Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa
File:                     8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa (raw, json)
Hash identifier:          Nxllcq0ythDN8in9dRj8nco+KY2Uwbgri9oYEUKSIpw=
Subject key identifier:   CF:78:F5:19:67:69:F9:F9:B9:2F:36:32:DE:36:A0:33:37:9A:00:FC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7D15F686D4CF0F7664B545A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     852
IP address blocks:        2001:56b:800b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f6:86:d4:cf:0f:76:64:b5:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=9e6d65dc-f9fe-41f3-bef4-e231345e6733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:03:8d:8a:0c:30:c7:69:dc:e2:42:a1:31:
                    2c:11:6f:aa:90:4c:91:3e:2f:2c:23:a9:c3:bb:61:
                    46:ed:62:51:de:47:94:a4:44:0e:6a:a6:ea:cf:d0:
                    6d:76:f4:71:c2:01:8d:e2:89:56:a7:8d:9d:70:4b:
                    14:f0:31:3c:f9:77:21:5a:18:58:58:30:27:d4:10:
                    27:c2:a5:49:11:da:7a:33:d4:20:5a:c1:10:79:b2:
                    90:db:92:0b:40:a5:cf:b1:ec:67:80:d8:e9:6e:23:
                    26:87:b1:b5:2b:19:d3:ac:c7:a4:a5:95:18:c8:82:
                    53:07:46:7f:b9:51:1b:08:d8:05:8d:d2:6f:64:91:
                    08:a6:33:e7:f3:b6:4f:13:bd:fe:8e:3f:4e:b8:aa:
                    62:61:b3:ca:17:c8:64:01:d3:ef:5c:07:a5:53:da:
                    96:1c:10:d9:81:a8:bb:62:11:c9:5a:12:77:f8:b7:
                    fa:d3:9a:36:a6:cc:5b:e2:af:8b:21:09:41:62:60:
                    a6:24:2d:3e:38:44:b9:e8:55:ff:2c:14:64:2f:9f:
                    25:c3:cd:2c:ee:05:19:aa:e1:cb:64:ae:86:63:28:
                    29:0a:9f:64:66:3e:ce:7d:02:86:c9:1c:a9:1f:74:
                    97:4e:23:d5:ac:29:0c:54:34:d3:1b:14:7e:b7:53:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:78:F5:19:67:69:F9:F9:B9:2F:36:32:DE:36:A0:33:37:9A:00:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:800b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:54:85:9c:1e:07:fe:e7:fc:cc:3f:0c:e4:99:cd:11:65:
         f3:8e:13:f5:3e:90:a3:1f:b1:87:0c:dc:69:e0:7f:08:c1:9e:
         31:7c:39:f8:17:92:f2:64:c7:c3:5f:b0:0a:2b:e2:d4:15:75:
         7a:70:08:b6:10:9c:38:a1:7f:d1:34:bb:91:e4:8d:c9:0b:aa:
         a7:28:ee:21:9a:0a:26:a4:86:ee:49:0a:d7:00:ae:26:a5:c8:
         4a:55:bb:27:47:95:0c:a5:ab:7d:45:89:c0:da:ea:35:88:16:
         f9:66:ba:43:82:cc:5a:1c:72:d9:d9:e2:a8:80:53:78:08:62:
         c5:77:5d:57:85:68:a1:15:1a:f2:03:b6:c6:b2:0d:7f:d0:30:
         88:8a:6c:08:e1:ec:e3:d0:61:63:af:17:0c:e7:19:2c:d0:46:
         9f:bb:2e:d5:7e:2c:4c:11:ef:dd:f7:ce:7b:96:81:c1:d2:22:
         fe:35:07:87:81:0e:c6:b0:9f:31:89:45:e2:d9:4e:df:43:b3:
         86:56:2e:e8:c6:73:42:f9:fd:20:21:09:66:c5:c2:e2:8c:46:
         30:98:44:74:9a:43:3f:01:e6:82:b6:f9:2b:77:f6:0e:68:a1:
         a2:7e:b6:1c:8a:e4:86:5d:2a:8f:fd:be:84:13:49:2d:6e:09:
         52:01:27:50
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp9FfaG1M8PdmS1RaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
OWU2ZDY1ZGMtZjlmZS00MWYzLWJlZjQtZTIzMTM0NWU2NzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hADjYoMMMdp3OJCoTEsEW+qkEyRPi8sI6nD
u2FG7WJR3keUpEQOaqbqz9BtdvRxwgGN4olWp42dcEsU8DE8+XchWhhYWDAn1BAn
wqVJEdp6M9QgWsEQebKQ25ILQKXPsexngNjpbiMmh7G1KxnTrMekpZUYyIJTB0Z/
uVEbCNgFjdJvZJEIpjPn87ZPE73+jj9OuKpiYbPKF8hkAdPvXAelU9qWHBDZgai7
YhHJWhJ3+Lf605o2psxb4q+LIQlBYmCmJC0+OES56FX/LBRkL58lw80s7gUZquHL
ZK6GYygpCp9kZj7OfQKGyRypH3SXTiPVrCkMVDTTGxR+t1Mr0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM949Rlnafn5uS82Mt42oDM3mgD8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGI0OWFkZTAtN2U3YS0z
ZmU5LWE4ZjYtNmVlN2YzMDRlNzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFa4AL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABO3VIWcHgf+5/zMPwzkmc0RZfOOE/U+kKMfsYcM3GngfwjBnjF8
OfgXkvJkx8NfsAor4tQVdXpwCLYQnDihf9E0u5HkjckLqqco7iGaCiakhu5JCtcA
rialyEpVuydHlQylq31FicDa6jWIFvlmukOCzFocctnZ4qiAU3gIYsV3XVeFaKEV
GvIDtsayDX/QMIiKbAjh7OPQYWOvFwznGSzQRp+7LtV+LEwR7933znuWgcHSIv41
B4eBDsawnzGJReLZTt9Ds4ZWLujGc0L5/SAhCWbFwuKMRjCYRHSaQz8B5oK2+St3
9g5ooaJ+thyK5IZdKo/9voQTSS1uCVIBJ1A=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:22:08 2025 by rpki-client