Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa
File:                     b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa (raw, json)
Hash identifier:          WthLXT9FwPNzyD7AJnTcysgUSBaD8EYhl4eUEp4Hxs0=
Subject key identifier:   DB:F2:D9:A8:5C:73:1F:DF:BD:22:BF:C4:CD:F0:99:16:CB:AA:F6:19
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F4328584A10354CD7F53FF87FFF04C370
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        2607:9f40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4c:d7:f5:3f:f8:7f:ff:04:c3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=705036fa-ecea-43e0-9177-57fafa82dd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:1d:ba:d3:4b:51:f4:87:aa:11:0d:06:bb:
                    b1:40:17:2b:7e:8c:34:d9:e9:fd:49:53:78:39:5d:
                    94:09:1f:21:3d:ac:ed:16:29:50:68:3a:02:38:29:
                    53:09:d7:ba:58:f9:e3:2d:83:19:1c:bb:67:b6:31:
                    47:9d:7d:dd:28:32:b0:6e:17:bc:95:ca:7d:53:3f:
                    d2:86:15:88:7c:78:3f:bb:4f:f4:fd:4f:b1:3b:d1:
                    92:00:a6:40:f2:79:de:4c:13:10:52:ac:a9:f7:cb:
                    91:3e:90:61:29:39:67:eb:8a:c8:24:29:99:e5:4f:
                    22:66:9c:67:94:62:ba:f2:d8:11:36:79:e5:29:1b:
                    21:4a:14:1d:2d:12:86:3d:33:8a:da:99:e7:3c:d4:
                    7f:42:cc:05:06:6a:08:99:98:db:79:df:ce:3e:69:
                    0e:14:ac:27:5d:a5:36:8c:da:b8:64:a5:23:0e:4a:
                    fb:e8:cf:dd:17:ff:1c:df:10:92:f9:67:16:73:d1:
                    0b:9e:fd:62:6b:b4:e0:0b:a5:43:02:20:0e:08:76:
                    40:1e:3f:03:6b:2b:4a:e6:ca:80:7f:30:84:3e:9c:
                    9e:be:b1:08:d5:65:b2:83:34:ac:c1:56:2e:4d:7e:
                    5a:18:73:77:db:4c:d8:da:32:1e:65:10:81:70:02:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F2:D9:A8:5C:73:1F:DF:BD:22:BF:C4:CD:F0:99:16:CB:AA:F6:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/b20b8405-c0e6-324c-b6f1-03d0a83140b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:be:f0:56:ca:c1:c8:44:62:4c:4b:8d:6d:59:09:67:28:b7:
         5f:06:8d:fb:e0:30:c6:9d:b4:22:32:9d:2c:4c:63:d2:83:08:
         ba:fa:93:17:7c:19:84:4b:9a:9d:09:83:74:23:ca:c9:5a:4d:
         95:65:5f:c5:d2:b8:e8:45:39:72:97:b8:d0:fa:cf:8b:ba:9e:
         77:89:9c:0f:fd:d9:d4:73:32:20:39:b5:c3:aa:24:f7:a3:0c:
         9c:a7:92:20:db:03:94:9c:c1:a2:7e:90:20:c4:cf:c9:f2:be:
         ac:96:8b:c8:8a:96:3f:29:6c:fb:c9:70:31:38:0f:61:53:66:
         0c:90:a0:52:11:33:8e:11:4b:f2:16:07:63:29:19:0a:ac:18:
         34:e1:eb:0b:2e:f8:04:c1:c7:5e:81:b7:a5:35:78:b1:26:5a:
         8d:5b:40:23:fe:c6:b0:14:4e:d7:c8:ef:ed:e7:1d:f5:02:f3:
         86:12:7f:76:b8:1c:4c:e9:6e:2a:b4:1a:37:50:bb:3d:94:a5:
         36:37:95:d2:42:4e:52:16:72:61:3e:f4:ba:d4:33:94:1c:47:
         6d:67:95:38:c3:90:a5:e7:34:9e:b0:f5:21:22:91:c2:2d:e6:
         b5:5e:df:27:8e:95:bd:bf:b1:be:ac:1a:57:66:30:9e:18:9e:
         1a:50:31:15
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoQNUzX9T/4f/8Ew3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JiZWU5YjEtMWIzMy00OTUxLWE2MTctZWNiODBkOWJh
ZDk5MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk
NzA1MDM2ZmEtZWNlYS00M2UwLTkxNzctNTdmYWZhODJkZDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb8dutNLUfSHqhENBruxQBcrfow02en9SVN4
OV2UCR8hPaztFilQaDoCOClTCde6WPnjLYMZHLtntjFHnX3dKDKwbhe8lcp9Uz/S
hhWIfHg/u0/0/U+xO9GSAKZA8nneTBMQUqyp98uRPpBhKTln64rIJCmZ5U8iZpxn
lGK68tgRNnnlKRshShQdLRKGPTOK2pnnPNR/QswFBmoImZjbed/OPmkOFKwnXaU2
jNq4ZKUjDkr76M/dF/8c3xCS+WcWc9ELnv1ia7TgC6VDAiAOCHZAHj8DaytK5sqA
fzCEPpyevrEI1WWygzSswVYuTX5aGHN320zY2jIeZRCBcAI+5QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNvy2ahccx/fvSK/xM3wmRbLqvYZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmJl
ZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4MGQ5YmFkOTkvYjIwYjg0MDUtYzBlNi0z
MjRjLWI2ZjEtMDNkMGE4MzE0MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JiZWU5YjEtMWIzMy00OTUxLWE2
MTctZWNiODBkOWJhZDk5LzdiYmVlOWIxLTFiMzMtNDk1MS1hNjE3LWVjYjgwZDli
YWQ5OS5jcmwwHwYDVR0jBBgwFoAUKSL34vJ0kytfzKQDs/xSZeeGwpowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83YmJlZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4
MGQ5YmFkOTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgefQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBlvvBWysHIRGJMS41tWQlnKLdfBo374DDGnbQiMp0sTGPSgwi6+pMX
fBmES5qdCYN0I8rJWk2VZV/F0rjoRTlyl7jQ+s+Lup53iZwP/dnUczIgObXDqiT3
owycp5Ig2wOUnMGifpAgxM/J8r6slovIipY/KWz7yXAxOA9hU2YMkKBSETOOEUvy
FgdjKRkKrBg04esLLvgEwcdegbelNXixJlqNW0Aj/sawFE7XyO/t5x31AvOGEn92
uBxM6W4qtBo3ULs9lKU2N5XSQk5SFnJhPvS61DOUHEdtZ5U4w5Cl5zSesPUhIpHC
Lea1Xt8njpW9v7G+rBpXZjCeGJ4aUDEV
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:01 2025 by rpki-client