Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa
File:                     7ee09d50-9766-3739-bf54-024888d96b72.roa (raw, json)
Hash identifier:          MuLLoW0uNVOcY54dgd3vXaVDVAMTvhq9v+ZV9wpmUxA=
Subject key identifier:   A1:4D:1C:E5:62:92:57:97:BA:32:83:A1:77:A5:3E:2C:CD:E3:30:2A
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F4328584BC10ADA0048304631EBF2AC74
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     4185
IP address blocks:        2620:0:610::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:da:00:48:30:46:31:eb:f2:ac:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=b4c2419c-53c5-45c6-a362-3db82974f74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f2:d1:3b:15:dd:24:6a:c3:7b:53:8d:8e:75:
                    02:8e:c7:a0:c5:4d:c9:d6:ab:15:a8:c1:ce:97:08:
                    b7:eb:6f:2f:61:f0:c8:52:89:f9:75:3d:6f:d7:94:
                    fd:9b:0c:6f:71:3d:69:1a:95:5a:4b:cc:ca:90:af:
                    92:4e:fb:e4:7d:c5:a1:3b:6a:aa:bd:d6:55:2e:ba:
                    c2:f1:a0:fd:a7:65:5e:bb:e0:32:9f:e8:0f:fd:a2:
                    4c:5d:25:39:a0:30:9f:c9:c6:9c:4d:b3:11:de:dc:
                    1c:7d:ba:ca:50:12:52:c4:66:f1:f9:00:fb:11:65:
                    90:98:d8:6e:05:52:1f:6f:af:8f:56:1b:ca:ad:b5:
                    09:b9:87:09:1d:a3:83:5a:3a:d0:62:01:b9:e3:ff:
                    7f:7a:a3:2c:48:f1:65:ec:c4:b9:18:da:38:4a:37:
                    4a:d5:4e:cb:31:9e:8c:32:9b:b0:7d:05:c5:7c:7f:
                    c6:0e:05:27:4a:a4:64:40:08:83:a8:5e:af:4c:06:
                    b1:1e:f0:da:ca:ab:7a:82:81:7a:a5:75:a9:f5:b2:
                    0d:05:0f:ef:4b:5a:aa:27:c8:1e:03:da:b2:1f:f5:
                    88:20:da:8f:5c:94:94:88:ce:5c:e2:b1:1f:29:ab:
                    da:50:81:0a:45:ba:72:94:0e:67:cc:01:72:d8:47:
                    22:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4D:1C:E5:62:92:57:97:BA:32:83:A1:77:A5:3E:2C:CD:E3:30:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/7ee09d50-9766-3739-bf54-024888d96b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:6c:34:b4:c3:89:0f:fc:ad:2d:8d:96:d4:79:3f:2b:f3:8f:
         3a:c0:d1:bf:b7:db:25:aa:a5:95:89:05:16:2d:46:90:1a:29:
         99:ca:4c:9a:43:f1:86:b2:0c:8c:16:80:1c:df:dc:be:88:44:
         c1:78:6a:27:66:a4:d3:0b:10:6d:b5:02:06:f9:05:f1:1a:76:
         4b:e3:ca:33:bc:93:5b:e5:62:0c:b1:0b:7c:f0:d7:9a:cd:48:
         e2:bf:9d:69:e6:79:2c:39:1d:35:90:30:2a:fe:92:a3:fd:16:
         b5:6e:8c:0d:97:07:11:f0:95:df:73:49:64:23:62:40:25:d9:
         39:46:59:db:c1:44:ab:62:49:15:52:5c:d2:25:5d:c8:61:4b:
         b9:ff:c5:b7:eb:94:16:b8:8e:8c:ef:d3:03:f7:ca:af:f6:d1:
         71:b8:69:d1:a8:35:bb:1f:bb:fc:fc:94:64:52:56:77:59:bd:
         1b:b2:70:19:0a:99:84:a9:46:45:69:47:5a:ea:a0:b6:ea:65:
         87:6c:7d:96:05:48:6e:e6:4f:13:ef:1c:a8:17:d2:f3:0b:c8:
         1c:35:31:76:d9:cc:31:25:9b:ad:00:d6:4f:52:0b:01:ee:1f:
         79:75:1e:c4:68:12:a4:b8:c2:44:7f:dd:de:60:6b:37:5c:ea:
         78:9a:84:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvBCtoASDBGMevyrHQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmNhNDg2MmUtNzMxNC00NDE1LWEyNjQtNGU1ZGMzMWI3
M2Q4MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk
YjRjMjQxOWMtNTNjNS00NWM2LWEzNjItM2RiODI5NzRmNzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifLROxXdJGrDe1ONjnUCjsegxU3J1qsVqMHO
lwi3628vYfDIUon5dT1v15T9mwxvcT1pGpVaS8zKkK+STvvkfcWhO2qqvdZVLrrC
8aD9p2Veu+Ayn+gP/aJMXSU5oDCfycacTbMR3twcfbrKUBJSxGbx+QD7EWWQmNhu
BVIfb6+PVhvKrbUJuYcJHaODWjrQYgG54/9/eqMsSPFl7MS5GNo4SjdK1U7LMZ6M
MpuwfQXFfH/GDgUnSqRkQAiDqF6vTAaxHvDayqt6goF6pXWp9bINBQ/vS1qqJ8ge
A9qyH/WIINqPXJSUiM5c4rEfKavaUIEKRbpylA5nzAFy2EciLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKFNHOVikleXujKDoXelPizN4zAqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mY2E0
ODYyZS03MzE0LTQ0MTUtYTI2NC00ZTVkYzMxYjczZDgvN2VlMDlkNTAtOTc2Ni0z
NzM5LWJmNTQtMDI0ODg4ZDk2YjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmNhNDg2MmUtNzMxNC00NDE1LWEy
NjQtNGU1ZGMzMWI3M2Q4L2ZjYTQ4NjJlLTczMTQtNDQxNS1hMjY0LTRlNWRjMzFi
NzNkOC5jcmwwHwYDVR0jBBgwFoAU8yr+8X1nEtpqUNKYHz4xR2GCleQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mY2E0ODYyZS03MzE0LTQ0MTUtYTI2NC00ZTVk
YzMxYjczZDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAYQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALRsNLTDiQ/8rS2NltR5PyvzjzrA0b+32yWqpZWJBRYtRpAaKZnK
TJpD8YayDIwWgBzf3L6IRMF4aidmpNMLEG21Agb5BfEadkvjyjO8k1vlYgyxC3zw
15rNSOK/nWnmeSw5HTWQMCr+kqP9FrVujA2XBxHwld9zSWQjYkAl2TlGWdvBRKti
SRVSXNIlXchhS7n/xbfrlBa4jozv0wP3yq/20XG4adGoNbsfu/z8lGRSVndZvRuy
cBkKmYSpRkVpR1rqoLbqZYdsfZYFSG7mTxPvHKgX0vMLyBw1MXbZzDElm60A1k9S
CwHuH3l1HsRoEqS4wkR/3d5gazdc6niahJs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:57:26 2025 by rpki-client