Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4cb58656-27bb-361c-ba37-271c6f9fe3ad.roa
File:                     4cb58656-27bb-361c-ba37-271c6f9fe3ad.roa (raw, json)
Hash identifier:          wjEz8J0slcITY/W4HheT78R09Sq/kH+8FVcX0CxEQRU=
Subject key identifier:   F4:F6:0B:FE:F8:9D:01:40:63:6D:2F:33:C2:2A:E9:CA:E5:16:B8:7E
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B0E4166CC491DDE90EF108D00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4cb58656-27bb-361c-ba37-271c6f9fe3ad.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     23473
IP address blocks:        2607:f750:6300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:66:cc:49:1d:de:90:ef:10:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=850b0f03-3a8d-434e-94fb-ecc700d65a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:48:51:2b:87:ba:c0:47:6c:e3:05:f2:40:
                    34:08:16:9c:57:c2:79:f4:d1:7b:8e:3a:3a:30:46:
                    b2:8d:20:18:dc:c3:c1:21:1d:e7:2b:9d:0f:d5:aa:
                    36:5f:2e:89:f8:a1:4b:13:d9:97:5e:39:dd:20:94:
                    ec:df:0d:a5:fe:12:27:7f:25:6a:65:c4:75:91:c5:
                    54:de:06:ed:df:2f:7f:d2:f0:ea:b9:c5:16:a0:a3:
                    5d:12:12:83:25:41:ec:0b:15:9f:cb:83:01:8a:85:
                    3d:eb:20:b0:a1:71:17:d6:bd:30:0d:4f:43:d5:5e:
                    63:bd:be:88:a6:4d:b9:9e:1b:26:de:79:ee:66:c6:
                    19:10:07:19:78:4c:ea:af:dc:96:26:e2:07:16:11:
                    9a:30:51:42:c7:8d:95:71:34:16:fa:b3:a7:f1:f3:
                    a1:12:7d:c4:9f:cd:53:30:5b:44:e7:62:12:24:0c:
                    17:5e:d9:24:03:4c:ec:99:d9:c4:91:d3:86:9d:e9:
                    e0:19:49:b4:4c:f4:57:16:38:16:1e:26:b9:fe:9f:
                    9f:0b:4c:b9:5e:73:dc:51:3a:0d:57:34:44:1c:8c:
                    ff:72:78:fd:59:79:4a:53:ec:8c:f2:85:69:bb:fa:
                    e0:1b:4f:c8:7b:9f:03:87:a5:7d:f9:72:67:a4:11:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:0B:FE:F8:9D:01:40:63:6D:2F:33:C2:2A:E9:CA:E5:16:B8:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4cb58656-27bb-361c-ba37-271c6f9fe3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5a:58:b8:1e:b8:ee:18:60:2b:e7:77:0f:f0:08:f5:69:c8:
         18:e1:24:93:a0:8a:bf:1c:70:a6:71:7c:8b:10:01:cb:c5:83:
         3e:a7:cd:78:cf:17:38:97:b1:58:83:e6:e8:ce:51:07:3a:2c:
         ed:8a:10:ba:ea:5b:5e:69:a8:c6:52:3d:7b:a3:1a:cb:5d:aa:
         5a:d2:9e:23:68:2a:46:42:14:80:55:24:0f:24:e1:9b:35:fc:
         82:7e:2f:a9:33:78:91:f3:f7:77:6a:eb:ea:2f:dd:af:94:ff:
         7d:62:2b:4c:a5:c6:8e:b6:6d:b5:2b:44:68:46:39:eb:a3:ab:
         1f:c5:33:01:ce:22:75:be:04:1e:1a:31:c5:69:ea:6b:cd:84:
         60:c2:58:f4:f4:00:e9:6c:51:d6:99:56:52:b0:6b:8e:55:f1:
         10:a9:75:7d:95:95:5f:89:4c:20:93:a6:c3:a7:35:cd:7f:f8:
         56:fe:e8:f7:54:cb:4b:32:15:6a:73:94:c7:91:3d:a5:4c:6f:
         ac:43:98:0f:a0:cf:50:8c:cd:ea:0e:9c:67:fe:eb:3c:95:b0:
         70:7e:51:32:9f:cc:48:5a:ac:c5:ac:00:21:e7:2d:61:96:0e:
         9d:ca:32:af:d7:40:7e:c8:4b:4c:8f:94:61:d2:17:bf:7a:5f:
         27:8f:b3:1e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsOQWbMSR3ekO8QjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ODUwYjBmMDMtM2E4ZC00MzRlLTk0ZmItZWNjNzAwZDY1YTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7FIUSuHusBHbOMF8kA0CBacV8J59NF7jjo6
MEayjSAY3MPBIR3nK50P1ao2Xy6J+KFLE9mXXjndIJTs3w2l/hInfyVqZcR1kcVU
3gbt3y9/0vDqucUWoKNdEhKDJUHsCxWfy4MBioU96yCwoXEX1r0wDU9D1V5jvb6I
pk25nhsm3nnuZsYZEAcZeEzqr9yWJuIHFhGaMFFCx42VcTQW+rOn8fOhEn3En81T
MFtE52ISJAwXXtkkA0zsmdnEkdOGnengGUm0TPRXFjgWHia5/p+fC0y5XnPcUToN
VzREHIz/cnj9WXlKU+yM8oVpu/rgG0/Ie58Dh6V9+XJnpBGRZQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPT2C/74nQFAY20vM8Iq6crlFrh+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNGNiNTg2NTYtMjdiYi0z
NjFjLWJhMzctMjcxYzZmOWZlM2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UGMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKlpYuB647hhgK+d3D/AI9WnIGOEkk6CKvxxwpnF8ixABy8WDPqfN
eM8XOJexWIPm6M5RBzos7YoQuupbXmmoxlI9e6May12qWtKeI2gqRkIUgFUkDyTh
mzX8gn4vqTN4kfP3d2rr6i/dr5T/fWIrTKXGjrZttStEaEY566OrH8UzAc4idb4E
HhoxxWnqa82EYMJY9PQA6WxR1plWUrBrjlXxEKl1fZWVX4lMIJOmw6c1zX/4Vv7o
91TLSzIVanOUx5E9pUxvrEOYD6DPUIzN6g6cZ/7rPJWwcH5RMp/MSFqsxawAIect
YZYOncoyr9dAfshLTI+UYdIXv3pfJ4+zHg==
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:56:54 2025 by rpki-client