Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa
File:                     f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa (raw, json)
Hash identifier:          fWiIIZhoka3VL5MOVIR4ja2uYgckTm+7L3W0QXlsyu8=
Subject key identifier:   48:4A:4A:36:53:D1:D8:FC:A3:59:5E:8D:F8:F6:B5:FA:2C:F9:79:92
Certificate issuer:       /CN=17436076-857b-4889-82e9-22151c59a4b1
Certificate serial:       010D0C9F4328584BBE404231568629C8C8FBADF0
Authority key identifier: 47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     46644
IP address blocks:        2620:bf:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:42:31:56:86:29:c8:c8:fb:ad:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17436076-857b-4889-82e9-22151c59a4b1
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=45f623d0-49ba-43fa-a22d-14db0f32b595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:f2:be:ad:90:99:e8:a4:74:2c:a8:f8:e9:
                    59:27:eb:5f:13:94:f9:63:ec:47:08:c6:5f:4c:c2:
                    c4:99:03:aa:1f:26:f9:92:d3:6d:5a:c0:47:4c:b7:
                    9f:bc:5d:33:2b:7c:9a:0e:9b:59:b4:e6:e5:89:11:
                    c8:a4:67:fe:85:dc:37:d8:8c:95:c2:05:60:cd:0a:
                    f5:69:fe:be:84:8e:a6:db:dc:2d:1b:91:dd:10:4a:
                    35:73:3c:ae:0a:31:a3:c3:d1:fd:6f:97:e9:d1:42:
                    58:d0:a5:0c:4d:c2:b0:24:90:0a:80:63:a4:b4:39:
                    01:52:c1:bd:43:64:eb:ea:14:0c:e3:6f:75:35:20:
                    c8:90:16:ac:b2:32:48:d0:13:92:5c:fb:73:d3:c5:
                    dd:2d:94:7c:b1:22:16:05:70:d9:48:30:e1:89:fc:
                    3c:e9:66:a2:a4:1d:f7:97:13:3f:8a:30:9a:01:ad:
                    1d:f0:da:32:7b:c7:5a:a8:49:bc:7b:e2:3f:7c:29:
                    77:ef:ef:be:1d:72:c6:05:4f:f1:30:3f:0e:7c:3d:
                    ce:fb:fd:94:5b:d1:98:3a:4c:30:5f:a1:7b:24:e9:
                    36:2b:1d:e8:6c:bc:32:c0:c3:f1:e7:ff:fd:4a:4b:
                    f2:5b:74:2c:a2:a1:b1:ce:e9:54:30:80:88:06:0d:
                    18:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4A:4A:36:53:D1:D8:FC:A3:59:5E:8D:F8:F6:B5:FA:2C:F9:79:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/f385ad82-3306-3e6e-b322-cdd5f01a0d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1/17436076-857b-4889-82e9-22151c59a4b1.crl

            X509v3 Authority Key Identifier:
                keyid:47:0A:FA:56:B9:09:C9:A7:EE:6D:7E:FE:BA:23:0C:CB:80:18:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17436076-857b-4889-82e9-22151c59a4b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bf:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4c:fb:3f:79:30:84:6f:36:0e:39:01:f9:0e:72:19:4c:ea:
         79:7e:1c:5a:85:6b:68:bf:ed:d6:53:ca:d5:b6:59:d3:95:f1:
         57:db:e8:7d:80:31:0b:e0:60:26:68:e3:38:6c:d4:69:49:22:
         db:90:07:af:58:80:22:df:69:c6:fe:86:12:f7:02:e5:94:56:
         f4:18:0c:9f:69:71:d0:72:7c:3f:c8:ab:15:87:a4:5d:87:15:
         8d:1e:27:50:75:2a:c1:e6:81:f7:59:c5:01:69:f1:3f:49:92:
         12:6d:11:c4:31:0d:5b:9f:65:37:13:3f:f4:39:ca:f9:76:f8:
         7d:21:16:79:63:e0:6d:c9:fb:b9:00:b3:ac:28:47:3f:99:a9:
         ea:92:81:8f:08:4d:3b:c7:bf:17:ba:97:d6:f7:4b:02:5f:aa:
         9c:cf:0e:b7:c2:88:50:63:32:b5:51:8d:70:a5:90:ee:2e:86:
         df:7a:4c:bc:3b:2a:87:79:e6:83:14:e2:7a:73:d2:54:53:bb:
         a4:a4:99:6b:f3:16:ef:01:24:a7:fd:63:56:61:73:25:c1:9b:
         dd:3d:d3:2a:85:42:80:55:42:43:26:22:00:5d:55:ca:75:04:
         ae:ba:85:a5:45:d5:ac:5d:86:3b:b4:72:e4:82:4d:f5:e2:2a:
         ad:9c:e2:b0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu+QEIxVoYpyMj7rfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0MzYwNzYtODU3Yi00ODg5LTgyZTktMjIxNTFjNTlh
NGIxMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
NDVmNjIzZDAtNDliYS00M2ZhLWEyMmQtMTRkYjBmMzJiNTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwDyvq2QmeikdCyo+OlZJ+tfE5T5Y+xHCMZf
TMLEmQOqHyb5ktNtWsBHTLefvF0zK3yaDptZtObliRHIpGf+hdw32IyVwgVgzQr1
af6+hI6m29wtG5HdEEo1czyuCjGjw9H9b5fp0UJY0KUMTcKwJJAKgGOktDkBUsG9
Q2Tr6hQM4291NSDIkBassjJI0BOSXPtz08XdLZR8sSIWBXDZSDDhifw86WaipB33
lxM/ijCaAa0d8Noye8daqEm8e+I/fCl37+++HXLGBU/xMD8OfD3O+/2UW9GYOkww
X6F7JOk2Kx3obLwywMPx5//9SkvyW3QsoqGxzulUMICIBg0YTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEhKSjZT0dj8o1lejfj2tfos+XmSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xNzQz
NjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1MWM1OWE0YjEvZjM4NWFkODItMzMwNi0z
ZTZlLWIzMjItY2RkNWYwMWEwZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTc0MzYwNzYtODU3Yi00ODg5LTgy
ZTktMjIxNTFjNTlhNGIxLzE3NDM2MDc2LTg1N2ItNDg4OS04MmU5LTIyMTUxYzU5
YTRiMS5jcmwwHwYDVR0jBBgwFoAURwr6VrkJyafubX7+uiMMy4AYHR0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xNzQzNjA3Ni04NTdiLTQ4ODktODJlOS0yMjE1
MWM1OWE0YjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAvyAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAtM+z95MIRvNg45AfkOchlM6nl+HFqFa2i/7dZTytW2WdOV8Vfb
6H2AMQvgYCZo4zhs1GlJItuQB69YgCLfacb+hhL3AuWUVvQYDJ9pcdByfD/IqxWH
pF2HFY0eJ1B1KsHmgfdZxQFp8T9JkhJtEcQxDVufZTcTP/Q5yvl2+H0hFnlj4G3J
+7kAs6woRz+ZqeqSgY8ITTvHvxe6l9b3SwJfqpzPDrfCiFBjMrVRjXClkO4uht96
TLw7Kod55oMU4npz0lRTu6SkmWvzFu8BJKf9Y1ZhcyXBm9090yqFQoBVQkMmIgBd
Vcp1BK66haVF1axdhju0cuSCTfXiKq2c4rA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:11:12 2025 by rpki-client