Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/66671d8e-d946-3018-a32d-f3a3d3c928dc.roa
File:                     66671d8e-d946-3018-a32d-f3a3d3c928dc.roa (raw, json)
Hash identifier:          RwdJrqg5wgxpN9wmu46QTO2aJUPY88N1tP1li48zLJ8=
Subject key identifier:   22:DD:D1:F1:FB:F1:03:7A:1F:19:27:99:04:5F:D7:BA:94:E9:06:94
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F43285849F87A93B2591EE6ABB5C27940
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/66671d8e-d946-3018-a32d-f3a3d3c928dc.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        2607:9f40:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:93:b2:59:1e:e6:ab:b5:c2:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=b93c8670-9fda-4018-b841-ba18ebe67f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:83:4b:c3:10:28:27:37:4f:48:6d:64:d6:
                    8c:b1:99:f5:9d:74:7b:c2:36:31:75:b2:29:46:bc:
                    38:a2:69:2c:f6:fa:09:17:e4:33:10:09:26:f0:77:
                    a3:ec:f5:f9:f3:4f:92:e3:dd:a6:1b:e6:fa:bf:92:
                    dd:44:b4:68:09:e2:8a:6c:6f:08:07:7e:9d:9a:d0:
                    7a:aa:7c:2e:a7:58:e4:d4:2c:e9:45:5a:bb:f1:fa:
                    fd:0c:36:fe:4c:d9:e8:5a:1f:04:1d:0a:bc:57:4f:
                    c1:1c:e7:cd:65:06:e0:ef:26:af:16:9c:b0:a3:a5:
                    f4:2b:c6:4e:17:80:b6:1e:1f:fc:e1:e5:43:96:fb:
                    bb:38:44:ab:f2:1a:23:00:e3:63:e3:c7:ba:a6:aa:
                    5a:b0:b7:22:9e:2b:c8:53:15:f7:39:9a:d8:4c:a4:
                    21:40:39:bf:ef:42:7d:5f:4f:13:72:22:f4:09:a8:
                    6c:1c:83:9b:d0:38:d2:19:75:68:c3:0b:9d:c4:66:
                    4d:2d:59:05:6f:f5:7b:79:27:87:1e:1f:0d:26:74:
                    ee:ae:cf:94:c2:f7:a9:a1:f4:f1:a4:c7:83:1d:fe:
                    f5:f7:7c:d8:a5:e2:5a:10:7f:de:6b:19:4c:b8:01:
                    21:67:ff:6b:60:19:89:82:f5:15:17:45:b0:90:f1:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DD:D1:F1:FB:F1:03:7A:1F:19:27:99:04:5F:D7:BA:94:E9:06:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/66671d8e-d946-3018-a32d-f3a3d3c928dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c1:db:b5:89:8c:54:13:61:81:41:6c:38:0a:f5:5a:c5:bb:
         2c:20:ba:20:d8:20:32:a4:be:fc:cf:5d:16:5e:92:6b:42:db:
         17:87:5f:92:bb:7d:48:fa:0e:ac:e8:39:41:5e:ee:37:43:f8:
         30:91:03:15:17:d5:48:19:48:d6:40:d9:78:3f:ef:90:bb:42:
         eb:c7:71:5a:fe:af:24:89:9b:87:cf:73:6f:a4:d5:32:d2:51:
         0f:a1:0d:4a:55:c6:da:66:69:9a:fc:41:ab:75:e4:99:c9:64:
         d0:40:16:dc:b7:ce:bb:1a:e7:85:a8:83:c7:b2:1a:32:97:8c:
         d6:fe:15:42:24:02:48:10:66:07:38:de:d5:09:4d:ff:07:9a:
         d2:b8:65:53:b4:76:95:7e:e0:30:bd:10:04:f9:44:94:15:76:
         cc:09:f8:ec:14:84:b3:5a:d1:63:39:50:e0:8e:7b:34:bf:9e:
         0a:61:cb:92:44:83:7e:69:a7:a1:6d:44:7a:35:80:16:d6:3b:
         76:03:78:22:e2:67:db:6a:15:16:ff:4b:82:80:d5:89:8a:22:
         38:f1:ae:5c:61:7e:a1:7b:d2:3b:e2:6a:01:76:0d:8a:63:70:
         b4:75:7b:62:6c:8b:d3:03:fe:1e:b3:3c:c7:b0:00:1f:cc:56:
         0a:68:b1:5d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn4epOyWR7mq7XCeUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JiZWU5YjEtMWIzMy00OTUxLWE2MTctZWNiODBkOWJh
ZDk5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk
YjkzYzg2NzAtOWZkYS00MDE4LWI4NDEtYmExOGViZTY3ZjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRCDS8MQKCc3T0htZNaMsZn1nXR7wjYxdbIp
Rrw4omks9voJF+QzEAkm8Hej7PX580+S492mG+b6v5LdRLRoCeKKbG8IB36dmtB6
qnwup1jk1CzpRVq78fr9DDb+TNnoWh8EHQq8V0/BHOfNZQbg7yavFpywo6X0K8ZO
F4C2Hh/84eVDlvu7OESr8hojAONj48e6pqpasLcinivIUxX3OZrYTKQhQDm/70J9
X08TciL0CahsHIOb0DjSGXVowwudxGZNLVkFb/V7eSeHHh8NJnTurs+UwvepofTx
pMeDHf7193zYpeJaEH/eaxlMuAEhZ/9rYBmJgvUVF0WwkPHREQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCLd0fH78QN6HxknmQRf17qU6QaUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmJl
ZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4MGQ5YmFkOTkvNjY2NzFkOGUtZDk0Ni0z
MDE4LWEzMmQtZjNhM2QzYzkyOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JiZWU5YjEtMWIzMy00OTUxLWE2
MTctZWNiODBkOWJhZDk5LzdiYmVlOWIxLTFiMzMtNDk1MS1hNjE3LWVjYjgwZDli
YWQ5OS5jcmwwHwYDVR0jBBgwFoAUKSL34vJ0kytfzKQDs/xSZeeGwpowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83YmJlZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4
MGQ5YmFkOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgefQAA1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADHB27WJjFQTYYFBbDgK9VrFuywguiDYIDKkvvzPXRZekmtC2xeH
X5K7fUj6DqzoOUFe7jdD+DCRAxUX1UgZSNZA2Xg/75C7QuvHcVr+rySJm4fPc2+k
1TLSUQ+hDUpVxtpmaZr8Qat15JnJZNBAFty3zrsa54Wog8eyGjKXjNb+FUIkAkgQ
Zgc43tUJTf8HmtK4ZVO0dpV+4DC9EAT5RJQVdswJ+OwUhLNa0WM5UOCOezS/ngph
y5JEg35pp6FtRHo1gBbWO3YDeCLiZ9tqFRb/S4KA1YmKIjjxrlxhfqF70jviagF2
DYpjcLR1e2Jsi9MD/h6zPMewAB/MVgposV0=
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:57:39 2025 by rpki-client