Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa
File:                     9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa (raw, json)
Hash identifier:          1h4bB7m0MDPw5SwR0vYwOOEBUY36ayBrFxa2XtgZXwQ=
Subject key identifier:   1B:FF:B4:F9:7D:E0:A9:A7:AA:28:F9:ED:BC:EB:EE:6F:14:B8:29:43
Certificate issuer:       /CN=78f2a37d-9624-4031-908c-08f70f9830f9
Certificate serial:       010D0C9F4328584B9E07BD10025C9C6F37A4DE80
Authority key identifier: 77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     0
IP address blocks:        2001:504:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:bd:10:02:5c:9c:6f:37:a4:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f2a37d-9624-4031-908c-08f70f9830f9
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=cdef497f-e41d-407a-bbb3-30cda9a77649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:d6:79:85:9e:34:89:a9:04:1c:fe:3f:3b:
                    3a:13:83:9e:7c:14:19:05:69:d6:06:56:1f:23:1f:
                    e0:dc:0b:f5:47:cb:04:32:01:18:07:7a:20:be:18:
                    76:4c:3a:5a:b0:17:6f:c5:31:11:6e:8a:5d:93:e9:
                    5b:1c:ad:6b:1f:27:93:1c:10:75:25:03:62:bf:5c:
                    22:79:0b:58:02:df:99:bd:7a:39:19:7a:0b:a4:da:
                    15:c3:46:7c:76:11:10:7b:ea:ae:f1:36:45:ff:39:
                    41:24:50:89:c0:8c:ec:a0:3c:22:2a:15:0c:12:da:
                    76:68:e3:fa:a4:43:da:b7:a6:2d:16:1e:da:36:dd:
                    03:69:ab:93:2a:ad:11:dd:e7:d0:b4:cc:b1:7b:39:
                    f1:51:d3:f8:26:65:17:7f:81:b2:c9:d3:59:45:3b:
                    04:95:34:22:19:c4:14:c7:9d:74:5d:16:e9:11:0d:
                    34:d6:67:62:db:a2:91:23:c9:68:68:1c:67:ea:74:
                    f7:5b:51:9b:4e:cd:57:ef:bb:47:4a:e7:fe:01:71:
                    27:0d:e4:f2:4e:2e:17:5a:44:de:de:26:9a:ad:81:
                    70:35:b9:3f:24:40:0f:7f:46:0d:43:0e:00:2d:24:
                    12:40:19:dd:1a:c3:49:4d:c9:47:f8:7b:ea:ed:8a:
                    47:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FF:B4:F9:7D:E0:A9:A7:AA:28:F9:ED:BC:EB:EE:6F:14:B8:29:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/9ee12db9-1cf9-3659-843e-37acdf1a6ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl

            X509v3 Authority Key Identifier:
                keyid:77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b2:04:fe:89:29:05:32:4a:a6:4c:a7:21:d8:b4:4f:37:4c:
         d5:fa:d6:b9:1d:82:7a:09:5a:3a:0d:f4:f9:a2:ce:a8:f1:e7:
         18:73:a6:d9:d5:97:af:6f:09:27:57:bf:44:ad:60:93:58:6f:
         4c:57:2d:13:90:89:cb:58:b4:92:4e:ff:21:7e:9b:f0:d7:2a:
         d4:b7:ce:eb:7e:92:a0:a0:97:7b:33:22:8d:ef:02:56:ec:13:
         a6:fd:83:ff:32:52:6e:5e:ac:4c:fb:11:9c:eb:48:af:f9:20:
         06:c6:37:76:a3:5d:bd:1f:3e:37:32:24:82:c8:c4:56:b5:da:
         8a:21:65:6a:28:49:bc:c6:94:2e:36:56:25:0c:fd:52:c4:79:
         0a:fc:b1:d0:3a:41:a4:10:5a:7b:f9:d6:3d:5e:cc:ea:7e:b3:
         e9:b9:81:9f:90:74:ef:60:b8:44:51:f5:1c:5a:fc:5d:54:3a:
         c4:1f:75:dd:22:5a:8b:75:88:4a:a0:fc:41:08:9d:58:99:fb:
         60:ee:f0:a1:d1:c8:a7:61:74:e7:3d:eb:5c:f4:3f:7b:0c:ef:
         d4:2e:1e:fd:97:8c:1f:3c:67:b6:8f:bc:99:2f:dc:af:a3:06:
         54:53:73:82:37:6b:c3:c3:19:45:59:4e:3a:a4:54:3d:f7:1f:
         6e:b7:87:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEueB70QAlycbzek3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhmMmEzN2QtOTYyNC00MDMxLTkwOGMtMDhmNzBmOTgz
MGY5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk
Y2RlZjQ5N2YtZTQxZC00MDdhLWJiYjMtMzBjZGE5YTc3NjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kzWeYWeNImpBBz+Pzs6E4OefBQZBWnWBlYf
Ix/g3Av1R8sEMgEYB3ogvhh2TDpasBdvxTERbopdk+lbHK1rHyeTHBB1JQNiv1wi
eQtYAt+ZvXo5GXoLpNoVw0Z8dhEQe+qu8TZF/zlBJFCJwIzsoDwiKhUMEtp2aOP6
pEPat6YtFh7aNt0DaauTKq0R3efQtMyxeznxUdP4JmUXf4GyydNZRTsElTQiGcQU
x510XRbpEQ001mdi26KRI8loaBxn6nT3W1GbTs1X77tHSuf+AXEnDeTyTi4XWkTe
3iaarYFwNbk/JEAPf0YNQw4ALSQSQBndGsNJTclH+Hvq7YpHIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBv/tPl94Kmnqij57bzr7m8UuClDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83OGYy
YTM3ZC05NjI0LTQwMzEtOTA4Yy0wOGY3MGY5ODMwZjkvOWVlMTJkYjktMWNmOS0z
NjU5LTg0M2UtMzdhY2RmMWE2ZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzhmMmEzN2QtOTYyNC00MDMxLTkw
OGMtMDhmNzBmOTgzMGY5Lzc4ZjJhMzdkLTk2MjQtNDAzMS05MDhjLTA4ZjcwZjk4
MzBmOS5jcmwwHwYDVR0jBBgwFoAUd1Ys1/OayxyW8EivUPLj/80M4JAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83OGYyYTM3ZC05NjI0LTQwMzEtOTA4Yy0wOGY3
MGY5ODMwZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAE0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADGyBP6JKQUySqZMpyHYtE83TNX61rkdgnoJWjoN9Pmizqjx5xhz
ptnVl69vCSdXv0StYJNYb0xXLROQictYtJJO/yF+m/DXKtS3zut+kqCgl3szIo3v
AlbsE6b9g/8yUm5erEz7EZzrSK/5IAbGN3ajXb0fPjcyJILIxFa12oohZWooSbzG
lC42ViUM/VLEeQr8sdA6QaQQWnv51j1ezOp+s+m5gZ+QdO9guERR9Rxa/F1UOsQf
dd0iWot1iEqg/EEInViZ+2Du8KHRyKdhdOc961z0P3sM79QuHv2XjB88Z7aPvJkv
3K+jBlRTc4I3a8PDGUVZTjqkVD33H263h9o=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:41 2025 by rpki-client