Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8cb2003a-4229-3157-beef-867dd448e137.roa
File:                     8cb2003a-4229-3157-beef-867dd448e137.roa (raw, json)
Hash identifier:          tuYC/NkEOUagkiDFEgO/qmXLEjjuhKE7uCmCZkz74sY=
Subject key identifier:   9F:76:25:21:C9:92:60:89:91:70:EF:9D:6D:C4:93:03:0E:CE:EE:D7
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B0E415678A5EE3240FD569AC0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8cb2003a-4229-3157-beef-867dd448e137.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:56:78:a5:ee:32:40:fd:56:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=b903b6da-1c85-477e-a495-f0d6c76b1f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a6:1e:fc:a8:5e:d5:e3:98:50:eb:41:13:1a:
                    48:8d:af:a3:55:7a:e4:19:bc:37:49:a4:27:0f:3e:
                    21:cf:73:ad:cf:fe:ca:44:4a:ba:6c:77:a6:c1:21:
                    f5:c6:0c:13:b1:ab:eb:8d:67:04:7b:5d:cd:26:41:
                    ab:78:b9:a2:e5:64:b3:a8:87:69:78:83:50:d2:67:
                    f9:d7:1b:dd:a6:73:17:99:7e:de:9f:2e:47:02:f5:
                    e7:88:d8:d1:96:68:89:56:da:26:e2:d0:2f:80:bb:
                    9e:6a:11:3c:be:d6:2c:70:98:c8:ca:01:a3:65:3a:
                    a4:d0:0e:67:6c:80:0b:10:f7:18:24:6e:d7:58:cb:
                    62:61:a4:a8:19:fc:20:d6:2d:1f:6f:5f:5d:b1:21:
                    f3:0d:ae:1d:07:d8:8d:2c:ca:bb:e7:96:a7:98:dd:
                    74:fd:a8:16:b3:e8:3b:16:86:a8:65:e6:a5:d5:2c:
                    15:27:b5:cd:a6:6f:cd:3d:38:00:0e:4b:2f:f2:ff:
                    ae:8c:a0:20:8f:e3:d0:2d:be:72:cc:2e:9c:56:73:
                    a6:4d:b3:b0:57:f1:62:35:1b:79:dc:2f:20:b4:d1:
                    58:66:66:b7:67:ac:5f:34:0c:c6:58:69:52:20:be:
                    0c:c5:47:d9:b4:db:71:68:37:04:0c:3d:68:91:87:
                    e0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:25:21:C9:92:60:89:91:70:EF:9D:6D:C4:93:03:0E:CE:EE:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8cb2003a-4229-3157-beef-867dd448e137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:2a:8d:11:36:c1:19:2a:fe:53:2f:ac:89:7a:3b:6a:32:0c:
         31:d4:24:cc:57:68:24:0d:a2:95:4b:d8:87:37:30:e2:e4:99:
         66:f8:07:c6:00:91:fb:e8:0c:9f:ec:c4:35:21:eb:07:88:16:
         3b:7a:1b:1f:61:b2:c7:c8:1c:1a:45:f4:7a:a5:51:6c:25:bd:
         10:86:d2:23:7e:c4:37:f7:ee:a1:f9:4e:6e:45:a3:dc:b7:d7:
         b3:f1:d0:ea:6c:e5:d0:6b:fc:79:b4:36:db:24:aa:0c:da:0b:
         54:bd:21:e1:cc:da:32:44:11:9c:64:74:bc:7d:d6:4b:09:ab:
         95:b6:79:71:18:27:99:1d:59:9e:52:44:cb:8e:2d:e6:22:7e:
         cd:84:89:4d:b3:af:81:9e:c9:54:6f:13:d8:76:c8:62:37:16:
         77:2c:e1:a6:c2:54:e1:f6:07:f0:a9:40:7f:27:49:6c:55:f3:
         44:ad:fe:63:8e:92:4f:a6:f7:1f:25:60:57:b8:97:29:08:2f:
         b5:f9:1c:6d:14:14:b6:75:3b:09:5e:9f:b2:4a:eb:aa:3d:64:
         3b:72:c3:1c:44:93:f6:cd:38:35:1d:f0:04:79:2b:55:e1:3f:
         c5:97:bc:f2:58:fc:75:24:6a:9c:e4:c9:96:af:a7:17:fd:75:
         5c:3c:7c:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsOQVZ4pe4yQP1WmsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk
YjkwM2I2ZGEtMWM4NS00NzdlLWE0OTUtZjBkNmM3NmIxZjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqYe/Khe1eOYUOtBExpIja+jVXrkGbw3SaQn
Dz4hz3Otz/7KREq6bHemwSH1xgwTsavrjWcEe13NJkGreLmi5WSzqIdpeINQ0mf5
1xvdpnMXmX7eny5HAvXniNjRlmiJVtom4tAvgLueahE8vtYscJjIygGjZTqk0A5n
bIALEPcYJG7XWMtiYaSoGfwg1i0fb19dsSHzDa4dB9iNLMq755anmN10/agWs+g7
FoaoZeal1SwVJ7XNpm/NPTgADksv8v+ujKAgj+PQLb5yzC6cVnOmTbOwV/FiNRt5
3C8gtNFYZma3Z6xfNAzGWGlSIL4MxUfZtNtxaDcEDD1okYfgPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ92JSHJkmCJkXDvnW3EkwMOzu7XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvOGNiMjAwM2EtNDIyOS0z
MTU3LWJlZWYtODY3ZGQ0NDhlMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgVKgO8g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJIqjRE2wRkq/lMvrIl6O2oyDDHUJMxXaCQNopVL2Ic3MOLkmWb4
B8YAkfvoDJ/sxDUh6weIFjt6Gx9hssfIHBpF9HqlUWwlvRCG0iN+xDf37qH5Tm5F
o9y317Px0Ops5dBr/Hm0NtskqgzaC1S9IeHM2jJEEZxkdLx91ksJq5W2eXEYJ5kd
WZ5SRMuOLeYifs2EiU2zr4GeyVRvE9h2yGI3Fncs4abCVOH2B/CpQH8nSWxV80St
/mOOkk+m9x8lYFe4lykIL7X5HG0UFLZ1Owlen7JK66o9ZDtywxxEk/bNODUd8AR5
K1XhP8WXvPJY/HUkapzkyZavpxf9dVw8fHE=
-----END CERTIFICATE-----
Generated at Sat Sep 20 00:44:53 2025 by rpki-client