Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa
File:                     bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa (raw, json)
Hash identifier:          /JE1UTufDXfepmW6KDzpCPeSsTklW60jQu3ABK5gYFI=
Subject key identifier:   FF:FF:1F:D9:FD:76:E4:9C:E1:EE:21:31:51:35:C6:65:F4:98:22:E7
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F4328584B0E414EA2E59743BB139413C0
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     30698
IP address blocks:        2606:e740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:4e:a2:e5:97:43:bb:13:94:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=75424760-2cf9-4aa3-9fde-7e45fe464240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7e:f9:98:c2:61:86:50:4c:f1:65:23:d7:f5:
                    6c:25:d6:c6:d8:99:58:77:97:ea:ac:c0:57:2d:06:
                    45:14:cb:eb:49:23:fd:ca:b5:e3:74:7f:6d:d2:2c:
                    42:f8:3a:17:4f:2b:25:8f:5f:4a:5c:da:71:27:7b:
                    55:fb:86:93:52:81:6f:d8:41:df:0f:7c:7b:32:04:
                    7a:e1:5b:dc:aa:92:be:47:42:50:10:3e:65:0a:f4:
                    17:10:5e:7e:be:95:a1:1e:db:e1:79:23:d9:b4:b3:
                    33:9d:8d:85:e2:b6:f8:1e:46:a5:31:b1:f4:b8:4f:
                    bf:b2:00:99:ae:93:46:c3:07:91:af:f6:31:3b:68:
                    dc:75:80:4d:98:4b:2d:29:97:2d:ba:d6:e5:cb:44:
                    82:87:15:d6:5a:ba:15:27:56:74:94:38:59:62:d8:
                    ea:e9:2a:8a:fc:f2:4a:a5:ff:03:b5:a1:98:c1:6b:
                    e6:23:d2:9e:c6:e3:ca:f7:8e:f4:f2:4e:6d:9d:72:
                    6e:3f:2e:0f:2b:e4:f6:d3:a9:f7:9a:7b:19:63:c6:
                    db:d8:37:9e:a9:9f:c5:97:fb:bb:b2:5d:c9:ff:7e:
                    1c:0d:d0:c8:31:5f:82:3e:77:05:fc:43:a4:14:34:
                    19:b8:50:53:24:84:07:86:70:c4:be:47:97:48:76:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FF:1F:D9:FD:76:E4:9C:E1:EE:21:31:51:35:C6:65:F4:98:22:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:e740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:32:dd:f1:00:b7:83:48:57:b6:66:2c:9d:41:a4:b2:49:
         09:43:e6:25:c0:dd:4d:ca:a4:2a:4f:27:50:6e:ce:6e:b2:97:
         41:3c:d7:3f:d5:c1:80:a7:5f:4b:2a:8c:ae:8b:c4:a0:56:26:
         5b:f1:c6:43:f4:28:bd:58:60:73:b9:81:51:42:ab:31:d3:87:
         16:1b:c4:64:de:8a:47:9c:2a:d8:2f:a4:ee:6a:c0:82:c1:59:
         c0:2d:e0:5f:05:81:06:f9:43:de:e3:bb:01:10:92:93:a0:c0:
         fc:2c:7b:7d:4b:9b:28:a3:25:1d:70:48:d9:40:24:76:f5:8e:
         57:57:68:c7:b4:09:91:9d:37:ac:f5:d7:3f:42:82:22:0e:b9:
         9c:61:d4:31:52:70:64:90:1b:94:3b:14:1c:bb:e6:7f:42:c9:
         5c:52:7d:25:06:b0:4a:4e:c0:07:1c:d5:bf:79:b3:50:fe:12:
         60:65:19:9b:57:f9:c3:a9:95:09:a0:22:28:63:9e:90:5b:98:
         5f:3a:eb:23:9e:db:b4:01:ab:7d:a4:2a:f1:70:ea:2c:1c:8d:
         59:e0:41:3d:cd:c2:6a:6c:04:1d:d4:0d:7a:3d:c9:39:57:14:
         fa:41:16:cb:82:eb:ab:8a:98:92:1f:2d:4c:1f:e6:28:a2:9c:
         58:d0:62:66
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsOQU6i5ZdDuxOUE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl
YjQ5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NzU0MjQ3NjAtMmNmOS00YWEzLTlmZGUtN2U0NWZlNDY0MjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX75mMJhhlBM8WUj1/VsJdbG2JlYd5fqrMBX
LQZFFMvrSSP9yrXjdH9t0ixC+DoXTyslj19KXNpxJ3tV+4aTUoFv2EHfD3x7MgR6
4VvcqpK+R0JQED5lCvQXEF5+vpWhHtvheSPZtLMznY2F4rb4HkalMbH0uE+/sgCZ
rpNGwweRr/YxO2jcdYBNmEstKZctutbly0SChxXWWroVJ1Z0lDhZYtjq6SqK/PJK
pf8DtaGYwWvmI9KexuPK94708k5tnXJuPy4PK+T206n3mnsZY8bb2DeeqZ/Fl/u7
sl3J/34cDdDIMV+CPncF/EOkFDQZuFBTJIQHhnDEvkeXSHZa0wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP//H9n9duSc4e4hMVE1xmX0mCLnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0
OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvYmQyMDM0YzMtZWViNi0z
YTVkLTk0MzItZjE0YmExNzNkMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl
YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl
ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw
M2E2ZWViNDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbnQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBEyTLd8QC3g0hXtmYsnUGkskkJQ+YlwN1NyqQqTydQbs5uspdBPNc/
1cGAp19LKoyui8SgViZb8cZD9Ci9WGBzuYFRQqsx04cWG8Rk3opHnCrYL6TuasCC
wVnALeBfBYEG+UPe47sBEJKToMD8LHt9S5sooyUdcEjZQCR29Y5XV2jHtAmRnTes
9dc/QoIiDrmcYdQxUnBkkBuUOxQcu+Z/QslcUn0lBrBKTsAHHNW/ebNQ/hJgZRmb
V/nDqZUJoCIoY56QW5hfOusjntu0Aat9pCrxcOosHI1Z4EE9zcJqbAQd1A16Pck5
VxT6QRbLguuripiSHy1MH+YoopxY0GJm
-----END CERTIFICATE-----
Generated at Fri Sep 19 16:29:16 2025 by rpki-client