Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/489ac930-1bcb-3d1b-ae05-6c485b3d05f4.roa
File:                     489ac930-1bcb-3d1b-ae05-6c485b3d05f4.roa (raw, json)
Hash identifier:          tPrS4a2oW3mrGRtZBkG3tm7uYsr1jjvJQXkm9jbNtmA=
Subject key identifier:   23:C1:BF:54:5D:13:0D:66:B6:78:1F:44:89:39:B4:BA:92:1C:4A:14
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584ACB40E4C95512464E58FF3580
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/489ac930-1bcb-3d1b-ae05-6c485b3d05f4.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     22147
IP address blocks:        2001:4830:c170::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e4:c9:55:12:46:4e:58:ff:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=259847b6-eac8-4c0e-8ff5-35ee62f3c8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:5b:c7:e9:31:41:03:65:6d:25:f0:58:48:
                    20:08:d0:2b:6d:63:db:f1:e0:11:ba:1d:71:ac:25:
                    38:5e:37:1f:39:b0:4d:c2:b4:b2:34:d7:de:fe:02:
                    13:b6:55:dc:c7:33:3a:8c:92:8d:5e:ab:7c:c3:bf:
                    02:1d:13:8a:32:5e:d1:e8:c2:62:80:db:b6:58:6c:
                    c2:00:c4:a6:1a:9b:26:d3:bd:7d:fe:a5:7b:1b:68:
                    ca:c0:57:03:bf:17:94:e9:01:e9:bf:0b:94:1f:3b:
                    bb:dc:93:1d:92:8c:98:ac:3e:23:62:bc:ac:b2:f6:
                    ef:18:84:e8:b7:73:48:89:2b:c5:2a:6b:88:4f:05:
                    24:21:fe:9b:6f:6b:1c:71:d7:05:34:77:58:b7:c6:
                    70:97:c9:b3:e1:bf:b6:3f:c1:65:9e:3f:25:0c:36:
                    35:3d:e5:e9:89:07:b9:f9:8a:04:e3:72:62:ea:25:
                    68:5a:e8:9f:88:88:33:1f:52:33:14:c4:d4:63:05:
                    d9:75:96:19:01:fd:bd:6b:c5:4e:ed:74:bd:9a:ae:
                    39:b2:c7:07:67:33:4e:a9:ee:6c:14:c1:8e:b0:b9:
                    f9:9f:1f:85:b9:80:65:b1:7c:f7:f7:95:f4:9b:c6:
                    0f:fa:d3:5b:06:52:a9:4c:1b:d8:a3:35:1b:9a:1e:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C1:BF:54:5D:13:0D:66:B6:78:1F:44:89:39:B4:BA:92:1C:4A:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/489ac930-1bcb-3d1b-ae05-6c485b3d05f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c170::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:68:55:93:b5:4b:9c:21:f9:e0:0c:51:f7:b7:5a:b1:98:60:
         02:1e:e9:06:fd:a2:9d:c4:ea:35:77:10:8d:44:b7:7f:f6:af:
         93:e5:eb:fa:e3:8c:c2:7e:c4:b2:88:15:3b:63:15:5b:a5:a2:
         9c:09:db:1e:3e:19:10:00:4d:48:0c:b8:fe:99:7a:d8:ca:1b:
         4c:95:13:4d:fd:3b:a8:b5:32:31:61:2a:e3:03:f5:11:4d:9b:
         5b:f1:42:7e:31:52:24:86:30:6a:ef:27:cd:57:e3:01:ac:08:
         e3:5b:18:02:19:d3:19:7f:f5:74:13:c9:3e:b9:43:a4:a1:dd:
         8f:c2:57:28:94:4b:2e:01:2e:26:30:a8:55:40:a5:82:59:9e:
         84:fd:7d:74:05:30:2d:a9:c0:c5:e1:03:a8:a1:e7:43:3f:47:
         4b:52:65:c0:cb:e6:8c:4a:f5:5c:2f:77:e0:a5:97:fd:ca:bf:
         4a:c2:eb:61:d4:c4:e3:c3:16:59:fc:78:1c:52:aa:5e:45:1b:
         29:08:00:af:5f:19:96:2a:ae:58:d7:c9:bb:1c:2c:b2:46:f7:
         b6:5d:7e:77:03:7d:a9:15:02:9b:8a:5f:ad:7b:ff:b5:f8:29:
         f1:77:19:d6:67:31:dd:59:0d:5d:cc:3b:f6:91:98:91:24:f3:
         86:ea:c8:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErLQOTJVRJGTlj/NYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5
MWRkMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
MjU5ODQ3YjYtZWFjOC00YzBlLThmZjUtMzVlZTYyZjNjOGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArItbx+kxQQNlbSXwWEggCNArbWPb8eARuh1x
rCU4XjcfObBNwrSyNNfe/gITtlXcxzM6jJKNXqt8w78CHROKMl7R6MJigNu2WGzC
AMSmGpsm0719/qV7G2jKwFcDvxeU6QHpvwuUHzu73JMdkoyYrD4jYryssvbvGITo
t3NIiSvFKmuITwUkIf6bb2sccdcFNHdYt8Zwl8mz4b+2P8Flnj8lDDY1PeXpiQe5
+YoE43Ji6iVoWuifiIgzH1IzFMTUYwXZdZYZAf29a8VO7XS9mq45sscHZzNOqe5s
FMGOsLn5nx+FuYBlsXz395X0m8YP+tNbBlKpTBvYozUbmh7WFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCPBv1RdEw1mtngfRIk5tLqSHEoUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2
MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvNDg5YWM5MzAtMWJjYi0z
ZDFiLWFlMDUtNmM0ODViM2QwNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1
NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx
OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl
ZGQ4MTkxZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIMMFw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIxoVZO1S5wh+eAMUfe3WrGYYAIe6Qb9op3E6jV3EI1Et3/2r5Pl
6/rjjMJ+xLKIFTtjFVulopwJ2x4+GRAATUgMuP6ZetjKG0yVE039O6i1MjFhKuMD
9RFNm1vxQn4xUiSGMGrvJ81X4wGsCONbGAIZ0xl/9XQTyT65Q6Sh3Y/CVyiUSy4B
LiYwqFVApYJZnoT9fXQFMC2pwMXhA6ih50M/R0tSZcDL5oxK9Vwvd+Cll/3Kv0rC
62HUxOPDFln8eBxSql5FGykIAK9fGZYqrljXybscLLJG97ZdfncDfakVApuKX617
/7X4KfF3GdZnMd1ZDV3MO/aRmJEk84bqyMQ=
-----END CERTIFICATE-----
Generated at Thu Aug 21 03:51:41 2025 by rpki-client