Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/57d2b228-96f5-3607-ae80-0fa379710ccf.roa
File:                     57d2b228-96f5-3607-ae80-0fa379710ccf.roa (raw, json)
Hash identifier:          QWDtzX6fWdWGbmsPqIERkkHY9OizhjxP+4gdJT0JD08=
Subject key identifier:   E8:8F:64:FD:DC:25:C4:B9:A1:02:63:B2:AD:A7:9E:C6:A5:E3:DA:68
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584A7058B2230B1A95EDF7034A00
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/57d2b228-96f5-3607-ae80-0fa379710ccf.roa
Signing time:             Thu 26 Jun 2025 15:16:43 +0000
ROA not before:           Thu 26 Jun 2025 15:16:43 +0000
ROA not after:            Wed 24 Sep 2025 15:16:43 +0000
asID:                     36692
IP address blocks:        2603:5001:10::/44 maxlen: 44
                          2603:5001:3010::/44 maxlen: 44
                          2603:5001:4010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:58:b2:23:0b:1a:95:ed:f7:03:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Jun 26 15:16:43 2025 GMT
            Not After : Sep 24 15:16:43 2025 GMT
        Subject: CN=cb3eba47-7636-4f42-9b66-3d6b013419fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:91:18:34:55:14:ec:83:df:92:a6:ea:ed:
                    b2:2e:03:70:a5:01:0b:e2:93:80:ed:b2:74:87:bf:
                    3e:07:3f:89:36:32:7d:56:9a:59:e6:05:39:06:fb:
                    a1:d3:3b:82:6e:78:b5:a7:1d:2b:8d:88:1e:2a:f0:
                    19:e5:36:71:a4:95:aa:7c:9b:4b:02:7d:1c:de:66:
                    c1:cc:09:3c:a7:d7:3b:44:22:a3:4d:2b:4e:22:48:
                    c2:9e:2f:5b:e9:9d:74:23:6e:98:e6:ef:58:ca:45:
                    e1:53:45:e7:22:a6:62:0b:b2:6d:54:1b:03:16:13:
                    7e:a5:35:f4:96:04:3e:e4:b3:fc:46:1e:e9:ac:b9:
                    85:18:0e:2e:15:ee:1b:87:05:8f:5d:61:f8:10:8e:
                    26:5a:d2:f3:5f:24:7b:76:04:ab:10:40:9d:5b:4e:
                    b4:37:ce:17:e7:16:ed:c1:79:52:ed:71:51:c9:32:
                    cf:ae:a8:19:10:26:39:b8:fd:e0:2b:6f:84:bd:ac:
                    b7:c4:bf:82:18:b2:fb:ba:24:82:ee:a1:40:67:50:
                    9d:d9:af:46:e6:ea:26:c7:5b:b4:1f:65:af:67:d7:
                    9e:70:f3:08:a2:60:93:bd:9b:62:8f:58:99:06:76:
                    a1:a5:5c:84:ba:d9:c4:59:dc:cb:70:d2:a0:c0:b8:
                    f4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8F:64:FD:DC:25:C4:B9:A1:02:63:B2:AD:A7:9E:C6:A5:E3:DA:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/57d2b228-96f5-3607-ae80-0fa379710ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5001:10::/44
                  2603:5001:3010::/44
                  2603:5001:4010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:a6:7c:a8:40:c1:df:58:41:72:df:8c:d8:93:bb:2a:f9:
         23:84:24:68:05:5c:59:d8:b9:eb:7c:24:f4:c8:b0:54:25:9a:
         ac:49:70:e2:e3:6b:4e:c5:b4:44:21:b9:cd:13:e9:58:f3:ac:
         a0:4c:19:54:67:eb:34:68:a7:2a:61:12:69:a4:6d:95:f4:3b:
         ca:2c:8d:ca:8e:e2:de:24:66:40:31:01:bd:60:48:1a:d3:44:
         95:50:bd:8c:65:13:39:ee:cd:02:91:90:9a:d1:c1:05:18:30:
         3a:b2:c1:48:a5:0f:0e:ab:b4:e6:97:16:40:d6:c3:24:58:77:
         21:0d:0a:6a:2d:34:ea:fe:34:9e:8c:93:0e:cc:78:d3:d4:50:
         f5:98:bf:81:0e:2f:1e:5e:3a:7c:3f:d4:d0:b8:8b:65:d4:07:
         c7:bd:2c:59:e7:2d:d8:1f:25:9e:38:aa:17:ef:ab:5e:c9:3c:
         13:7c:9c:3d:85:94:1b:84:d6:3d:27:3f:68:07:7e:ae:41:13:
         68:28:27:59:b7:8c:54:da:47:44:26:9d:50:dc:d8:e2:24:a4:
         03:70:fe:e5:13:c2:ad:b4:60:a0:a4:9f:18:64:c0:33:02:f7:
         a6:9f:94:c1:78:ff:32:5b:26:37:ee:d9:f6:9d:36:7f:75:02:
         8f:47:14:da
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEpwWLIjCxqV7fcDSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc1ZDIwZjYtMWNmYS00ODNlLWJlMGYtZDE1ZWI1NDhm
NjZkMB4XDTI1MDYyNjE1MTY0M1oXDTI1MDkyNDE1MTY0M1owLzEtMCsGA1UEAxMk
Y2IzZWJhNDctNzYzNi00ZjQyLTliNjYtM2Q2YjAxMzQxOWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5GRGDRVFOyD35Km6u2yLgNwpQEL4pOA7bJ0
h78+Bz+JNjJ9VppZ5gU5Bvuh0zuCbni1px0rjYgeKvAZ5TZxpJWqfJtLAn0c3mbB
zAk8p9c7RCKjTStOIkjCni9b6Z10I26Y5u9YykXhU0XnIqZiC7JtVBsDFhN+pTX0
lgQ+5LP8Rh7prLmFGA4uFe4bhwWPXWH4EI4mWtLzXyR7dgSrEECdW060N84X5xbt
wXlS7XFRyTLPrqgZECY5uP3gK2+Evay3xL+CGLL7uiSC7qFAZ1Cd2a9G5uomx1u0
H2WvZ9eecPMIomCTvZtij1iZBnahpVyEutnEWdzLcNKgwLj0jQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFOiPZP3cJcS5oQJjsq2nnsal49poMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NzVk
MjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVlYjU0OGY2NmQvNTdkMmIyMjgtOTZmNS0z
NjA3LWFlODAtMGZhMzc5NzEwY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc1ZDIwZjYtMWNmYS00ODNlLWJl
MGYtZDE1ZWI1NDhmNjZkLzc3NWQyMGY2LTFjZmEtNDgzZS1iZTBmLWQxNWViNTQ4
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUGy2qCGYWpuHYP/G3Oy3sdH8TIz4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83NzVkMjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVl
YjU0OGY2NmQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEJgNQAQAQ
AwcEJgNQATAQAwcEJgNQAUAQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI5hpnyoQMHfWEFy34zYk7sq+SOE
JGgFXFnYuet8JPTIsFQlmqxJcOLja07FtEQhuc0T6VjzrKBMGVRn6zRopyphEmmk
bZX0O8osjcqO4t4kZkAxAb1gSBrTRJVQvYxlEznuzQKRkJrRwQUYMDqywUilDw6r
tOaXFkDWwyRYdyENCmotNOr+NJ6Mkw7MeNPUUPWYv4EOLx5eOnw/1NC4i2XUB8e9
LFnnLdgfJZ44qhfvq17JPBN8nD2FlBuE1j0nP2gHfq5BE2goJ1m3jFTaR0QmnVDc
2OIkpANw/uUTwq20YKCknxhkwDMC96aflMF4/zJbJjfu2fadNn91Ao9HFNo=
-----END CERTIFICATE-----
Generated at Tue Jul 8 21:12:07 2025 by rpki-client