Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f9772dea-7888-39ba-9022-8bb8e8a24f27.roa
File:                     f9772dea-7888-39ba-9022-8bb8e8a24f27.roa (raw, json)
Hash identifier:          wKwkOgPs7quPO6ZW1k/2P06ytXrnmn9twna+SZvi3Kk=
Subject key identifier:   45:90:1B:D9:C8:38:E8:79:FB:92:70:0C:E2:A6:B8:63:93:8F:25:7B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5220D20C25D0BF259B9C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f9772dea-7888-39ba-9022-8bb8e8a24f27.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:20:d2:0c:25:d0:bf:25:9b:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=30968a62-9fd0-4bc8-b5e6-8d3afc52b992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:aa:a1:60:ce:17:2e:ca:36:ba:79:d2:9e:b7:
                    19:f4:0a:91:b2:06:e4:a9:0a:73:bc:05:62:01:46:
                    d2:76:59:50:01:b2:5b:8d:1b:64:34:09:ae:c4:ce:
                    dc:44:c9:9b:87:cf:c5:75:e2:ac:8c:28:4f:b0:be:
                    77:b4:e7:47:ec:3d:5c:68:cb:7d:dc:53:b6:a7:a0:
                    88:33:60:aa:ab:cc:94:d8:4e:4b:4f:d1:61:ff:84:
                    b5:5d:ac:83:21:1e:e1:ad:22:28:b3:fa:47:04:dc:
                    45:46:9c:8f:90:c4:52:23:c3:ac:fb:51:d5:24:48:
                    f0:5d:9e:87:72:40:f0:88:10:eb:2d:ad:a3:ec:cf:
                    e2:40:c6:ec:ab:fc:e5:ce:04:f3:82:a6:89:84:a6:
                    6a:13:d3:cc:e6:26:8b:cd:f9:5d:b6:66:a8:6d:2b:
                    fd:00:5f:3d:7f:79:0e:66:ae:64:ba:23:6e:4b:a5:
                    b4:b6:4f:ef:7a:e5:13:04:ea:e2:75:e4:aa:02:f0:
                    24:83:33:cc:6d:13:7a:55:ac:86:79:e1:e6:2b:db:
                    ba:3e:4b:32:06:7b:82:e6:2e:a9:99:c5:78:2a:01:
                    a3:1d:03:20:39:1b:cd:af:1a:e4:a9:10:e8:18:8a:
                    b6:d6:8b:1a:d1:ab:19:dc:86:21:c2:89:4a:0c:59:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:90:1B:D9:C8:38:E8:79:FB:92:70:0C:E2:A6:B8:63:93:8F:25:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f9772dea-7888-39ba-9022-8bb8e8a24f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:22:0d:2e:dc:47:fd:4e:79:73:2c:41:2a:ed:2e:c1:df:cf:
         8a:5f:04:e2:d5:44:e2:27:de:3d:a4:0f:61:cd:76:91:60:75:
         5d:b5:d4:36:c5:13:c1:d3:2b:b1:16:f5:a1:6d:47:69:cb:9e:
         08:dd:96:65:ec:cf:86:23:43:94:19:5d:83:66:43:86:e4:ce:
         ce:d0:89:9b:41:ce:da:95:22:60:d3:68:dd:1a:9d:76:45:fc:
         0e:ae:a6:8a:ae:fb:74:00:b5:4a:49:b7:77:25:89:8e:c7:f4:
         c1:9e:94:61:e4:20:2a:4b:85:40:7f:3b:68:ce:de:ee:1f:13:
         9d:ce:be:0c:5c:51:cd:67:78:eb:68:05:39:5c:f3:24:ae:09:
         4d:a8:9c:2a:35:e8:a7:28:0e:31:b6:ff:5b:80:c3:63:f8:95:
         20:15:3c:57:00:fd:1c:e7:39:8f:16:af:d3:3b:da:31:d1:af:
         8a:28:58:6a:54:87:da:ad:1d:6b:bb:82:08:2f:93:94:0f:c6:
         12:40:84:36:80:87:1d:46:11:d5:56:fb:3b:b8:4a:68:ed:45:
         31:cb:76:4d:12:10:24:44:99:7c:b8:4b:94:ba:5d:42:d6:86:
         8c:e1:e4:b4:0d:f6:9d:33:7d:e0:98:08:13:35:42:39:2b:df:
         d3:c2:85:4c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/UiDSDCXQvyWbnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
MzA5NjhhNjItOWZkMC00YmM4LWI1ZTYtOGQzYWZjNTJiOTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aqhYM4XLso2unnSnrcZ9AqRsgbkqQpzvAVi
AUbSdllQAbJbjRtkNAmuxM7cRMmbh8/FdeKsjChPsL53tOdH7D1caMt93FO2p6CI
M2Cqq8yU2E5LT9Fh/4S1XayDIR7hrSIos/pHBNxFRpyPkMRSI8Os+1HVJEjwXZ6H
ckDwiBDrLa2j7M/iQMbsq/zlzgTzgqaJhKZqE9PM5iaLzfldtmaobSv9AF89f3kO
Zq5kuiNuS6W0tk/veuUTBOrideSqAvAkgzPMbRN6VayGeeHmK9u6PksyBnuC5i6p
mcV4KgGjHQMgORvNrxrkqRDoGIq21osa0asZ3IYhwolKDFlrHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEWQG9nIOOh5+5JwDOKmuGOTjyV7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZjk3NzJkZWEtNzg4OC0z
OWJhLTkwMjItOGJiOGU4YTI0ZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAQAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD4iDS7cR/1OeXMsQSrtLsHfz4pfBOLVROIn3j2kD2HNdpFgdV21
1DbFE8HTK7EW9aFtR2nLngjdlmXsz4YjQ5QZXYNmQ4bkzs7QiZtBztqVImDTaN0a
nXZF/A6upoqu+3QAtUpJt3cliY7H9MGelGHkICpLhUB/O2jO3u4fE53OvgxcUc1n
eOtoBTlc8ySuCU2onCo16KcoDjG2/1uAw2P4lSAVPFcA/RznOY8Wr9M72jHRr4oo
WGpUh9qtHWu7gggvk5QPxhJAhDaAhx1GEdVW+zu4SmjtRTHLdk0SECREmXy4S5S6
XULWhozh5LQN9p0zfeCYCBM1Qjkr39PChUw=
-----END CERTIFICATE-----
Generated at Fri Oct 17 05:06:45 2025 by rpki-client