Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/abcc52d6-761c-3630-8adb-cb3a8d9db909.roa
File:                     abcc52d6-761c-3630-8adb-cb3a8d9db909.roa (raw, json)
Hash identifier:          QnFizP2QOj7GvYX7wi8KOKI6FsCyHvuIteOtnNnmLd4=
Subject key identifier:   36:79:A8:B6:EA:29:2F:5F:6E:EA:49:1F:26:AA:A5:3F:9C:28:87:35
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584A6C55C87F709FBF04DF814B40
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/abcc52d6-761c-3630-8adb-cb3a8d9db909.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     46265
IP address blocks:        2607:8240:ff0a::/48 maxlen: 48
                          2607:8240:ff0b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:c8:7f:70:9f:bf:04:df:81:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=d8ff833a-0ab8-469f-960d-cb804742c37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ab:c0:eb:7c:f9:4e:48:b7:55:6c:e6:77:cd:
                    58:ad:7b:9b:9d:a5:74:a3:34:68:23:ec:1e:40:e1:
                    47:07:30:59:02:c0:10:21:e1:cf:cb:4b:e4:f0:cc:
                    d2:c6:47:a5:82:29:d4:1f:76:6f:a1:81:c3:b9:99:
                    8c:d6:93:6d:2a:71:89:bd:a5:09:ff:92:d4:6a:d6:
                    00:81:17:bc:a2:91:11:f5:05:fd:01:7f:61:8d:50:
                    e0:69:70:5b:2f:ff:5f:dc:db:3e:e9:01:34:d6:38:
                    c5:45:cb:7a:3d:95:92:55:71:c1:22:4b:9e:22:ac:
                    ea:16:5d:a9:86:39:d8:1b:0c:0e:fe:d1:ee:50:8d:
                    8c:6c:10:35:56:c4:32:ce:be:9b:b2:2d:12:12:54:
                    c3:f7:3f:93:04:c5:1e:aa:fe:a9:5a:fd:56:04:69:
                    8d:16:ab:0a:cf:5c:9f:5c:50:a9:c8:47:60:0e:23:
                    fa:c7:1c:21:53:d0:ef:e6:07:aa:96:82:63:20:ca:
                    3d:9a:59:6c:c3:57:c1:0a:27:25:d8:a2:95:29:1d:
                    a6:42:70:b4:43:b5:34:a3:47:59:7d:70:20:40:55:
                    26:48:e0:ab:99:36:c1:74:8a:59:e0:90:6c:dc:87:
                    c3:63:a5:bf:02:84:8f:86:2c:c8:33:79:88:38:0d:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:79:A8:B6:EA:29:2F:5F:6E:EA:49:1F:26:AA:A5:3F:9C:28:87:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/abcc52d6-761c-3630-8adb-cb3a8d9db909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:ff0a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:38:c5:b5:e8:82:74:6b:fa:dc:b1:e2:b3:bd:21:2f:e6:
         5c:10:b0:3b:82:0c:b0:ef:41:13:c4:52:ad:00:a8:ff:08:ef:
         e2:d8:0a:01:13:47:46:01:66:10:10:56:77:7e:5a:6a:66:fd:
         27:59:ae:36:9e:3f:bc:22:c2:4a:dd:2e:51:aa:51:c5:ae:57:
         85:00:10:a7:37:46:33:a8:3d:c2:ab:b9:be:7d:a3:6a:dc:ac:
         1a:b4:b8:c0:dd:74:e3:a7:59:a2:e0:bf:2d:ad:6e:f0:9f:03:
         07:d8:fe:a5:d7:36:86:3d:8d:ec:1c:64:99:da:e0:20:c6:7e:
         18:a3:c0:76:51:c6:76:7a:4c:d3:78:c7:ea:fe:4d:73:42:dc:
         53:10:74:a4:77:f8:25:cf:dc:aa:85:9d:b3:38:0a:9d:6b:85:
         5a:2b:58:e9:ca:14:2b:ef:01:b7:99:a5:41:1b:f7:f5:51:c0:
         07:fd:b4:80:ea:53:b9:31:37:b1:dc:49:25:78:ac:af:c6:c3:
         c3:83:8e:4b:63:f1:65:ac:85:f8:b8:7f:34:42:6f:3b:8c:e8:
         ee:db:3d:69:cc:c4:c0:5c:78:ae:55:60:74:ea:7c:0f:01:cc:
         e3:b9:c4:0b:64:55:93:b1:58:3a:10:8f:39:a6:0f:f9:43:df:
         a8:4d:00:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpsVch/cJ+/BN+BS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj
MTY4MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk
ZDhmZjgzM2EtMGFiOC00NjlmLTk2MGQtY2I4MDQ3NDJjMzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqvA63z5Tki3VWzmd81YrXubnaV0ozRoI+we
QOFHBzBZAsAQIeHPy0vk8MzSxkelginUH3ZvoYHDuZmM1pNtKnGJvaUJ/5LUatYA
gRe8opER9QX9AX9hjVDgaXBbL/9f3Ns+6QE01jjFRct6PZWSVXHBIkueIqzqFl2p
hjnYGwwO/tHuUI2MbBA1VsQyzr6bsi0SElTD9z+TBMUeqv6pWv1WBGmNFqsKz1yf
XFCpyEdgDiP6xxwhU9Dv5geqloJjIMo9mllsw1fBCicl2KKVKR2mQnC0Q7U0o0dZ
fXAgQFUmSOCrmTbBdIpZ4JBs3IfDY6W/AoSPhizIM3mIOA2gpwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDZ5qLbqKS9fbupJHyaqpT+cKIc1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1
ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvYWJjYzUyZDYtNzYxYy0z
NjMwLThhZGItY2IzYThkOWRiOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4
ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm
YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk
N2VjZmMxNjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgeCQP8K
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI7NOMW16IJ0a/rcseKzvSEv5lwQsDuCDLDvQRPEUq0AqP8I7+LY
CgETR0YBZhAQVnd+Wmpm/SdZrjaeP7wiwkrdLlGqUcWuV4UAEKc3RjOoPcKrub59
o2rcrBq0uMDddOOnWaLgvy2tbvCfAwfY/qXXNoY9jewcZJna4CDGfhijwHZRxnZ6
TNN4x+r+TXNC3FMQdKR3+CXP3KqFnbM4Cp1rhVorWOnKFCvvAbeZpUEb9/VRwAf9
tIDqU7kxN7HcSSV4rK/Gw8ODjktj8WWshfi4fzRCbzuM6O7bPWnMxMBceK5VYHTq
fA8BzOO5xAtkVZOxWDoQjzmmD/lD36hNAMc=
-----END CERTIFICATE-----
Generated at Thu Jul 10 06:47:31 2025 by rpki-client