Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa
File:                     ee4cc7b7-5280-3913-ba01-72e16a155541.roa (raw, json)
Hash identifier:          AGgDR3AU8dXTvu8+XZv9EP+UJW7gzjkQ9wH7i+ns8zE=
Subject key identifier:   01:B2:27:A6:95:2C:C7:E3:F8:DE:AF:DF:53:77:A3:A3:7F:66:E0:A2
Certificate issuer:       /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial:       010D0C9F4328584BABFD0D1DFAAC2C55761EEB00
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        2620:c3:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:0d:1d:fa:ac:2c:55:76:1e:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=6ac32c28-aeee-4939-ad21-f7046d6f16e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c5:12:9f:9f:81:93:2c:43:98:a9:eb:5c:b6:
                    fe:cc:3b:13:b6:22:80:36:de:b2:78:f4:58:c8:d3:
                    a6:82:83:41:1f:51:fb:bc:35:2b:fa:cd:44:10:c6:
                    7f:d5:a3:69:95:07:e3:56:ba:c3:d0:b4:cd:79:b8:
                    0d:32:dd:77:8f:af:ee:bb:28:0b:c6:bd:98:e6:79:
                    a3:80:f1:88:b8:c4:0d:7b:71:7c:2d:fe:2a:9c:f9:
                    fd:b1:2b:f1:62:26:62:8c:63:fb:a3:d6:fb:a6:e1:
                    df:99:77:35:a6:b6:c6:5e:f9:01:f4:aa:06:39:b3:
                    64:39:6c:e5:82:fe:24:20:80:e8:7d:f7:ca:e2:5d:
                    ef:c9:83:66:ff:8c:f2:98:b4:54:aa:00:09:50:59:
                    4f:42:a2:39:42:32:3d:98:52:14:9b:74:0d:9b:2c:
                    b8:be:db:70:75:67:33:a0:85:e7:62:d0:b6:ed:2e:
                    9a:90:e3:b3:ba:9e:6a:d3:be:22:33:7e:7e:3a:6a:
                    a5:cb:c8:a8:43:f8:a7:6a:ea:42:75:ea:4e:ab:05:
                    20:ac:b4:b2:70:6c:0d:ce:7f:15:87:46:2f:31:21:
                    d9:f0:ef:40:9b:d2:7c:35:08:38:6a:6a:2b:32:47:
                    b1:06:4a:3c:6b:c1:d4:41:73:84:84:30:87:3a:3c:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B2:27:A6:95:2C:C7:E3:F8:DE:AF:DF:53:77:A3:A3:7F:66:E0:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/ee4cc7b7-5280-3913-ba01-72e16a155541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl

            X509v3 Authority Key Identifier:
                keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c3:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6c:12:05:68:3b:df:e0:12:50:4e:e5:56:21:4e:ce:91:c5:
         b1:79:5f:16:96:44:60:7a:4e:66:35:07:de:5d:1c:c4:e6:59:
         08:8b:17:0a:4c:18:49:cd:04:97:2e:08:80:27:b9:8a:16:8b:
         94:7c:ab:e9:a2:0e:a8:bc:5e:44:25:ef:60:1e:4a:24:c1:d8:
         44:88:23:a7:fc:14:1f:a9:97:87:53:1d:e0:29:82:0f:b2:da:
         20:7b:eb:02:59:c8:10:e0:a5:86:a0:7f:b8:56:13:f6:ac:0a:
         bd:ae:21:2c:13:4c:d8:d7:6b:95:7e:f2:68:c1:a0:11:bd:10:
         5e:c0:ec:c5:b3:d1:8d:a8:b7:2a:6b:6b:ef:a0:42:dd:72:ad:
         d0:4e:bc:13:2e:4d:24:cc:78:6f:b7:69:09:61:5d:93:ef:ef:
         74:d6:a1:d3:01:cf:d6:87:41:07:6b:7e:13:1a:59:8a:3a:19:
         f1:69:1a:f9:f6:a1:8b:ec:fc:09:01:69:01:7e:4c:82:3b:27:
         46:85:f2:b0:0c:01:ee:43:05:c1:fe:ae:0b:19:8a:11:1e:18:
         75:60:e8:04:8b:6b:6a:bc:b8:75:ca:a4:82:89:3a:e5:3a:be:
         e3:43:0c:c8:31:9b:91:f2:31:0a:cb:6e:5d:e8:c9:51:01:9f:
         d4:65:23:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEur/Q0d+qwsVXYe6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGE2MmYxNjgtMGMyNi00OTMxLWEzZTMtNGFiYWEzMTE3
N2YwMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk
NmFjMzJjMjgtYWVlZS00OTM5LWFkMjEtZjcwNDZkNmYxNmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsUSn5+BkyxDmKnrXLb+zDsTtiKANt6yePRY
yNOmgoNBH1H7vDUr+s1EEMZ/1aNplQfjVrrD0LTNebgNMt13j6/uuygLxr2Y5nmj
gPGIuMQNe3F8Lf4qnPn9sSvxYiZijGP7o9b7puHfmXc1prbGXvkB9KoGObNkOWzl
gv4kIIDofffK4l3vyYNm/4zymLRUqgAJUFlPQqI5QjI9mFIUm3QNmyy4vttwdWcz
oIXnYtC27S6akOOzup5q074iM35+Omqly8ioQ/inaupCdepOqwUgrLSycGwNzn8V
h0YvMSHZ8O9Am9J8NQg4amorMkexBko8a8HUQXOEhDCHOjx+GwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAGyJ6aVLMfj+N6v31N3o6N/ZuCiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYy
ZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJhYTMxMTc3ZjAvZWU0Y2M3YjctNTI4MC0z
OTEzLWJhMDEtNzJlMTZhMTU1NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2MmYxNjgtMGMyNi00OTMxLWEz
ZTMtNGFiYWEzMTE3N2YwL2RhNjJmMTY4LTBjMjYtNDkzMS1hM2UzLTRhYmFhMzEx
NzdmMC5jcmwwHwYDVR0jBBgwFoAUfROpS3VMZyRtsvrl5XQi7LMcxiIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYyZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJh
YTMxMTc3ZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAw+AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADVsEgVoO9/gElBO5VYhTs6RxbF5XxaWRGB6TmY1B95dHMTmWQiL
FwpMGEnNBJcuCIAnuYoWi5R8q+miDqi8XkQl72AeSiTB2ESII6f8FB+pl4dTHeAp
gg+y2iB76wJZyBDgpYagf7hWE/asCr2uISwTTNjXa5V+8mjBoBG9EF7A7MWz0Y2o
typra++gQt1yrdBOvBMuTSTMeG+3aQlhXZPv73TWodMBz9aHQQdrfhMaWYo6GfFp
Gvn2oYvs/AkBaQF+TII7J0aF8rAMAe5DBcH+rgsZihEeGHVg6ASLa2q8uHXKpIKJ
OuU6vuNDDMgxm5HyMQrLbl3oyVEBn9RlI4I=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:46 2025 by rpki-client