Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa
File:                     54268940-4af9-39c9-bd94-1f4f53099856.roa (raw, json)
Hash identifier:          qkK+xUrtBHnl85fmH1LKWiC+ZyukCm9g8FaV5Spic/A=
Subject key identifier:   6F:4E:C7:69:6C:C7:B6:2D:50:90:BF:76:94:BA:36:6D:25:D5:6B:44
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584BBA104AEE03E2F442E7FB1A80
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     5006
IP address blocks:        2604:3000::/32 maxlen: 48
                          2604:d380::/32 maxlen: 48
                          2605:6d80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:4a:ee:03:e2:f4:42:e7:fb:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=a8a6f239-d1b0-4458-b2af-ea9865982920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7f:77:f1:74:76:24:22:9d:43:7a:0f:b8:36:
                    97:7f:0a:4b:bf:a6:71:8a:be:4d:97:89:3e:2b:23:
                    a0:71:2a:95:25:5f:20:61:87:f5:73:fb:30:06:8d:
                    60:46:4b:f5:2d:d2:26:33:b4:60:7e:be:a1:d0:7c:
                    8d:9a:a4:eb:6f:83:97:df:0d:d1:29:58:96:7b:06:
                    09:75:83:4e:37:13:c2:b7:dd:f5:bc:80:3b:0c:6a:
                    03:71:3f:48:79:e4:1d:61:d9:2b:33:f2:b1:bf:60:
                    19:58:7f:3b:a8:8a:d6:a2:a8:9d:e0:d4:d4:6c:e2:
                    1b:eb:78:ac:d1:ff:2a:19:6c:04:04:f1:e0:78:5b:
                    c4:8d:98:84:68:6a:c6:c2:71:99:40:c8:e7:2f:19:
                    e5:33:b9:89:68:c8:af:49:bf:03:ba:4e:e0:e6:8e:
                    f6:e2:46:fd:b3:b4:7a:e0:70:ab:3f:35:af:2b:0e:
                    eb:72:4f:94:f2:af:8e:76:1c:49:05:15:c0:62:09:
                    46:a2:3e:0e:91:dc:4c:bd:d5:ba:84:8b:5e:8e:b1:
                    82:f4:3e:58:2c:98:8a:71:6d:03:3d:21:5a:4b:91:
                    04:28:ac:18:28:e4:25:49:76:8c:56:c5:84:4d:2a:
                    9b:67:05:ae:ad:27:37:1e:6e:4e:21:c6:60:8c:e9:
                    f0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4E:C7:69:6C:C7:B6:2D:50:90:BF:76:94:BA:36:6D:25:D5:6B:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3000::/32
                  2604:d380::/32
                  2605:6d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b0:a6:fa:a4:12:f3:c7:a6:1a:a7:21:b7:db:3a:6c:82:d0:
         3d:62:2c:ee:16:c2:ac:e9:a8:53:51:3d:c4:e6:44:11:81:8e:
         23:3d:6a:7f:38:44:c1:c8:47:a2:a7:98:60:a7:e6:c4:1c:da:
         2c:f7:f3:c1:fc:7b:c5:bf:77:b5:cb:07:df:a3:fa:e9:c5:cd:
         d0:9e:ab:a3:2e:b9:38:35:df:aa:1a:40:fe:55:70:94:ba:b9:
         51:49:b7:eb:b4:fe:4a:ce:a2:d0:19:e2:3d:e0:b5:a7:97:df:
         87:e9:95:26:50:f8:6e:9a:d0:26:9b:dc:4d:be:37:fb:aa:db:
         1e:8e:ff:8c:4f:e0:a5:e0:a6:87:5f:83:74:8d:33:c9:de:f7:
         49:a3:c6:76:a5:b4:1a:2f:65:36:a2:68:8d:b8:d0:af:07:34:
         1a:40:5b:cf:dc:e1:50:2c:e8:ea:b9:5a:0f:d4:a5:5f:b7:8c:
         96:06:8e:13:4b:3d:e7:79:3f:25:c4:a2:ad:50:61:69:c9:91:
         a9:ff:b3:0c:51:fb:29:f0:6a:a7:48:b3:6b:62:ed:06:fe:0a:
         62:15:c0:2a:b8:3b:6a:e7:ba:e0:41:12:14:4f:ad:2e:bd:ef:
         a9:49:fa:03:87:7c:96:f1:8f:9a:fc:b3:b3:b0:b8:4a:2d:ae:
         37:13:e2:c7
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEu6EEruA+L0Quf7GoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk
ZTNkMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk
YThhNmYyMzktZDFiMC00NDU4LWIyYWYtZWE5ODY1OTgyOTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3938XR2JCKdQ3oPuDaXfwpLv6Zxir5Nl4k+
KyOgcSqVJV8gYYf1c/swBo1gRkv1LdImM7Rgfr6h0HyNmqTrb4OX3w3RKViWewYJ
dYNONxPCt931vIA7DGoDcT9IeeQdYdkrM/Kxv2AZWH87qIrWoqid4NTUbOIb63is
0f8qGWwEBPHgeFvEjZiEaGrGwnGZQMjnLxnlM7mJaMivSb8Duk7g5o724kb9s7R6
4HCrPzWvKw7rck+U8q+OdhxJBRXAYglGoj4OkdxMvdW6hItejrGC9D5YLJiKcW0D
PSFaS5EEKKwYKOQlSXaMVsWETSqbZwWurSc3Hm5OIcZgjOnwxwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFG9Ox2lsx7YtUJC/dpS6Nm0l1WtEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0
MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNTQyNjg5NDAtNGFmOS0z
OWM5LWJkOTQtMWY0ZjUzMDk5ODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm
YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl
ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz
NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF
ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBACqwpvqkEvPHphqnIbfbOmyC0D1iLO4Wwqzp
qFNRPcTmRBGBjiM9an84RMHIR6KnmGCn5sQc2iz388H8e8W/d7XLB9+j+unFzdCe
q6MuuTg136oaQP5VcJS6uVFJt+u0/krOotAZ4j3gtaeX34fplSZQ+G6a0Cab3E2+
N/uq2x6O/4xP4KXgpodfg3SNM8ne90mjxnaltBovZTaiaI240K8HNBpAW8/c4VAs
6Oq5Wg/UpV+3jJYGjhNLPed5PyXEoq1QYWnJkan/swxR+ynwaqdIs2ti7Qb+CmIV
wCq4O2rnuuBBEhRPrS6976lJ+gOHfJbxj5r8s7OwuEotrjcT4sc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:28:14 2025 by rpki-client