Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/5ab46e0f-28bf-31dc-bd68-9893a35cc15b.roa
File:                     5ab46e0f-28bf-31dc-bd68-9893a35cc15b.roa (raw, json)
Hash identifier:          PnBE/MMl8lRblUH/ukCyQ7QhvoCG4xqy9YoQn8KQDGs=
Subject key identifier:   D0:F5:DD:A8:F6:24:05:76:54:0D:9B:56:11:3A:39:BA:4B:2A:54:82
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584A85760180B62FCF9635760400
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/5ab46e0f-28bf-31dc-bd68-9893a35cc15b.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     17012
IP address blocks:        2607:71c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:01:80:b6:2f:cf:96:35:76:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=cca8b5a6-3d34-476e-9cf9-795b67baba6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ac:c3:ff:49:3e:a9:dc:ba:dd:59:a6:45:81:
                    5c:80:28:44:8f:ea:5f:8d:1d:0a:a1:d2:bf:2f:dc:
                    7d:ab:f4:c8:5a:8f:33:bf:e2:b6:72:5d:e8:3d:a6:
                    e8:cd:bf:2e:66:86:87:4c:dc:1e:3f:94:b2:e6:af:
                    04:fc:5e:11:64:a3:e6:45:23:c6:aa:06:4b:41:9f:
                    bb:ff:d7:79:98:aa:b4:3b:c2:fb:0c:7c:08:43:86:
                    e0:b3:b8:45:47:04:14:df:e2:89:22:a6:74:33:54:
                    48:4c:94:8c:04:a7:04:b9:d7:2d:04:66:27:19:a1:
                    55:36:cb:ef:7d:4d:1a:e3:8c:c5:f2:52:9d:69:21:
                    7f:6d:87:4b:c8:bf:32:47:5b:f5:c0:37:a0:8f:1d:
                    a8:52:36:f4:89:b8:39:f8:1f:5e:90:30:77:59:a2:
                    74:fa:bb:09:21:4a:7f:53:f1:53:2b:76:72:e3:e9:
                    8e:e5:98:28:e0:7d:a9:a4:0f:e0:ca:85:45:4b:24:
                    12:23:14:66:68:4c:fb:cf:7d:c9:0f:b2:23:c2:d8:
                    cc:07:77:20:72:c8:cd:f5:97:48:a6:8c:9c:8b:71:
                    20:32:40:20:fb:9d:08:a3:d2:73:cb:81:a1:79:b7:
                    af:af:ab:f6:58:9c:ff:80:91:a2:8c:13:a1:5e:40:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F5:DD:A8:F6:24:05:76:54:0D:9B:56:11:3A:39:BA:4B:2A:54:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/5ab46e0f-28bf-31dc-bd68-9893a35cc15b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:71c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:ad:6e:26:fb:9f:2c:55:b1:a8:ac:e0:19:77:c3:4a:e4:
         fd:6e:3d:67:da:72:4b:c4:39:75:4f:a6:3c:77:57:29:8d:75:
         dd:c6:0c:01:d8:0d:fb:19:f5:e5:72:db:01:2e:35:e5:14:18:
         21:e5:61:6d:e9:58:63:b6:42:c5:ce:6e:e3:7c:2f:b1:7e:03:
         bc:12:2d:ac:e5:b5:70:88:5a:1b:8e:70:b0:b5:26:bf:59:5a:
         f8:d3:19:34:9e:16:3a:87:86:aa:b8:2a:c0:05:c1:86:29:72:
         98:bf:c7:d0:c2:fe:1b:ad:b6:4d:10:5e:77:f5:fa:6c:27:a7:
         ec:3d:ac:76:59:9b:99:f6:a9:ca:7c:d9:e1:79:7b:ed:32:44:
         f0:1a:74:64:da:cc:8e:3d:22:6e:45:ca:4d:13:f3:49:28:7c:
         83:27:e8:54:ba:22:88:d1:f5:e2:de:a8:47:39:af:b1:e6:6c:
         c4:b7:40:b4:96:cb:28:f1:68:06:08:fc:03:42:98:d8:a7:6a:
         29:ae:88:75:1f:04:5a:fb:57:d3:db:ad:a9:c6:99:c3:03:03:
         2d:ed:fb:c5:f9:26:08:50:20:e7:c6:ee:e5:08:02:55:62:56:
         4c:b3:87:92:e5:67:5e:c0:9d:e0:c4:77:16:ef:37:2c:ac:db:
         4e:63:d6:9c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqFdgGAti/PljV2BAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk
Y2NhOGI1YTYtM2QzNC00NzZlLTljZjktNzk1YjY3YmFiYTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKzD/0k+qdy63VmmRYFcgChEj+pfjR0KodK/
L9x9q/TIWo8zv+K2cl3oPabozb8uZoaHTNweP5Sy5q8E/F4RZKPmRSPGqgZLQZ+7
/9d5mKq0O8L7DHwIQ4bgs7hFRwQU3+KJIqZ0M1RITJSMBKcEudctBGYnGaFVNsvv
fU0a44zF8lKdaSF/bYdLyL8yR1v1wDegjx2oUjb0ibg5+B9ekDB3WaJ0+rsJIUp/
U/FTK3Zy4+mO5Zgo4H2ppA/gyoVFSyQSIxRmaEz7z33JD7IjwtjMB3cgcsjN9ZdI
poyci3EgMkAg+50Io9Jzy4Ghebevr6v2WJz/gJGijBOhXkBPkwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFND13aj2JAV2VA2bVhE6ObpLKlSCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvNWFiNDZlMGYtMjhiZi0z
MWRjLWJkNjgtOTg5M2EzNWNjMTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdxwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQALr61uJvufLFWxqKzgGXfDSuT9bj1n2nJLxDl1T6Y8d1cpjXXdxgwB
2A37GfXlctsBLjXlFBgh5WFt6VhjtkLFzm7jfC+xfgO8Ei2s5bVwiFobjnCwtSa/
WVr40xk0nhY6h4aquCrABcGGKXKYv8fQwv4brbZNEF539fpsJ6fsPax2WZuZ9qnK
fNnheXvtMkTwGnRk2syOPSJuRcpNE/NJKHyDJ+hUuiKI0fXi3qhHOa+x5mzEt0C0
lsso8WgGCPwDQpjYp2oproh1HwRa+1fT262pxpnDAwMt7fvF+SYIUCDnxu7lCAJV
YlZMs4eS5WdewJ3gxHcW7zcsrNtOY9ac
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:25 2025 by rpki-client