Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a46d9b69-b96b-3037-8c65-c588a531a219.roa
File:                     a46d9b69-b96b-3037-8c65-c588a531a219.roa (raw, json)
Hash identifier:          I1avH5krK4h/x4B5AI2myQNK1giBNSZJEkvkmog2RC8=
Subject key identifier:   1D:65:85:15:FF:A1:BD:DB:9A:38:DF:73:D6:55:8D:D3:CF:39:A0:4F
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584A6825F915E6A60DECD6976600
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a46d9b69-b96b-3037-8c65-c588a531a219.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     208548
IP address blocks:        2605:f440:97ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f9:15:e6:a6:0d:ec:d6:97:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=da233dc5-a71c-48b9-bf3d-cc85fbf538cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f4:6c:b0:3e:43:45:df:40:2c:76:f9:fb:54:
                    b7:12:22:df:02:9e:aa:a9:d3:e4:9a:5a:3c:4f:da:
                    45:7b:c6:8c:e4:75:47:5f:78:52:31:c0:88:08:53:
                    97:36:ed:86:ef:4e:22:8c:60:cb:f5:f9:95:67:b3:
                    83:83:9c:5b:c9:d4:b2:92:19:d7:1b:6f:a9:81:e7:
                    96:be:92:d6:1d:f8:bf:2c:21:73:53:42:81:c5:1d:
                    44:4b:55:75:54:4e:0b:93:2f:ba:58:7e:57:9e:63:
                    a6:ad:ef:37:b2:08:16:23:e2:f7:2c:f8:d2:85:6c:
                    2d:3c:ae:f3:4e:4c:04:dd:b8:b0:c3:36:3b:84:78:
                    bc:66:9a:a8:ba:35:8e:79:91:34:10:c9:71:e9:a2:
                    ef:ee:27:df:8b:14:5c:64:83:7b:ab:bb:01:7c:9c:
                    6c:0f:fa:a4:e7:17:dd:b2:9c:fa:06:cf:51:4a:9e:
                    22:2c:c5:c0:98:90:ea:7b:42:2e:e4:75:a6:07:7b:
                    4e:07:49:bd:2a:ea:ea:95:3c:a2:aa:04:b3:f2:60:
                    cc:ff:2e:68:8f:e7:d9:7b:8c:ea:b0:71:ac:7b:83:
                    ef:27:6b:51:26:4d:56:f2:da:3e:d0:e2:13:d0:11:
                    5a:a6:e4:83:4e:8e:0e:de:1b:48:25:33:a0:f3:7a:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:65:85:15:FF:A1:BD:DB:9A:38:DF:73:D6:55:8D:D3:CF:39:A0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a46d9b69-b96b-3037-8c65-c588a531a219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:97ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f4:b4:78:63:4b:8b:f6:04:74:26:f5:21:ce:1b:36:09:3f:
         54:4c:f0:b5:c6:43:65:8e:d9:8a:0d:1f:2b:5e:ab:2c:a9:86:
         e1:b3:4a:a0:68:1a:c8:a7:ba:84:8f:07:e3:8e:97:01:fa:20:
         04:cd:44:f6:33:10:9f:7a:de:b9:d7:c4:36:18:eb:c5:9a:de:
         bd:62:40:90:44:98:17:d3:7f:d1:1a:ba:a0:fa:20:c6:0d:fe:
         9a:a2:b6:03:c3:de:5d:75:ad:df:fe:83:dc:7c:7e:e4:12:1f:
         2e:ce:fc:76:df:21:a2:e1:6b:dc:22:fe:5d:1d:18:e3:dc:23:
         33:77:e2:11:63:95:02:7f:da:54:80:35:23:9b:06:e8:a9:da:
         57:7d:26:cc:7f:a1:24:14:75:ee:a7:de:4c:e2:c9:43:61:a4:
         8d:59:22:dc:d0:fa:45:96:d2:67:32:30:60:5f:8a:98:9c:49:
         a2:71:af:10:b5:b2:d0:9d:eb:e6:b8:3f:9c:50:1c:1f:f6:40:
         93:1f:ac:62:c4:d6:8d:39:44:99:52:dc:e1:0c:4f:26:00:ae:
         b2:62:47:a5:fb:82:7b:10:2e:c8:4a:36:20:d4:18:97:81:35:
         bb:25:18:ba:85:72:e6:48:0a:69:03:86:c6:e9:ba:4e:bc:44:
         05:b2:de:1c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJfkV5qYN7NaXZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
ZGEyMzNkYzUtYTcxYy00OGI5LWJmM2QtY2M4NWZiZjUzOGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/RssD5DRd9ALHb5+1S3EiLfAp6qqdPkmlo8
T9pFe8aM5HVHX3hSMcCICFOXNu2G704ijGDL9fmVZ7ODg5xbydSykhnXG2+pgeeW
vpLWHfi/LCFzU0KBxR1ES1V1VE4Lky+6WH5XnmOmre83sggWI+L3LPjShWwtPK7z
TkwE3biwwzY7hHi8ZpqoujWOeZE0EMlx6aLv7iffixRcZIN7q7sBfJxsD/qk5xfd
spz6Bs9RSp4iLMXAmJDqe0Iu5HWmB3tOB0m9KurqlTyiqgSz8mDM/y5oj+fZe4zq
sHGse4PvJ2tRJk1W8to+0OIT0BFapuSDTo4O3htIJTOg83pZbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB1lhRX/ob3bmjjfc9ZVjdPPOaBPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvYTQ2ZDliNjktYjk2Yi0z
MDM3LThjNjUtYzU4OGE1MzFhMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QJf/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ/0tHhjS4v2BHQm9SHOGzYJP1RM8LXGQ2WO2YoNHyteqyyphuGz
SqBoGsinuoSPB+OOlwH6IATNRPYzEJ963rnXxDYY68Wa3r1iQJBEmBfTf9EauqD6
IMYN/pqitgPD3l11rd/+g9x8fuQSHy7O/HbfIaLha9wi/l0dGOPcIzN34hFjlQJ/
2lSANSObBuip2ld9Jsx/oSQUde6n3kziyUNhpI1ZItzQ+kWW0mcyMGBfipicSaJx
rxC1stCd6+a4P5xQHB/2QJMfrGLE1o05RJlS3OEMTyYArrJiR6X7gnsQLshKNiDU
GJeBNbslGLqFcuZICmkDhsbpuk68RAWy3hw=
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:11:20 2025 by rpki-client