Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a9134b1-130d-35a7-8742-bc30c500dab3.roa
File:                     4a9134b1-130d-35a7-8742-bc30c500dab3.roa (raw, json)
Hash identifier:          gYBbTypQ9ekhelqLXjyOWI4ZGvlkHjd0CB0txNx5+kw=
Subject key identifier:   3B:ED:CF:93:F8:39:DE:C5:FD:27:B1:5F:80:56:0B:D0:2A:87:8B:04
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F522D22EF0FD9958230E800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a9134b1-130d-35a7-8742-bc30c500dab3.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:874f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:2d:22:ef:0f:d9:95:82:30:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=beb1a555-dd7a-46fd-9e28-cecce3f865d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:7f:5b:41:1a:d7:1e:64:7d:9d:a7:2b:b6:
                    f3:a6:db:82:89:e0:38:26:3d:bd:37:17:bf:c9:82:
                    6e:f9:c4:d5:4d:21:01:f3:09:1c:35:fb:f6:15:32:
                    6c:ba:ee:87:94:1f:1e:a2:80:a4:b8:6d:02:c0:b4:
                    02:2a:24:7c:c3:b3:8f:0c:a5:d3:7a:99:2e:a6:30:
                    d5:c0:da:e4:dc:aa:94:2f:fb:54:5b:b0:ce:4b:23:
                    58:b5:69:a0:ef:9d:e2:06:59:6b:48:a4:56:12:a6:
                    6b:02:45:3c:b2:ea:e9:55:a6:12:06:3f:41:06:d5:
                    50:d9:01:ad:26:7a:05:d9:03:69:7d:da:63:d7:79:
                    22:7a:ab:16:4b:87:5e:76:5a:6e:14:04:bb:54:41:
                    c4:38:8a:66:fb:7b:a1:74:53:34:8b:77:ab:5b:cb:
                    ab:6c:d0:a3:d3:4c:d9:4e:7b:4b:8a:06:8a:4c:35:
                    ea:f1:be:4b:00:fa:27:b4:27:2a:d4:fc:2c:14:87:
                    28:2a:70:04:72:a1:02:bc:69:4f:35:0b:ab:c5:9f:
                    67:b6:e5:ac:cd:30:35:98:75:a1:6b:55:fa:5c:ad:
                    8f:24:cf:41:85:fd:8d:7d:4e:30:9a:58:59:e0:be:
                    d9:1f:c1:4d:a1:bd:21:34:07:3c:62:24:32:53:c1:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:ED:CF:93:F8:39:DE:C5:FD:27:B1:5F:80:56:0B:D0:2A:87:8B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a9134b1-130d-35a7-8742-bc30c500dab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:874f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:16:0c:9b:0c:37:8f:6a:aa:b0:e3:94:a2:6a:fd:7e:72:43:
         1a:61:01:07:08:26:67:38:1a:68:0a:8d:fb:66:c0:7b:ca:40:
         0f:1d:78:d7:94:1c:df:46:29:75:76:78:af:b9:ec:61:b2:a5:
         71:fb:3b:c2:83:87:be:8a:8f:c9:5e:98:01:c2:75:16:b9:ba:
         ad:e2:1d:92:8d:10:16:31:85:84:8d:c3:6b:bc:8b:96:b8:2e:
         a7:cc:89:c6:44:da:b1:b2:78:f7:80:8a:f4:6d:2a:32:b0:f1:
         94:f9:79:c7:af:0e:13:15:c2:d3:e3:8b:12:56:d2:01:2b:64:
         bc:d2:ed:8b:5a:8f:d9:bb:08:d4:f6:24:2e:6a:06:00:0a:1d:
         8a:9d:13:60:59:9b:5d:3d:ca:90:7c:ff:a7:0e:7a:4f:df:0a:
         52:a8:00:3c:2d:b8:10:0d:d8:79:2c:99:d7:62:f4:54:0f:1e:
         e8:d7:6f:00:29:56:62:92:d8:58:a6:f8:8a:e5:74:34:0f:c5:
         8c:34:5c:5b:7f:df:d8:c6:42:52:af:d0:bd:dd:df:f4:a1:bb:
         b8:ee:db:33:f1:d6:0b:81:0e:a6:08:06:ee:86:7b:f9:c7:e0:
         70:81:2d:da:fb:df:3a:7e:aa:c2:df:91:96:07:f8:83:c4:77:
         95:c9:aa:9c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Ui0i7w/ZlYIw6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
YmViMWE1NTUtZGQ3YS00NmZkLTllMjgtY2VjY2UzZjg2NWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ1/W0Ea1x5kfZ2nK7bzptuCieA4Jj29Nxe/
yYJu+cTVTSEB8wkcNfv2FTJsuu6HlB8eooCkuG0CwLQCKiR8w7OPDKXTepkupjDV
wNrk3KqUL/tUW7DOSyNYtWmg753iBllrSKRWEqZrAkU8surpVaYSBj9BBtVQ2QGt
JnoF2QNpfdpj13kieqsWS4dedlpuFAS7VEHEOIpm+3uhdFM0i3erW8urbNCj00zZ
TntLigaKTDXq8b5LAPontCcq1PwsFIcoKnAEcqECvGlPNQurxZ9ntuWszTA1mHWh
a1X6XK2PJM9Bhf2NfU4wmlhZ4L7ZH8FNob0hNAc8YiQyU8Hp1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDvtz5P4Od7F/SexX4BWC9Aqh4sEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNGE5MTM0YjEtMTMwZC0z
NWE3LTg3NDItYmMzMGM1MDBkYWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYdP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI8WDJsMN49qqrDjlKJq/X5yQxphAQcIJmc4GmgKjftmwHvKQA8d
eNeUHN9GKXV2eK+57GGypXH7O8KDh76Kj8lemAHCdRa5uq3iHZKNEBYxhYSNw2u8
i5a4LqfMicZE2rGyePeAivRtKjKw8ZT5ecevDhMVwtPjixJW0gErZLzS7Ytaj9m7
CNT2JC5qBgAKHYqdE2BZm109ypB8/6cOek/fClKoADwtuBAN2Hksmddi9FQPHujX
bwApVmKS2Fim+IrldDQPxYw0XFt/39jGQlKv0L3d3/Shu7ju2zPx1guBDqYIBu6G
e/nH4HCBLdr73zp+qsLfkZYH+IPEd5XJqpw=
-----END CERTIFICATE-----
Generated at Fri Oct 17 05:06:47 2025 by rpki-client