Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/4dcb0f93-9824-30cb-b45f-51c078ec780e.roa
File:                     4dcb0f93-9824-30cb-b45f-51c078ec780e.roa (raw, json)
Hash identifier:          IuEcqCLYLEiJemzWMuZa4LOVEUb80ERj+x5LI+/nKds=
Subject key identifier:   66:03:3E:EE:9A:05:81:22:AB:85:AE:44:F8:81:09:E4:17:67:EC:F2
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584BA667A2A5FB32B03090E208A0
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/4dcb0f93-9824-30cb-b45f-51c078ec780e.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     32181
IP address blocks:        2602:fea7:e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:a2:a5:fb:32:b0:30:90:e2:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=8870ea06-be49-44ab-beed-ae0220a80973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9c:95:76:71:88:c2:f0:e8:da:c1:44:ab:40:
                    cc:5f:67:26:57:51:04:f3:58:66:d1:d0:97:2a:9f:
                    73:34:87:3d:73:e9:60:9c:c5:0c:28:d7:e4:cf:d8:
                    49:4d:a5:af:c5:cd:77:7d:66:c0:9d:fe:5b:2f:c0:
                    04:7d:b2:ce:70:2c:e8:9b:fd:7d:e6:f6:dd:b5:15:
                    c1:ed:13:85:5b:89:d1:d1:6a:8c:b6:82:21:e6:04:
                    3b:88:ed:57:a7:2d:e4:04:17:44:e8:96:81:f1:8c:
                    9c:b2:93:60:ed:3d:d5:51:d6:9d:c0:3a:77:83:49:
                    c4:5c:4e:28:d3:f0:60:15:64:b2:b7:68:38:d9:17:
                    f6:f6:cf:c7:d4:b4:f9:60:52:c5:3b:27:90:bd:2b:
                    dc:ac:15:12:6b:b7:6c:d1:1a:6f:6f:c8:a2:d9:0a:
                    23:a3:7a:79:87:aa:22:52:25:75:bd:3a:4b:89:5c:
                    c7:9d:92:5d:f1:c4:42:75:f0:24:4a:66:10:55:e9:
                    0d:2b:67:0e:3e:f3:9c:80:53:0c:ee:ea:75:74:c3:
                    c7:f7:e2:de:5a:30:2a:99:a5:90:4b:8d:96:12:6b:
                    b4:97:f3:1d:f9:61:06:da:46:f5:21:34:f6:2e:c4:
                    91:f1:da:c5:d2:14:a5:58:e6:4c:a5:37:00:d9:f5:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:03:3E:EE:9A:05:81:22:AB:85:AE:44:F8:81:09:E4:17:67:EC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/4dcb0f93-9824-30cb-b45f-51c078ec780e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea7:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c2:cd:fe:75:43:a3:d3:dc:81:e0:04:d3:a6:5f:3d:a6:ec:
         89:17:d3:43:64:2f:76:b1:02:83:19:c1:39:12:42:90:a2:38:
         23:33:09:21:df:65:51:8c:19:b6:7b:b7:64:20:67:78:78:fe:
         3e:c5:48:02:fd:05:0d:ea:f5:0d:32:a5:d4:ac:1b:78:5b:bc:
         36:bf:a0:27:e8:9e:6c:3c:ac:b7:3a:cb:34:75:5b:f4:c5:f7:
         41:e7:2e:05:1a:31:4e:42:0b:1e:23:b4:8b:72:58:8e:79:f9:
         0a:a2:bd:16:df:77:15:86:80:2a:15:22:4a:3f:f4:08:84:a7:
         a4:84:53:80:0a:48:0b:d0:2b:95:87:ba:0c:4c:09:c7:49:b2:
         14:c8:a1:e6:b1:96:d1:7e:88:32:d6:9e:d2:2e:06:8f:e0:08:
         fe:b4:4a:62:8c:d8:cf:2e:8c:f9:57:b5:d8:67:68:c9:ab:9e:
         b8:e3:51:40:70:4b:65:f6:98:45:06:dc:65:1b:a8:4a:50:28:
         1d:5d:44:90:8d:6e:54:c5:ae:4d:71:c3:bf:1e:00:27:57:a1:
         85:3b:aa:b3:b8:70:be:ec:a5:52:b1:1f:e7:cd:d3:5d:36:0e:
         fc:a9:c9:84:1d:a5:a2:34:2f:a2:e7:9a:a7:b2:f3:b4:b4:f8:
         22:00:40:ad
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEumZ6Kl+zKwMJDiCKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5YWM5ZjctZWY0Zi00ZjU2LWJlYzItMjFjOWEyYjI1
YzExMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk
ODg3MGVhMDYtYmU0OS00NGFiLWJlZWQtYWUwMjIwYTgwOTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5yVdnGIwvDo2sFEq0DMX2cmV1EE81hm0dCX
Kp9zNIc9c+lgnMUMKNfkz9hJTaWvxc13fWbAnf5bL8AEfbLOcCzom/195vbdtRXB
7ROFW4nR0WqMtoIh5gQ7iO1Xpy3kBBdE6JaB8YycspNg7T3VUdadwDp3g0nEXE4o
0/BgFWSyt2g42Rf29s/H1LT5YFLFOyeQvSvcrBUSa7ds0Rpvb8ii2Qojo3p5h6oi
UiV1vTpLiVzHnZJd8cRCdfAkSmYQVekNK2cOPvOcgFMM7up1dMPH9+LeWjAqmaWQ
S42WEmu0l/Md+WEG2kb1ITT2LsSR8drF0hSlWOZMpTcA2fUyHwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGYDPu6aBYEiq4WuRPiBCeQXZ+zyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlh
YzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5YTJiMjVjMTEvNGRjYjBmOTMtOTgyNC0z
MGNiLWI0NWYtNTFjMDc4ZWM3ODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5YWM5ZjctZWY0Zi00ZjU2LWJl
YzItMjFjOWEyYjI1YzExLzZkOWFjOWY3LWVmNGYtNGY1Ni1iZWMyLTIxYzlhMmIy
NWMxMS5jcmwwHwYDVR0jBBgwFoAUHHn5hkuePscm3W7MmE2ro4PenJgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlhYzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5
YTJiMjVjMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+pw4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHcLN/nVDo9PcgeAE06ZfPabsiRfTQ2QvdrECgxnBORJCkKI4IzMJ
Id9lUYwZtnu3ZCBneHj+PsVIAv0FDer1DTKl1KwbeFu8Nr+gJ+iebDystzrLNHVb
9MX3QecuBRoxTkILHiO0i3JYjnn5CqK9Ft93FYaAKhUiSj/0CISnpIRTgApIC9Ar
lYe6DEwJx0myFMih5rGW0X6IMtae0i4Gj+AI/rRKYozYzy6M+Ve12GdoyaueuONR
QHBLZfaYRQbcZRuoSlAoHV1EkI1uVMWuTXHDvx4AJ1ehhTuqs7hwvuylUrEf583T
XTYO/KnJhB2lojQvoueap7LztLT4IgBArQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:53:13 2025 by rpki-client