Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1f33de04-fa68-3cd3-a8b6-dd54a58d6e7f.roa
File:                     1f33de04-fa68-3cd3-a8b6-dd54a58d6e7f.roa (raw, json)
Hash identifier:          2agIz6cHk0Lf3+zxRq8BkSVvJHfWBvAhwuLagYwH19A=
Subject key identifier:   AA:7B:9C:23:20:2B:1F:19:8C:61:4E:91:F7:69:13:91:6A:91:9E:7E
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584B9CA23B15B51B71B678CFB960
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1f33de04-fa68-3cd3-a8b6-dd54a58d6e7f.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     63150
IP address blocks:        2602:f988:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:3b:15:b5:1b:71:b6:78:cf:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=c88c8f4f-a740-4a7d-882b-f821dd9bf0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:7d:05:68:86:a1:85:6c:ff:b7:8a:15:7e:
                    61:b8:c9:43:e6:ea:b0:22:13:34:eb:dc:14:a4:30:
                    b4:4e:38:8b:a0:eb:cc:1b:d1:b4:30:2b:49:e6:79:
                    e1:96:df:c2:93:ea:b3:36:b0:0f:bf:0d:01:69:44:
                    11:9f:89:f2:79:cc:ee:cf:36:e7:7b:13:58:0d:09:
                    17:fb:66:50:eb:7e:db:41:b9:9f:9a:70:05:e4:6c:
                    65:41:35:5d:a3:4b:2e:29:ec:14:55:a0:d3:6f:7c:
                    25:0d:3d:7e:9d:21:f4:af:84:52:e5:d3:8c:28:80:
                    db:61:4e:37:31:8b:9f:34:2b:6a:ae:09:13:e4:d4:
                    22:f4:57:63:c0:08:68:a2:15:86:db:9d:bf:5d:0c:
                    0d:5c:4e:1c:9d:9a:2f:8e:09:97:82:5b:7a:87:ac:
                    8b:b9:86:67:06:a0:33:d1:be:4c:98:ff:89:d2:8a:
                    08:f2:80:24:04:73:f0:33:a6:70:bd:f2:4d:07:1a:
                    f3:24:30:01:d5:2e:fb:78:17:9a:85:8a:91:ba:87:
                    24:9f:a9:ba:cc:48:66:d9:e5:65:8a:a9:a9:8e:c9:
                    97:8b:cd:04:b1:8d:0e:ae:ae:23:57:6a:8b:61:d1:
                    97:69:26:34:a2:74:57:53:72:0b:6c:d2:ca:bb:30:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7B:9C:23:20:2B:1F:19:8C:61:4E:91:F7:69:13:91:6A:91:9E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1f33de04-fa68-3cd3-a8b6-dd54a58d6e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:c0:04:fe:98:4d:53:b3:46:d2:fd:03:3a:b1:d3:db:91:
         2f:3e:7a:0f:9e:99:52:67:ac:72:a4:0a:59:56:f9:01:3b:1e:
         00:b3:f9:e3:64:26:23:ee:8d:9a:d0:1d:92:7e:73:ad:77:03:
         09:f1:db:90:c4:1f:f4:aa:8b:b8:91:c8:b3:0e:92:92:88:c8:
         8b:8c:d2:7c:98:1a:36:a7:09:29:6c:85:f8:f7:67:c5:ee:ff:
         a1:37:24:ea:e0:ed:ca:ce:b4:8b:e5:d3:26:50:56:03:c4:08:
         55:ed:cc:8b:0a:61:55:b4:10:3a:93:ea:3d:38:4b:a8:b7:60:
         91:82:3a:14:d7:d5:95:57:c4:bd:cc:91:a2:e8:c6:ec:9d:d9:
         62:39:ba:3f:a4:90:27:9d:f1:11:c3:a3:ca:70:81:f6:5b:bc:
         10:bf:45:3d:11:b8:5d:4c:53:01:99:64:8a:95:b9:95:14:b8:
         ca:c9:02:0c:83:49:b4:c4:e8:2f:d0:6e:55:b7:60:94:e0:d0:
         62:7e:97:65:4c:ff:8b:ce:33:4c:1d:06:f0:11:11:60:53:e3:
         54:67:8b:0c:d8:59:b8:a5:18:2a:c4:5b:2c:0d:c7:cf:58:9a:
         96:c1:f1:3c:aa:81:e5:f0:03:0b:46:f1:e0:26:f5:10:23:ed:
         08:56:a6:22
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEucojsVtRtxtnjPuWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMThhOTI4ZWItNDhhNS00NTYwLWEyMTctMzZjYjFlYTMy
NjQ4MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk
Yzg4YzhmNGYtYTc0MC00YTdkLTg4MmItZjgyMWRkOWJmMGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MV9BWiGoYVs/7eKFX5huMlD5uqwIhM069wU
pDC0TjiLoOvMG9G0MCtJ5nnhlt/Ck+qzNrAPvw0BaUQRn4nyeczuzzbnexNYDQkX
+2ZQ637bQbmfmnAF5GxlQTVdo0suKewUVaDTb3wlDT1+nSH0r4RS5dOMKIDbYU43
MYufNCtqrgkT5NQi9FdjwAhoohWG252/XQwNXE4cnZovjgmXglt6h6yLuYZnBqAz
0b5MmP+J0ooI8oAkBHPwM6ZwvfJNBxrzJDAB1S77eBeahYqRuockn6m6zEhm2eVl
iqmpjsmXi80EsY0Orq4jV2qLYdGXaSY0onRXU3ILbNLKuzD2zQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKp7nCMgKx8ZjGFOkfdpE5FqkZ5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOGE5
MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNiMWVhMzI2NDgvMWYzM2RlMDQtZmE2OC0z
Y2QzLWE4YjYtZGQ1NGE1OGQ2ZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMThhOTI4ZWItNDhhNS00NTYwLWEy
MTctMzZjYjFlYTMyNjQ4LzE4YTkyOGViLTQ4YTUtNDU2MC1hMjE3LTM2Y2IxZWEz
MjY0OC5jcmwwHwYDVR0jBBgwFoAU9H6x3C6P5f0Uj3qixMZGdbQwqzgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xOGE5MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNi
MWVhMzI2NDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5iAIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAN9XABP6YTVOzRtL9Azqx09uRLz56D56ZUmescqQKWVb5ATseALP5
42QmI+6NmtAdkn5zrXcDCfHbkMQf9KqLuJHIsw6SkojIi4zSfJgaNqcJKWyF+Pdn
xe7/oTck6uDtys60i+XTJlBWA8QIVe3MiwphVbQQOpPqPThLqLdgkYI6FNfVlVfE
vcyRoujG7J3ZYjm6P6SQJ53xEcOjynCB9lu8EL9FPRG4XUxTAZlkipW5lRS4yskC
DINJtMToL9BuVbdglODQYn6XZUz/i84zTB0G8BERYFPjVGeLDNhZuKUYKsRbLA3H
z1ialsHxPKqB5fADC0bx4Cb1ECPtCFamIg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:42:11 2025 by rpki-client