Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/e71a8b62-913b-37c9-9ded-e076aa80125c.roa
File:                     e71a8b62-913b-37c9-9ded-e076aa80125c.roa (raw, json)
Hash identifier:          A14/VL28rEovi3S3mVcgvYuGNU83iY+6BJJbuSRjQG8=
Subject key identifier:   56:89:29:DA:F6:EB:E6:F2:FD:E6:70:DF:32:D4:3F:C5:40:81:F2:09
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F43285849F87A939ED4F6474284A188C0
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/e71a8b62-913b-37c9-9ded-e076aa80125c.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     27317
IP address blocks:        2607:9f40:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:93:9e:d4:f6:47:42:84:a1:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=5d9bc7c7-288c-4023-85bb-a9e1bc23c1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:71:5d:88:e3:b0:70:eb:38:e3:5f:34:8a:68:
                    43:2d:09:9b:36:98:23:b2:55:f0:21:86:8e:33:e4:
                    85:72:e5:97:5b:82:23:a8:fe:f0:af:a9:ee:3e:18:
                    53:69:8b:f9:20:ae:50:84:f8:c6:b5:5c:cb:13:72:
                    04:74:0b:b4:04:4c:80:42:c9:01:5a:29:c6:d4:2a:
                    3b:14:05:c4:ae:ab:ec:86:5b:be:e8:e7:50:70:18:
                    42:fb:13:4b:64:af:e1:16:98:56:a4:ca:d4:ef:25:
                    21:4a:1f:be:9e:d6:df:03:5d:cc:3c:cf:5e:00:87:
                    27:dd:98:05:fe:f6:e1:bf:e8:1a:dc:f3:cc:c1:b2:
                    73:90:29:89:f1:04:00:8c:9e:e1:2b:0d:32:44:62:
                    46:de:f7:4f:3c:82:ad:76:11:37:60:f4:12:ef:49:
                    73:51:98:5d:5e:06:f2:18:e0:89:19:32:c2:87:c3:
                    19:69:3f:37:ae:89:df:15:e4:25:e3:84:ef:a6:ef:
                    06:e7:70:80:ca:cd:1a:3f:00:5e:5d:91:c6:6b:76:
                    5f:4f:03:ee:f4:75:2e:d6:93:cd:88:f3:90:2b:c8:
                    39:2d:d5:d9:a0:4b:98:c0:bf:57:c8:88:71:23:07:
                    63:59:a2:08:8f:5b:18:0f:c8:49:3e:a5:f1:e1:93:
                    bd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:89:29:DA:F6:EB:E6:F2:FD:E6:70:DF:32:D4:3F:C5:40:81:F2:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/e71a8b62-913b-37c9-9ded-e076aa80125c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:c4:d5:15:d7:2b:24:fb:a8:d7:c6:05:82:71:a5:6c:eb:72:
         26:61:35:17:a0:4a:2a:80:9c:54:40:1e:c6:92:b5:1f:4c:11:
         e0:54:60:0d:1e:b9:0d:35:14:ae:c5:09:53:e6:3a:fe:cc:5d:
         00:09:f6:f7:48:67:6e:39:71:1a:80:09:2f:ef:43:a8:e6:f4:
         22:52:64:26:11:c0:5f:59:ea:d0:94:e3:7c:17:e9:bd:e0:4a:
         1c:f7:35:27:3c:b5:ae:31:e0:ee:14:e3:34:08:1b:7c:38:47:
         f5:41:2c:45:38:b0:18:9a:46:20:fb:e7:bf:9d:c7:53:fe:39:
         01:4a:ab:51:ad:cd:e1:9c:7c:2a:3f:a4:a0:e8:ba:74:cc:95:
         b1:40:2d:05:72:76:30:fa:ec:0d:d4:fd:1c:18:4e:58:20:f1:
         24:56:60:f4:58:e3:75:b9:6d:5c:df:25:9b:6d:da:58:f3:66:
         bc:56:c7:99:02:68:48:46:54:41:b5:bd:4e:36:b9:97:4e:ba:
         3f:36:5b:25:e1:d1:0e:5b:64:ef:7f:ad:ab:80:86:e5:46:05:
         02:14:29:a2:5e:72:ca:ce:35:71:aa:3a:64:5a:4c:68:7b:e5:
         df:cb:f4:00:2b:4b:9a:64:c1:7c:db:e0:99:de:bf:99:9e:37:
         9c:ea:1e:02
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn4epOe1PZHQoShiMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JiZWU5YjEtMWIzMy00OTUxLWE2MTctZWNiODBkOWJh
ZDk5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk
NWQ5YmM3YzctMjg4Yy00MDIzLTg1YmItYTllMWJjMjNjMWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3FdiOOwcOs44180imhDLQmbNpgjslXwIYaO
M+SFcuWXW4IjqP7wr6nuPhhTaYv5IK5QhPjGtVzLE3IEdAu0BEyAQskBWinG1Co7
FAXErqvshlu+6OdQcBhC+xNLZK/hFphWpMrU7yUhSh++ntbfA13MPM9eAIcn3ZgF
/vbhv+ga3PPMwbJzkCmJ8QQAjJ7hKw0yRGJG3vdPPIKtdhE3YPQS70lzUZhdXgby
GOCJGTLCh8MZaT83ronfFeQl44Tvpu8G53CAys0aPwBeXZHGa3ZfTwPu9HUu1pPN
iPOQK8g5LdXZoEuYwL9XyIhxIwdjWaIIj1sYD8hJPqXx4ZO99QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFaJKdr26+by/eZw3zLUP8VAgfIJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmJl
ZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4MGQ5YmFkOTkvZTcxYThiNjItOTEzYi0z
N2M5LTlkZWQtZTA3NmFhODAxMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JiZWU5YjEtMWIzMy00OTUxLWE2
MTctZWNiODBkOWJhZDk5LzdiYmVlOWIxLTFiMzMtNDk1MS1hNjE3LWVjYjgwZDli
YWQ5OS5jcmwwHwYDVR0jBBgwFoAUKSL34vJ0kytfzKQDs/xSZeeGwpowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83YmJlZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4
MGQ5YmFkOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgefQAAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALjE1RXXKyT7qNfGBYJxpWzrciZhNRegSiqAnFRAHsaStR9MEeBU
YA0euQ01FK7FCVPmOv7MXQAJ9vdIZ245cRqACS/vQ6jm9CJSZCYRwF9Z6tCU43wX
6b3gShz3NSc8ta4x4O4U4zQIG3w4R/VBLEU4sBiaRiD757+dx1P+OQFKq1GtzeGc
fCo/pKDounTMlbFALQVydjD67A3U/RwYTlgg8SRWYPRY43W5bVzfJZtt2ljzZrxW
x5kCaEhGVEG1vU42uZdOuj82WyXh0Q5bZO9/rauAhuVGBQIUKaJecsrONXGqOmRa
TGh75d/L9AArS5pkwXzb4Jnev5meN5zqHgI=
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:44 2025 by rpki-client