Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/52fe8be0-f11a-3709-a4e4-1fc3dab88c42.roa
File:                     52fe8be0-f11a-3709-a4e4-1fc3dab88c42.roa (raw, json)
Hash identifier:          H5Dw8b5RsP17+a47+RbstP87zCf+3cicsbPCPTTETEI=
Subject key identifier:   BF:1D:33:A1:A8:CF:BB:DB:EB:34:44:4E:5D:9B:04:96:5F:48:94:61
Certificate issuer:       /CN=eecc445c-064d-41ee-91f1-3ef708241983
Certificate serial:       010D0C9F4328584B2B91921F1DF29FAF533F6D00
Authority key identifier: CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/52fe8be0-f11a-3709-a4e4-1fc3dab88c42.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     394270
IP address blocks:        2620:13b:5000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:92:1f:1d:f2:9f:af:53:3f:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc445c-064d-41ee-91f1-3ef708241983
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=8b88eca5-1481-4177-882b-327abc0cdf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:f7:5d:9e:77:ec:51:49:37:77:db:6c:63:
                    7f:0a:60:09:eb:0b:70:59:8a:46:9f:44:b9:74:18:
                    b2:53:06:0c:bf:51:80:8f:3a:37:d3:0d:c8:b2:bb:
                    0e:0f:9c:6c:b4:6d:7a:a6:6e:dc:5e:30:d0:a6:ab:
                    40:2a:11:8c:77:45:13:f3:86:e2:89:fd:22:a4:a4:
                    47:18:7e:21:ae:88:25:98:72:10:67:de:03:3d:0f:
                    17:c3:10:21:e3:44:dd:1a:95:5e:25:68:c6:0d:c5:
                    bf:50:d2:c4:0a:27:8e:f5:8d:4f:29:f0:b7:0e:e3:
                    98:0e:a6:d4:4d:d5:81:22:d4:b5:db:a2:58:f2:ae:
                    10:8a:ee:fa:c7:52:75:e1:51:f7:c2:22:52:b3:5d:
                    96:eb:07:fd:b9:4b:98:fc:83:68:13:55:b6:fd:67:
                    56:63:13:47:a5:13:a2:fc:4d:4d:bf:64:da:a1:d2:
                    42:58:df:ff:d6:6b:b0:2b:56:29:fa:8e:34:07:dd:
                    33:fb:b8:00:e1:dc:28:ce:d5:3f:a4:74:30:e1:1e:
                    39:c4:66:35:99:6f:a2:e3:cf:cd:7f:8e:3f:68:ca:
                    44:90:47:f5:6e:75:03:8c:cc:48:7f:6f:ff:0b:a2:
                    97:e6:cc:cd:e9:b1:e5:7e:9b:a9:b1:bb:44:61:cc:
                    18:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1D:33:A1:A8:CF:BB:DB:EB:34:44:4E:5D:9B:04:96:5F:48:94:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/52fe8be0-f11a-3709-a4e4-1fc3dab88c42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl

            X509v3 Authority Key Identifier:
                keyid:CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:2b:42:1c:df:55:58:68:f1:96:d1:13:83:ae:0a:f5:5b:de:
         97:9d:95:61:30:00:ac:d8:13:3a:f7:ad:ff:4a:8e:58:2a:66:
         43:6c:35:18:a8:67:4d:a5:f0:d0:5f:20:2f:9d:d3:37:46:67:
         e8:66:0e:fa:97:73:41:65:dc:6a:6b:5c:49:4c:de:d7:d2:6c:
         2e:f2:be:28:ed:16:31:03:59:ba:04:1c:01:43:7f:50:59:06:
         1a:57:bf:9e:58:6b:14:af:a1:0a:1a:a3:01:08:d5:a8:c9:f4:
         a4:46:a7:7e:4f:cd:f6:aa:14:22:a1:77:89:48:ea:06:66:26:
         49:ce:18:db:45:68:96:8b:4b:df:9d:ee:5c:e8:0b:79:a6:bf:
         63:14:88:bf:2d:12:c5:c7:c1:01:e3:7f:2a:88:44:96:e9:01:
         73:d3:10:62:14:83:e8:47:92:8b:a0:d3:97:a2:77:5a:11:33:
         c7:11:07:94:4c:cf:b3:e8:38:88:13:05:5a:83:a8:83:74:ca:
         6d:24:c3:cc:1e:f7:f4:f6:da:5c:62:e7:76:78:b6:5b:25:90:
         6c:81:e9:3b:03:75:98:56:cf:3a:c3:96:90:00:2c:62:82:2e:
         5f:39:8c:12:a6:28:45:5b:88:3f:97:20:96:35:99:0c:ba:a4:
         d1:1b:52:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsrkZIfHfKfr1M/bQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVjYzQ0NWMtMDY0ZC00MWVlLTkxZjEtM2VmNzA4MjQx
OTgzMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk
OGI4OGVjYTUtMTQ4MS00MTc3LTg4MmItMzI3YWJjMGNkZjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyn3XZ537FFJN3fbbGN/CmAJ6wtwWYpGn0S5
dBiyUwYMv1GAjzo30w3IsrsOD5xstG16pm7cXjDQpqtAKhGMd0UT84biif0ipKRH
GH4hroglmHIQZ94DPQ8XwxAh40TdGpVeJWjGDcW/UNLECieO9Y1PKfC3DuOYDqbU
TdWBItS126JY8q4Qiu76x1J14VH3wiJSs12W6wf9uUuY/INoE1W2/WdWYxNHpROi
/E1Nv2TaodJCWN//1muwK1Yp+o40B90z+7gA4dwoztU/pHQw4R45xGY1mW+i48/N
f44/aMpEkEf1bnUDjMxIf2//C6KX5szN6bHlfpupsbtEYcwYaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL8dM6Goz7vb6zRETl2bBJZfSJRhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZWNj
NDQ1Yy0wNjRkLTQxZWUtOTFmMS0zZWY3MDgyNDE5ODMvNTJmZThiZTAtZjExYS0z
NzA5LWE0ZTQtMWZjM2RhYjg4YzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWVjYzQ0NWMtMDY0ZC00MWVlLTkx
ZjEtM2VmNzA4MjQxOTgzL2VlY2M0NDVjLTA2NGQtNDFlZS05MWYxLTNlZjcwODI0
MTk4My5jcmwwHwYDVR0jBBgwFoAUzUCROQ67xHz8aYwLu+ubI2atMYIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZWNjNDQ1Yy0wNjRkLTQxZWUtOTFmMS0zZWY3
MDgyNDE5ODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABO1AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACorQhzfVVho8ZbRE4OuCvVb3pedlWEwAKzYEzr3rf9KjlgqZkNs
NRioZ02l8NBfIC+d0zdGZ+hmDvqXc0Fl3GprXElM3tfSbC7yvijtFjEDWboEHAFD
f1BZBhpXv55YaxSvoQoaowEI1ajJ9KRGp35PzfaqFCKhd4lI6gZmJknOGNtFaJaL
S9+d7lzoC3mmv2MUiL8tEsXHwQHjfyqIRJbpAXPTEGIUg+hHkoug05eid1oRM8cR
B5RMz7PoOIgTBVqDqIN0ym0kw8we9/T22lxi53Z4tlslkGyB6TsDdZhWzzrDlpAA
LGKCLl85jBKmKEVbiD+XIJY1mQy6pNEbUpI=
-----END CERTIFICATE-----
Generated at Thu Oct 16 14:05:37 2025 by rpki-client