Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/60443711-ad28-3ce1-ad9a-82c1a0f58f49.roa
File:                     60443711-ad28-3ce1-ad9a-82c1a0f58f49.roa (raw, json)
Hash identifier:          JhQ8aO2LxPtWQOb22yan/1T1CLE9UmIBnLd449rbXrc=
Subject key identifier:   FF:E2:60:16:13:B8:5D:D5:22:59:85:36:FE:9B:7B:37:AE:C3:0F:F4
Certificate issuer:       /CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
Certificate serial:       010D0C9F4328584BAFA9C804DD46C1C954038340
Authority key identifier: 84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/60443711-ad28-3ce1-ad9a-82c1a0f58f49.roa
Signing time:             Wed 29 Oct 2025 20:16:10 +0000
ROA not before:           Wed 29 Oct 2025 20:16:10 +0000
ROA not after:            Tue 27 Jan 2026 21:16:10 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e410::/44 maxlen: 44
                          2602:fc3b:e420::/44 maxlen: 44
                          2602:fc3b:e440::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:af:a9:c8:04:dd:46:c1:c9:54:03:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
        Validity
            Not Before: Oct 29 20:16:10 2025 GMT
            Not After : Jan 27 21:16:10 2026 GMT
        Subject: CN=74175846-c59a-4ac6-993f-c6b30ebc38a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:c8:78:3d:ce:58:2e:d1:8d:97:a2:08:d6:
                    6d:5a:2a:51:82:d5:1e:75:3a:0a:ea:78:7f:43:90:
                    d8:2c:6d:f0:e2:b6:e4:02:8b:ff:a7:dc:1c:bb:85:
                    89:fd:6c:1e:21:ff:94:7a:d2:5f:5a:e8:eb:9e:16:
                    d4:ab:f6:6b:8b:d0:8f:9f:41:a6:e1:71:10:95:32:
                    b6:bb:ba:6b:30:13:a8:a8:c8:27:23:bd:53:60:cc:
                    d5:31:08:09:fe:a4:dc:c0:ff:3f:70:e9:38:0d:e0:
                    4c:d9:ed:2c:26:8a:a3:d1:d5:c2:8a:5f:ba:85:c5:
                    0f:f5:3a:be:c4:5c:37:71:a6:13:ad:26:77:c1:ac:
                    ce:d7:c4:c7:67:64:a2:2c:9c:81:e7:bd:bb:e5:ca:
                    fd:18:d3:5a:42:9c:e3:c4:de:7c:e4:9a:07:f5:81:
                    21:a4:ce:5d:bd:02:1a:ac:d1:3f:0a:28:ff:5e:dd:
                    1b:13:47:13:f4:fc:e2:3d:08:e6:fb:6a:a2:94:d0:
                    25:82:88:f7:7e:a5:2b:e7:bf:28:2f:58:72:1c:d7:
                    86:18:4e:45:24:77:4a:99:6c:17:9d:c3:0e:94:0b:
                    d1:f0:3d:0f:4f:e7:8c:8b:90:b2:82:eb:bc:40:b8:
                    a1:44:0e:d9:65:76:12:03:a5:32:66:13:00:0f:36:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E2:60:16:13:B8:5D:D5:22:59:85:36:FE:9B:7B:37:AE:C3:0F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/60443711-ad28-3ce1-ad9a-82c1a0f58f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl

            X509v3 Authority Key Identifier:
                keyid:84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e410::-2602:fc3b:e42f:ffff:ffff:ffff:ffff:ffff
                  2602:fc3b:e440::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f9:68:ff:42:b4:eb:b8:80:73:94:e7:d1:fb:69:af:ae:33:
         10:59:dc:bc:0e:55:4d:67:13:9e:fd:85:60:86:de:5e:fe:d5:
         0b:4a:d0:8f:76:1d:e3:0e:d2:66:66:84:83:2c:55:f3:b9:2d:
         60:55:e2:93:21:bf:ab:12:06:c2:94:0c:a6:4f:ae:fe:73:98:
         a6:bf:d2:4e:48:43:08:c3:ea:23:83:26:2f:cb:98:ba:f3:49:
         43:09:94:5f:2d:00:a4:d2:bd:99:57:a8:41:44:51:e8:db:bf:
         51:1b:bf:83:c8:1a:51:bb:fc:1d:eb:94:b7:36:2a:9d:d5:40:
         5b:80:6c:b2:78:be:a0:ce:9d:9b:1f:e2:77:96:a4:2c:19:30:
         9b:d2:43:7f:68:0e:08:9c:58:46:47:ec:c8:e8:18:fe:aa:a2:
         60:ca:b9:b0:9e:13:96:0e:64:0b:36:84:ef:dc:69:37:e6:a5:
         f3:b7:03:88:99:df:3a:10:4a:7e:08:6d:76:76:17:41:13:ed:
         83:6f:d6:88:d0:0d:1e:e8:5a:b3:f0:18:08:f8:45:8c:42:ae:
         18:75:a7:45:16:c9:e1:88:b4:78:33:11:c6:b8:c6:55:87:bd:
         ea:84:3c:11:22:c4:bd:fb:36:3d:0e:56:53:95:8c:56:79:4c:
         ab:91:27:65
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEuvqcgE3UbByVQDg0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVjMGZiNjYtZDJlOS00ODU2LWE4ZTktYjJmYjhmZTlm
NmFhMB4XDTI1MTAyOTIwMTYxMFoXDTI2MDEyNzIxMTYxMFowLzEtMCsGA1UEAxMk
NzQxNzU4NDYtYzU5YS00YWM2LTk5M2YtYzZiMzBlYmMzOGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8zIeD3OWC7RjZeiCNZtWipRgtUedToK6nh/
Q5DYLG3w4rbkAov/p9wcu4WJ/WweIf+UetJfWujrnhbUq/Zri9CPn0Gm4XEQlTK2
u7prMBOoqMgnI71TYMzVMQgJ/qTcwP8/cOk4DeBM2e0sJoqj0dXCil+6hcUP9Tq+
xFw3caYTrSZ3wazO18THZ2SiLJyB57275cr9GNNaQpzjxN585JoH9YEhpM5dvQIa
rNE/Cij/Xt0bE0cT9PziPQjm+2qilNAlgoj3fqUr578oL1hyHNeGGE5FJHdKmWwX
ncMOlAvR8D0PT+eMi5Cyguu8QLihRA7ZZXYSA6UyZhMADzYX0QIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFP/iYBYTuF3VIlmFNv6bezeuww/0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83NWMw
ZmI2Ni1kMmU5LTQ4NTYtYThlOS1iMmZiOGZlOWY2YWEvNjA0NDM3MTEtYWQyOC0z
Y2UxLWFkOWEtODJjMWEwZjU4ZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNzVjMGZiNjYtZDJlOS00ODU2LWE4
ZTktYjJmYjhmZTlmNmFhLzc1YzBmYjY2LWQyZTktNDg1Ni1hOGU5LWIyZmI4ZmU5
ZjZhYS5jcmwwHwYDVR0jBBgwFoAUhGeB7PMWSCw3gTymwxAtEgsFAJcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi83NWMwZmI2Ni1kMmU5LTQ4NTYtYThlOS1iMmZi
OGZlOWY2YWEuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwQmAvw7
5BADBwQmAvw75CADBwQmAvw75EAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPvlo/0K067iAc5Tn0ftpr64z
EFncvA5VTWcTnv2FYIbeXv7VC0rQj3Yd4w7SZmaEgyxV87ktYFXikyG/qxIGwpQM
pk+u/nOYpr/STkhDCMPqI4MmL8uYuvNJQwmUXy0ApNK9mVeoQURR6Nu/URu/g8ga
Ubv8HeuUtzYqndVAW4Bssni+oM6dmx/id5akLBkwm9JDf2gOCJxYRkfsyOgY/qqi
YMq5sJ4Tlg5kCzaE79xpN+al87cDiJnfOhBKfghtdnYXQRPtg2/WiNANHuhas/AY
CPhFjEKuGHWnRRbJ4Yi0eDMRxrjGVYe96oQ8ESLEvfs2PQ5WU5WMVnlMq5EnZQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:01:14 2025 by rpki-client