Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5f0c9e9-c44e-32a6-a553-ebaf9e52aff2.roa
File:                     c5f0c9e9-c44e-32a6-a553-ebaf9e52aff2.roa (raw, json)
Hash identifier:          NBzvjSCO7323eEWmJ/S7xFPPWE+FagW3Fe+i+rgeHCM=
Subject key identifier:   D2:C6:E8:7C:A0:FC:52:02:90:07:A5:FC:81:D8:AB:F1:58:0A:74:6B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7C62FDC482DF2D3B33A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5f0c9e9-c44e-32a6-a553-ebaf9e52aff2.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     37183
IP address blocks:        2001:470:18a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:c6:2f:dc:48:2d:f2:d3:b3:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=ecca8fc4-7ef7-4fa5-93af-55718e81e14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:75:51:e0:b7:c4:c5:0e:fc:f6:43:f3:3a:16:
                    6e:2b:37:1b:85:99:33:d2:dc:a8:6d:28:d4:d6:b3:
                    f7:6f:d4:30:a5:17:c4:47:d3:f5:90:dd:aa:f8:66:
                    a1:73:c3:d0:07:87:5d:a9:c6:37:8e:04:bb:2f:e4:
                    f8:33:96:4d:82:5a:cc:cd:8c:4a:44:59:f1:6e:52:
                    7d:17:36:56:ab:5b:d3:c2:e6:45:c9:ea:d2:bd:48:
                    3d:84:04:f7:51:55:a7:82:86:1e:fd:b5:9c:9d:b0:
                    6a:db:e0:15:88:a1:07:86:c0:c8:34:0e:c1:b7:31:
                    af:1b:49:37:ca:af:c3:84:11:37:5d:21:89:cc:9a:
                    ac:1a:38:57:ff:8c:b3:d4:93:53:68:52:0d:c9:d7:
                    ed:1e:c6:37:1c:57:ad:45:00:ad:e7:4a:ba:1c:8a:
                    0a:e7:10:1c:81:fc:16:c5:30:c6:f6:21:51:c2:96:
                    2e:48:7f:46:3c:53:82:9e:74:50:d6:55:25:56:a2:
                    58:b4:4d:01:c7:4b:18:15:bd:60:32:bb:80:d1:d1:
                    eb:68:6f:64:f6:2f:6c:2d:31:7a:00:ab:32:91:8d:
                    51:31:0f:90:30:3e:b3:c6:d6:de:7e:db:96:21:7b:
                    f5:94:56:25:b4:03:42:5b:6f:a3:4d:3c:95:2d:46:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C6:E8:7C:A0:FC:52:02:90:07:A5:FC:81:D8:AB:F1:58:0A:74:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5f0c9e9-c44e-32a6-a553-ebaf9e52aff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:18a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:79:aa:f3:49:61:c7:19:6b:95:95:0a:23:8e:6a:03:93:73:
         42:e7:02:48:b2:03:7f:5f:56:11:6a:92:67:11:55:f3:78:90:
         7e:ea:72:50:e7:31:d9:19:2e:31:9f:2d:21:ef:28:51:56:02:
         2d:65:44:6a:29:ba:d1:e1:ce:cb:9c:30:72:81:84:3b:56:9f:
         86:b5:f1:49:fa:fe:1f:00:4d:48:da:6f:67:d5:15:d9:4a:e8:
         a2:56:90:d4:8b:b7:8e:98:b3:da:ee:c3:58:8b:6c:da:1c:73:
         1d:66:dd:95:f0:97:15:78:35:75:4e:a0:29:c8:d2:37:f0:b4:
         ab:89:03:26:40:33:31:15:e0:c0:32:c4:3b:76:2d:75:ea:10:
         bc:16:58:2d:85:ea:41:9b:c5:b4:b4:bf:70:d5:ac:56:18:44:
         8a:15:b5:ba:1e:aa:bb:61:f9:8e:06:1b:69:06:1a:c3:07:2c:
         1f:35:4b:8d:2b:7d:db:ff:8a:a5:fc:67:10:53:ff:fd:fa:51:
         92:87:6c:95:6e:de:29:06:26:42:44:e8:f4:70:cc:95:cb:cd:
         86:c4:b3:fe:57:fd:03:3e:ab:be:d5:34:00:4e:7c:15:1d:8a:
         b3:40:1a:c2:f7:b9:5f:b8:a6:75:ff:de:4d:cb:9a:3e:bd:33:
         77:2e:6d:9c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18Yv3Egt8tOzOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
ZWNjYThmYzQtN2VmNy00ZmE1LTkzYWYtNTU3MThlODFlMTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nVR4LfExQ789kPzOhZuKzcbhZkz0tyobSjU
1rP3b9QwpRfER9P1kN2q+Gahc8PQB4ddqcY3jgS7L+T4M5ZNglrMzYxKRFnxblJ9
FzZWq1vTwuZFyerSvUg9hAT3UVWngoYe/bWcnbBq2+AViKEHhsDINA7BtzGvG0k3
yq/DhBE3XSGJzJqsGjhX/4yz1JNTaFINydftHsY3HFetRQCt50q6HIoK5xAcgfwW
xTDG9iFRwpYuSH9GPFOCnnRQ1lUlVqJYtE0Bx0sYFb1gMruA0dHraG9k9i9sLTF6
AKsykY1RMQ+QMD6zxtbeftuWIXv1lFYltANCW2+jTTyVLUYbtQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNLG6Hyg/FICkAel/IHYq/FYCnRrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzVmMGM5ZTktYzQ0ZS0z
MmE2LWE1NTMtZWJhZjllNTJhZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJh5qvNJYccZa5WVCiOOagOTc0LnAkiyA39fVhFqkmcRVfN4kH7q
clDnMdkZLjGfLSHvKFFWAi1lRGoputHhzsucMHKBhDtWn4a18Un6/h8ATUjab2fV
FdlK6KJWkNSLt46Ys9ruw1iLbNoccx1m3ZXwlxV4NXVOoCnI0jfwtKuJAyZAMzEV
4MAyxDt2LXXqELwWWC2F6kGbxbS0v3DVrFYYRIoVtboeqrth+Y4GG2kGGsMHLB81
S40rfdv/iqX8ZxBT//36UZKHbJVu3ikGJkJE6PRwzJXLzYbEs/5X/QM+q77VNABO
fBUdirNAGsL3uV+4pnX/3k3Lmj69M3cubZw=
-----END CERTIFICATE-----
Generated at Tue Nov 4 03:59:06 2025 by rpki-client