4:b5:9c:6c:35:39:0e:24:
                    2b:e1:fe:6a:30:1f:ac:4f:ad:7b:0f:63:67:25:82:
                    c7:e1:1d:96:55:04:65:7e:0b:e5:c5:0b:49:14:c5:
                    eb:33:0a:a8:81:3d:45:c2:72:d5:7f:e5:39:1a:55:
                    7b:d2:40:35:d7:f7:6f:7b:31:d9:fd:40:7c:a4:3f:
                    63:7a:01:60:45:91:0d:5f:fb:21:ce:2a:5f:b7:fe:
                    62:16:9d:af:cf:8d:b8:71:be:93:44:5d:0e:c8:d5:
                    d7:0f:c6:39:2f:99:35:02:24:a3:3e:e0:d6:6b:28:
                    84:d7:6d:be:79:c8:fd:59:d1:b9:0d:dd:86:fd:e3:
                    7a:8d:20:f8:7e:11:f3:53:f1:d5:b6:e1:87:8a:76:
                    07:a2:ff:05:81:11:fe:b6:23:64:cf:a4:9f:df:f0:
                    25:d5:2c:63:ac:32:2e:15:83:3e:64:4e:24:1f:23:
                    ab:9c:6b:3e:93:b3:37:2b:a6:f2:11:7a:cc:aa:95:
                    2f:78:51:f7:06:02:16:69:3b:f0:ae:e1:c6:e0:37:
                    a8:b8:6c:d4:cb:7e:f4:1b:07:06:c3:52:6a:0a:99:
                    fc:20:1f:7b:6e:b3:23:30:e0:7c:0a:6a:79:3f:ef:
                    e7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0C:3F:64:AA:91:39:FF:73:45:1A:D1:B8:FA:E4:8D:67:54:CF:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/05b705f9-2747-319c-8d29-77e805edc6bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5653::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:76:59:3a:a5:66:9e:7f:41:61:b8:65:fb:cd:1b:60:15:d8:
         d3:8b:57:93:0b:51:82:a5:12:cf:42:3c:ca:f4:00:36:a4:66:
         f0:1a:60:b2:0e:8d:2a:59:12:fc:27:01:40:5d:b2:d6:25:47:
         8a:91:e6:99:ad:21:c2:9f:7c:08:cc:87:d2:d5:cd:e9:07:77:
         5b:f3:4c:86:6c:fb:a3:f0:26:24:3c:e3:d7:37:48:ad:f9:f2:
         8f:63:15:55:39:a0:27:8f:a7:b9:2a:98:f0:26:dd:6e:7c:9c:
         38:37:02:88:91:77:23:92:9f:1c:8c:99:6a:0a:78:a4:35:b3:
         3e:f9:07:ca:08:76:0f:de:33:07:c6:88:00:77:9b:f5:dd:6a:
         f4:fc:60:7d:e9:34:0a:37:ef:59:f8:33:d3:f4:04:15:84:d7:
         b5:8a:d2:9d:0b:f8:82:bb:40:a8:94:18:ea:1b:ba:a5:cc:f7:
         3d:00:60:bc:98:e8:32:00:ce:5b:0e:2b:8a:ca:16:72:92:52:
         96:7b:56:4d:57:6c:91:71:44:54:da:e2:a0:6d:cc:26:5f:fb:
         8c:12:4e:3b:29:2b:26:9c:ca:87:4a:0f:77:f3:1a:9d:27:01:
         f8:0e:d7:f6:b9:e0:1e:d6:18:ff:07:82:8b:67:6b:13:b6:8a:
         dc:d3:d1:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtHfGfRZB2cb65zB8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk
OGZiMmE4YTUtZjk1MC00MjA4LTg4MTAtNjNjZjFjMDM5ODhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0onsRiz+/NQ7MkappdrFdFK8yMYNpLWcbDU5
DiQr4f5qMB+sT617D2NnJYLH4R2WVQRlfgvlxQtJFMXrMwqogT1FwnLVf+U5GlV7
0kA11/dvezHZ/UB8pD9jegFgRZENX/shzipft/5iFp2vz424cb6TRF0OyNXXD8Y5
L5k1AiSjPuDWayiE122+ecj9WdG5Dd2G/eN6jSD4fhHzU/HVtuGHinYHov8FgRH+
tiNkz6Sf3/Al1SxjrDIuFYM+ZE4kHyOrnGs+k7M3K6byEXrMqpUveFH3BgIWaTvw
ruHG4DeouGzUy370GwcGw1JqCpn8IB97brMjMOB8Cmp5P+/nEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOIMP2SqkTn/c0Ua0bj65I1nVM+vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvMDViNzA1ZjktMjc0Ny0z
MTljLThkMjktNzdlODA1ZWRjNmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QFZT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK92WTqlZp5/QWG4ZfvNG2AV2NOLV5MLUYKlEs9CPMr0ADakZvAa
YLIOjSpZEvwnAUBdstYlR4qR5pmtIcKffAjMh9LVzekHd1vzTIZs+6PwJiQ849c3
SK358o9jFVU5oCePp7kqmPAm3W58nDg3AoiRdyOSnxyMmWoKeKQ1sz75B8oIdg/e
MwfGiAB3m/XdavT8YH3pNAo371n4M9P0BBWE17WK0p0L+IK7QKiUGOobuqXM9z0A
YLyY6DIAzlsOK4rKFnKSUpZ7Vk1XbJFxRFTa4qBtzCZf+4wSTjspKyacyodKD3fz
Gp0nAfgO1/a54B7WGP8HgotnaxO2itzT0W4=
-----END CERTIFICATE-----
Generated at Wed Oct 15 20:25:03 2025 by rpki-client