Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/586f6cb2-af88-323e-8989-57ed1af960c5.roa
File:                     586f6cb2-af88-323e-8989-57ed1af960c5.roa (raw, json)
Hash identifier:          7x32BQn7t35OMhTdrKAPRxtZKESAzqKMNoJrSQBwYj0=
Subject key identifier:   18:1F:18:22:D3:5F:07:17:16:46:11:90:69:3A:3E:46:3F:28:C8:C3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5226BB9697D8831D89BB18
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/586f6cb2-af88-323e-8989-57ed1af960c5.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:26:bb:96:97:d8:83:1d:89:bb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=1d87bd08-b40c-4326-b59c-9cc29aa1711c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:03:08:fd:4c:69:a9:78:28:4f:58:d8:29:
                    ad:61:1c:30:b3:d8:16:ff:af:ac:40:b8:e9:40:f0:
                    8c:28:7d:61:e8:11:17:4b:ef:87:f7:47:17:40:9f:
                    e8:67:b0:56:2d:0a:ac:68:2f:85:e6:aa:d2:b8:b5:
                    8b:d8:c4:75:b6:60:82:63:15:9e:49:74:fa:54:b2:
                    8e:08:c7:5e:9a:75:50:03:f0:97:d7:b7:db:ce:50:
                    00:81:12:85:7f:aa:1d:b2:fd:35:07:d4:e2:c5:7f:
                    3b:53:df:43:67:38:0e:48:47:a6:fc:98:87:cb:a6:
                    8a:48:28:6c:2f:8b:49:e6:74:3b:cc:26:34:f7:06:
                    98:50:e1:0a:ce:4a:28:50:57:5d:50:20:f3:5f:47:
                    b7:c6:f4:f8:37:80:20:9c:e8:c5:5f:3a:3b:86:ef:
                    df:7b:91:6a:3e:b6:e1:89:69:d4:43:c1:cc:b9:5a:
                    a9:36:46:a5:ec:87:ba:69:0e:64:94:e1:80:69:57:
                    3a:c3:25:8f:41:e4:d7:cc:a9:56:a2:32:16:ae:d4:
                    03:1e:a9:88:b5:fb:a5:cb:ef:fd:1f:53:6f:c7:95:
                    38:88:06:e0:d6:f7:b0:54:3d:6a:95:b4:df:c7:e1:
                    d0:59:d6:ca:ad:95:1b:02:c9:39:91:b7:8a:74:f5:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1F:18:22:D3:5F:07:17:16:46:11:90:69:3A:3E:46:3F:28:C8:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/586f6cb2-af88-323e-8989-57ed1af960c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8500::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:55:87:85:b8:a7:46:0b:59:c4:7e:b7:b4:c8:55:2b:47:
         cc:f8:ea:ee:5a:08:cf:32:8d:7f:63:58:b1:da:db:58:40:f0:
         58:a0:fa:12:24:a1:93:5d:20:c6:cd:96:c2:48:29:b6:7d:31:
         83:20:12:9c:f1:e3:fd:b2:78:f6:59:f8:35:46:c3:bb:44:b1:
         76:4a:65:fb:fa:1d:7a:3f:a8:22:6a:96:fa:f1:97:e8:f9:4d:
         8a:6a:b0:7c:42:b4:ee:c4:41:a1:f0:71:9a:71:df:3c:f7:b2:
         24:74:e2:95:07:fc:44:8d:9a:fd:77:65:b5:c9:2d:b2:f1:27:
         34:b6:49:7b:00:5f:d2:8d:5b:89:94:26:24:d5:a5:d5:3e:e3:
         9f:e7:33:f0:db:62:4d:ae:eb:ad:cb:32:68:17:7b:87:4e:66:
         73:2f:f2:26:53:a4:4c:2c:3e:62:f7:b0:4b:cc:5d:35:21:5e:
         ef:d4:09:6c:6b:ec:c4:1e:b2:52:e5:c3:b6:2e:65:78:04:d0:
         68:1e:7d:1f:bf:2c:f9:c2:ef:e8:b1:45:eb:e2:7f:d9:f0:d6:
         a5:1a:15:c0:eb:1b:73:1a:2b:2b:1d:3c:21:b1:4e:16:26:97:
         2f:bb:4d:5c:0c:ff:9c:3f:2c:df:96:b7:95:4a:17:67:7e:14:
         29:ef:82:8c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Uia7lpfYgx2JuxgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
MWQ4N2JkMDgtYjQwYy00MzI2LWI1OWMtOWNjMjlhYTE3MTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeMDCP1Maal4KE9Y2CmtYRwws9gW/6+sQLjp
QPCMKH1h6BEXS++H90cXQJ/oZ7BWLQqsaC+F5qrSuLWL2MR1tmCCYxWeSXT6VLKO
CMdemnVQA/CX17fbzlAAgRKFf6odsv01B9TixX87U99DZzgOSEem/JiHy6aKSChs
L4tJ5nQ7zCY09waYUOEKzkooUFddUCDzX0e3xvT4N4AgnOjFXzo7hu/fe5FqPrbh
iWnUQ8HMuVqpNkal7Ie6aQ5klOGAaVc6wyWPQeTXzKlWojIWrtQDHqmItfuly+/9
H1Nvx5U4iAbg1vewVD1qlbTfx+HQWdbKrZUbAsk5kbeKdPU3FwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBgfGCLTXwcXFkYRkGk6PkY/KMjDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTg2ZjZjYjItYWY4OC0z
MjNlLTg5ODktNTdlZDFhZjk2MGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYUA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADEKVYeFuKdGC1nEfre0yFUrR8z46u5aCM8yjX9jWLHa21hA8Fig
+hIkoZNdIMbNlsJIKbZ9MYMgEpzx4/2yePZZ+DVGw7tEsXZKZfv6HXo/qCJqlvrx
l+j5TYpqsHxCtO7EQaHwcZpx3zz3siR04pUH/ESNmv13ZbXJLbLxJzS2SXsAX9KN
W4mUJiTVpdU+45/nM/DbYk2u663LMmgXe4dOZnMv8iZTpEwsPmL3sEvMXTUhXu/U
CWxr7MQeslLlw7YuZXgE0GgefR+/LPnC7+ixRevif9nw1qUaFcDrG3MaKysdPCGx
ThYmly+7TVwM/5w/LN+Wt5VKF2d+FCnvgow=
-----END CERTIFICATE-----
Generated at Fri Oct 17 05:08:48 2025 by rpki-client