Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/77b40ca7-28c0-3121-bc3e-f792a47bd528.roa
File:                     77b40ca7-28c0-3121-bc3e-f792a47bd528.roa (raw, json)
Hash identifier:          W6y/uZQuM4XvL1xP+hksrQOi/GYesEpHFs/PBjvu3uY=
Subject key identifier:   1A:FC:94:10:FD:17:09:1D:41:68:9B:E8:B2:2F:5F:C8:4D:79:A2:E7
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584B970CD207E2E1146D74FFDAC0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/77b40ca7-28c0-3121-bc3e-f792a47bd528.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     30133
IP address blocks:        2001:500:69::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d2:07:e2:e1:14:6d:74:ff:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=ddbcf575-653c-421e-bea8-de34fe4ba9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:62:61:99:5e:d8:df:a4:c1:cc:68:36:97:
                    87:3c:e5:3c:dc:7d:15:a2:9b:cc:9d:f6:fa:27:e0:
                    eb:71:fa:45:95:64:94:6c:06:f0:45:9a:6d:72:a4:
                    41:3c:fa:8d:7e:89:3c:c3:61:0a:cc:0e:2e:51:82:
                    96:ce:bd:5a:19:44:c8:9f:0a:86:19:a4:24:a2:85:
                    a6:84:2e:8c:e6:bf:e8:c9:ab:a0:0f:68:9a:92:2a:
                    e6:e2:d4:ab:8f:ce:65:5e:c1:74:5d:a0:73:97:7e:
                    a0:cc:67:d1:41:ac:64:06:33:56:8f:1a:47:88:fc:
                    30:00:21:5e:ac:ea:4c:99:18:ea:0b:3f:0e:cd:24:
                    05:15:16:cd:d6:88:c3:39:78:e9:25:ac:3f:23:c5:
                    b1:9a:75:41:aa:30:13:87:fa:ea:11:44:9b:ca:fb:
                    e0:0e:6c:09:79:7d:7f:eb:41:4c:50:d8:a2:47:30:
                    29:30:ad:44:80:0f:06:ff:7d:a2:1d:1c:79:2d:93:
                    35:76:d3:2e:bf:1f:b2:ed:bc:49:fe:b0:24:f5:a6:
                    d4:de:f9:ec:96:20:1c:f0:c1:35:c8:f6:f7:a6:f4:
                    6c:d3:9f:83:bf:2c:09:1c:79:72:22:84:e4:17:32:
                    95:0c:cb:a9:58:42:f3:bd:de:02:6d:4c:94:36:24:
                    b8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FC:94:10:FD:17:09:1D:41:68:9B:E8:B2:2F:5F:C8:4D:79:A2:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/77b40ca7-28c0-3121-bc3e-f792a47bd528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e2:f8:61:ec:52:b1:1f:54:b5:c6:f5:b0:07:cc:26:7e:2b:
         75:0a:b8:af:e0:bc:36:bf:9e:2f:4b:42:8d:4d:ba:a8:c5:db:
         6c:cc:f8:5b:81:5e:59:83:70:75:ca:74:fe:8b:41:d0:cc:07:
         bf:a4:3a:16:a9:49:b9:60:4c:5f:2e:6a:a9:9a:12:a1:a2:c5:
         35:43:88:08:5d:d5:20:41:96:8a:87:4a:d2:99:2d:54:73:3a:
         b7:00:8b:c3:5c:1a:e3:a0:d6:0f:19:75:d8:2e:76:b9:a2:57:
         ee:59:04:9d:b3:3a:a7:60:b4:e8:f6:9a:13:cb:92:94:ce:5d:
         44:5c:37:da:94:e0:e9:a1:60:ca:5f:18:50:90:92:8d:04:3f:
         4c:96:0e:d3:59:a8:91:a5:d9:9b:73:13:08:cd:71:73:e9:bc:
         43:5c:2a:53:d9:ed:3f:48:20:e5:cc:c9:7b:4e:bd:e5:40:d8:
         7b:af:fa:8b:8f:af:4b:bc:54:22:b9:81:3e:46:6c:0b:bb:91:
         45:92:09:6f:86:2b:83:da:1d:57:88:73:3c:62:92:45:de:8b:
         da:77:5d:c1:0e:86:4e:19:98:44:6d:99:1e:05:29:fe:67:8b:
         4e:70:21:10:06:e3:80:b6:9f:0d:b6:c8:3a:17:53:20:ea:51:
         7d:df:e4:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDNIH4uEUbXT/2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZGRiY2Y1NzUtNjUzYy00MjFlLWJlYTgtZGUzNGZlNGJhOWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQRiYZle2N+kwcxoNpeHPOU83H0VopvMnfb6
J+DrcfpFlWSUbAbwRZptcqRBPPqNfok8w2EKzA4uUYKWzr1aGUTInwqGGaQkooWm
hC6M5r/oyaugD2iakirm4tSrj85lXsF0XaBzl36gzGfRQaxkBjNWjxpHiPwwACFe
rOpMmRjqCz8OzSQFFRbN1ojDOXjpJaw/I8WxmnVBqjATh/rqEUSbyvvgDmwJeX1/
60FMUNiiRzApMK1EgA8G/32iHRx5LZM1dtMuvx+y7bxJ/rAk9abU3vnsliAc8ME1
yPb3pvRs05+DvywJHHlyIoTkFzKVDMupWELzvd4CbUyUNiS4YQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBr8lBD9FwkdQWib6LIvX8hNeaLnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvNzdiNDBjYTctMjhjMC0z
MTIxLWJjM2UtZjc5MmE0N2JkNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE/i+GHsUrEfVLXG9bAHzCZ+K3UKuK/gvDa/ni9LQo1NuqjF22zM
+FuBXlmDcHXKdP6LQdDMB7+kOhapSblgTF8uaqmaEqGixTVDiAhd1SBBloqHStKZ
LVRzOrcAi8NcGuOg1g8ZddgudrmiV+5ZBJ2zOqdgtOj2mhPLkpTOXURcN9qU4Omh
YMpfGFCQko0EP0yWDtNZqJGl2ZtzEwjNcXPpvENcKlPZ7T9IIOXMyXtOveVA2Huv
+ouPr0u8VCK5gT5GbAu7kUWSCW+GK4PaHVeIczxikkXei9p3XcEOhk4ZmERtmR4F
Kf5ni05wIRAG44C2nw22yDoXUyDqUX3f5Mo=
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:14 2025 by rpki-client