Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/2ed531d4-9eee-39a5-b032-3c4c714a2845.roa
File:                     2ed531d4-9eee-39a5-b032-3c4c714a2845.roa (raw, json)
Hash identifier:          Rqfdf28gEm1cnl/8iOQhbKJZXcIOiOuIdYIbNaKoy6k=
Subject key identifier:   83:F1:45:9D:99:05:91:C0:00:B8:1B:33:34:63:3E:12:F2:62:56:53
Certificate issuer:       /CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
Certificate serial:       010D0C9F4328584BAF9E3069EA1793BB5C3EB600
Authority key identifier: 84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/2ed531d4-9eee-39a5-b032-3c4c714a2845.roa
Signing time:             Wed 29 Oct 2025 20:07:46 +0000
ROA not before:           Wed 29 Oct 2025 20:07:46 +0000
ROA not after:            Tue 27 Jan 2026 21:07:46 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:af:9e:30:69:ea:17:93:bb:5c:3e:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
        Validity
            Not Before: Oct 29 20:07:46 2025 GMT
            Not After : Jan 27 21:07:46 2026 GMT
        Subject: CN=807106f3-2bb6-48ce-b302-044009a504cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:b0:64:14:13:9b:85:88:78:64:45:03:0a:
                    27:dd:63:fb:b7:2f:5f:de:08:9f:60:43:e6:53:3b:
                    64:41:8d:e2:1b:93:ab:5e:5e:79:7e:42:24:9f:47:
                    0e:a1:e0:9e:6a:21:fb:b8:c7:6b:e0:6b:29:b7:86:
                    9d:49:37:ad:3b:b8:b8:77:11:62:8d:aa:3c:03:da:
                    f3:7f:4a:55:86:b3:b9:74:a2:0d:59:d4:e4:a2:97:
                    06:8d:3b:36:2f:5f:ea:86:06:60:f2:f5:5c:7e:a8:
                    aa:49:61:d1:bb:5e:58:5a:21:ec:9b:2c:d8:7e:95:
                    2e:06:39:9f:3b:fe:0f:aa:bc:85:74:36:a4:98:6e:
                    35:3f:12:94:90:b0:13:8e:59:16:d7:00:82:d3:b0:
                    93:48:90:3d:87:6d:59:01:f8:1a:04:2e:12:b1:ef:
                    0b:47:ee:44:09:17:e6:9d:71:be:24:6a:ee:42:9c:
                    7c:03:f5:86:c0:06:5c:85:bb:94:c2:09:bc:79:4d:
                    71:75:d1:99:d1:13:f7:8b:1d:d3:0f:49:2f:18:b7:
                    9d:13:e5:fa:24:f1:c2:71:d5:44:68:f1:0e:6c:25:
                    48:ee:fc:b9:92:d8:ca:67:15:ac:58:9d:ac:70:08:
                    c5:08:79:b5:bf:36:51:a1:10:37:18:cc:81:69:8f:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F1:45:9D:99:05:91:C0:00:B8:1B:33:34:63:3E:12:F2:62:56:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/2ed531d4-9eee-39a5-b032-3c4c714a2845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl

            X509v3 Authority Key Identifier:
                keyid:84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:aa:9a:ea:ce:fb:6f:90:08:07:f7:38:3a:c8:b0:4f:97:
         8b:9f:bc:37:00:e5:68:3d:ff:34:d9:72:ee:af:d1:5b:2e:41:
         1d:d0:a6:d4:9d:57:83:cf:cd:5f:83:7a:8a:3a:b6:53:a4:8b:
         bb:80:ac:09:09:46:44:25:3b:a1:28:f7:60:ab:8a:12:87:af:
         00:c1:e0:e1:d2:f8:26:2c:1e:46:64:0c:2e:33:ac:c0:f8:3a:
         10:6e:58:d1:0a:78:82:93:da:8e:bc:1c:b8:10:6e:fc:78:f7:
         24:91:bb:2c:81:a8:15:f8:fb:e7:05:9f:5d:a2:23:70:a1:82:
         18:dd:36:84:0c:f0:c5:88:71:f6:d1:e9:77:65:6e:a5:d5:a7:
         8c:2c:45:ae:bb:2f:7a:21:e6:79:ff:c0:25:9e:36:3f:ae:a3:
         af:da:20:e3:19:4a:03:e0:d1:be:91:96:13:a0:78:a4:54:4d:
         fd:1a:60:ea:fc:ed:c1:34:f1:b7:6d:ea:78:ea:52:3a:9d:78:
         b9:5f:e6:e4:b0:52:5f:39:99:30:ea:3d:b3:98:d4:90:98:66:
         62:d0:d3:cf:4d:ac:66:8c:69:08:1f:96:62:a5:ce:9c:17:fd:
         3b:96:ff:db:04:c5:ba:5c:4c:8d:72:c4:9c:fa:6d:c6:b0:3a:
         6a:f9:c5:dd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuvnjBp6heTu1w+tgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVjMGZiNjYtZDJlOS00ODU2LWE4ZTktYjJmYjhmZTlm
NmFhMB4XDTI1MTAyOTIwMDc0NloXDTI2MDEyNzIxMDc0NlowLzEtMCsGA1UEAxMk
ODA3MTA2ZjMtMmJiNi00OGNlLWIzMDItMDQ0MDA5YTUwNGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2OwZBQTm4WIeGRFAwon3WP7ty9f3gifYEPm
UztkQY3iG5OrXl55fkIkn0cOoeCeaiH7uMdr4Gspt4adSTetO7i4dxFijao8A9rz
f0pVhrO5dKINWdTkopcGjTs2L1/qhgZg8vVcfqiqSWHRu15YWiHsmyzYfpUuBjmf
O/4PqryFdDakmG41PxKUkLATjlkW1wCC07CTSJA9h21ZAfgaBC4Sse8LR+5ECRfm
nXG+JGruQpx8A/WGwAZchbuUwgm8eU1xddGZ0RP3ix3TD0kvGLedE+X6JPHCcdVE
aPEObCVI7vy5ktjKZxWsWJ2scAjFCHm1vzZRoRA3GMyBaY+lTwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIPxRZ2ZBZHAALgbMzRjPhLyYlZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83NWMw
ZmI2Ni1kMmU5LTQ4NTYtYThlOS1iMmZiOGZlOWY2YWEvMmVkNTMxZDQtOWVlZS0z
OWE1LWIwMzItM2M0YzcxNGEyODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNzVjMGZiNjYtZDJlOS00ODU2LWE4
ZTktYjJmYjhmZTlmNmFhLzc1YzBmYjY2LWQyZTktNDg1Ni1hOGU5LWIyZmI4ZmU5
ZjZhYS5jcmwwHwYDVR0jBBgwFoAUhGeB7PMWSCw3gTymwxAtEgsFAJcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi83NWMwZmI2Ni1kMmU5LTQ4NTYtYThlOS1iMmZi
OGZlOWY2YWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8O+Iw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATGaqmurO+2+QCAf3ODrIsE+Xi5+8NwDlaD3/NNly7q/RWy5BHdCm
1J1Xg8/NX4N6ijq2U6SLu4CsCQlGRCU7oSj3YKuKEoevAMHg4dL4JiweRmQMLjOs
wPg6EG5Y0Qp4gpPajrwcuBBu/Hj3JJG7LIGoFfj75wWfXaIjcKGCGN02hAzwxYhx
9tHpd2VupdWnjCxFrrsveiHmef/AJZ42P66jr9og4xlKA+DRvpGWE6B4pFRN/Rpg
6vztwTTxt23qeOpSOp14uV/m5LBSXzmZMOo9s5jUkJhmYtDTz02sZoxpCB+WYqXO
nBf9O5b/2wTFulxMjXLEnPptxrA6avnF3Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:01:14 2025 by rpki-client