Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
File:                     24b668fc-a509-3a42-8684-d6b7501ff35b.roa (raw, json)
Hash identifier:          ri5dEiDlQhdJ2Nfex0C4h6YxxKjrz2ukygl8mArb9fs=
Subject key identifier:   A4:35:1D:3D:88:72:20:03:6A:DF:CF:39:0A:D9:82:B8:64:80:07:B6
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328584BA9326E051C8BED3557266380
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     398646
IP address blocks:        2602:fe6b::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:6e:05:1c:8b:ed:35:57:26:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=2f4d2fa0-2701-4da4-8528-82b75718c5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d1:c0:c1:cb:5a:41:b9:ec:a7:9f:a4:fd:a9:
                    61:4f:a4:fb:60:8a:c5:50:ed:c3:b1:40:06:12:cd:
                    4d:9d:7f:a0:36:37:a0:61:b6:e0:87:92:1a:2f:3c:
                    d8:a1:cb:f9:64:bf:7b:c3:2a:d8:5d:a7:e1:e7:2d:
                    ba:03:1f:17:29:9a:12:35:12:c8:83:b7:64:08:d6:
                    3b:25:b3:0c:96:12:10:92:29:56:38:9e:bd:d1:8b:
                    c3:7c:a9:b4:6d:da:94:0c:1c:1f:90:5f:a9:f3:bf:
                    f0:37:c0:0e:b1:8b:96:91:89:53:0a:ff:be:d5:b8:
                    ae:3f:15:ef:1e:5b:34:88:c9:98:b0:34:9e:31:7f:
                    45:e8:80:49:71:88:09:e5:dd:c2:90:3f:6b:bc:95:
                    a5:b3:4e:f3:09:6b:f8:dc:2b:c3:02:ec:ee:aa:f3:
                    5a:fd:34:5d:22:ff:53:ba:89:de:10:3d:6f:d6:b9:
                    3d:19:32:58:6b:48:31:b3:9e:34:d0:b2:8d:7c:19:
                    52:28:95:88:5d:e2:b2:86:f1:ec:f0:b2:04:0e:b0:
                    19:de:1f:32:8e:1e:c8:47:fe:ca:5a:e6:ec:7c:c8:
                    ec:3b:28:6c:8c:57:e0:d5:69:15:dd:8b:47:13:03:
                    13:52:9a:14:d2:d7:db:9c:b3:38:a5:9d:92:40:20:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:35:1D:3D:88:72:20:03:6A:DF:CF:39:0A:D9:82:B8:64:80:07:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:97:07:b1:db:bc:95:2d:af:91:14:4c:0b:59:d4:e3:5b:b1:
         81:d5:0a:40:c1:96:74:cb:f3:9f:7a:ad:8b:86:75:d3:a0:f0:
         54:59:85:dd:e8:4a:36:d0:00:fb:b8:69:a2:d9:2f:9a:f2:f2:
         97:c1:05:71:f1:35:3f:4a:21:d9:68:e6:80:d7:2a:37:61:60:
         c6:4e:02:de:78:43:35:7c:6a:29:1c:0c:4e:5a:9d:4b:de:b3:
         bc:a7:e2:7c:e3:73:6a:7f:fb:d5:20:f6:86:3d:39:f5:77:02:
         52:76:87:4a:1a:d5:a9:01:b4:77:4d:e4:dd:a4:d4:ca:d2:8c:
         af:56:73:53:ac:41:f9:b3:eb:c4:cd:53:76:6b:5a:43:fb:2f:
         6a:8d:72:06:39:3f:46:55:f2:22:58:f6:d5:a8:4e:be:d7:5f:
         23:e8:c1:25:35:f8:17:15:cb:61:04:49:c4:ec:17:5a:e5:39:
         dd:64:b2:4a:9e:7a:18:a5:81:d5:ea:cd:83:fb:95:48:c9:67:
         f3:a4:f4:b1:c9:96:ad:63:28:b8:7c:51:3c:f1:9e:75:64:e8:
         30:87:b6:58:64:cf:af:a7:e4:5a:0b:66:39:b2:c3:13:47:cd:
         79:c5:cc:51:2f:b5:fa:a4:b5:94:5d:be:cb:c0:50:cd:b8:39:
         cf:bc:18:77
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEupMm4FHIvtNVcmY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0ZWRhNDItMWI4OS00MTI0LThhMDYtNjMzODEyNzgz
NzVkMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
MmY0ZDJmYTAtMjcwMS00ZGE0LTg1MjgtODJiNzU3MThjNWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtHAwctaQbnsp5+k/alhT6T7YIrFUO3DsUAG
Es1NnX+gNjegYbbgh5IaLzzYocv5ZL97wyrYXafh5y26Ax8XKZoSNRLIg7dkCNY7
JbMMlhIQkilWOJ690YvDfKm0bdqUDBwfkF+p87/wN8AOsYuWkYlTCv++1biuPxXv
Hls0iMmYsDSeMX9F6IBJcYgJ5d3CkD9rvJWls07zCWv43CvDAuzuqvNa/TRdIv9T
uoneED1v1rk9GTJYa0gxs5400LKNfBlSKJWIXeKyhvHs8LIEDrAZ3h8yjh7IR/7K
WubsfMjsOyhsjFfg1WkV3YtHEwMTUpoU0tfbnLM4pZ2SQCCDQwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKQ1HT2IciADat/POQrZgrhkgAe2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZTRl
ZGE0Mi0xYjg5LTQxMjQtOGEwNi02MzM4MTI3ODM3NWQvMjRiNjY4ZmMtYTUwOS0z
YTQyLTg2ODQtZDZiNzUwMWZmMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2U0ZWRhNDItMWI4OS00MTI0LThh
MDYtNjMzODEyNzgzNzVkLzdlNGVkYTQyLTFiODktNDEyNC04YTA2LTYzMzgxMjc4
Mzc1ZC5jcmwwHwYDVR0jBBgwFoAUik9e9/o52EdQMpAXHOPDy+bTsGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZTRlZGE0Mi0xYjg5LTQxMjQtOGEwNi02MzM4
MTI3ODM3NWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL+azBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAUlwex27yVLa+RFEwLWdTjW7GB1QpAwZZ0y/Ofeq2LhnXToPBUWYXd
6Eo20AD7uGmi2S+a8vKXwQVx8TU/SiHZaOaA1yo3YWDGTgLeeEM1fGopHAxOWp1L
3rO8p+J843Nqf/vVIPaGPTn1dwJSdodKGtWpAbR3TeTdpNTK0oyvVnNTrEH5s+vE
zVN2a1pD+y9qjXIGOT9GVfIiWPbVqE6+118j6MElNfgXFcthBEnE7Bda5TndZLJK
nnoYpYHV6s2D+5VIyWfzpPSxyZatYyi4fFE88Z51ZOgwh7ZYZM+vp+RaC2Y5ssMT
R815xcxRL7X6pLWUXb7LwFDNuDnPvBh3
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:10:40 2025 by rpki-client