Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/692daedb-2521-373c-9514-ade2576973f1.roa
File:                     692daedb-2521-373c-9514-ade2576973f1.roa (raw, json)
Hash identifier:          U/ZJn9RuoIORNGSC7UZ/Jyl1ArOQDnkCc23eIkzPgh0=
Subject key identifier:   D7:C8:E7:8F:6B:FC:2F:BC:1E:7A:77:33:BE:15:A2:D6:46:34:F1:AE
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584B6F378F0C4A344377E4F52500
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/692daedb-2521-373c-9514-ade2576973f1.roa
Signing time:             Mon 06 Oct 2025 18:34:22 +0000
ROA not before:           Mon 06 Oct 2025 18:34:22 +0000
ROA not after:            Sun 04 Jan 2026 19:34:22 +0000
asID:                     13335
IP address blocks:        2620:127:f00c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:37:8f:0c:4a:34:43:77:e4:f5:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Oct  6 18:34:22 2025 GMT
            Not After : Jan  4 19:34:22 2026 GMT
        Subject: CN=f7667cd3-994c-4222-8c24-b26eece40607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:f9:26:ca:55:92:78:75:8f:35:92:89:4c:
                    8f:6e:b1:7b:f2:a5:77:a1:39:f9:f0:78:44:c7:0c:
                    38:5a:71:c6:46:12:32:fa:ec:45:0f:26:4a:32:79:
                    99:cd:00:c8:f7:91:50:c5:db:0b:9c:64:d4:78:f2:
                    1a:f1:2e:9a:11:d6:d8:61:bf:a7:19:e4:cf:f3:4b:
                    6e:a2:cb:2a:7d:c8:8c:75:43:55:e8:3d:11:c6:62:
                    65:6b:f3:6e:13:a4:86:bf:99:0f:ff:cd:cd:51:70:
                    eb:07:5a:92:df:91:a4:25:52:e8:b2:27:c4:c9:2d:
                    b0:d4:bf:f1:05:d7:31:61:19:dc:8e:cf:d4:2e:66:
                    b8:9b:d0:8c:95:83:d3:a4:56:cd:fb:93:87:57:c7:
                    05:93:9a:e4:a2:95:0b:40:74:51:42:c5:b0:9b:94:
                    62:fd:06:c7:b3:f9:7a:4c:c9:4d:9f:98:06:1d:14:
                    3b:21:14:12:ed:5a:24:3d:37:5d:7b:9a:25:ab:ef:
                    a4:b6:32:7e:79:3e:eb:a5:60:7e:f0:e6:e0:09:42:
                    e7:83:58:8c:3a:6f:65:b7:00:e4:48:e3:b9:31:58:
                    10:2b:b6:c1:00:99:ce:24:43:a9:90:25:20:8d:a1:
                    77:3c:5e:1b:7a:dc:9e:25:3f:aa:75:0b:15:05:33:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C8:E7:8F:6B:FC:2F:BC:1E:7A:77:33:BE:15:A2:D6:46:34:F1:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/692daedb-2521-373c-9514-ade2576973f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:127:f00c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:65:52:53:d6:02:c9:c8:12:40:c3:6d:c8:df:e4:0e:ef:c7:
         cf:97:3f:21:fb:7d:92:7c:0a:d2:bc:ce:ab:04:f9:8f:1e:37:
         09:ab:87:c5:43:9a:59:ec:06:f0:ac:74:ef:43:dc:7d:9f:0a:
         ef:c8:8a:0c:0d:df:7c:00:54:e4:03:1a:e5:d2:94:35:2e:9c:
         7a:ae:66:f3:45:9c:f7:a9:47:e7:8b:15:08:41:62:ee:57:dd:
         2c:97:b2:24:8f:92:49:a6:c8:36:62:d7:79:a2:27:1e:82:59:
         6c:bf:36:aa:fe:1d:36:0f:a4:5f:0f:f9:3f:a7:a8:c7:db:12:
         fb:fd:4b:11:ab:ae:25:de:dc:be:35:48:fd:76:4c:30:ca:84:
         74:ab:40:60:62:b1:0b:18:d5:55:ca:0b:91:1a:71:e5:6d:f6:
         34:20:2b:3d:39:ac:33:4e:0a:c2:30:da:3f:80:1e:39:44:24:
         1b:c5:7d:9b:f0:e0:53:16:fa:d8:61:ea:91:3f:6b:ab:3b:70:
         38:d7:71:62:8d:c9:30:4f:0a:23:c5:7b:c1:45:dc:27:f6:96:
         fc:97:7b:df:9b:97:75:6f:d0:af:e8:65:94:18:1f:35:e5:8d:
         26:fe:dc:fb:9c:28:15:a9:ab:10:73:d1:97:e1:be:1e:e2:89:
         5a:ea:dd:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtvN48MSjRDd+T1JQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ1NGIzNmEtYzcyNS00YzE4LTkzZTEtODI1YWZjNjQ1
ZTJjMB4XDTI1MTAwNjE4MzQyMloXDTI2MDEwNDE5MzQyMlowLzEtMCsGA1UEAxMk
Zjc2NjdjZDMtOTk0Yy00MjIyLThjMjQtYjI2ZWVjZTQwNjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5P5JspVknh1jzWSiUyPbrF78qV3oTn58HhE
xww4WnHGRhIy+uxFDyZKMnmZzQDI95FQxdsLnGTUePIa8S6aEdbYYb+nGeTP80tu
ossqfciMdUNV6D0RxmJla/NuE6SGv5kP/83NUXDrB1qS35GkJVLosifEyS2w1L/x
BdcxYRncjs/ULma4m9CMlYPTpFbN+5OHV8cFk5rkopULQHRRQsWwm5Ri/QbHs/l6
TMlNn5gGHRQ7IRQS7VokPTdde5olq++ktjJ+eT7rpWB+8ObgCULng1iMOm9ltwDk
SOO5MVgQK7bBAJnOJEOpkCUgjaF3PF4betyeJT+qdQsVBTP1nQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNfI549r/C+8Hnp3M74VotZGNPGuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0
YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVhZmM2NDVlMmMvNjkyZGFlZGItMjUyMS0z
NzNjLTk1MTQtYWRlMjU3Njk3M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmQ1NGIzNmEtYzcyNS00YzE4LTkz
ZTEtODI1YWZjNjQ1ZTJjLzZkNTRiMzZhLWM3MjUtNGMxOC05M2UxLTgyNWFmYzY0
NWUyYy5jcmwwHwYDVR0jBBgwFoAUOFjVJZUYEHsaUpZxvbiCe8GGfbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZDU0YjM2YS1jNzI1LTRjMTgtOTNlMS04MjVh
ZmM2NDVlMmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiABJ/AM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIxlUlPWAsnIEkDDbcjf5A7vx8+XPyH7fZJ8CtK8zqsE+Y8eNwmr
h8VDmlnsBvCsdO9D3H2fCu/IigwN33wAVOQDGuXSlDUunHquZvNFnPepR+eLFQhB
Yu5X3SyXsiSPkkmmyDZi13miJx6CWWy/Nqr+HTYPpF8P+T+nqMfbEvv9SxGrriXe
3L41SP12TDDKhHSrQGBisQsY1VXKC5EaceVt9jQgKz05rDNOCsIw2j+AHjlEJBvF
fZvw4FMW+thh6pE/a6s7cDjXcWKNyTBPCiPFe8FF3Cf2lvyXe9+bl3Vv0K/oZZQY
HzXljSb+3PucKBWpqxBz0Zfhvh7iiVrq3XY=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:02:51 2025 by rpki-client