Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/aeeafd9f-9447-3f9d-ad94-4122631462c3.roa
File:                     aeeafd9f-9447-3f9d-ad94-4122631462c3.roa (raw, json)
Hash identifier:          cW0gnhFgZq9t4H7gNs+CpKK/IXVeMVF20HXBx2cqnLo=
Subject key identifier:   8B:BA:FC:6D:25:DF:88:1C:BF:71:17:14:82:10:9F:4E:AE:DC:B9:B0
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB01285AC5C845B1559C740
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/aeeafd9f-9447-3f9d-ad94-4122631462c3.roa
Signing time:             Sun 03 Aug 2025 02:35:53 +0000
ROA not before:           Sun 03 Aug 2025 02:35:53 +0000
ROA not after:            Sat 01 Nov 2025 02:35:53 +0000
asID:                     22616
IP address blocks:        2605:4300:3500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:12:85:ac:5c:84:5b:15:59:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:53 2025 GMT
            Not After : Nov  1 02:35:53 2025 GMT
        Subject: CN=a45d5e9d-f1ea-49ea-991c-1c87302b2420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:50:94:94:7b:22:10:b3:5b:42:10:27:b9:38:
                    c6:cc:f8:fd:09:9b:41:35:b1:af:0b:16:a7:8d:ad:
                    4d:83:04:fb:ee:67:f2:6a:43:6e:e2:bc:a4:75:d2:
                    f7:c9:7c:c2:76:ad:51:25:6e:43:e9:91:d8:41:c7:
                    dd:83:75:42:84:37:c6:b8:6f:0d:f5:88:fa:c3:af:
                    e9:28:2f:48:e3:80:39:49:43:2d:5d:5d:4e:98:63:
                    a6:f8:e5:9d:99:37:24:65:56:f5:a0:6e:82:77:cc:
                    53:0e:a2:fb:ca:b5:42:e5:a2:cc:3d:69:9f:c0:ca:
                    bd:fb:19:77:35:fa:e0:c3:13:25:97:a0:81:e6:22:
                    24:ba:ae:cb:5d:16:32:7f:7f:f0:68:39:69:d8:67:
                    9c:8a:07:6e:5d:4f:07:e4:26:9b:5b:8b:c9:44:ba:
                    0a:a8:22:1d:7b:59:8e:bb:ea:ac:e7:ac:53:f1:ce:
                    7c:41:c1:46:95:cf:98:2a:9e:7a:82:5f:83:7e:46:
                    9d:24:ca:8a:c0:c7:63:e5:eb:72:b3:5a:e3:ee:3c:
                    bc:fd:40:6a:ec:b9:d3:cb:53:7c:66:2e:7d:bf:e3:
                    b9:69:a9:fa:32:32:2d:78:99:d6:51:05:db:b0:94:
                    d0:41:1e:3e:f1:fa:e0:22:09:0f:31:49:4d:08:21:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BA:FC:6D:25:DF:88:1C:BF:71:17:14:82:10:9F:4E:AE:DC:B9:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/aeeafd9f-9447-3f9d-ad94-4122631462c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:67:42:62:1e:a1:f4:5a:b0:90:b5:18:1d:60:f0:c2:71:
         77:0d:27:7d:2b:9c:d3:95:8a:f9:56:c7:33:b7:be:7e:0f:6c:
         ea:bb:9b:ed:c6:5b:8e:c5:a7:78:1a:59:19:c2:f1:58:ef:7d:
         0f:a8:9c:95:a4:6b:8f:3a:ab:cd:ec:dc:68:ab:52:a2:48:1e:
         b6:e6:d6:f4:cc:69:e1:f0:44:6f:db:79:b5:87:be:43:81:fd:
         1c:0b:90:0a:cc:19:63:68:0b:fc:36:42:2e:f3:3b:44:ee:af:
         c6:b6:17:c9:d8:75:f1:47:47:ae:fb:bd:e8:65:db:e1:62:fb:
         a2:be:cf:b2:d3:c7:bf:f9:f5:31:20:21:df:4c:c3:84:ea:9e:
         e2:49:cd:8c:40:db:9c:56:d3:56:bb:1d:c6:7c:53:bd:d6:9e:
         af:8a:86:af:b6:50:96:9f:cf:95:85:24:9e:af:de:68:a8:8e:
         b6:82:23:d9:cf:02:35:a5:39:a8:1f:65:0f:f9:61:b7:aa:5f:
         92:da:8e:62:15:25:f5:03:d9:02:c1:5c:ad:cc:62:6f:c0:e8:
         03:28:98:92:4c:99:33:17:c7:14:d0:77:b9:61:05:56:2c:cf:
         53:bd:e5:09:16:7e:68:a3:34:6d:e2:9a:67:6f:b1:01:7b:9c:
         37:c9:78:17
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq6sBKFrFyEWxVZx0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDgwMzAyMzU1M1oXDTI1MTEwMTAyMzU1M1owLzEtMCsGA1UEAxMk
YTQ1ZDVlOWQtZjFlYS00OWVhLTk5MWMtMWM4NzMwMmIyNDIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FCUlHsiELNbQhAnuTjGzPj9CZtBNbGvCxan
ja1NgwT77mfyakNu4rykddL3yXzCdq1RJW5D6ZHYQcfdg3VChDfGuG8N9Yj6w6/p
KC9I44A5SUMtXV1OmGOm+OWdmTckZVb1oG6Cd8xTDqL7yrVC5aLMPWmfwMq9+xl3
NfrgwxMll6CB5iIkuq7LXRYyf3/waDlp2GecigduXU8H5CabW4vJRLoKqCIde1mO
u+qs56xT8c58QcFGlc+YKp56gl+DfkadJMqKwMdj5etys1rj7jy8/UBq7LnTy1N8
Zi59v+O5aan6MjIteJnWUQXbsJTQQR4+8frgIgkPMUlNCCEMXQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIu6/G0l34gcv3EXFIIQn06u3LmwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYWVlYWZkOWYtOTQ0Ny0z
ZjlkLWFkOTQtNDEyMjYzMTQ2MmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVDADUw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVhxnQmIeofRasJC1GB1g8MJxdw0nfSuc05WK+VbHM7e+fg9s6rub
7cZbjsWneBpZGcLxWO99D6iclaRrjzqrzezcaKtSokgetubW9Mxp4fBEb9t5tYe+
Q4H9HAuQCswZY2gL/DZCLvM7RO6vxrYXydh18UdHrvu96GXb4WL7or7PstPHv/n1
MSAh30zDhOqe4knNjEDbnFbTVrsdxnxTvdaer4qGr7ZQlp/PlYUknq/eaKiOtoIj
2c8CNaU5qB9lD/lht6pfktqOYhUl9QPZAsFcrcxib8DoAyiYkkyZMxfHFNB3uWEF
VizPU73lCRZ+aKM0beKaZ2+xAXucN8l4Fw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:21 2025 by rpki-client