Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
File:                     17bdc031-206a-3420-b709-d3ce9d5f5850.roa (raw, json)
Hash identifier:          jzSQDeqT0SDWsPAPcmfssKAygFa0ZiYnlsSobyt3AIM=
Subject key identifier:   5D:F2:F0:0B:DE:42:E1:F8:20:4F:0F:53:30:F4:BA:5D:87:D6:04:B0
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F4328584BB2F7A611287908FC0CF139C0
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397901
IP address blocks:        2602:fc56::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:a6:11:28:79:08:fc:0c:f1:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=1582b3b2-668f-49fa-83bc-53157cf74429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:20:71:9a:fc:a2:d8:af:0f:d6:d3:74:6c:
                    8d:8c:21:7f:a2:20:7e:eb:a0:c6:1b:66:8f:8f:25:
                    95:79:14:9f:72:a9:64:9d:37:32:57:50:e5:8f:bc:
                    a1:2f:9a:1d:c4:28:4f:4e:d9:a8:42:68:cb:9b:24:
                    65:7d:94:83:f8:1b:25:41:5d:e0:d8:66:b4:00:c6:
                    ab:a2:52:18:a4:69:8b:15:ff:99:38:5a:47:0a:da:
                    49:a9:0b:5f:3e:df:cf:77:89:cb:5d:44:91:3a:58:
                    ab:76:9a:90:f6:7a:d3:72:5d:79:27:e4:e8:03:ca:
                    7a:62:44:40:f2:e8:69:7b:65:1d:b5:93:ec:a4:96:
                    1e:4a:d1:af:df:6c:fa:97:ee:fc:f8:9d:c4:9f:5b:
                    69:65:74:a3:c7:2e:94:d4:27:b6:79:38:32:1b:ba:
                    e9:96:e1:bb:c7:7b:8d:69:e9:6c:30:da:49:03:64:
                    2b:9c:6a:73:fa:37:23:b9:20:43:d1:a3:cc:d1:38:
                    b4:bf:52:bb:18:25:d0:24:57:89:59:08:28:73:8f:
                    a7:7c:b1:45:c3:83:90:6a:e2:6d:6d:1b:2c:21:a0:
                    dd:fc:9c:1c:62:9f:a4:94:09:4b:7f:28:49:e3:7f:
                    bc:26:b4:9c:d2:f7:e1:35:7d:3e:0c:cd:8d:ed:9f:
                    a1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:F0:0B:DE:42:E1:F8:20:4F:0F:53:30:F4:BA:5D:87:D6:04:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc56::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ad:ee:53:0f:00:f7:16:f9:18:58:86:6d:57:99:f0:af:b0:
         8d:af:94:35:a6:28:b8:27:7f:2c:0a:17:da:70:64:57:f8:5e:
         7f:42:09:a7:78:8b:33:54:ce:ef:75:be:ee:4d:1c:2f:28:1f:
         35:28:63:a3:e5:4b:d9:fb:a4:f8:5c:2a:43:6e:a6:7a:05:e5:
         9a:a6:d9:f6:af:38:5d:e9:66:c0:c7:51:09:55:ad:45:f2:d1:
         66:fb:13:aa:fa:a2:4c:de:c3:5b:56:e7:bf:ca:d5:30:2d:f9:
         4c:17:82:61:be:5f:e3:cb:db:f1:ad:a5:53:28:76:d6:bb:65:
         22:f8:ca:ad:59:1a:03:24:f1:0a:24:77:b0:91:bb:3c:ad:44:
         04:8c:b8:b6:fd:17:26:f7:b1:22:ee:59:6a:6f:61:29:4f:87:
         52:29:bb:fb:f2:de:84:5a:6c:a4:4e:30:c8:f6:a4:60:63:e5:
         19:1a:95:ac:67:4b:b8:15:00:75:2d:10:af:36:9e:25:6f:fd:
         74:4c:71:dd:62:2a:a6:39:08:22:fd:c7:dc:52:94:e7:b2:60:
         1d:a9:e5:18:99:d7:f9:c3:be:33:3e:f9:2a:c2:6a:90:57:07:
         e2:6b:71:28:48:f6:ea:7a:4b:84:2b:d4:a6:d0:56:15:fb:35:
         88:ce:aa:54
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuy96YRKHkI/AzxOcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjljNmExOWUtYTgzYy00M2FkLThkMTAtNjhkYWViMTYw
MDMzMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
MTU4MmIzYjItNjY4Zi00OWZhLTgzYmMtNTMxNTdjZjc0NDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWQgcZr8otivD9bTdGyNjCF/oiB+66DGG2aP
jyWVeRSfcqlknTcyV1Dlj7yhL5odxChPTtmoQmjLmyRlfZSD+BslQV3g2Ga0AMar
olIYpGmLFf+ZOFpHCtpJqQtfPt/Pd4nLXUSROlirdpqQ9nrTcl15J+ToA8p6YkRA
8uhpe2UdtZPspJYeStGv32z6l+78+J3En1tpZXSjxy6U1Ce2eTgyG7rpluG7x3uN
aelsMNpJA2QrnGpz+jcjuSBD0aPM0Ti0v1K7GCXQJFeJWQgoc4+nfLFFw4OQauJt
bRssIaDd/JwcYp+klAlLfyhJ43+8JrSc0vfhNX0+DM2N7Z+hmwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFF3y8AveQuH4IE8PUzD0ul2H1gSwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOWM2
YTE5ZS1hODNjLTQzYWQtOGQxMC02OGRhZWIxNjAwMzMvMTdiZGMwMzEtMjA2YS0z
NDIwLWI3MDktZDNjZTlkNWY1ODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjljNmExOWUtYTgzYy00M2FkLThk
MTAtNjhkYWViMTYwMDMzLzI5YzZhMTllLWE4M2MtNDNhZC04ZDEwLTY4ZGFlYjE2
MDAzMy5jcmwwHwYDVR0jBBgwFoAURYuDipgToB+X1z11nxV01t29atEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yOWM2YTE5ZS1hODNjLTQzYWQtOGQxMC02OGRh
ZWIxNjAwMzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8VgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARq3uUw8A9xb5GFiGbVeZ8K+wja+UNaYouCd/LAoX2nBkV/hef0IJ
p3iLM1TO73W+7k0cLygfNShjo+VL2fuk+FwqQ26megXlmqbZ9q84XelmwMdRCVWt
RfLRZvsTqvqiTN7DW1bnv8rVMC35TBeCYb5f48vb8a2lUyh21rtlIvjKrVkaAyTx
CiR3sJG7PK1EBIy4tv0XJvexIu5Zam9hKU+HUim7+/LehFpspE4wyPakYGPlGRqV
rGdLuBUAdS0QrzaeJW/9dExx3WIqpjkIIv3H3FKU57JgHanlGJnX+cO+Mz75KsJq
kFcH4mtxKEj26npLhCvUptBWFfs1iM6qVA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:06:03 2025 by rpki-client