Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa
File:                     d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa (raw, json)
Hash identifier:          kMfrFu5HMGxiKDD4bv5O46NubTwwKZoB/8b/Nz7nL8E=
Subject key identifier:   B8:B7:23:72:28:A2:4A:A6:DD:6B:82:DA:8E:97:0F:58:F9:1A:97:4D
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F4328584BA0D25D7F786CDC3FC49BBBE0
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     399077
IP address blocks:        2606:4dc0:1::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:5d:7f:78:6c:dc:3f:c4:9b:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=5506d654-4785-46ad-bdc1-751532c3da21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:b7:c9:4e:30:01:08:69:34:f6:94:62:6e:
                    83:12:be:a0:ad:fc:fd:58:be:09:bd:3a:82:02:08:
                    be:20:84:30:cf:f2:69:c0:16:bd:b9:fc:01:23:1a:
                    26:22:6a:8d:bc:cb:ae:9c:fb:dd:d0:96:3e:c1:2f:
                    a3:18:f8:ae:e2:94:44:2f:9b:14:8d:af:50:42:b3:
                    4e:1e:bb:47:fd:3b:98:17:65:60:25:fb:0b:9e:23:
                    7e:66:74:0e:42:06:89:d8:5a:94:ad:32:26:d8:03:
                    0b:5b:e3:1c:90:2e:bd:72:53:31:b3:e8:b5:2c:ef:
                    47:96:19:31:24:86:99:8f:e4:2c:15:75:75:a1:eb:
                    21:fb:31:7c:9a:9d:b9:df:63:8f:c7:dd:b0:1d:1a:
                    d5:93:de:0b:fc:36:26:7e:88:0a:a1:f7:26:56:ae:
                    7d:54:27:44:34:72:51:2c:b9:18:b5:22:57:26:22:
                    10:ad:0c:e8:dd:0e:59:48:0a:52:ba:d2:3d:19:e6:
                    80:15:1e:7c:09:f8:66:2f:37:64:1a:52:e3:64:e6:
                    58:5d:45:cb:98:ef:7c:b2:d9:92:85:30:19:1b:c8:
                    68:5f:fd:72:ee:54:11:f8:d7:58:71:3a:ff:fd:79:
                    62:b8:fe:04:8f:de:23:f3:8d:15:68:4d:be:3c:4b:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B7:23:72:28:A2:4A:A6:DD:6B:82:DA:8E:97:0F:58:F9:1A:97:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/d6f6aaca-ed6b-3db8-b03c-829187f0d236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:67:04:31:a9:fa:ad:29:78:5e:a4:32:f6:21:b6:83:78:29:
         8c:cc:a1:91:d7:14:b4:1f:02:0b:f6:46:9f:57:dd:f4:02:86:
         58:62:10:77:e4:e7:76:8b:a1:0c:a0:5c:54:cf:1a:3f:3c:f6:
         3c:33:68:88:b9:d3:c7:b4:af:fc:d0:bd:dd:55:8b:6f:27:93:
         f1:3d:b4:a2:96:d3:0f:0f:39:9d:ff:75:b4:4a:91:a3:02:fc:
         c6:55:8f:ab:52:06:be:3b:76:76:10:44:b4:7c:96:7a:68:e4:
         09:00:d9:49:eb:b4:c3:34:18:98:63:92:ec:eb:d4:31:40:b8:
         67:5c:97:c8:fc:40:b7:6d:86:57:21:8a:d7:5a:a7:2b:2c:1c:
         1b:c6:12:ae:18:99:2f:e3:25:d6:71:a2:eb:4d:58:c9:4d:6f:
         77:b4:98:a7:e9:72:2a:25:79:c5:67:3d:35:ce:c7:99:0d:84:
         31:78:b3:ef:6a:d6:64:97:f4:85:fa:f7:42:bf:53:31:20:34:
         1a:97:9d:92:87:b1:8e:25:7d:40:11:48:d4:ce:85:3f:53:b3:
         53:63:98:7e:6c:4d:a4:60:56:e7:65:e6:d2:a0:d9:be:90:87:
         89:4d:7e:18:44:c6:1b:6f:e1:85:e4:1a:dc:66:07:11:7c:24:
         fe:2d:78:1b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEug0l1/eGzcP8Sbu+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWJhYzU0YjktNjZkYy00OTU2LTg2M2QtMTgwNGNmYjll
ODUzMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk
NTUwNmQ2NTQtNDc4NS00NmFkLWJkYzEtNzUxNTMyYzNkYTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2S3yU4wAQhpNPaUYm6DEr6grfz9WL4JvTqC
Agi+IIQwz/JpwBa9ufwBIxomImqNvMuunPvd0JY+wS+jGPiu4pREL5sUja9QQrNO
HrtH/TuYF2VgJfsLniN+ZnQOQgaJ2FqUrTIm2AMLW+MckC69clMxs+i1LO9Hlhkx
JIaZj+QsFXV1oesh+zF8mp2532OPx92wHRrVk94L/DYmfogKofcmVq59VCdENHJR
LLkYtSJXJiIQrQzo3Q5ZSApSutI9GeaAFR58CfhmLzdkGlLjZOZYXUXLmO98stmS
hTAZG8hoX/1y7lQR+NdYcTr//XliuP4Ej94j840VaE2+PEv42QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLi3I3Iookqm3WuC2o6XD1j5GpdNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YmFj
NTRiOS02NmRjLTQ5NTYtODYzZC0xODA0Y2ZiOWU4NTMvZDZmNmFhY2EtZWQ2Yi0z
ZGI4LWIwM2MtODI5MTg3ZjBkMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWJhYzU0YjktNjZkYy00OTU2LTg2
M2QtMTgwNGNmYjllODUzLzViYWM1NGI5LTY2ZGMtNDk1Ni04NjNkLTE4MDRjZmI5
ZTg1My5jcmwwHwYDVR0jBBgwFoAUf0qap0BizW2/cBkWzv2bKifmLp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81YmFjNTRiOS02NmRjLTQ5NTYtODYzZC0xODA0
Y2ZiOWU4NTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZNwAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALFnBDGp+q0peF6kMvYhtoN4KYzMoZHXFLQfAgv2Rp9X3fQChlhi
EHfk53aLoQygXFTPGj889jwzaIi508e0r/zQvd1Vi28nk/E9tKKW0w8POZ3/dbRK
kaMC/MZVj6tSBr47dnYQRLR8lnpo5AkA2UnrtMM0GJhjkuzr1DFAuGdcl8j8QLdt
hlchitdapyssHBvGEq4YmS/jJdZxoutNWMlNb3e0mKfpciolecVnPTXOx5kNhDF4
s+9q1mSX9IX690K/UzEgNBqXnZKHsY4lfUARSNTOhT9Ts1NjmH5sTaRgVudl5tKg
2b6Qh4lNfhhExhtv4YXkGtxmBxF8JP4teBs=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:43:47 2025 by rpki-client