Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa
File:                     dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa (raw, json)
Hash identifier:          vvRGCw6AoEV/l8c0dSombOH2uSs9B09Kf/xnAg70OPc=
Subject key identifier:   C3:54:20:73:F1:1D:05:5F:6B:01:08:E2:BD:19:DC:34:DB:59:E1:1D
Certificate issuer:       /CN=0e0ac023-c334-4bbe-bab3-afb7662be83d
Certificate serial:       010D0C9F4328584BB88D5A33C0102B479C2B3680
Authority key identifier: EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     401880
IP address blocks:        2602:f5b3::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:5a:33:c0:10:2b:47:9c:2b:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0ac023-c334-4bbe-bab3-afb7662be83d
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=18ab2dc7-90c3-4c57-b2a3-2d1ebfd1f8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:d9:9c:18:87:6d:f6:29:0f:36:8b:98:d2:
                    10:14:5d:ab:8d:93:e2:7a:1c:b9:e5:f7:28:fd:3c:
                    54:bb:29:60:c6:da:0b:41:9a:0c:e0:d9:bc:5b:16:
                    00:13:69:19:af:81:7c:72:a6:55:a1:a0:b1:27:c7:
                    f5:7d:32:47:70:04:90:e1:72:be:d9:7e:99:24:93:
                    54:87:ea:42:79:1c:40:95:ec:d7:9a:ab:a9:09:5a:
                    ec:2e:6c:3a:63:57:4f:ef:20:8f:f6:06:08:43:3e:
                    75:98:fb:51:5f:21:ed:d4:88:a9:9d:17:0e:86:66:
                    a1:4e:78:48:e3:7d:50:b3:59:1b:25:8f:cc:51:9d:
                    b1:cc:c8:1c:d6:51:4a:fa:a8:1e:c2:a7:f5:99:f6:
                    fd:67:e9:d5:85:a4:dd:0c:5a:65:a1:52:87:1b:15:
                    53:58:24:46:13:70:22:fe:1c:4f:34:60:56:b7:99:
                    da:e5:45:81:32:3a:b7:e2:bf:1c:c0:89:92:0a:e7:
                    2c:78:9b:1e:a1:18:17:e4:9e:29:08:78:2a:8a:f6:
                    db:87:6e:1f:a7:31:12:bb:f5:5b:b0:d1:a3:0a:53:
                    3f:3f:2a:3b:07:a7:3c:bb:96:62:a4:16:88:9c:19:
                    cc:13:c1:47:0c:5e:2a:de:ee:f2:bc:1a:9a:fc:65:
                    9e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:54:20:73:F1:1D:05:5F:6B:01:08:E2:BD:19:DC:34:DB:59:E1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5b3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c0:0e:57:98:24:12:d0:24:fd:3f:00:62:e0:23:54:e7:b5:
         6b:ff:0a:2c:52:f4:81:30:2d:d3:c0:65:99:ff:a8:5e:69:9e:
         f6:70:25:9b:79:d3:9f:f0:8e:8e:7b:b3:d6:9b:dd:98:57:59:
         c6:02:97:6f:d9:6f:ab:6e:4e:bc:c2:6c:55:20:67:67:7d:c5:
         3a:93:00:c9:04:1b:9a:67:9d:da:9b:47:1a:90:67:75:70:4e:
         52:20:bd:1a:15:91:12:f0:ad:ff:67:47:93:63:43:ff:05:1e:
         5a:9f:99:a2:54:a7:72:eb:eb:5c:89:38:20:fd:0e:92:52:7f:
         c9:12:0e:81:75:e1:06:88:b4:cd:4a:c5:e5:21:08:24:f5:28:
         a6:64:ad:fd:21:63:1a:58:a3:f5:ec:92:6c:dc:7a:80:07:94:
         43:84:29:83:ac:41:9a:67:84:4a:c8:75:56:bf:56:b3:62:a3:
         ac:3d:65:c7:03:5b:4e:dd:e4:0b:22:e8:cd:83:59:30:e5:1b:
         9b:31:5f:23:2e:b1:dd:24:f7:4a:bc:86:6c:c0:32:9d:b1:7c:
         b7:14:10:00:18:15:d2:e0:44:dc:81:f9:f4:de:1b:47:2a:b0:
         7a:76:5b:33:30:f1:03:d1:e6:66:3e:df:9c:b6:b7:b3:4c:2f:
         0e:3a:86:46
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEu4jVozwBArR5wrNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGUwYWMwMjMtYzMzNC00YmJlLWJhYjMtYWZiNzY2MmJl
ODNkMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
MThhYjJkYzctOTBjMy00YzU3LWIyYTMtMmQxZWJmZDFmOGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL3ZnBiHbfYpDzaLmNIQFF2rjZPiehy55fco
/TxUuylgxtoLQZoM4Nm8WxYAE2kZr4F8cqZVoaCxJ8f1fTJHcASQ4XK+2X6ZJJNU
h+pCeRxAlezXmqupCVrsLmw6Y1dP7yCP9gYIQz51mPtRXyHt1IipnRcOhmahTnhI
431Qs1kbJY/MUZ2xzMgc1lFK+qgewqf1mfb9Z+nVhaTdDFploVKHGxVTWCRGE3Ai
/hxPNGBWt5na5UWBMjq34r8cwImSCucseJseoRgX5J4pCHgqivbbh24fpzESu/Vb
sNGjClM/Pyo7B6c8u5ZipBaInBnME8FHDF4q3u7yvBqa/GWexQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMNUIHPxHQVfawEI4r0Z3DTbWeEdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wZTBh
YzAyMy1jMzM0LTRiYmUtYmFiMy1hZmI3NjYyYmU4M2QvZGJmNDBmZGYtMmM3ZC0z
ZDcwLThjZTgtMWUzMTYzYjc4ODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGUwYWMwMjMtYzMzNC00YmJlLWJh
YjMtYWZiNzY2MmJlODNkLzBlMGFjMDIzLWMzMzQtNGJiZS1iYWIzLWFmYjc2NjJi
ZTgzZC5jcmwwHwYDVR0jBBgwFoAU6yCFl6bIMynVCOYJufQwC7463CkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8wZTBhYzAyMy1jMzM0LTRiYmUtYmFiMy1hZmI3
NjYyYmU4M2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1swAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAI8AOV5gkEtAk/T8AYuAjVOe1a/8KLFL0gTAt08Blmf+oXmme9nAl
m3nTn/COjnuz1pvdmFdZxgKXb9lvq25OvMJsVSBnZ33FOpMAyQQbmmed2ptHGpBn
dXBOUiC9GhWREvCt/2dHk2ND/wUeWp+ZolSncuvrXIk4IP0OklJ/yRIOgXXhBoi0
zUrF5SEIJPUopmSt/SFjGlij9eySbNx6gAeUQ4Qpg6xBmmeESsh1Vr9Ws2KjrD1l
xwNbTt3kCyLozYNZMOUbmzFfIy6x3ST3SryGbMAynbF8txQQABgV0uBE3IH59N4b
RyqwenZbMzDxA9HmZj7fnLa3s0wvDjqGRg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:26:16 2025 by rpki-client