Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa
File:                     1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa (raw, json)
Hash identifier:          SzjnlihTkS7Ddn5r7B0qIcYxzb7SBj6Sj7/e/SO2xag=
Subject key identifier:   37:40:68:5F:ED:A7:68:C8:E2:6D:CC:E9:55:C8:EF:F5:64:1A:F4:2C
Certificate issuer:       /CN=112b9ff8-31bc-4ba4-b852-11826fa336d5
Certificate serial:       010D0C9F4328584BB88D2ED58BA7B18DF7E77D80
Authority key identifier: 88:24:CE:9B:C9:2F:15:68:37:5D:8A:4A:21:97:9D:E0:38:F7:39:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     53566
IP address blocks:        2606:dd80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:2e:d5:8b:a7:b1:8d:f7:e7:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112b9ff8-31bc-4ba4-b852-11826fa336d5
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=e5a1ef31-8bb1-4a91-88f0-22cbaefc4791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:05:10:7a:6a:ab:69:08:a5:28:12:7e:8c:8e:
                    b4:d5:18:d4:66:cd:40:77:cc:c3:14:1f:fa:af:15:
                    c9:af:de:5b:c5:af:b6:d0:36:5e:c7:8a:8f:cc:1d:
                    58:00:5a:0a:f1:ea:e8:73:86:ff:6f:09:c9:2d:71:
                    f3:21:3d:39:c7:02:12:bc:f9:fa:5c:59:3b:82:f6:
                    34:2f:87:b3:e6:51:51:f9:4f:4c:a1:aa:92:63:93:
                    8e:78:2d:65:e4:00:fd:47:17:09:d3:65:d8:36:7a:
                    dd:b0:95:18:d8:12:7e:53:cd:9e:71:0d:47:52:87:
                    c0:95:88:c7:a4:9c:f9:77:d8:95:93:b6:37:e5:f8:
                    28:a2:85:17:27:bc:6b:6d:f9:2a:7d:00:63:17:07:
                    13:d4:0d:d0:39:5d:1f:a1:9a:ea:81:43:b4:50:84:
                    6a:5e:a3:89:43:f9:d3:82:c8:49:63:ef:21:d4:68:
                    2d:4a:ce:ec:11:68:03:a0:04:30:b3:fc:d8:9d:31:
                    2b:38:d0:92:0e:d7:72:ff:e5:ac:75:df:09:5d:c3:
                    97:ad:cc:d3:89:32:77:b1:97:a0:a4:85:0a:f2:52:
                    43:e4:0a:82:86:1c:42:87:77:d0:d7:6e:5e:16:71:
                    eb:2a:a7:ac:c1:f5:e1:b0:bf:e1:cd:62:67:3a:7a:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:68:5F:ED:A7:68:C8:E2:6D:CC:E9:55:C8:EF:F5:64:1A:F4:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/1167dd4d-e095-33cd-88d8-ff6090bb6d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5/112b9ff8-31bc-4ba4-b852-11826fa336d5.crl

            X509v3 Authority Key Identifier:
                keyid:88:24:CE:9B:C9:2F:15:68:37:5D:8A:4A:21:97:9D:E0:38:F7:39:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/112b9ff8-31bc-4ba4-b852-11826fa336d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:50:5f:0a:54:48:5a:fa:84:db:ee:8a:38:91:3c:cc:b8:e9:
         ad:ca:f3:5f:e4:64:4b:39:39:54:8e:42:e2:fd:5c:ef:84:93:
         58:99:67:ab:53:6c:78:a2:82:c7:55:f4:60:4b:85:29:ba:81:
         0b:05:86:a4:ac:53:19:83:b0:f4:97:59:be:81:e4:49:14:96:
         3f:de:ef:d9:16:e1:6e:f9:be:4d:b9:28:f4:94:85:d1:99:66:
         07:bd:b4:43:f2:8a:15:4a:68:69:5a:ff:2f:3b:25:6e:ed:aa:
         f0:8c:81:50:6e:a2:ed:55:fa:7d:66:11:20:81:e3:8b:1b:d5:
         ac:7f:62:a4:80:59:d4:54:25:1c:e3:f8:85:4b:80:53:3b:0e:
         3e:cf:bb:bd:06:ad:cd:14:c7:90:7d:2d:c7:c8:1c:1e:4c:40:
         e2:74:3d:28:3c:35:54:01:b0:dd:67:b1:f0:0c:63:98:be:d2:
         3a:19:92:75:a0:e6:de:eb:18:80:d1:47:02:18:53:d5:63:70:
         cc:b5:34:b0:32:a0:1d:4c:c2:f3:90:8b:e8:93:4a:e7:04:b3:
         49:2b:aa:a8:4b:59:27:18:0f:81:57:c8:82:06:7d:22:ed:50:
         fd:89:b6:a4:34:3b:80:ec:5f:c8:67:7a:e7:22:0a:f6:bd:59:
         2f:5e:08:33
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu4jS7Vi6exjffnfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTEyYjlmZjgtMzFiYy00YmE0LWI4NTItMTE4MjZmYTMz
NmQ1MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZTVhMWVmMzEtOGJiMS00YTkxLTg4ZjAtMjJjYmFlZmM0NzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gUQemqraQilKBJ+jI601RjUZs1Ad8zDFB/6
rxXJr95bxa+20DZex4qPzB1YAFoK8eroc4b/bwnJLXHzIT05xwISvPn6XFk7gvY0
L4ez5lFR+U9MoaqSY5OOeC1l5AD9RxcJ02XYNnrdsJUY2BJ+U82ecQ1HUofAlYjH
pJz5d9iVk7Y35fgoooUXJ7xrbfkqfQBjFwcT1A3QOV0foZrqgUO0UIRqXqOJQ/nT
gshJY+8h1GgtSs7sEWgDoAQws/zYnTErONCSDtdy/+Wsdd8JXcOXrczTiTJ3sZeg
pIUK8lJD5AqChhxCh3fQ125eFnHrKqeswfXhsL/hzWJnOnpamwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDdAaF/tp2jI4m3M6VXI7/VkGvQsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMTJi
OWZmOC0zMWJjLTRiYTQtYjg1Mi0xMTgyNmZhMzM2ZDUvMTE2N2RkNGQtZTA5NS0z
M2NkLTg4ZDgtZmY2MDkwYmI2ZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTEyYjlmZjgtMzFiYy00YmE0LWI4
NTItMTE4MjZmYTMzNmQ1LzExMmI5ZmY4LTMxYmMtNGJhNC1iODUyLTExODI2ZmEz
MzZkNS5jcmwwHwYDVR0jBBgwFoAUiCTOm8kvFWg3XYpKIZed4Dj3OYwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMTJiOWZmOC0zMWJjLTRiYTQtYjg1Mi0xMTgy
NmZhMzM2ZDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbdgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCaUF8KVEha+oTb7oo4kTzMuOmtyvNf5GRLOTlUjkLi/VzvhJNYmWer
U2x4ooLHVfRgS4UpuoELBYakrFMZg7D0l1m+geRJFJY/3u/ZFuFu+b5NuSj0lIXR
mWYHvbRD8ooVSmhpWv8vOyVu7arwjIFQbqLtVfp9ZhEggeOLG9Wsf2KkgFnUVCUc
4/iFS4BTOw4+z7u9Bq3NFMeQfS3HyBweTEDidD0oPDVUAbDdZ7HwDGOYvtI6GZJ1
oObe6xiA0UcCGFPVY3DMtTSwMqAdTMLzkIvok0rnBLNJK6qoS1knGA+BV8iCBn0i
7VD9ibakNDuA7F/IZ3rnIgr2vVkvXggz
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:12:30 2025 by rpki-client