Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/265863ae-b1a4-30f1-b5b1-68cf026de081.roa
File:                     265863ae-b1a4-30f1-b5b1-68cf026de081.roa (raw, json)
Hash identifier:          SAq1R+edf5lZNRfsTPCiXf+NJkb/Y+kITKwopOuhF9Q=
Subject key identifier:   F7:BC:95:F4:B8:54:F0:FF:27:69:29:71:3B:87:6F:77:2F:FA:47:5F
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584A305031A3852897AA99B9D500
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/265863ae-b1a4-30f1-b5b1-68cf026de081.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     0
IP address blocks:        2605:fb80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:31:a3:85:28:97:aa:99:b9:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=be63617a-6190-4fc2-8fab-217f289c1cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d3:24:6a:ee:15:c8:ca:f7:33:14:e2:08:1f:
                    bc:87:f9:65:48:be:85:c6:d3:ce:9a:c3:34:68:9c:
                    91:42:b0:12:15:f4:3f:16:33:33:b1:61:e6:10:f9:
                    80:77:53:aa:36:12:e9:b1:3b:c3:5a:85:a0:ce:a6:
                    0a:07:4d:a4:c0:72:32:8d:12:60:88:8d:ac:c4:fd:
                    d1:e7:b3:96:6f:5f:54:a4:b3:35:78:ef:8c:d0:9e:
                    9e:1e:47:a4:e6:ee:b9:9c:57:49:19:d8:2c:ae:a5:
                    15:78:d6:54:8d:33:87:fa:ea:66:94:54:d3:a1:e3:
                    3f:eb:a0:78:2a:d8:dc:d4:8e:cc:c2:fe:18:1b:37:
                    7b:5a:95:f7:b0:70:d5:a9:a4:75:1a:05:69:f6:ea:
                    81:5b:54:2d:59:c5:8f:c6:d2:fe:dc:6c:37:8b:d3:
                    8d:d4:3e:bf:8c:e5:a1:ae:35:ca:d5:e7:fb:66:b3:
                    fa:66:49:bb:a6:62:34:4b:1d:6f:a1:e9:7a:03:67:
                    f9:fe:18:a1:4b:3e:08:57:22:b0:fb:f6:08:24:55:
                    ae:b5:af:77:21:f7:b4:31:ee:6b:70:d7:87:4b:3c:
                    7c:84:cd:2a:d9:e8:f3:31:46:5d:67:9e:b6:21:0c:
                    c9:37:c0:9c:99:37:19:c1:f2:03:77:25:7f:ed:a3:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BC:95:F4:B8:54:F0:FF:27:69:29:71:3B:87:6F:77:2F:FA:47:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/265863ae-b1a4-30f1-b5b1-68cf026de081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fb80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:59:5a:b2:7e:b3:5d:f1:14:1d:0c:ef:d0:75:79:c6:14:f9:
         80:42:cb:e4:35:92:14:0d:78:80:74:de:ce:40:95:8d:2b:d1:
         d3:dd:d3:64:5f:95:ee:e9:40:07:57:c5:ae:be:94:c8:7a:1b:
         dd:6c:72:14:fa:b4:3d:ca:12:8e:e7:56:30:bf:f4:7e:fd:fd:
         bb:04:96:b2:9a:bd:fa:3a:34:86:33:e3:7f:8e:96:ea:c5:94:
         5e:41:54:be:4e:b2:9d:50:25:45:97:32:95:0e:67:9e:2d:c7:
         52:d1:d4:74:ee:c7:e0:ca:d9:8e:79:e5:6b:bc:7a:77:8f:eb:
         58:51:7e:da:c2:3f:81:80:ef:f4:66:bf:50:33:d0:09:98:4f:
         5d:32:61:9b:64:5b:55:50:1b:57:46:b6:ad:3b:c2:76:aa:31:
         10:3e:61:59:70:b0:13:2a:74:75:d2:4f:ea:0e:19:5c:0a:ec:
         fc:99:7e:aa:89:23:43:a6:ea:54:2b:42:9f:17:e9:2e:45:cb:
         f1:67:a8:ce:1c:b9:01:65:a9:b4:06:47:38:1f:55:05:ce:32:
         1d:eb:41:c3:4f:07:f4:9a:4e:bc:65:7d:7c:d3:af:64:ff:b0:
         89:27:b9:9f:8b:79:76:a0:0a:e7:ec:ed:fd:4f:11:8c:a8:46:
         9e:72:b6:4e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEowUDGjhSiXqpm51QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0
NjU4MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YmU2MzYxN2EtNjE5MC00ZmMyLThmYWItMjE3ZjI4OWMxY2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NMkau4VyMr3MxTiCB+8h/llSL6FxtPOmsM0
aJyRQrASFfQ/FjMzsWHmEPmAd1OqNhLpsTvDWoWgzqYKB02kwHIyjRJgiI2sxP3R
57OWb19UpLM1eO+M0J6eHkek5u65nFdJGdgsrqUVeNZUjTOH+upmlFTToeM/66B4
Ktjc1I7Mwv4YGzd7WpX3sHDVqaR1GgVp9uqBW1QtWcWPxtL+3Gw3i9ON1D6/jOWh
rjXK1ef7ZrP6Zkm7pmI0Sx1voel6A2f5/hihSz4IVyKw+/YIJFWuta93Ife0Me5r
cNeHSzx8hM0q2ejzMUZdZ562IQzJN8CcmTcZwfIDdyV/7aNb6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPe8lfS4VPD/J2kpcTuHb3cv+kdfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm
MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvMjY1ODYzYWUtYjFhNC0z
MGYxLWI1YjEtNjhjZjAyNmRlMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk
ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz
NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz
NzY1MzQ2NTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX7gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQArWVqyfrNd8RQdDO/QdXnGFPmAQsvkNZIUDXiAdN7OQJWNK9HT3dNk
X5Xu6UAHV8WuvpTIehvdbHIU+rQ9yhKO51Ywv/R+/f27BJaymr36OjSGM+N/jpbq
xZReQVS+TrKdUCVFlzKVDmeeLcdS0dR07sfgytmOeeVrvHp3j+tYUX7awj+BgO/0
Zr9QM9AJmE9dMmGbZFtVUBtXRratO8J2qjEQPmFZcLATKnR10k/qDhlcCuz8mX6q
iSNDpupUK0KfF+kuRcvxZ6jOHLkBZam0Bkc4H1UFzjId60HDTwf0mk68ZX18069k
/7CJJ7mfi3l2oArn7O39TxGMqEaecrZO
-----END CERTIFICATE-----
Generated at Wed Jul 9 19:24:08 2025 by rpki-client