Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5267559f-2275-3ec9-8912-c20f02435041.roa
File:                     5267559f-2275-3ec9-8912-c20f02435041.roa (raw, json)
Hash identifier:          8INF35lxKxsH7Zj4D0BJHKd7okW/aWOsmghfSp3Kk74=
Subject key identifier:   6A:6E:77:C0:77:35:36:72:9B:94:8F:27:B2:BE:D6:53:3D:29:DF:CE
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584BBE404188BFA5BCC713B19EF0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5267559f-2275-3ec9-8912-c20f02435041.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     25899
IP address blocks:        2607:fa40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:41:88:bf:a5:bc:c7:13:b1:9e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=f4a44d11-ed49-40cc-adf2-ad524b49804c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:f7:a9:1c:01:e9:eb:e3:dd:91:b5:3f:59:
                    68:11:00:e7:cc:6c:f8:9d:78:62:0c:c4:78:48:d7:
                    c1:8c:51:5a:7e:8d:e6:c9:69:b3:8e:b1:27:bf:fd:
                    28:00:16:a3:b6:36:62:2a:08:b1:16:e2:75:7f:a2:
                    c1:1e:61:71:b9:f7:48:fc:a7:8e:e4:2e:ee:58:05:
                    17:dd:e7:06:d7:f2:d0:aa:2b:fd:5a:e3:29:02:31:
                    20:3f:80:c4:29:98:f1:ac:d3:b6:de:56:32:c8:c8:
                    a5:b7:57:d2:fc:bc:38:af:ec:02:52:3b:6c:f5:93:
                    37:2f:80:f8:a1:d1:46:49:8b:7c:1c:82:68:2a:c3:
                    e8:ba:7f:cd:ef:6a:90:ad:ac:39:ac:1e:9e:d5:e4:
                    b5:17:66:f1:4b:c7:82:62:08:f2:e0:4b:59:2c:97:
                    5a:2a:2b:ed:ab:fb:a2:3a:d4:f9:d8:dd:d5:21:a5:
                    12:f5:08:c7:82:61:86:a8:fd:fb:e5:30:20:fd:fe:
                    19:38:f7:bd:4c:15:91:25:7a:fd:15:eb:95:ff:91:
                    f9:ef:bc:0d:57:91:47:ff:72:85:dc:d8:35:9e:51:
                    fd:bf:a7:3d:52:61:fa:24:19:d2:e8:8f:33:cc:75:
                    b4:8c:45:f5:b3:d8:54:a9:ed:d3:d5:08:a3:62:81:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6E:77:C0:77:35:36:72:9B:94:8F:27:B2:BE:D6:53:3D:29:DF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5267559f-2275-3ec9-8912-c20f02435041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:65:8d:25:3b:7d:96:4b:8a:5d:56:ac:9d:0d:7c:4b:fe:80:
         98:dd:9d:03:2b:4c:c5:32:82:82:03:da:00:2b:74:92:8f:0e:
         2d:c8:b2:b9:fa:8b:68:ec:e3:f1:53:d5:f8:65:53:50:e0:44:
         65:97:26:8e:87:5b:40:2f:d1:05:7f:40:94:d8:ec:01:77:43:
         2a:52:1b:21:da:fd:39:c9:74:66:18:5f:c7:ec:8c:ea:8b:00:
         77:7d:bd:ed:64:cc:81:6a:63:5e:cf:40:67:a7:17:9e:ef:6b:
         a6:b1:3f:84:cc:a8:3c:a7:e0:d2:ff:21:41:bd:54:e2:3e:6a:
         96:b3:83:ee:5d:3b:99:73:02:9f:6d:77:c3:bb:d5:cf:1e:a5:
         db:29:b6:b0:dc:0a:6f:0a:e9:ff:cb:db:22:9e:36:dc:22:c7:
         87:c0:fd:27:e8:98:07:11:22:21:e7:14:a3:d9:06:44:40:b2:
         70:55:32:c3:05:19:5e:3d:5b:26:e1:cc:0c:73:e1:9e:08:b3:
         28:60:b2:79:54:db:4d:fc:9c:87:dc:e9:91:fe:bd:b6:c1:22:
         38:6d:ba:4d:ce:62:ca:c1:62:56:22:68:4b:4b:23:50:11:21:
         8a:e0:3c:bf:b0:e1:d2:ad:77:7e:fd:c2:50:64:84:33:ea:7c:
         81:40:8e:0a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu+QEGIv6W8xxOxnvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
ZjRhNDRkMTEtZWQ0OS00MGNjLWFkZjItYWQ1MjRiNDk4MDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbj3qRwB6evj3ZG1P1loEQDnzGz4nXhiDMR4
SNfBjFFafo3myWmzjrEnv/0oABajtjZiKgixFuJ1f6LBHmFxufdI/KeO5C7uWAUX
3ecG1/LQqiv9WuMpAjEgP4DEKZjxrNO23lYyyMilt1fS/Lw4r+wCUjts9ZM3L4D4
odFGSYt8HIJoKsPoun/N72qQraw5rB6e1eS1F2bxS8eCYgjy4EtZLJdaKivtq/ui
OtT52N3VIaUS9QjHgmGGqP375TAg/f4ZOPe9TBWRJXr9FeuV/5H577wNV5FH/3KF
3Ng1nlH9v6c9UmH6JBnS6I8zzHW0jEX1s9hUqe3T1QijYoFeJQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGpud8B3NTZym5SPJ7K+1lM9Kd/OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNTI2NzU1OWYtMjI3NS0z
ZWM5LTg5MTItYzIwZjAyNDM1MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBuZY0lO32WS4pdVqydDXxL/oCY3Z0DK0zFMoKCA9oAK3SSjw4tyLK5
+oto7OPxU9X4ZVNQ4ERllyaOh1tAL9EFf0CU2OwBd0MqUhsh2v05yXRmGF/H7Izq
iwB3fb3tZMyBamNez0Bnpxee72umsT+EzKg8p+DS/yFBvVTiPmqWs4PuXTuZcwKf
bXfDu9XPHqXbKbaw3ApvCun/y9sinjbcIseHwP0n6JgHESIh5xSj2QZEQLJwVTLD
BRlePVsm4cwMc+GeCLMoYLJ5VNtN/JyH3OmR/r22wSI4bbpNzmLKwWJWImhLSyNQ
ESGK4Dy/sOHSrXd+/cJQZIQz6nyBQI4K
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:03:53 2025 by rpki-client