Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44b17fd5-b6a0-31d0-a655-1ce1e6075673.roa
File:                     44b17fd5-b6a0-31d0-a655-1ce1e6075673.roa (raw, json)
Hash identifier:          eUetXTfVfLA8Bnzhy3Vt4dtePWggNYWEVDwsr/uGwuE=
Subject key identifier:   71:6B:DB:09:2A:55:78:9C:68:C6:DD:67:4C:00:45:24:C5:56:20:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7344CEDA48DBE4AB7FDD47C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44b17fd5-b6a0-31d0-a655-1ce1e6075673.roa
Signing time:             Tue 08 Jul 2025 12:37:22 +0000
ROA not before:           Tue 08 Jul 2025 12:37:22 +0000
ROA not after:            Mon 06 Oct 2025 12:37:22 +0000
asID:                     36616
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:44:ce:da:48:db:e4:ab:7f:dd:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 12:37:22 2025 GMT
            Not After : Oct  6 12:37:22 2025 GMT
        Subject: CN=727859cb-a3a4-4b35-95c4-1d366a96f1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ef:6f:aa:c2:8a:3a:d8:a6:26:38:39:19:6f:
                    c3:6e:18:d9:b9:db:be:55:f3:d8:f8:c9:a3:fb:22:
                    d1:0c:f4:1d:f8:6d:67:a0:07:4b:ab:fe:ba:b7:8f:
                    0d:7a:6e:ec:94:f2:51:1a:33:b2:c3:1c:34:b3:25:
                    f6:1f:83:51:f4:e0:df:48:be:cc:73:73:db:f3:46:
                    04:3d:e6:ff:65:6b:5a:5a:c3:d5:b8:62:2a:2b:22:
                    d6:23:70:0c:61:fd:32:57:1e:39:63:35:f0:82:ce:
                    64:2c:62:84:dc:5c:96:eb:96:76:ac:67:03:5b:fe:
                    74:8a:12:7c:79:bb:a9:65:32:d8:00:e6:49:b7:f9:
                    e6:e8:b3:d8:c7:d3:5a:c9:23:ce:52:3b:56:bc:4b:
                    dd:02:9d:78:d7:6b:9c:15:f1:e1:22:6f:84:fe:c2:
                    a8:e2:ec:c4:35:d7:14:9b:5e:f2:37:aa:96:2b:ef:
                    6c:da:d2:35:71:d4:66:25:fd:0f:3c:fe:e8:41:6b:
                    ee:65:be:aa:5b:75:bf:44:7c:c5:d6:34:e3:a3:15:
                    4f:0f:91:39:61:0a:4d:2e:dd:54:f9:d9:69:c6:e7:
                    19:50:77:9a:6b:cf:cc:da:cc:72:4f:f9:b4:2d:15:
                    31:21:25:64:4e:c3:4c:ab:6f:41:a3:67:81:6e:77:
                    26:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6B:DB:09:2A:55:78:9C:68:C6:DD:67:4C:00:45:24:C5:56:20:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44b17fd5-b6a0-31d0-a655-1ce1e6075673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:3f:01:f4:11:e2:48:87:f0:da:c0:1c:d3:da:d9:a5:ad:1c:
         cb:ac:96:43:5b:01:f4:12:27:ec:54:2b:37:0f:7a:6d:cc:01:
         46:39:6b:36:03:df:7f:c0:1b:fd:41:7d:c4:2c:f5:24:1d:ab:
         d9:58:68:de:4e:81:ab:c2:57:af:f1:3e:93:0e:13:cb:17:db:
         14:23:d9:c9:6e:9e:ff:bb:d2:ee:6b:df:1a:7e:62:5b:20:54:
         4a:51:3a:b5:b8:49:ae:b0:2f:f9:57:fe:28:d0:da:23:1e:32:
         ca:10:0c:44:2b:be:3c:f7:4d:8e:16:9e:6e:27:e6:c6:14:e1:
         7f:01:94:74:d6:90:7d:4b:73:2d:82:9b:36:65:02:08:fb:94:
         7d:3f:a9:0e:bc:a5:f3:db:3e:b0:07:92:3c:ab:0a:90:87:2c:
         b1:a5:05:76:12:58:cf:72:5c:69:1b:ea:74:ac:89:15:3d:57:
         46:05:60:bb:98:01:42:9d:c8:f1:7c:7d:bb:8f:09:b3:a9:a3:
         01:44:95:9e:88:fb:40:fc:16:e4:c4:7c:b5:33:90:c3:3b:c6:
         37:7a:24:5c:52:7d:c7:c5:23:89:96:64:cd:d7:84:66:05:01:
         2a:6d:03:34:fa:ca:51:28:64:b6:f3:00:8e:57:42:73:ba:ea:
         c9:70:f5:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpzRM7aSNvkq3/dR8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwODEyMzcyMloXDTI1MTAwNjEyMzcyMlowLzEtMCsGA1UEAxMk
NzI3ODU5Y2ItYTNhNC00YjM1LTk1YzQtMWQzNjZhOTZmMWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+9vqsKKOtimJjg5GW/DbhjZudu+VfPY+Mmj
+yLRDPQd+G1noAdLq/66t48Nem7slPJRGjOywxw0syX2H4NR9ODfSL7Mc3Pb80YE
Peb/ZWtaWsPVuGIqKyLWI3AMYf0yVx45YzXwgs5kLGKE3FyW65Z2rGcDW/50ihJ8
ebupZTLYAOZJt/nm6LPYx9NaySPOUjtWvEvdAp1412ucFfHhIm+E/sKo4uzENdcU
m17yN6qWK+9s2tI1cdRmJf0PPP7oQWvuZb6qW3W/RHzF1jTjoxVPD5E5YQpNLt1U
+dlpxucZUHeaa8/M2sxyT/m0LRUxISVkTsNMq29Bo2eBbncmlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHFr2wkqVXicaMbdZ0wARSTFViAyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDRiMTdmZDUtYjZhMC0z
MWQwLWE2NTUtMWNlMWU2MDc1NjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE4/AfQR4kiH8NrAHNPa2aWtHMuslkNbAfQSJ+xUKzcPem3MAUY5
azYD33/AG/1BfcQs9SQdq9lYaN5OgavCV6/xPpMOE8sX2xQj2clunv+70u5r3xp+
YlsgVEpROrW4Sa6wL/lX/ijQ2iMeMsoQDEQrvjz3TY4Wnm4n5sYU4X8BlHTWkH1L
cy2CmzZlAgj7lH0/qQ68pfPbPrAHkjyrCpCHLLGlBXYSWM9yXGkb6nSsiRU9V0YF
YLuYAUKdyPF8fbuPCbOpowFElZ6I+0D8FuTEfLUzkMM7xjd6JFxSfcfFI4mWZM3X
hGYFASptAzT6ylEoZLbzAI5XQnO66slw9fs=
-----END CERTIFICATE-----
Generated at Thu Jul 10 04:12:34 2025 by rpki-client