Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e98e7013-db89-3010-b448-32b7a86b8502.roa
File:                     e98e7013-db89-3010-b448-32b7a86b8502.roa (raw, json)
Hash identifier:          Bsa5hcz49eYL15yTHUzl0eD8Ewxx3088paXfYgkCPZA=
Subject key identifier:   FA:50:13:64:7D:FE:B9:71:4D:E1:BC:83:19:4B:E0:9F:9C:49:3F:CA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B89FCAC4D4BAEB86B00E25300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e98e7013-db89-3010-b448-32b7a86b8502.roa
Signing time:             Thu 16 Oct 2025 08:42:33 +0000
ROA not before:           Thu 16 Oct 2025 08:42:33 +0000
ROA not after:            Wed 14 Jan 2026 09:42:33 +0000
asID:                     19527
IP address blocks:        2600:1902:70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:fc:ac:4d:4b:ae:b8:6b:00:e2:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 16 08:42:33 2025 GMT
            Not After : Jan 14 09:42:33 2026 GMT
        Subject: CN=508965be-5fd5-4cb5-86e0-38b1e77f0bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:fb:83:dc:d7:fd:64:46:b7:57:0e:15:37:
                    09:93:ce:fb:a5:82:a3:1a:ce:6b:e9:f9:2c:65:b5:
                    a7:93:0c:eb:da:51:1b:98:e3:2c:71:44:38:b7:43:
                    7c:94:0d:02:ce:8c:4a:fb:4c:f1:b8:68:fd:54:26:
                    aa:82:7d:45:2b:07:d8:05:df:32:ea:2c:a7:d7:21:
                    23:43:f3:33:5e:73:d1:cc:43:70:a0:8c:36:89:e4:
                    72:b8:0e:0c:ee:55:1d:3e:3e:73:73:84:82:86:05:
                    49:2f:8e:9a:ef:27:d1:1b:ac:a9:e8:8f:a7:67:ea:
                    a2:80:1d:c3:cb:cb:0c:b7:e9:b1:3a:33:89:89:c8:
                    50:88:4c:35:5f:27:83:96:6a:ab:35:ea:07:14:84:
                    ea:f8:27:b2:57:e0:2c:97:dd:79:9e:86:e0:fb:88:
                    fe:5e:3f:2b:89:85:c9:17:c5:8c:b6:e2:7e:d9:af:
                    ae:ba:4c:2a:ad:6c:1d:5b:05:93:e4:a9:dc:5f:32:
                    28:af:a5:dd:d9:fb:30:6f:80:c5:10:15:5e:7c:74:
                    93:76:55:a6:f5:7b:c4:31:43:09:2b:07:ce:1b:c6:
                    20:c9:36:72:53:d9:e8:75:5d:61:ab:06:87:ed:70:
                    e7:9b:16:05:5d:47:e9:1c:9b:c4:80:69:8b:3b:cf:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:50:13:64:7D:FE:B9:71:4D:E1:BC:83:19:4B:E0:9F:9C:49:3F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e98e7013-db89-3010-b448-32b7a86b8502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:33:2f:8e:09:b0:46:ed:3e:d8:d8:b4:ed:fe:85:46:94:6b:
         80:c7:b4:40:3c:b0:0c:2b:b3:37:b1:89:fb:c2:8b:16:ca:45:
         80:0a:97:66:c3:04:f5:79:ec:23:57:3a:16:0f:cf:75:5b:f4:
         16:c3:aa:ad:61:df:35:5c:6e:c0:f1:87:62:62:6e:26:c3:dd:
         ac:d3:c7:96:d5:7f:c1:41:dd:74:5a:4b:4e:10:d9:5c:eb:08:
         f2:03:55:19:43:67:82:a4:5d:43:72:bd:dd:4f:88:94:98:7c:
         41:c8:ce:ef:e8:bb:96:0d:49:aa:92:b9:35:f2:66:10:41:ba:
         ec:cf:d7:3a:17:fc:d8:5c:65:20:aa:83:b0:40:2d:86:f3:e7:
         28:5b:6c:92:6e:f1:89:35:6f:c1:ed:08:f6:b4:23:da:b0:8f:
         fd:e0:7d:01:3f:db:74:05:5b:d6:6d:b3:27:9b:99:17:fd:e9:
         a6:be:c1:67:94:29:83:a1:cf:5c:42:90:d5:8c:98:d1:8e:a7:
         a4:17:61:da:f5:8d:97:ec:57:ba:7c:cf:1c:c8:2f:68:5a:49:
         4c:98:4c:0b:42:f6:6c:39:1b:34:b8:b1:ac:48:02:57:9a:47:
         63:06:8f:3f:ab:8e:f9:4f:6b:05:fa:9c:0e:23:7f:94:5b:f1:
         9c:fa:f3:f1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuJ/KxNS664awDiUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MTAxNjA4NDIzM1oXDTI2MDExNDA5NDIzM1owLzEtMCsGA1UEAxMk
NTA4OTY1YmUtNWZkNS00Y2I1LTg2ZTAtMzhiMWU3N2YwYmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBb7g9zX/WRGt1cOFTcJk877pYKjGs5r6fks
ZbWnkwzr2lEbmOMscUQ4t0N8lA0CzoxK+0zxuGj9VCaqgn1FKwfYBd8y6iyn1yEj
Q/MzXnPRzENwoIw2ieRyuA4M7lUdPj5zc4SChgVJL46a7yfRG6yp6I+nZ+qigB3D
y8sMt+mxOjOJichQiEw1XyeDlmqrNeoHFITq+CeyV+Asl915nobg+4j+Xj8riYXJ
F8WMtuJ+2a+uukwqrWwdWwWT5KncXzIor6Xd2fswb4DFEBVefHSTdlWm9XvEMUMJ
KwfOG8YgyTZyU9nodV1hqwaH7XDnmxYFXUfpHJvEgGmLO89/rQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPpQE2R9/rlxTeG8gxlL4J+cST/KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTk4ZTcwMTMtZGI4OS0z
MDEwLWI0NDgtMzJiN2E4NmI4NTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgBw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABEzL44JsEbtPtjYtO3+hUaUa4DHtEA8sAwrszexifvCixbKRYAK
l2bDBPV57CNXOhYPz3Vb9BbDqq1h3zVcbsDxh2JibibD3azTx5bVf8FB3XRaS04Q
2VzrCPIDVRlDZ4KkXUNyvd1PiJSYfEHIzu/ou5YNSaqSuTXyZhBBuuzP1zoX/Nhc
ZSCqg7BALYbz5yhbbJJu8Yk1b8HtCPa0I9qwj/3gfQE/23QFW9ZtsyebmRf96aa+
wWeUKYOhz1xCkNWMmNGOp6QXYdr1jZfsV7p8zxzIL2haSUyYTAtC9mw5GzS4saxI
AleaR2MGjz+rjvlPawX6nA4jf5Rb8Zz68/E=
-----END CERTIFICATE-----
Generated at Wed Oct 22 21:18:48 2025 by rpki-client