Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b7c92564-bd30-32e3-ad36-ab7b59176993.roa
File:                     b7c92564-bd30-32e3-ad36-ab7b59176993.roa (raw, json)
Hash identifier:          x2w0htmOp9x/eBI4E8Er2izJjE64ALmPS5YkHAX9SQM=
Subject key identifier:   73:C6:9E:50:0E:5F:C5:58:AF:6E:3E:BB:34:23:F9:6B:36:C3:3A:11
Certificate issuer:       /CN=d08a2975-c6d9-49a4-818f-c7bcd8c4e11c
Certificate serial:       010D0C9F4328584AC8E84CACAA346A13B02E9100
Authority key identifier: B8:89:F5:94:64:04:B5:5F:9D:B0:AC:3C:52:BF:69:86:62:B7:CF:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b7c92564-bd30-32e3-ad36-ab7b59176993.roa
Signing time:             Wed 30 Jul 2025 19:26:51 +0000
ROA not before:           Wed 30 Jul 2025 19:26:51 +0000
ROA not after:            Tue 28 Oct 2025 19:26:51 +0000
asID:                     401866
IP address blocks:        2604:19a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:e8:4c:ac:aa:34:6a:13:b0:2e:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08a2975-c6d9-49a4-818f-c7bcd8c4e11c
        Validity
            Not Before: Jul 30 19:26:51 2025 GMT
            Not After : Oct 28 19:26:51 2025 GMT
        Subject: CN=f0eaafd2-20bf-47d4-9b0f-cb3de4ce99ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:60:d0:74:0d:69:d9:ee:6e:23:ad:62:a4:
                    5b:d6:9b:60:83:f3:c8:69:8a:96:65:93:be:42:4b:
                    5b:16:38:bd:2a:d5:da:79:f2:6b:2f:39:22:e6:e6:
                    fd:5f:8b:d1:ef:7e:ee:89:a4:69:b4:52:61:e5:f5:
                    e0:b8:e5:3b:dd:1b:25:ea:2e:a3:8b:e9:5f:b3:90:
                    c6:47:86:8e:7d:54:53:9d:49:11:e3:ae:21:86:92:
                    ba:72:74:02:96:da:7c:80:fd:0d:ec:3e:dd:78:8c:
                    a7:62:15:ec:e8:26:a6:aa:58:a1:09:fc:8a:8e:66:
                    27:78:79:a8:0a:ba:e3:06:3b:74:7e:30:a4:85:d4:
                    90:81:e3:ff:be:84:85:3f:14:33:2d:8d:08:ba:ed:
                    f9:2d:5b:f0:40:f0:29:93:c9:7b:48:9a:3a:3d:aa:
                    72:de:37:b4:ee:02:b0:72:f6:10:d6:5a:7b:7f:87:
                    de:ea:2f:e6:25:6b:6e:aa:5c:1a:5a:b8:6a:56:be:
                    96:61:93:34:d2:6e:e5:c4:33:2d:af:5f:1e:64:1f:
                    29:bf:c8:eb:86:27:51:45:1a:ee:b3:bf:2b:27:7a:
                    14:9a:97:bd:38:6d:c7:4d:55:c3:c7:77:e3:4d:7e:
                    e6:30:9a:f2:fe:ea:3f:16:2e:bb:cb:8a:3a:94:e5:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C6:9E:50:0E:5F:C5:58:AF:6E:3E:BB:34:23:F9:6B:36:C3:3A:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b7c92564-bd30-32e3-ad36-ab7b59176993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.crl

            X509v3 Authority Key Identifier:
                keyid:B8:89:F5:94:64:04:B5:5F:9D:B0:AC:3C:52:BF:69:86:62:B7:CF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:19a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:61:93:51:0f:a7:a7:86:49:d8:b1:52:27:96:73:c0:e5:93:
         98:c2:82:fc:e1:82:cf:94:21:56:bf:bd:fe:cf:7f:c8:7e:93:
         ee:5b:42:79:e5:bc:d9:ad:73:1a:de:d7:1d:70:17:56:78:d6:
         97:59:3a:85:ea:0b:ae:72:0e:77:32:ce:53:19:98:23:0a:df:
         b9:31:d2:e2:1f:82:56:2b:c9:21:2d:f3:fc:56:7f:db:7c:57:
         8a:4a:6f:0d:fb:ad:16:78:19:27:16:0c:c6:b8:82:57:d8:b9:
         f0:dd:e4:81:c7:44:b2:9d:5a:ac:1b:be:63:86:94:52:13:85:
         16:1a:55:2a:b9:34:eb:ee:16:37:0b:9b:e2:ce:4d:cc:eb:cf:
         4f:02:05:d5:27:42:59:11:71:26:d0:be:63:79:21:86:84:33:
         69:c1:e9:be:d5:a7:15:0f:46:d7:4d:af:52:ce:e9:72:b3:c2:
         3a:25:fe:73:6c:3f:d9:a7:d3:7b:6a:b6:87:f9:ef:34:da:88:
         15:0c:dd:ce:1f:0c:0b:e0:77:b8:be:87:be:05:c4:e0:37:e6:
         a3:1f:56:a5:9b:85:2f:95:4d:af:c9:5b:4e:b6:d6:71:52:fe:
         db:f5:9c:69:8e:a4:cf:b4:00:15:3d:05:ac:7d:af:40:53:8a:
         35:4f:43:a6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErI6EysqjRqE7AukQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA4YTI5NzUtYzZkOS00OWE0LTgxOGYtYzdiY2Q4YzRl
MTFjMB4XDTI1MDczMDE5MjY1MVoXDTI1MTAyODE5MjY1MVowLzEtMCsGA1UEAxMk
ZjBlYWFmZDItMjBiZi00N2Q0LTliMGYtY2IzZGU0Y2U5OWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWFg0HQNadnubiOtYqRb1ptgg/PIaYqWZZO+
QktbFji9KtXaefJrLzki5ub9X4vR737uiaRptFJh5fXguOU73Rsl6i6ji+lfs5DG
R4aOfVRTnUkR464hhpK6cnQCltp8gP0N7D7deIynYhXs6CamqlihCfyKjmYneHmo
CrrjBjt0fjCkhdSQgeP/voSFPxQzLY0Iuu35LVvwQPApk8l7SJo6Papy3je07gKw
cvYQ1lp7f4fe6i/mJWtuqlwaWrhqVr6WYZM00m7lxDMtr18eZB8pv8jrhidRRRru
s78rJ3oUmpe9OG3HTVXDx3fjTX7mMJry/uo/Fi67y4o6lOUQVwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHPGnlAOX8VYr24+uzQj+Ws2wzoRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMDhh
Mjk3NS1jNmQ5LTQ5YTQtODE4Zi1jN2JjZDhjNGUxMWMvYjdjOTI1NjQtYmQzMC0z
MmUzLWFkMzYtYWI3YjU5MTc2OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDA4YTI5NzUtYzZkOS00OWE0LTgx
OGYtYzdiY2Q4YzRlMTFjL2QwOGEyOTc1LWM2ZDktNDlhNC04MThmLWM3YmNkOGM0
ZTExYy5jcmwwHwYDVR0jBBgwFoAUuIn1lGQEtV+dsKw8Ur9phmK3zxswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kMDhhMjk3NS1jNmQ5LTQ5YTQtODE4Zi1jN2Jj
ZDhjNGUxMWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQZoDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB1YZNRD6enhknYsVInlnPA5ZOYwoL84YLPlCFWv73+z3/IfpPuW0J5
5bzZrXMa3tcdcBdWeNaXWTqF6guucg53Ms5TGZgjCt+5MdLiH4JWK8khLfP8Vn/b
fFeKSm8N+60WeBknFgzGuIJX2Lnw3eSBx0SynVqsG75jhpRSE4UWGlUquTTr7hY3
C5vizk3M689PAgXVJ0JZEXEm0L5jeSGGhDNpwem+1acVD0bXTa9Szulys8I6Jf5z
bD/Zp9N7araH+e802ogVDN3OHwwL4He4voe+BcTgN+ajH1alm4UvlU2vyVtOttZx
Uv7b9ZxpjqTPtAAVPQWsfa9AU4o1T0Om
-----END CERTIFICATE-----
Generated at Wed Aug 20 03:37:59 2025 by rpki-client