Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/248a2e95-2e14-37da-95b2-fd2655abd5d8.roa
File:                     248a2e95-2e14-37da-95b2-fd2655abd5d8.roa (raw, json)
Hash identifier:          2mTfYs7U8VMSvj76b5Ql8LSkE6uIgw/QkJnd1c97i+E=
Subject key identifier:   F4:4F:F4:59:3F:BC:2F:0C:B7:F5:B3:47:4F:E2:2E:67:5F:CB:0D:CB
Certificate issuer:       /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial:       010D0C9F4328584BA2378DC89A4875B8EF743F00
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/248a2e95-2e14-37da-95b2-fd2655abd5d8.roa
Signing time:             Sat 25 Oct 2025 01:00:31 +0000
ROA not before:           Sat 25 Oct 2025 01:00:31 +0000
ROA not after:            Fri 23 Jan 2026 02:00:31 +0000
asID:                     7859
IP address blocks:        2607:f440::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a2:37:8d:c8:9a:48:75:b8:ef:74:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
        Validity
            Not Before: Oct 25 01:00:31 2025 GMT
            Not After : Jan 23 02:00:31 2026 GMT
        Subject: CN=3fd100f4-ef52-4820-9761-5d62f944c3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7a:b6:52:8f:47:0f:a2:1c:b9:07:a2:e5:c3:
                    e1:08:32:39:5e:4e:ef:9a:39:14:32:d7:f8:21:8a:
                    a3:4b:e7:f3:0c:32:1b:39:0b:b0:f8:d0:3a:6c:d5:
                    4a:2b:77:22:e7:85:a6:2a:8b:dd:6b:05:98:af:d9:
                    32:83:dc:82:11:b3:ba:e8:3f:2f:f2:ed:95:c4:c0:
                    93:62:da:de:be:c7:f8:d8:ca:1b:aa:d6:38:22:49:
                    33:c0:63:ff:9d:14:5b:72:d3:50:bf:4c:4a:a7:db:
                    d8:e2:e2:25:91:a3:77:85:3d:d0:f1:53:4d:5a:26:
                    a0:ec:99:5d:c9:e7:d2:05:05:f9:eb:fa:22:be:36:
                    15:0c:69:de:4b:73:56:0d:2b:be:b2:b5:79:60:8e:
                    9b:cc:77:b6:0a:23:b5:fb:3e:34:f7:94:77:14:e2:
                    22:55:f7:07:ac:fe:06:27:86:c3:25:58:16:48:a3:
                    b6:bb:a4:26:bb:d3:e1:b3:8a:28:38:16:ea:c0:82:
                    4e:6c:db:fc:62:07:95:cf:b8:2d:45:b5:58:87:a0:
                    89:28:62:28:8d:9a:15:41:5b:d3:1a:35:c3:24:9e:
                    0e:40:af:f1:9b:fe:ce:70:72:63:ab:88:11:f9:4d:
                    0c:3a:bc:f2:2a:3a:c9:fb:b9:07:51:49:17:2e:f9:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4F:F4:59:3F:BC:2F:0C:B7:F5:B3:47:4F:E2:2E:67:5F:CB:0D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/248a2e95-2e14-37da-95b2-fd2655abd5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl

            X509v3 Authority Key Identifier:
                keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:7e:3a:be:31:45:85:47:7b:f3:08:7a:ee:bb:4c:43:ae:62:
         59:70:c3:54:e9:c2:6e:9e:f0:aa:1e:ab:fb:a4:3f:60:a1:c7:
         c2:1b:8d:32:75:8f:eb:67:ee:fc:15:d1:89:44:b0:b6:db:7f:
         7c:59:e2:4a:ae:9f:cb:36:74:91:61:89:84:80:54:a8:5e:fe:
         56:0d:02:60:ad:f8:e1:1b:99:db:35:60:a7:ef:d6:a6:3d:06:
         b7:64:8b:78:b5:81:68:6c:fa:d8:d6:c6:9b:f3:21:85:7e:2f:
         94:08:ff:3c:9f:99:1d:71:11:b4:f3:5e:5a:4e:75:56:d5:9b:
         a4:6a:fa:2a:68:c1:0a:a0:a8:87:33:b3:88:3b:43:75:d3:47:
         2c:20:1a:fa:f4:3f:a5:5c:a5:4d:f0:81:7c:04:03:c1:0f:59:
         27:0b:4a:d1:0b:3f:da:b1:56:69:7d:5f:cd:9b:7d:ea:6c:4d:
         3c:6f:b2:26:e6:02:27:c9:21:4a:b2:5a:c4:8b:dd:d3:90:7c:
         03:6f:bc:c6:2e:9b:90:df:5a:bb:cb:a8:87:89:b3:e4:b2:bf:
         e7:da:f3:39:86:98:2c:ac:81:74:fe:d0:ed:fc:37:11:8e:19:
         b0:60:11:79:ad:a9:b6:ca:a3:74:4f:9b:ab:1a:00:44:7f:e4:
         7d:46:8d:09
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuiN43Imkh1uO90PwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj
YTM4MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk
M2ZkMTAwZjQtZWY1Mi00ODIwLTk3NjEtNWQ2MmY5NDRjM2IwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXq2Uo9HD6IcuQei5cPhCDI5Xk7vmjkUMtf4
IYqjS+fzDDIbOQuw+NA6bNVKK3ci54WmKovdawWYr9kyg9yCEbO66D8v8u2VxMCT
Ytrevsf42MobqtY4IkkzwGP/nRRbctNQv0xKp9vY4uIlkaN3hT3Q8VNNWiag7Jld
yefSBQX56/oivjYVDGneS3NWDSu+srV5YI6bzHe2CiO1+z4095R3FOIiVfcHrP4G
J4bDJVgWSKO2u6Qmu9Phs4ooOBbqwIJObNv8YgeVz7gtRbVYh6CJKGIojZoVQVvT
GjXDJJ4OQK/xm/7OcHJjq4gR+U0MOrzyKjrJ+7kHUUkXLvlj7QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPRP9Fk/vC8Mt/WzR0/iLmdfyw3LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2
ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvMjQ4YTJlOTUtMmUxNC0z
N2RhLTk1YjItZmQyNjU1YWJkNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3
ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4
Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh
NTkwOGNhMzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBLfjq+MUWFR3vzCHruu0xDrmJZcMNU6cJunvCqHqv7pD9gocfCG40y
dY/rZ+78FdGJRLC22398WeJKrp/LNnSRYYmEgFSoXv5WDQJgrfjhG5nbNWCn79am
PQa3ZIt4tYFobPrY1sab8yGFfi+UCP88n5kdcRG0815aTnVW1ZukavoqaMEKoKiH
M7OIO0N100csIBr69D+lXKVN8IF8BAPBD1knC0rRCz/asVZpfV/Nm33qbE08b7Im
5gInySFKslrEi93TkHwDb7zGLpuQ31q7y6iHibPksr/n2vM5hpgsrIF0/tDt/DcR
jhmwYBF5ram2yqN0T5urGgBEf+R9Ro0J
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:10:18 2025 by rpki-client