Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a78b7a93-0cd2-3bd8-aca4-58bcee9e6c83.roa
File:                     a78b7a93-0cd2-3bd8-aca4-58bcee9e6c83.roa (raw, json)
Hash identifier:          eYoj1WglkO0jpPH4XpShpo/ASKEDf1ckOrOvQNSlJ5I=
Subject key identifier:   F7:AE:FE:2B:4A:ED:E5:C6:38:88:6B:C4:DA:4C:74:C9:BC:80:C3:52
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B9EA2100C9B5E406F631435E0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a78b7a93-0cd2-3bd8-aca4-58bcee9e6c83.roa
Signing time:             Thu 23 Oct 2025 18:11:57 +0000
ROA not before:           Thu 23 Oct 2025 18:11:57 +0000
ROA not after:            Wed 21 Jan 2026 19:11:57 +0000
asID:                     23473
IP address blocks:        2607:f750:1316::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:a2:10:0c:9b:5e:40:6f:63:14:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 23 18:11:57 2025 GMT
            Not After : Jan 21 19:11:57 2026 GMT
        Subject: CN=d6ac8d69-2aec-47d7-a806-0f9da24b5979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:b8:be:b8:d7:4a:31:6e:b1:37:10:69:27:
                    a4:90:aa:01:34:9d:f1:96:82:e3:8f:3f:e2:49:24:
                    d4:3a:ba:b2:ab:79:21:16:01:25:9b:d5:da:c6:b4:
                    39:c7:8d:84:a3:ad:29:0e:fb:08:08:03:b0:25:c0:
                    a7:cf:30:af:c3:ad:d9:f1:76:c8:cf:99:8a:08:2a:
                    11:96:df:84:ba:69:b9:ac:21:c3:b4:76:8f:a0:18:
                    1a:ec:d6:90:a3:72:42:37:4e:0e:6b:f8:4e:37:8b:
                    2a:f6:dc:26:13:8b:be:2d:d1:91:91:63:94:d0:ae:
                    58:a6:e1:ed:86:a1:9d:2e:73:71:c2:e0:7d:16:5e:
                    8d:70:db:f2:2f:cd:1e:0b:ff:d9:19:6f:f0:63:b1:
                    a7:23:bb:df:36:af:b5:e3:24:be:bd:0b:7e:1d:81:
                    9c:e6:3c:bd:58:e8:dd:2f:29:02:92:5d:22:ed:88:
                    5d:c0:08:65:db:7d:a4:29:5a:66:5a:2e:bc:06:be:
                    5f:b6:ed:6e:71:24:75:9b:29:40:7e:17:01:30:e6:
                    3e:4f:fe:8f:81:90:88:cb:b8:e3:f8:ce:4e:25:88:
                    c8:5f:3f:80:ab:2d:3e:d2:9e:18:a5:9d:e5:ed:5b:
                    ed:10:a8:bd:16:3b:37:c1:bc:80:a5:63:a1:a5:e6:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AE:FE:2B:4A:ED:E5:C6:38:88:6B:C4:DA:4C:74:C9:BC:80:C3:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a78b7a93-0cd2-3bd8-aca4-58bcee9e6c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:1316::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:33:1c:2f:14:b1:c4:e8:1e:95:de:43:d6:16:27:90:f3:1d:
         6d:97:a6:5f:66:42:bd:48:51:76:b2:ae:3c:46:d7:63:8c:f8:
         07:be:d0:46:70:3a:76:14:8c:25:8a:59:48:a7:95:b8:08:02:
         e1:6c:e9:61:69:34:36:6e:fe:6a:8d:1c:79:10:23:09:fc:c4:
         4c:0f:73:07:43:a1:d4:21:0d:70:87:41:92:5c:65:54:fe:1d:
         80:63:ab:63:44:1f:6d:9c:41:7d:b6:0d:ac:e0:85:15:59:68:
         2f:65:18:4e:ec:90:7f:20:34:0a:c1:27:6c:49:f0:5b:00:d7:
         1c:8f:5a:5e:d5:92:6c:e2:0c:b6:cf:ce:0a:15:08:01:7f:f3:
         6a:32:13:b9:9f:73:46:49:20:38:f0:4d:0d:10:30:89:23:18:
         f4:9a:68:04:2e:de:3f:ea:dc:37:01:5a:e0:3d:cb:67:51:d3:
         d2:93:01:2f:60:db:97:86:c2:b7:10:41:69:7c:af:9a:31:13:
         5f:bf:10:d9:60:3e:b4:ac:6c:7d:a4:ef:0c:76:45:e1:b4:74:
         3d:49:b2:df:5d:94:c5:83:44:8d:80:61:2c:e4:b6:e6:5e:be:
         2d:3a:19:fc:12:79:50:ea:01:19:04:7a:92:a4:2a:e9:a0:7b:
         e0:c3:f7:d9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueohAMm15Ab2MUNeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MTAyMzE4MTE1N1oXDTI2MDEyMTE5MTE1N1owLzEtMCsGA1UEAxMk
ZDZhYzhkNjktMmFlYy00N2Q3LWE4MDYtMGY5ZGEyNGI1OTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN64vrjXSjFusTcQaSekkKoBNJ3xloLjjz/i
SSTUOrqyq3khFgElm9XaxrQ5x42Eo60pDvsICAOwJcCnzzCvw63Z8XbIz5mKCCoR
lt+Eumm5rCHDtHaPoBga7NaQo3JCN04Oa/hON4sq9twmE4u+LdGRkWOU0K5YpuHt
hqGdLnNxwuB9Fl6NcNvyL80eC//ZGW/wY7GnI7vfNq+14yS+vQt+HYGc5jy9WOjd
LykCkl0i7YhdwAhl232kKVpmWi68Br5ftu1ucSR1mylAfhcBMOY+T/6PgZCIy7jj
+M5OJYjIXz+Aqy0+0p4YpZ3l7VvtEKi9Fjs3wbyApWOhpeZ8LwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPeu/itK7eXGOIhrxNpMdMm8gMNSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTc4YjdhOTMtMGNkMi0z
YmQ4LWFjYTQtNThiY2VlOWU2YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf3UBMW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF4zHC8UscToHpXeQ9YWJ5DzHW2Xpl9mQr1IUXayrjxG12OM+Ae+
0EZwOnYUjCWKWUinlbgIAuFs6WFpNDZu/mqNHHkQIwn8xEwPcwdDodQhDXCHQZJc
ZVT+HYBjq2NEH22cQX22DazghRVZaC9lGE7skH8gNArBJ2xJ8FsA1xyPWl7Vkmzi
DLbPzgoVCAF/82oyE7mfc0ZJIDjwTQ0QMIkjGPSaaAQu3j/q3DcBWuA9y2dR09KT
AS9g25eGwrcQQWl8r5oxE1+/ENlgPrSsbH2k7wx2ReG0dD1Jst9dlMWDRI2AYSzk
tuZevi06GfwSeVDqARkEepKkKumge+DD99k=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:05:18 2025 by rpki-client