Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
File:                     7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa (raw, json)
Hash identifier:          0JRTmBcPxCmXtd9OSX+E6ynmbwwSL/JtRWNoAi4D/sc=
Subject key identifier:   32:21:1B:65:02:D1:26:FD:BE:69:DE:10:3B:6F:FD:4D:8A:F4:5D:4B
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F4328584B0CDC1986E333A12281531E00
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     3464
IP address blocks:        2607:f808::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:19:86:e3:33:a1:22:81:53:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=0659a973-0ee6-4dd8-93ed-ef5410283740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:ae:1b:82:ca:c7:a9:9f:53:97:68:54:bb:
                    ae:13:e7:9f:7b:da:56:fe:7c:58:90:3b:7c:ad:26:
                    93:69:57:08:fc:e2:af:4c:ff:a4:bd:e3:74:ba:0a:
                    72:b8:70:b8:d2:b0:af:64:8b:a1:37:70:28:70:4b:
                    0f:25:a3:7c:f9:26:ba:d7:20:b0:53:70:f4:38:5c:
                    5b:bb:76:66:70:a8:cb:e4:6a:0f:5d:c6:a3:5d:16:
                    b4:de:54:f3:81:91:9c:cd:02:74:9a:6f:66:42:f9:
                    da:4e:1c:a1:f4:ab:d4:09:8f:6f:14:cc:e8:a9:18:
                    42:ef:28:38:da:22:64:23:24:32:7e:a3:59:f1:d5:
                    2b:44:a2:a3:95:dd:1e:53:5b:c5:0f:65:02:c2:6e:
                    da:16:2f:4d:4a:4e:0e:0c:06:0a:0e:e1:ac:3d:11:
                    ae:f6:0f:29:08:28:b4:87:ac:aa:15:0e:8d:9b:bf:
                    26:11:6d:0e:01:d4:78:4a:17:98:70:6b:0f:7e:ac:
                    0c:59:bb:5c:87:2c:ad:20:81:5f:dd:c8:e5:21:bc:
                    26:e5:74:32:8e:bd:ad:9f:79:0c:4f:6c:89:ca:f9:
                    9a:c2:10:ed:78:13:36:f9:98:24:24:f0:4e:eb:ef:
                    d6:e4:0e:49:e7:7b:47:dd:dc:97:7c:e1:50:f8:c7:
                    23:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:21:1B:65:02:D1:26:FD:BE:69:DE:10:3B:6F:FD:4D:8A:F4:5D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/7fbf44bb-01b3-3fdb-9cf7-53443e9be4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f808::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:94:f7:b9:15:e9:b6:6a:53:bd:b1:0b:05:c2:76:e8:29:24:
         ab:17:73:13:e3:08:f8:0f:c8:1c:4f:64:ce:06:66:3a:e9:99:
         14:11:56:e2:f8:f7:0e:1c:7d:7b:ed:ad:76:0d:4c:bb:e9:5d:
         cd:f5:62:e0:4d:f1:a7:34:4a:d0:c5:b6:25:5e:a5:75:1f:ce:
         30:85:39:86:b3:4e:59:24:bc:2f:2a:84:ed:16:dc:f9:5c:6b:
         b2:18:5f:90:b8:e4:85:43:ea:aa:23:78:d4:c0:e4:ea:c4:cf:
         20:73:e7:ce:eb:1f:ec:c9:d1:63:36:ba:c3:b6:24:22:6d:da:
         15:d2:34:15:c5:af:2a:b2:dc:0d:4f:ad:96:cb:a1:52:ff:f2:
         17:bb:d6:29:9b:e5:08:9e:60:9d:18:a7:2e:9b:4d:3b:6d:75:
         f2:f5:da:54:ff:76:f1:1b:be:9c:ff:0a:b9:2c:aa:33:c8:24:
         39:c9:1d:1a:5d:83:92:03:18:bb:41:14:85:82:22:2c:d5:d9:
         2d:e0:45:3d:24:bc:57:f1:2a:c5:61:0d:96:f5:97:62:4b:1d:
         77:32:2a:69:2c:ff:b2:e8:8a:2e:5b:61:4f:31:45:fa:54:65:
         ed:ae:4b:bf:67:8b:cd:c8:e6:bb:4a:17:9e:58:ed:aa:ff:ca:
         d6:b8:6e:35
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsM3BmG4zOhIoFTHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE3NWI4ZTktYmQ2Mi00MDI2LTlhMTUtODczZTJiMDE3
MTNiMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
MDY1OWE5NzMtMGVlNi00ZGQ4LTkzZWQtZWY1NDEwMjgzNzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5yuG4LKx6mfU5doVLuuE+efe9pW/nxYkDt8
rSaTaVcI/OKvTP+kveN0ugpyuHC40rCvZIuhN3AocEsPJaN8+Sa61yCwU3D0OFxb
u3ZmcKjL5GoPXcajXRa03lTzgZGczQJ0mm9mQvnaThyh9KvUCY9vFMzoqRhC7yg4
2iJkIyQyfqNZ8dUrRKKjld0eU1vFD2UCwm7aFi9NSk4ODAYKDuGsPRGu9g8pCCi0
h6yqFQ6Nm78mEW0OAdR4SheYcGsPfqwMWbtchyytIIFf3cjlIbwm5XQyjr2tn3kM
T2yJyvmawhDteBM2+ZgkJPBO6+/W5A5J53tH3dyXfOFQ+Mcj+QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDIhG2UC0Sb9vmneEDtv/U2K9F1LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMTc1
YjhlOS1iZDYyLTQwMjYtOWExNS04NzNlMmIwMTcxM2IvN2ZiZjQ0YmItMDFiMy0z
ZmRiLTljZjctNTM0NDNlOWJlNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTE3NWI4ZTktYmQ2Mi00MDI2LTlh
MTUtODczZTJiMDE3MTNiL2UxNzViOGU5LWJkNjItNDAyNi05YTE1LTg3M2UyYjAx
NzEzYi5jcmwwHwYDVR0jBBgwFoAUKrzVBHhVMsHVWTWnbohKSquffBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMTc1YjhlOS1iZDYyLTQwMjYtOWExNS04NzNl
MmIwMTcxM2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4CDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCblPe5Fem2alO9sQsFwnboKSSrF3MT4wj4D8gcT2TOBmY66ZkUEVbi
+PcOHH177a12DUy76V3N9WLgTfGnNErQxbYlXqV1H84whTmGs05ZJLwvKoTtFtz5
XGuyGF+QuOSFQ+qqI3jUwOTqxM8gc+fO6x/sydFjNrrDtiQibdoV0jQVxa8qstwN
T62Wy6FS//IXu9Ypm+UInmCdGKcum007bXXy9dpU/3bxG76c/wq5LKozyCQ5yR0a
XYOSAxi7QRSFgiIs1dkt4EU9JLxX8SrFYQ2W9ZdiSx13MippLP+y6IouW2FPMUX6
VGXtrku/Z4vNyOa7SheeWO2q/8rWuG41
-----END CERTIFICATE-----
Generated at Fri Oct 10 19:56:08 2025 by rpki-client