Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b371f4af-6ea8-36f4-bcce-09a9605baca6.roa
File:                     b371f4af-6ea8-36f4-bcce-09a9605baca6.roa (raw, json)
Hash identifier:          iNEsJ+i8ArA5w2RykMoAIeE6DPWUifpoGAOE9fXsw8E=
Subject key identifier:   F7:69:9C:E6:03:C7:9B:B1:03:E5:26:B4:B8:20:31:9E:FC:CE:E2:10
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584BBB75A50E7CE19C30C055B4C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b371f4af-6ea8-36f4-bcce-09a9605baca6.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        2605:4300:3906::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:a5:0e:7c:e1:9c:30:c0:55:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=6c2119bc-4640-4f6b-aa18-5a973a8d55a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:31:54:c4:19:74:9c:99:66:54:17:fb:ad:
                    20:d3:43:1d:fb:65:21:0e:d0:ad:20:dd:94:45:47:
                    29:2b:e5:56:30:9f:eb:7b:a6:00:a6:9e:9b:df:7a:
                    f8:6e:4e:10:8f:87:aa:1d:e9:1e:bc:98:73:2a:07:
                    87:3a:6a:89:1c:ef:99:8e:2c:31:c4:db:ee:8a:72:
                    c5:d0:2b:ce:2a:ae:31:47:f2:44:ee:65:a0:a1:47:
                    2f:cd:d9:fd:cd:76:ea:42:e3:a9:11:2d:3e:37:90:
                    c4:c6:d8:2d:1c:1e:e4:91:27:ff:db:65:a8:79:f6:
                    17:e7:a4:74:ef:1c:af:f2:d4:79:a0:5b:a9:a0:7f:
                    5a:7a:5b:37:aa:f1:93:1c:fe:2f:34:83:75:b8:85:
                    75:7d:93:23:5b:64:4b:30:82:d7:16:cc:d0:b0:40:
                    87:37:96:f9:b5:63:c8:73:85:bd:96:28:fa:f6:63:
                    1b:89:5d:4e:06:88:8b:b6:2c:f7:9f:5f:51:e5:a7:
                    f6:da:cd:5d:26:d6:9c:c8:37:2e:06:59:4b:78:4f:
                    2f:5a:fc:b6:2f:bd:92:db:64:83:9c:d1:92:03:35:
                    a2:eb:47:30:30:3c:c9:e4:b4:e9:55:a0:15:d7:3b:
                    54:20:8a:55:b7:13:9d:ac:d2:6e:8c:67:e6:69:2d:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:69:9C:E6:03:C7:9B:B1:03:E5:26:B4:B8:20:31:9E:FC:CE:E2:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b371f4af-6ea8-36f4-bcce-09a9605baca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3906::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:a2:25:25:c0:3e:36:6f:21:4a:8d:e6:f3:52:45:12:2f:
         fc:82:b9:e2:77:4b:fb:35:a1:52:83:43:ed:8e:20:fa:67:3a:
         1d:16:1f:4b:fe:5e:59:76:59:fb:37:7f:9a:2b:c4:8c:37:75:
         bd:b8:4a:a4:21:ac:8e:f7:7d:91:7e:0b:d5:ad:52:4f:8e:6e:
         e8:ee:79:ca:ae:60:f1:bd:ff:d4:88:a5:6b:32:ef:9b:0b:a9:
         b3:0f:32:7f:38:b3:38:44:d1:ac:c5:47:8f:c2:b6:24:d8:f1:
         b6:2d:d2:5a:d1:65:96:7c:87:13:2a:4d:40:7f:18:7f:ff:39:
         64:90:34:08:d6:8a:3a:94:37:10:fd:4e:20:8f:fd:f9:de:0e:
         9c:37:4e:45:25:3f:73:c3:8e:93:31:f4:0e:41:d4:18:6f:36:
         20:82:02:19:0f:20:bd:0a:3b:89:53:24:ef:9e:f1:84:07:a4:
         05:29:8b:ab:2a:f7:e1:12:dc:37:16:d7:bf:9e:44:41:0c:eb:
         26:73:93:a7:39:3e:51:65:d0:eb:c6:f9:9a:5b:df:9c:a9:8d:
         10:e3:26:13:09:47:b4:1c:6f:e6:78:9a:0a:bf:47:5c:75:0d:
         f9:a7:e2:38:6a:50:85:9c:f2:1c:18:04:a6:9f:fa:4a:0a:9a:
         ca:e9:9a:dd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu7daUOfOGcMMBVtMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk
NmMyMTE5YmMtNDY0MC00ZjZiLWFhMTgtNWE5NzNhOGQ1NWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodsxVMQZdJyZZlQX+60g00Md+2UhDtCtIN2U
RUcpK+VWMJ/re6YApp6b33r4bk4Qj4eqHekevJhzKgeHOmqJHO+ZjiwxxNvuinLF
0CvOKq4xR/JE7mWgoUcvzdn9zXbqQuOpES0+N5DExtgtHB7kkSf/22WoefYX56R0
7xyv8tR5oFupoH9aels3qvGTHP4vNIN1uIV1fZMjW2RLMILXFszQsECHN5b5tWPI
c4W9lij69mMbiV1OBoiLtiz3n19R5af22s1dJtacyDcuBllLeE8vWvy2L72S22SD
nNGSAzWi60cwMDzJ5LTpVaAV1ztUIIpVtxOdrNJujGfmaS2M7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPdpnOYDx5uxA+UmtLggMZ78zuIQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjM3MWY0YWYtNmVhOC0z
NmY0LWJjY2UtMDlhOTYwNWJhY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDADkG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD81oiUlwD42byFKjebzUkUSL/yCueJ3S/s1oVKDQ+2OIPpnOh0W
H0v+Xll2Wfs3f5orxIw3db24SqQhrI73fZF+C9WtUk+ObujuecquYPG9/9SIpWsy
75sLqbMPMn84szhE0azFR4/CtiTY8bYt0lrRZZZ8hxMqTUB/GH//OWSQNAjWijqU
NxD9TiCP/fneDpw3TkUlP3PDjpMx9A5B1BhvNiCCAhkPIL0KO4lTJO+e8YQHpAUp
i6sq9+ES3DcW17+eREEM6yZzk6c5PlFl0OvG+Zpb35ypjRDjJhMJR7Qcb+Z4mgq/
R1x1Dfmn4jhqUIWc8hwYBKaf+koKmsrpmt0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:27:38 2025 by rpki-client