Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0412d8be-cc73-3c7c-8f21-9175caba4292.roa
File:                     0412d8be-cc73-3c7c-8f21-9175caba4292.roa (raw, json)
Hash identifier:          pDi+yuLKi8Kp1zH7m2jQu5IwBvgJZGDyPfHIBHoNCp4=
Subject key identifier:   DE:17:4C:3F:02:F2:90:9E:55:12:22:9E:63:A2:39:46:AC:2C:6E:9E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F525A31C0EC7F8B1A435600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0412d8be-cc73-3c7c-8f21-9175caba4292.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8849::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:5a:31:c0:ec:7f:8b:1a:43:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=8f7f1195-deba-4981-8a2d-56553c176f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:45:d1:80:1b:54:1b:e4:50:1f:67:db:2f:
                    a8:b8:52:30:44:b4:d8:13:ac:38:15:da:b7:8e:71:
                    6d:b4:eb:77:3b:36:21:f9:8a:29:0a:b9:e5:a8:c5:
                    c2:51:83:8c:ac:8d:bc:93:19:61:54:44:0e:4c:dc:
                    6a:a2:de:d4:95:4e:2b:9a:da:e9:bd:d5:2a:99:2b:
                    f3:22:55:df:fc:be:b2:dc:0b:71:4b:58:e6:2d:a3:
                    cf:ff:7c:4c:a1:eb:05:dc:cf:c4:d5:9d:49:bd:3e:
                    06:b4:c3:d5:29:5d:34:bd:1c:cb:67:0a:3d:f0:4e:
                    9a:63:4b:f1:15:f9:d4:0e:0b:aa:99:0d:21:7c:5e:
                    c2:1b:b3:59:83:30:81:f0:f3:02:3b:4b:cf:8d:b6:
                    67:0f:10:aa:97:e3:4b:10:fa:dc:c4:15:f4:45:ef:
                    dd:1f:ab:cf:f6:1f:4a:3f:b4:ca:68:41:9e:5d:52:
                    95:42:30:df:64:6a:46:a9:bc:a0:f3:e9:18:e9:0e:
                    63:52:72:94:f3:fc:57:2f:9a:9d:76:bd:d1:08:eb:
                    3f:b1:fd:a5:7a:cb:c1:10:6d:38:32:fd:a4:b1:0f:
                    6c:a8:4a:94:14:bd:9f:a8:c1:19:22:f5:ad:44:c1:
                    85:4f:63:13:48:99:2c:8d:d0:ce:cb:c8:a3:fd:85:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:17:4C:3F:02:F2:90:9E:55:12:22:9E:63:A2:39:46:AC:2C:6E:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0412d8be-cc73-3c7c-8f21-9175caba4292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8849::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:09:eb:af:78:6b:c0:e3:ca:b3:10:86:9f:3f:20:3c:dd:53:
         e0:c2:34:10:55:ad:83:60:19:65:d4:5f:71:66:08:d4:4e:e7:
         99:7a:11:7e:80:24:18:cb:00:5c:bb:07:1f:72:6d:ed:df:0d:
         4f:5c:46:28:e4:0d:25:05:98:ec:49:60:79:89:93:ac:bc:e8:
         ae:af:ae:79:e8:d6:67:3c:6f:ae:a0:da:80:f4:f9:1d:11:98:
         33:32:df:14:54:d7:18:bf:39:5b:26:f9:cb:39:f8:8b:24:f9:
         d6:85:9c:30:83:d9:b0:eb:e5:98:0b:23:05:29:76:36:a0:e0:
         6b:9b:f6:a7:3c:04:7f:fe:e1:e4:0d:a6:c2:03:7f:b1:5e:cd:
         ac:a4:41:49:57:46:f2:a3:dd:88:1c:73:9d:a5:89:56:48:d4:
         cb:dd:5d:9c:00:e7:1b:dc:45:31:33:f3:d6:c6:89:af:41:3b:
         ed:02:23:71:c6:13:a7:7e:07:ea:5a:67:01:0c:b1:9c:16:0e:
         bc:76:f2:b5:ae:5d:6c:32:07:d9:b8:31:40:2e:53:95:e7:66:
         55:fb:f9:4c:b4:16:a7:81:fe:fd:9e:41:a5:cd:42:ab:73:33:
         19:1c:40:20:46:9b:4f:e0:5d:e1:4e:a6:24:44:8c:df:01:72:
         49:7c:45:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UloxwOx/ixpDVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
OGY3ZjExOTUtZGViYS00OTgxLThhMmQtNTY1NTNjMTc2ZjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc5F0YAbVBvkUB9n2y+ouFIwRLTYE6w4Fdq3
jnFttOt3OzYh+YopCrnlqMXCUYOMrI28kxlhVEQOTNxqot7UlU4rmtrpvdUqmSvz
IlXf/L6y3AtxS1jmLaPP/3xMoesF3M/E1Z1JvT4GtMPVKV00vRzLZwo98E6aY0vx
FfnUDguqmQ0hfF7CG7NZgzCB8PMCO0vPjbZnDxCql+NLEPrcxBX0Re/dH6vP9h9K
P7TKaEGeXVKVQjDfZGpGqbyg8+kY6Q5jUnKU8/xXL5qddr3RCOs/sf2lesvBEG04
Mv2ksQ9sqEqUFL2fqMEZIvWtRMGFT2MTSJksjdDOy8ij/YVDQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN4XTD8C8pCeVRIinmOiOUasLG6eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMDQxMmQ4YmUtY2M3My0z
YzdjLThmMjEtOTE3NWNhYmE0MjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYhJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGcJ6694a8DjyrMQhp8/IDzdU+DCNBBVrYNgGWXUX3FmCNRO55l6
EX6AJBjLAFy7Bx9ybe3fDU9cRijkDSUFmOxJYHmJk6y86K6vrnno1mc8b66g2oD0
+R0RmDMy3xRU1xi/OVsm+cs5+Isk+daFnDCD2bDr5ZgLIwUpdjag4Gub9qc8BH/+
4eQNpsIDf7FezaykQUlXRvKj3Ygcc52liVZI1MvdXZwA5xvcRTEz89bGia9BO+0C
I3HGE6d+B+paZwEMsZwWDrx28rWuXWwyB9m4MUAuU5XnZlX7+Uy0FqeB/v2eQaXN
QqtzMxkcQCBGm0/gXeFOpiREjN8Bckl8RQo=
-----END CERTIFICATE-----
Generated at Fri Oct 17 05:00:29 2025 by rpki-client