Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa
File:                     fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa (raw, json)
Hash identifier:          eqwKPDEw34MeK+PauFvVGvaEnTEW6uxsQVBufHNZDiY=
Subject key identifier:   2E:49:60:02:3C:9A:7C:A0:57:69:9F:06:3D:0A:21:A0:09:7C:ED:1B
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584B970CCF0B8774F13AA43E6080
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     16904
IP address blocks:        2606:9300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:cf:0b:87:74:f1:3a:a4:3e:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=57a23862-aea5-4df3-8617-6bd53f40cf68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:ba:32:f9:05:12:09:c4:da:4c:af:ba:15:
                    73:6f:a9:33:44:5b:e2:6d:e2:c4:c4:6d:ae:45:bd:
                    11:91:7d:58:04:8f:c6:9b:8c:98:34:40:b7:df:cd:
                    37:04:4e:26:5b:ed:6b:62:b5:0e:d0:0c:30:f5:0e:
                    cd:34:1c:80:42:12:55:c8:26:08:84:01:c9:06:f0:
                    97:40:05:b0:a7:09:8a:9f:f7:1c:d7:5b:2d:b9:fb:
                    2f:ce:0c:06:ef:a7:32:76:79:41:56:b2:18:4b:e0:
                    e6:82:8b:8a:9a:fb:fd:a9:d3:cb:dd:61:51:2c:06:
                    10:d5:a3:9b:61:97:11:1e:82:7e:97:ae:e6:61:be:
                    49:bf:a6:8b:a0:37:8d:4e:65:cb:37:09:42:71:14:
                    08:fe:ef:fb:c5:a3:3b:49:fc:d5:a7:10:f2:4e:f9:
                    9d:05:00:a2:a8:ff:03:bb:9e:58:85:a1:a2:d3:94:
                    96:f2:f7:e0:db:1c:e3:d7:33:88:0c:02:8d:5b:0a:
                    e4:19:14:7b:55:58:e2:04:97:71:f0:37:ee:2a:b7:
                    5a:1c:7c:82:87:a7:9c:b4:5f:5f:bd:3d:3e:41:76:
                    68:7f:b7:89:1b:9e:ef:f7:3e:c0:79:ae:5a:0e:6f:
                    27:54:81:d0:4b:60:0b:f7:a1:e4:92:91:8a:90:9b:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:49:60:02:3C:9A:7C:A0:57:69:9F:06:3D:0A:21:A0:09:7C:ED:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/fe65e4ad-9d1d-3e23-a243-05ccccbcd06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:02:ab:0a:31:7f:1b:3c:d3:60:b4:cb:1b:d1:9b:2e:b5:43:
         86:ed:e9:cc:9d:10:d6:51:c1:1e:6f:69:82:b4:ff:15:c2:3f:
         36:52:fd:1e:fd:ab:4e:a0:d1:69:a7:49:ec:a0:9c:8b:ec:af:
         f3:4a:6c:21:5a:a0:aa:e5:7f:97:ca:5a:22:8b:49:e7:98:46:
         8f:c0:66:77:2c:ab:49:aa:80:64:18:29:71:a6:15:d4:3a:ef:
         22:98:fe:0c:d1:2d:e8:cd:dd:d1:62:13:27:7a:9d:30:e5:71:
         eb:8a:bc:a3:16:92:30:10:e7:13:58:cc:1e:72:eb:7a:76:c6:
         c1:5d:74:9e:e9:a9:81:1e:21:1e:e7:f6:0f:90:eb:7c:43:8b:
         72:2a:e8:dc:be:04:4f:02:c7:99:a4:e4:33:2e:f7:be:7c:16:
         5b:33:3e:fd:d9:26:81:cf:f5:b0:61:7d:dc:28:b3:05:14:8a:
         68:80:2d:29:35:3f:a1:10:67:87:de:e4:a6:10:0f:7c:05:58:
         0b:e7:17:31:67:35:3f:84:47:c7:c1:04:c8:cf:3b:37:a8:de:
         bd:9f:a8:1c:0f:19:ff:38:24:9e:72:42:0e:85:5c:ff:16:56:
         76:e7:c8:3b:92:bb:ec:64:46:9d:1e:3c:92:6d:04:04:6a:83:
         fc:32:87:ec
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuXDM8Lh3TxOqQ+YIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
NTdhMjM4NjItYWVhNS00ZGYzLTg2MTctNmJkNTNmNDBjZjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hm6MvkFEgnE2kyvuhVzb6kzRFvibeLExG2u
Rb0RkX1YBI/Gm4yYNEC33803BE4mW+1rYrUO0Aww9Q7NNByAQhJVyCYIhAHJBvCX
QAWwpwmKn/cc11stufsvzgwG76cydnlBVrIYS+DmgouKmvv9qdPL3WFRLAYQ1aOb
YZcRHoJ+l67mYb5Jv6aLoDeNTmXLNwlCcRQI/u/7xaM7SfzVpxDyTvmdBQCiqP8D
u55YhaGi05SW8vfg2xzj1zOIDAKNWwrkGRR7VVjiBJdx8DfuKrdaHHyCh6ectF9f
vT0+QXZof7eJG57v9z7Aea5aDm8nVIHQS2AL96HkkpGKkJv4TwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFC5JYAI8mnygV2mfBj0KIaAJfO0bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvZmU2NWU0YWQtOWQxZC0z
ZTIzLWEyNDMtMDVjY2NjYmNkMDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaTADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA3AqsKMX8bPNNgtMsb0ZsutUOG7enMnRDWUcEeb2mCtP8Vwj82Uv0e
/atOoNFpp0nsoJyL7K/zSmwhWqCq5X+Xyloii0nnmEaPwGZ3LKtJqoBkGClxphXU
Ou8imP4M0S3ozd3RYhMnep0w5XHriryjFpIwEOcTWMwecut6dsbBXXSe6amBHiEe
5/YPkOt8Q4tyKujcvgRPAseZpOQzLve+fBZbMz792SaBz/WwYX3cKLMFFIpogC0p
NT+hEGeH3uSmEA98BVgL5xcxZzU/hEfHwQTIzzs3qN69n6gcDxn/OCSeckIOhVz/
FlZ258g7krvsZEadHjySbQQEaoP8Mofs
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:59:41 2025 by rpki-client