Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/58865ef3-3eca-32e6-97a6-e2fdbae889c0.roa
File:                     58865ef3-3eca-32e6-97a6-e2fdbae889c0.roa (raw, json)
Hash identifier:          5EIDDecjR6neHiMiaXOIGJcwrzsPAMDepfwLpJY2FsQ=
Subject key identifier:   3B:D3:F3:3F:41:24:87:A1:1A:98:7A:48:86:B2:BA:93:11:79:FA:72
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584A5F0F7B98C5BF194E45D1B100
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/58865ef3-3eca-32e6-97a6-e2fdbae889c0.roa
Signing time:             Tue 01 Jul 2025 06:53:45 +0000
ROA not before:           Tue 01 Jul 2025 06:53:45 +0000
ROA not after:            Mon 29 Sep 2025 06:53:45 +0000
asID:                     54994
IP address blocks:        2607:b300:fd0e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:0f:7b:98:c5:bf:19:4e:45:d1:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Jul  1 06:53:45 2025 GMT
            Not After : Sep 29 06:53:45 2025 GMT
        Subject: CN=d4441eb8-2e35-45f6-847b-de96540f7cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:ba:f2:37:70:18:56:ee:c9:a7:40:25:0b:
                    42:1e:e6:c2:ff:88:b1:9a:64:d1:2c:a2:4f:56:6f:
                    31:ca:11:a8:0b:ca:c5:cf:24:93:31:3b:c9:dc:d1:
                    bb:3b:e0:4f:9b:a0:a8:fa:a7:1d:52:bb:e8:76:30:
                    46:46:aa:0a:9b:71:c0:85:11:ae:5e:80:b4:c3:86:
                    82:9b:03:56:de:6b:14:8d:10:c1:82:d7:68:e0:e1:
                    82:f8:d8:b5:23:de:3b:58:8b:51:f2:cb:ef:fc:bf:
                    b1:79:4d:61:ab:1a:b7:44:1a:c9:31:de:9d:c3:ae:
                    55:4b:1d:3a:c4:40:a5:10:7f:aa:dd:cf:b2:f2:85:
                    77:42:38:2f:0c:59:c4:13:0f:54:2f:be:3b:bd:8c:
                    a9:7e:58:9d:98:77:47:9b:61:61:42:e5:26:56:ad:
                    13:33:90:55:18:c5:4e:3c:90:7f:22:2e:51:4f:0a:
                    41:ec:4e:5c:19:cf:70:3a:6e:19:b4:86:d0:b3:a1:
                    c6:ce:fd:fc:21:1d:8a:12:e1:eb:8f:33:b5:8c:37:
                    fe:0a:0f:ba:65:e8:86:98:44:2f:70:14:a4:8a:aa:
                    60:bb:b1:6e:e8:ea:47:b2:68:c1:b4:c4:90:48:cc:
                    9a:d1:8f:ff:6a:c0:14:6f:2b:76:9d:2c:e1:19:ea:
                    fe:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D3:F3:3F:41:24:87:A1:1A:98:7A:48:86:B2:BA:93:11:79:FA:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/58865ef3-3eca-32e6-97a6-e2fdbae889c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b300:fd0e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d5:3a:51:3b:64:d5:93:2e:c1:e4:d2:63:5f:39:14:00:b3:
         28:ef:43:e9:2d:ed:8d:a7:92:5e:d4:40:98:75:2c:ac:66:2f:
         47:53:e2:a2:42:49:f1:4b:6f:ef:85:ac:7d:78:78:f4:6a:b7:
         3b:ef:8e:c8:ac:ee:fc:0d:3c:a3:a1:4a:8f:58:59:35:56:0c:
         e1:8a:a8:11:4e:25:c1:56:b8:5a:3c:6f:7c:a4:66:22:e7:9b:
         7c:ba:8a:b0:5f:bc:9c:9c:a1:b0:2b:6c:0e:36:88:23:5f:87:
         77:65:ba:1e:07:28:bb:b6:e7:88:82:23:dd:99:ef:86:f4:4e:
         f4:63:3c:4d:7c:06:40:99:54:81:53:6e:69:6b:23:e7:d6:b5:
         e6:e0:f2:ca:71:5a:43:ca:29:b4:5d:18:5c:9e:14:53:63:2c:
         0c:1d:bc:3e:97:ce:0c:19:a0:3e:99:51:af:98:4e:7d:9c:e8:
         6b:5a:41:11:ef:98:5f:96:9b:7b:d9:42:7a:08:18:8f:18:ce:
         6f:88:63:a7:0c:36:1b:ac:0d:86:44:ad:d3:82:38:ae:88:8e:
         ae:9b:00:27:70:3d:ae:18:79:f8:90:49:51:da:f9:cb:26:ab:
         08:98:7c:8b:7f:ee:25:82:34:25:18:13:23:18:1e:32:ab:92:
         c5:0e:53:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpfD3uYxb8ZTkXRsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI1MDcwMTA2NTM0NVoXDTI1MDkyOTA2NTM0NVowLzEtMCsGA1UEAxMk
ZDQ0NDFlYjgtMmUzNS00NWY2LTg0N2ItZGU5NjU0MGY3Y2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/e68jdwGFbuyadAJQtCHubC/4ixmmTRLKJP
Vm8xyhGoC8rFzySTMTvJ3NG7O+BPm6Co+qcdUrvodjBGRqoKm3HAhRGuXoC0w4aC
mwNW3msUjRDBgtdo4OGC+Ni1I947WItR8svv/L+xeU1hqxq3RBrJMd6dw65VSx06
xEClEH+q3c+y8oV3QjgvDFnEEw9UL747vYypflidmHdHm2FhQuUmVq0TM5BVGMVO
PJB/Ii5RTwpB7E5cGc9wOm4ZtIbQs6HGzv38IR2KEuHrjzO1jDf+Cg+6ZeiGmEQv
cBSkiqpgu7Fu6OpHsmjBtMSQSMya0Y//asAUbyt2nSzhGer+rQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDvT8z9BJIehGph6SIayupMRefpyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvNTg4NjVlZjMtM2VjYS0z
MmU2LTk3YTYtZTJmZGJhZTg4OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgezAP0O
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADDVOlE7ZNWTLsHk0mNfORQAsyjvQ+kt7Y2nkl7UQJh1LKxmL0dT
4qJCSfFLb++FrH14ePRqtzvvjsis7vwNPKOhSo9YWTVWDOGKqBFOJcFWuFo8b3yk
ZiLnm3y6irBfvJycobArbA42iCNfh3dluh4HKLu254iCI92Z74b0TvRjPE18BkCZ
VIFTbmlrI+fWtebg8spxWkPKKbRdGFyeFFNjLAwdvD6XzgwZoD6ZUa+YTn2c6Gta
QRHvmF+Wm3vZQnoIGI8Yzm+IY6cMNhusDYZErdOCOK6Ijq6bACdwPa4YefiQSVHa
+csmqwiYfIt/7iWCNCUYEyMYHjKrksUOU+4=
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:11:59 2025 by rpki-client