Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/93889a34-4b8d-3286-8653-2478a9708bf0.roa
File:                     93889a34-4b8d-3286-8653-2478a9708bf0.roa (raw, json)
Hash identifier:          0CHEO++Fjb1bPtGhtZI0qBgFyxpEBafj2R1BNJHORF4=
Subject key identifier:   65:BF:14:98:84:D2:0F:97:66:F3:2D:04:22:86:F7:CB:1E:42:F8:F9
Certificate issuer:       /CN=693058af-5777-47e8-8d51-1b7f5214bf85
Certificate serial:       010D0C9F4328584A5FC5E97251FE977872A20E80
Authority key identifier: 10:6C:66:4D:7F:62:A8:1A:E3:A3:AF:C5:D9:18:DB:B6:0F:40:4F:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/93889a34-4b8d-3286-8653-2478a9708bf0.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     64249
IP address blocks:        2607:5840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/693058af-5777-47e8-8d51-1b7f5214bf85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/693058af-5777-47e8-8d51-1b7f5214bf85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e9:72:51:fe:97:78:72:a2:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693058af-5777-47e8-8d51-1b7f5214bf85
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=c1b98563-0c30-417e-9f1a-007e16ca1aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:0f:4f:19:33:7a:b6:18:62:8a:b7:41:20:
                    62:2b:3a:aa:04:d5:e1:2d:14:9a:44:e0:03:b6:fc:
                    c7:b8:d9:5b:2c:d0:3b:81:78:9a:87:98:cf:55:0d:
                    81:d1:be:85:d7:fd:09:d4:af:70:09:41:90:2d:ea:
                    84:95:95:28:06:28:66:7b:53:0d:96:4e:70:72:04:
                    04:2c:1f:35:64:6f:82:ad:89:1f:2a:e9:c6:e3:30:
                    c4:85:15:ea:c8:12:74:da:ca:06:0a:41:e1:f5:55:
                    c8:b2:0b:d6:aa:e3:e3:af:dd:a4:c2:f7:83:75:22:
                    61:18:8b:9c:bd:04:56:c4:a8:bd:86:d6:09:76:c1:
                    a7:2e:a4:5d:1d:91:7a:45:cd:33:70:0b:d1:ce:5c:
                    0f:bf:f6:0f:c3:dc:5c:75:19:ae:e3:eb:ba:3d:ef:
                    cb:86:d0:ae:06:f7:53:e0:31:5b:c2:05:bb:91:8d:
                    09:b5:b5:7c:93:16:4a:49:71:af:5a:90:cd:ff:eb:
                    2a:07:ca:9a:14:47:24:ed:68:e8:62:59:f4:4a:b2:
                    ab:3b:7c:41:d1:97:c1:39:8e:fa:f2:c0:a8:87:44:
                    3b:02:d2:1f:bc:bf:bd:9f:4e:8a:74:95:bf:36:e1:
                    cb:60:4b:c6:4a:e6:50:d6:77:4d:de:63:b7:af:26:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BF:14:98:84:D2:0F:97:66:F3:2D:04:22:86:F7:CB:1E:42:F8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/93889a34-4b8d-3286-8653-2478a9708bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85/693058af-5777-47e8-8d51-1b7f5214bf85.crl

            X509v3 Authority Key Identifier:
                keyid:10:6C:66:4D:7F:62:A8:1A:E3:A3:AF:C5:D9:18:DB:B6:0F:40:4F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/693058af-5777-47e8-8d51-1b7f5214bf85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c2:ca:8c:e4:8e:1a:b4:a8:5c:b0:cc:5b:f9:45:7c:9f:44:
         f7:a5:ca:ed:c6:20:5c:1c:36:f3:17:64:7a:68:09:59:85:7d:
         4c:cc:ce:21:7c:c5:98:4e:25:4e:39:1c:d9:e3:d1:32:10:e6:
         48:55:7b:37:c0:c4:ea:48:ce:98:6f:93:69:06:eb:f2:a9:07:
         f1:a6:37:d6:72:15:b0:04:b1:e5:05:83:0a:07:4c:1a:6e:af:
         09:e1:a5:45:47:9b:9e:fd:91:cb:7e:a2:0b:35:c5:f1:1f:1a:
         1a:c9:be:77:36:ec:58:0d:aa:b9:71:35:72:ae:09:63:7a:06:
         6c:9a:39:3e:1d:e6:f5:6d:b3:9e:dc:e1:b6:14:c2:3a:97:a5:
         4c:dc:08:b6:45:3c:06:01:34:89:46:1f:81:96:95:f0:98:06:
         de:c2:4a:46:b5:1e:15:a5:3e:a1:98:cc:9b:c3:61:10:19:94:
         a0:e5:e9:32:0d:4a:32:37:7e:47:8b:8a:01:ae:8e:f9:df:3c:
         79:ed:f8:56:bd:92:7d:f5:15:f1:04:18:ed:ef:22:84:8b:97:
         eb:e0:c5:b6:bf:86:a1:57:3f:59:5a:4d:67:ba:45:f7:12:8b:
         ab:2b:4c:f0:21:06:c1:6d:6f:b5:c8:67:60:7e:83:fb:d8:22:
         5e:30:54:db
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpfxelyUf6XeHKiDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjkzMDU4YWYtNTc3Ny00N2U4LThkNTEtMWI3ZjUyMTRi
Zjg1MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk
YzFiOTg1NjMtMGMzMC00MTdlLTlmMWEtMDA3ZTE2Y2ExYWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgUPTxkzerYYYoq3QSBiKzqqBNXhLRSaROAD
tvzHuNlbLNA7gXiah5jPVQ2B0b6F1/0J1K9wCUGQLeqElZUoBihme1MNlk5wcgQE
LB81ZG+CrYkfKunG4zDEhRXqyBJ02soGCkHh9VXIsgvWquPjr92kwveDdSJhGIuc
vQRWxKi9htYJdsGnLqRdHZF6Rc0zcAvRzlwPv/YPw9xcdRmu4+u6Pe/LhtCuBvdT
4DFbwgW7kY0JtbV8kxZKSXGvWpDN/+sqB8qaFEck7WjoYln0SrKrO3xB0ZfBOY76
8sCoh0Q7AtIfvL+9n06KdJW/NuHLYEvGSuZQ1ndN3mO3ryaBXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGW/FJiE0g+XZvMtBCKG98seQvj5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OTMw
NThhZi01Nzc3LTQ3ZTgtOGQ1MS0xYjdmNTIxNGJmODUvOTM4ODlhMzQtNGI4ZC0z
Mjg2LTg2NTMtMjQ3OGE5NzA4YmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjkzMDU4YWYtNTc3Ny00N2U4LThk
NTEtMWI3ZjUyMTRiZjg1LzY5MzA1OGFmLTU3NzctNDdlOC04ZDUxLTFiN2Y1MjE0
YmY4NS5jcmwwHwYDVR0jBBgwFoAUEGxmTX9iqBrjo6/F2Rjbtg9AT6EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82OTMwNThhZi01Nzc3LTQ3ZTgtOGQ1MS0xYjdm
NTIxNGJmODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdYQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCAwsqM5I4atKhcsMxb+UV8n0T3pcrtxiBcHDbzF2R6aAlZhX1MzM4h
fMWYTiVOORzZ49EyEOZIVXs3wMTqSM6Yb5NpBuvyqQfxpjfWchWwBLHlBYMKB0wa
bq8J4aVFR5ue/ZHLfqILNcXxHxoayb53NuxYDaq5cTVyrgljegZsmjk+Heb1bbOe
3OG2FMI6l6VM3Ai2RTwGATSJRh+BlpXwmAbewkpGtR4VpT6hmMybw2EQGZSg5eky
DUoyN35Hi4oBro753zx57fhWvZJ99RXxBBjt7yKEi5fr4MW2v4ahVz9ZWk1nukX3
EourK0zwIQbBbW+1yGdgfoP72CJeMFTb
-----END CERTIFICATE-----
Generated at Wed Jul 9 19:22:33 2025 by rpki-client