Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/39179c1f-cc21-3985-9eb4-794fcf01a39d.roa
File:                     39179c1f-cc21-3985-9eb4-794fcf01a39d.roa (raw, json)
Hash identifier:          dpwerPS8w4Em+S9rogMM3D76ng54enJTiWQ9V/HwYic=
Subject key identifier:   09:DF:53:AD:EB:CF:83:EA:FD:07:14:DB:15:99:C7:AB:94:B2:28:02
Certificate issuer:       /CN=a5096d33-7c30-4ece-ab54-55a98cf7f08c
Certificate serial:       010D0C9F4328584BB88D2B56802E29C52671A100
Authority key identifier: 0A:3F:19:D4:F9:54:34:10:DD:D4:D7:72:B9:E7:F0:59:D9:5F:22:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/39179c1f-cc21-3985-9eb4-794fcf01a39d.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     40939
IP address blocks:        2602:f9f8::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:2b:56:80:2e:29:c5:26:71:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5096d33-7c30-4ece-ab54-55a98cf7f08c
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=8cf27012-4cf5-4c99-838f-351c4ca264da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:be:c9:a3:48:07:ca:2f:46:d8:1e:93:8d:09:
                    5c:72:b9:ba:91:29:06:04:cd:c8:b9:7c:3c:fa:c7:
                    cf:39:e6:7a:84:38:72:a4:71:ba:4d:15:f1:32:8a:
                    52:e3:5e:22:74:68:91:67:dc:76:a7:79:85:f8:a2:
                    1c:b6:e7:56:05:43:80:87:d5:ba:8e:2a:ac:fe:41:
                    bb:73:09:f5:3d:2e:78:87:a2:39:8c:49:a9:69:a4:
                    b5:f8:50:b9:2f:c6:69:ec:98:d2:20:c0:d0:38:0d:
                    74:1e:57:0f:9a:5f:97:72:af:e6:aa:a0:eb:91:f3:
                    4c:69:17:e4:5b:80:30:d0:65:b4:22:23:74:bd:38:
                    47:3b:7a:59:29:d7:66:fe:c5:d9:2a:43:e8:79:fd:
                    70:36:f3:2b:51:41:60:2c:cb:54:82:2b:c8:23:5e:
                    29:ee:27:4c:51:5f:ed:a6:0d:32:88:dd:30:39:25:
                    2a:17:1a:05:ec:98:d7:68:78:ed:18:ce:16:7c:d5:
                    53:59:77:01:c9:20:89:58:51:2f:61:d0:3e:0a:81:
                    4d:b7:4a:b8:8c:d1:77:b6:e0:9f:aa:63:4d:06:86:
                    f7:76:66:aa:0a:94:da:9d:80:18:9f:d2:e8:3f:e4:
                    6a:28:24:5c:16:1a:28:ae:f6:52:60:14:17:75:97:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DF:53:AD:EB:CF:83:EA:FD:07:14:DB:15:99:C7:AB:94:B2:28:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/39179c1f-cc21-3985-9eb4-794fcf01a39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:3F:19:D4:F9:54:34:10:DD:D4:D7:72:B9:E7:F0:59:D9:5F:22:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c4:e3:75:5a:1d:45:1c:00:ca:18:31:c8:6e:eb:db:a0:ae:
         e2:fe:ec:d8:a0:e5:39:3c:b6:81:99:05:c5:27:3b:2e:39:db:
         78:8c:f2:9d:49:15:8a:7a:64:00:ca:69:62:f6:1a:5d:a1:e4:
         a7:da:67:59:ae:fa:fa:7d:19:53:9d:00:68:b1:90:0f:56:2e:
         7e:bd:94:29:d1:c9:a0:6d:e9:60:48:ae:b5:3e:83:3f:2a:8d:
         e1:35:e9:9e:d0:aa:96:24:eb:d0:b0:c2:d7:af:88:a2:63:24:
         3d:28:8b:2e:9c:d7:6c:80:ae:37:e6:80:ad:f8:b5:74:d2:fe:
         9d:6d:5c:93:2e:1c:08:99:31:78:59:72:3c:2a:6e:f1:f8:80:
         ff:86:ae:17:5b:e0:b9:2f:cb:ac:4d:2b:78:61:78:ac:df:a3:
         90:f4:64:ad:eb:d7:74:24:58:ef:7f:4e:0b:bb:de:07:03:a4:
         c1:82:33:ae:33:eb:d8:cf:ee:69:aa:9d:03:4b:f6:e2:2c:92:
         87:f9:e9:26:fd:e8:f0:dd:6a:c2:ba:87:bc:ff:5b:a2:9a:51:
         b5:8a:c0:d0:d7:e1:18:41:10:e5:07:6d:0d:30:aa:04:c9:0a:
         3c:c4:1d:70:80:65:2d:ad:ca:cb:dd:9c:12:33:a4:50:a0:18:
         7b:ac:18:07
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu4jStWgC4pxSZxoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUwOTZkMzMtN2MzMC00ZWNlLWFiNTQtNTVhOThjZjdm
MDhjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
OGNmMjcwMTItNGNmNS00Yzk5LTgzOGYtMzUxYzRjYTI2NGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL7Jo0gHyi9G2B6TjQlccrm6kSkGBM3IuXw8
+sfPOeZ6hDhypHG6TRXxMopS414idGiRZ9x2p3mF+KIctudWBUOAh9W6jiqs/kG7
cwn1PS54h6I5jEmpaaS1+FC5L8Zp7JjSIMDQOA10HlcPml+Xcq/mqqDrkfNMaRfk
W4Aw0GW0IiN0vThHO3pZKddm/sXZKkPoef1wNvMrUUFgLMtUgivII14p7idMUV/t
pg0yiN0wOSUqFxoF7JjXaHjtGM4WfNVTWXcBySCJWFEvYdA+CoFNt0q4jNF3tuCf
qmNNBob3dmaqCpTanYAYn9LoP+RqKCRcFhoorvZSYBQXdZc1IQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAnfU63rz4Pq/QcU2xWZx6uUsigCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTA5
NmQzMy03YzMwLTRlY2UtYWI1NC01NWE5OGNmN2YwOGMvMzkxNzljMWYtY2MyMS0z
OTg1LTllYjQtNzk0ZmNmMDFhMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUwOTZkMzMtN2MzMC00ZWNlLWFi
NTQtNTVhOThjZjdmMDhjL2E1MDk2ZDMzLTdjMzAtNGVjZS1hYjU0LTU1YTk4Y2Y3
ZjA4Yy5jcmwwHwYDVR0jBBgwFoAUCj8Z1PlUNBDd1NdyuefwWdlfIgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTA5NmQzMy03YzMwLTRlY2UtYWI1NC01NWE5
OGNmN2YwOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5+AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFMTjdVodRRwAyhgxyG7r26Cu4v7s2KDlOTy2gZkFxSc7LjnbeIzy
nUkVinpkAMppYvYaXaHkp9pnWa76+n0ZU50AaLGQD1Yufr2UKdHJoG3pYEiutT6D
PyqN4TXpntCqliTr0LDC16+IomMkPSiLLpzXbICuN+aArfi1dNL+nW1cky4cCJkx
eFlyPCpu8fiA/4auF1vguS/LrE0reGF4rN+jkPRkrevXdCRY739OC7veBwOkwYIz
rjPr2M/uaaqdA0v24iySh/npJv3o8N1qwrqHvP9boppRtYrA0NfhGEEQ5QdtDTCq
BMkKPMQdcIBlLa3Ky92cEjOkUKAYe6wYBw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:37 2025 by rpki-client