Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa
File:                     4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa (raw, json)
Hash identifier:          8vNZFnafyQqfOvljXmdjuDFcNfaGW5TDvniwO8wNTec=
Subject key identifier:   FC:85:0B:A1:55:B8:B9:E3:30:B4:D7:64:A9:34:C6:29:89:B2:1E:4E
Certificate issuer:       /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Certificate serial:       010D0C9F4328584B7F520A8BB5D094645F13BE00
Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     398325
IP address blocks:        2605:e040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:0a:8b:b5:d0:94:64:5f:13:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=db74cf05-b310-462b-81c9-d7ff2501f40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:02:af:2d:63:cd:f2:8d:c4:f2:bc:c1:dd:8b:
                    52:87:37:2c:ac:73:55:fd:da:aa:c0:ad:8f:e9:27:
                    4e:58:ea:b2:95:a9:be:79:5f:30:fe:0a:2f:a9:1c:
                    23:28:1b:6f:90:d3:9b:61:aa:f8:90:85:80:78:3f:
                    8c:b1:d4:19:16:ab:ed:c0:47:cb:b0:80:6a:53:96:
                    4a:fd:8c:fc:05:fd:17:bc:4b:ac:22:fa:8e:11:d5:
                    6b:c6:17:4a:34:79:a7:73:d6:2b:99:aa:a5:50:0d:
                    a1:a3:bf:7f:9f:38:e3:a7:4a:c3:a1:77:49:22:4b:
                    73:a3:e5:ef:ac:60:07:e2:3f:03:0b:44:68:05:47:
                    67:fd:fa:ad:d7:a0:b0:fb:65:07:d6:6a:fa:9c:54:
                    1c:d5:e7:65:30:d3:8b:73:2d:83:65:5e:aa:b2:93:
                    58:10:bf:56:11:71:75:51:4a:14:b6:94:62:3b:6e:
                    f1:29:bf:bf:fa:29:67:f5:f9:7c:a0:8e:5f:2f:f2:
                    d7:02:b2:25:d3:bb:52:a3:3b:3b:4e:81:ff:75:e4:
                    44:01:b0:b8:97:53:5f:9f:a3:77:80:72:cc:04:7f:
                    72:9e:27:d1:76:81:f8:d9:86:fc:57:bb:e3:b4:1c:
                    27:5c:2c:44:a8:f8:07:1d:32:9e:86:3d:92:c5:2f:
                    d6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:85:0B:A1:55:B8:B9:E3:30:B4:D7:64:A9:34:C6:29:89:B2:1E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl

            X509v3 Authority Key Identifier:
                keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:8e:7f:c0:be:0b:c8:ea:52:12:c8:04:e0:68:db:bc:36:
         53:9f:9f:3b:52:c1:2e:8f:30:40:cc:a0:aa:17:c2:2b:1a:a8:
         c2:42:6c:eb:2c:c7:40:43:85:a3:70:a9:d0:a8:81:33:65:1f:
         e2:3f:b9:a8:6a:c1:c0:08:32:c3:c1:31:95:db:de:20:7c:7a:
         f2:ca:dc:f9:74:c0:66:f3:e4:1e:25:ee:a6:b7:c4:08:6e:6c:
         65:36:1d:cf:34:24:5c:04:ef:db:1f:8b:29:77:62:17:30:a6:
         91:c2:f2:ad:d4:16:24:4a:cc:34:4c:21:cb:43:de:98:5c:4c:
         ab:bf:83:74:55:7c:48:d0:2c:72:3e:f0:d1:35:6a:8b:0e:3e:
         37:46:3b:6d:23:42:0b:86:54:67:59:2b:d7:e3:a0:7b:7c:97:
         69:6e:37:48:ab:de:04:78:6e:bd:7c:59:28:92:56:6f:8e:9e:
         16:3e:2c:65:f0:1f:4f:9c:54:4f:bf:c9:32:5d:85:3e:9d:8a:
         53:73:c8:df:2f:59:74:07:48:9f:f7:4d:38:83:5b:b7:e8:1e:
         6a:d8:2c:01:f4:2d:49:36:57:73:40:8c:7e:e7:a6:80:d4:a9:
         69:12:62:0f:59:ba:24:0b:0f:e7:be:59:b3:2c:ac:d7:59:61:
         e3:43:38:05
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt/UgqLtdCUZF8TvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJjMzBjZGEtM2IzZi00ZThlLWE2ODctYjIwZDU0NDhh
NGU3MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
ZGI3NGNmMDUtYjMxMC00NjJiLTgxYzktZDdmZjI1MDFmNDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwKvLWPN8o3E8rzB3YtShzcsrHNV/dqqwK2P
6SdOWOqylam+eV8w/govqRwjKBtvkNObYar4kIWAeD+MsdQZFqvtwEfLsIBqU5ZK
/Yz8Bf0XvEusIvqOEdVrxhdKNHmnc9YrmaqlUA2ho79/nzjjp0rDoXdJIktzo+Xv
rGAH4j8DC0RoBUdn/fqt16Cw+2UH1mr6nFQc1edlMNOLcy2DZV6qspNYEL9WEXF1
UUoUtpRiO27xKb+/+iln9fl8oI5fL/LXArIl07tSozs7ToH/deREAbC4l1Nfn6N3
gHLMBH9ynifRdoH42Yb8V7vjtBwnXCxEqPgHHTKehj2SxS/WKQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPyFC6FVuLnjMLTXZKk0ximJsh5OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYmMz
MGNkYS0zYjNmLTRlOGUtYTY4Ny1iMjBkNTQ0OGE0ZTcvNDAwMWNiM2EtZTIwNi0z
MmQ1LTljOWEtYmQ4NmFjM2E2MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWJjMzBjZGEtM2IzZi00ZThlLWE2
ODctYjIwZDU0NDhhNGU3L2FiYzMwY2RhLTNiM2YtNGU4ZS1hNjg3LWIyMGQ1NDQ4
YTRlNy5jcmwwHwYDVR0jBBgwFoAUWjNUcS2B4/8BBQT5LA5f45A2vMEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYmMzMGNkYS0zYjNmLTRlOGUtYTY4Ny1iMjBk
NTQ0OGE0ZTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXgQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBM0o5/wL4LyOpSEsgE4GjbvDZTn587UsEujzBAzKCqF8IrGqjCQmzr
LMdAQ4WjcKnQqIEzZR/iP7moasHACDLDwTGV294gfHryytz5dMBm8+QeJe6mt8QI
bmxlNh3PNCRcBO/bH4spd2IXMKaRwvKt1BYkSsw0TCHLQ96YXEyrv4N0VXxI0Cxy
PvDRNWqLDj43RjttI0ILhlRnWSvX46B7fJdpbjdIq94EeG69fFkoklZvjp4WPixl
8B9PnFRPv8kyXYU+nYpTc8jfL1l0B0if9004g1u36B5q2CwB9C1JNldzQIx+56aA
1KlpEmIPWbokCw/nvlmzLKzXWWHjQzgF
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:43:18 2025 by rpki-client