Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/16bfe40a-610e-3313-b663-b8effee1397d.roa
File:                     16bfe40a-610e-3313-b663-b8effee1397d.roa (raw, json)
Hash identifier:          b2gP8RfwfmSbuz+hx/942WyqUT5+oGiHNmG4BzgAyGg=
Subject key identifier:   08:88:89:25:2A:03:42:B0:7A:1B:D0:6C:08:72:3C:FF:BE:93:E4:FF
Certificate issuer:       /CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3
Certificate serial:       010D0C9F4328584ADE39FB3A2E423CADE9573220
Authority key identifier: D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/16bfe40a-610e-3313-b663-b8effee1397d.roa
Signing time:             Thu 14 Aug 2025 03:57:52 +0000
ROA not before:           Thu 14 Aug 2025 03:57:52 +0000
ROA not after:            Wed 12 Nov 2025 04:57:52 +0000
asID:                     14618
IP address blocks:        2607:6100:a4::/48 maxlen: 48
                          2607:6100:a5::/48 maxlen: 48
                          2607:6100:a6::/48 maxlen: 48
                          2607:6100:a7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:39:fb:3a:2e:42:3c:ad:e9:57:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3
        Validity
            Not Before: Aug 14 03:57:52 2025 GMT
            Not After : Nov 12 04:57:52 2025 GMT
        Subject: CN=9f5f032a-0cea-4c06-bc59-d6da42642094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:f6:c8:22:f9:5d:08:59:54:85:fe:14:9f:
                    ed:f3:c5:87:e0:80:96:78:19:d3:63:52:5f:00:6c:
                    34:27:4c:e1:e0:6c:46:a4:53:26:b5:25:5d:81:98:
                    5b:80:92:0f:c2:a4:da:81:51:50:38:29:94:89:88:
                    8a:4f:e9:01:d2:e2:5d:28:6a:42:dc:28:fa:77:c9:
                    1a:a9:27:af:0e:3e:31:1d:f0:89:df:91:ed:af:19:
                    64:b9:d0:61:1a:5c:9f:11:95:14:22:da:5e:b3:87:
                    31:1f:d9:de:11:70:55:d2:57:cf:8e:cc:b6:89:df:
                    7c:41:23:63:01:8b:b5:66:f3:fd:02:87:e4:7e:54:
                    ca:a6:9d:3a:ff:51:b3:c4:3f:7b:88:79:a2:33:f7:
                    52:4a:c7:d8:ad:f3:6e:ad:23:25:51:b4:98:75:67:
                    60:cc:7b:af:3b:a4:ba:36:94:f2:20:fa:9b:af:dc:
                    67:2a:e3:e5:b2:3d:36:d3:a9:35:30:93:11:3f:d4:
                    2e:f2:55:3a:7b:93:0e:7d:5c:af:c8:6f:81:f6:c2:
                    21:00:35:f6:b7:96:04:01:10:2c:bb:57:a4:71:50:
                    36:12:64:dd:5d:16:ed:0c:a2:bb:b5:fb:6e:99:46:
                    67:48:56:13:29:ff:c7:8e:44:7e:4e:72:de:32:a2:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:88:89:25:2A:03:42:B0:7A:1B:D0:6C:08:72:3C:FF:BE:93:E4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/16bfe40a-610e-3313-b663-b8effee1397d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6100:a4::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:30:28:4e:97:e7:96:da:3c:74:17:15:0e:08:74:b9:ac:c1:
         86:0d:09:0c:32:4a:51:3b:5b:d4:57:c8:70:ad:a6:ba:8a:93:
         18:ea:f4:32:e2:1f:f1:a2:6f:4b:93:b3:68:09:14:95:00:be:
         4f:8c:ad:2c:8c:c8:2f:4a:74:16:80:24:d5:5f:b3:31:3c:9a:
         64:b3:82:0d:e9:4e:86:c7:19:08:ea:ca:d8:69:56:64:f3:15:
         8d:a7:b4:b9:19:e5:8b:df:f7:8d:41:e7:ce:ea:38:e7:a0:e9:
         af:b2:52:e5:77:f1:f4:3c:a1:5a:ea:46:1e:44:ed:5c:b6:a2:
         31:04:3b:93:0c:22:ae:4e:28:a6:2e:17:76:c4:b5:bd:9f:12:
         63:3c:74:1d:2a:aa:50:fa:18:ed:cb:54:21:a9:cb:df:2f:9a:
         c0:1b:0a:af:37:5d:56:f3:f2:3d:a9:4f:a4:10:d1:95:16:01:
         23:83:99:a6:ef:cf:5a:79:85:60:5f:24:1d:19:00:d8:2e:a7:
         e7:63:c2:a9:70:01:03:51:15:18:b8:d7:a9:59:19:72:d0:0c:
         52:01:c2:4e:52:85:b2:fb:65:36:e6:c5:5c:71:de:75:0e:59:
         49:41:e5:ff:66:dd:9f:b5:e2:f4:8a:9a:e6:82:4d:cc:5a:50:
         59:0e:a2:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEreOfs6LkI8relXMiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhiMjJiNDYtZDU2ZS00ZWFkLWE1ZmMtNThlYjA3MTIz
Y2YzMB4XDTI1MDgxNDAzNTc1MloXDTI1MTExMjA0NTc1MlowLzEtMCsGA1UEAxMk
OWY1ZjAzMmEtMGNlYS00YzA2LWJjNTktZDZkYTQyNjQyMDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD/2yCL5XQhZVIX+FJ/t88WH4ICWeBnTY1Jf
AGw0J0zh4GxGpFMmtSVdgZhbgJIPwqTagVFQOCmUiYiKT+kB0uJdKGpC3Cj6d8ka
qSevDj4xHfCJ35HtrxlkudBhGlyfEZUUItpes4cxH9neEXBV0lfPjsy2id98QSNj
AYu1ZvP9AofkflTKpp06/1GzxD97iHmiM/dSSsfYrfNurSMlUbSYdWdgzHuvO6S6
NpTyIPqbr9xnKuPlsj0206k1MJMRP9Qu8lU6e5MOfVyvyG+B9sIhADX2t5YEARAs
u1ekcVA2EmTdXRbtDKK7tftumUZnSFYTKf/HjkR+TnLeMqIu3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAiIiSUqA0KwehvQbAhyPP++k+T/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wOGIy
MmI0Ni1kNTZlLTRlYWQtYTVmYy01OGViMDcxMjNjZjMvMTZiZmU0MGEtNjEwZS0z
MzEzLWI2NjMtYjhlZmZlZTEzOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDhiMjJiNDYtZDU2ZS00ZWFkLWE1
ZmMtNThlYjA3MTIzY2YzLzA4YjIyYjQ2LWQ1NmUtNGVhZC1hNWZjLTU4ZWIwNzEy
M2NmMy5jcmwwHwYDVR0jBBgwFoAU0eIfAxg8RAnf7OXGcB4AHpr382QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wOGIyMmI0Ni1kNTZlLTRlYWQtYTVmYy01OGVi
MDcxMjNjZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgdhAACk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAIwKE6X55baPHQXFQ4IdLmswYYNCQwySlE7W9RXyHCtprqKkxjq
9DLiH/Gib0uTs2gJFJUAvk+MrSyMyC9KdBaAJNVfszE8mmSzgg3pTobHGQjqythp
VmTzFY2ntLkZ5Yvf941B587qOOeg6a+yUuV38fQ8oVrqRh5E7Vy2ojEEO5MMIq5O
KKYuF3bEtb2fEmM8dB0qqlD6GO3LVCGpy98vmsAbCq83XVbz8j2pT6QQ0ZUWASOD
mabvz1p5hWBfJB0ZANgup+djwqlwAQNRFRi416lZGXLQDFIBwk5ShbL7ZTbmxVxx
3nUOWUlB5f9m3Z+14vSKmuaCTcxaUFkOolY=
-----END CERTIFICATE-----
Generated at Thu Aug 21 18:52:17 2025 by rpki-client