Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5cb1ba93-1260-3280-bb73-02ae195f131d.roa
File:                     5cb1ba93-1260-3280-bb73-02ae195f131d.roa (raw, json)
Hash identifier:          rF2/TXH5AR/dSQz0dI592rTeypDW0d+HddbZVfnVBSY=
Subject key identifier:   7E:A5:B1:23:37:BC:82:A5:90:68:4D:5B:23:70:39:F3:5F:E2:F3:03
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B3DBA2316D2CEA0543BD3C980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5cb1ba93-1260-3280-bb73-02ae195f131d.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     399426
IP address blocks:        2001:470:3bc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:23:16:d2:ce:a0:54:3b:d3:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=922cee48-11f4-4c34-934e-b9d9d9c31926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ed:77:97:f4:ba:9c:0b:8e:30:c7:cd:9e:21:
                    89:50:c1:0a:62:d4:7b:36:ca:26:e2:95:62:1a:e1:
                    1a:c9:9f:e4:46:26:bd:65:3e:e3:8b:d2:a8:31:9a:
                    0d:47:2e:22:88:7a:48:14:92:a4:5c:e6:fd:67:f1:
                    b4:53:9a:14:44:ad:22:5e:38:32:e9:f0:30:63:a8:
                    08:ce:d2:8d:68:18:b5:2a:ec:2e:b4:1d:8d:3a:f3:
                    c6:c0:eb:8e:98:c3:8f:b5:d7:04:95:c6:20:6f:26:
                    f7:d9:69:82:4b:60:25:58:b3:53:02:90:5b:3d:6e:
                    b4:1c:34:02:1b:f6:f3:3e:a3:d5:91:b3:91:c3:2a:
                    35:4c:d9:9a:b5:06:76:e9:c5:22:c6:b9:5a:d1:0f:
                    1a:74:9f:93:2b:5d:3b:8c:9b:22:90:05:90:e9:cd:
                    79:b4:03:09:14:7e:64:13:d5:d9:37:81:95:ec:43:
                    2b:49:05:b5:fa:f5:b2:07:65:10:52:78:2c:75:bf:
                    46:d6:8c:6f:d9:9f:65:99:b2:4a:26:b3:be:0e:0e:
                    1b:1f:e4:48:a2:53:4f:f2:f7:ce:32:66:f7:53:cc:
                    32:a6:1f:59:76:9e:92:33:c3:25:f6:d6:2a:a0:41:
                    0d:6a:12:be:14:e2:f4:39:2b:40:4c:7a:92:be:4a:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A5:B1:23:37:BC:82:A5:90:68:4D:5B:23:70:39:F3:5F:E2:F3:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5cb1ba93-1260-3280-bb73-02ae195f131d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:96:b7:17:66:16:44:05:93:e6:1e:20:e8:e0:4b:f4:36:1e:
         69:99:b7:c5:4c:4b:fd:05:4b:d6:7d:cf:33:23:77:a1:a8:83:
         e9:cb:47:1a:52:26:59:c4:32:02:83:2d:80:9f:4f:8a:65:29:
         f6:8e:0f:f6:e2:63:98:85:49:fb:f8:0a:0c:17:3c:b0:e4:27:
         10:69:55:69:04:05:94:77:0a:aa:00:60:c9:e6:a7:b4:e8:ec:
         69:42:15:ea:18:35:94:b4:9b:10:51:5c:02:3a:0e:29:c8:76:
         13:c6:51:fa:33:0c:4b:7c:af:c3:98:9e:b3:ac:da:cd:b7:d8:
         32:22:75:f1:91:e8:c9:14:ad:f5:71:93:d7:c7:ad:e2:ff:d9:
         2b:ef:51:3e:c5:95:20:18:04:91:d6:35:b7:fc:1b:db:b3:24:
         8e:bc:02:f0:a7:be:10:47:2c:7c:5f:3b:bb:a1:bf:f2:12:46:
         f8:19:9c:30:7d:ed:5f:29:2e:9a:bc:c1:c3:58:f5:77:64:c3:
         e9:35:42:76:3f:33:6f:e2:14:2f:f8:9c:46:eb:10:d0:b5:bf:
         9e:c6:bb:3e:1d:2a:8d:24:73:cc:bb:f0:95:91:74:d3:b8:da:
         36:14:70:c9:a2:c6:70:a1:a0:97:87:80:74:30:b2:24:dc:53:
         17:31:cc:3b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uiMW0s6gVDvTyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
OTIyY2VlNDgtMTFmNC00YzM0LTkzNGUtYjlkOWQ5YzMxOTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+13l/S6nAuOMMfNniGJUMEKYtR7Nsom4pVi
GuEayZ/kRia9ZT7ji9KoMZoNRy4iiHpIFJKkXOb9Z/G0U5oURK0iXjgy6fAwY6gI
ztKNaBi1KuwutB2NOvPGwOuOmMOPtdcElcYgbyb32WmCS2AlWLNTApBbPW60HDQC
G/bzPqPVkbORwyo1TNmatQZ26cUixrla0Q8adJ+TK107jJsikAWQ6c15tAMJFH5k
E9XZN4GV7EMrSQW1+vWyB2UQUngsdb9G1oxv2Z9lmbJKJrO+Dg4bH+RIolNP8vfO
Mmb3U8wyph9Zdp6SM8Ml9tYqoEENahK+FOL0OStATHqSvkqwRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH6lsSM3vIKlkGhNWyNwOfNf4vMDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWNiMWJhOTMtMTI2MC0z
MjgwLWJiNzMtMDJhZTE5NWYxMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIyWtxdmFkQFk+YeIOjgS/Q2HmmZt8VMS/0FS9Z9zzMjd6Gog+nL
RxpSJlnEMgKDLYCfT4plKfaOD/biY5iFSfv4CgwXPLDkJxBpVWkEBZR3CqoAYMnm
p7To7GlCFeoYNZS0mxBRXAI6DinIdhPGUfozDEt8r8OYnrOs2s232DIidfGR6MkU
rfVxk9fHreL/2SvvUT7FlSAYBJHWNbf8G9uzJI68AvCnvhBHLHxfO7uhv/ISRvgZ
nDB97V8pLpq8wcNY9Xdkw+k1QnY/M2/iFC/4nEbrENC1v57Guz4dKo0kc8y78JWR
dNO42jYUcMmixnChoJeHgHQwsiTcUxcxzDs=
-----END CERTIFICATE-----
Generated at Mon Oct 13 22:12:32 2025 by rpki-client