Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ceaca840-5713-3426-8399-6e52e4dc1ec1.roa
File:                     ceaca840-5713-3426-8399-6e52e4dc1ec1.roa (raw, json)
Hash identifier:          1rj82nywhUTGcqrtuNdwBEt82jZw0L6nXFVFIQDf1YA=
Subject key identifier:   39:F9:16:41:1C:93:C0:4A:11:24:E6:0C:7D:BF:46:67:E3:A8:71:31
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584A225ABCE97B933A4F9A7225C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ceaca840-5713-3426-8399-6e52e4dc1ec1.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     8987
IP address blocks:        2605:4300:2c15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:bc:e9:7b:93:3a:4f:9a:72:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=4e3a6553-9fc4-4f13-bec7-7b56d6a712ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:94:ac:36:05:f1:e6:1c:41:d3:7c:2f:d3:
                    47:65:77:b9:38:f9:39:ff:56:55:a4:dc:be:05:2a:
                    51:16:8b:89:71:58:4f:74:42:fd:c1:34:06:9f:48:
                    e1:07:47:fa:79:1b:79:22:2b:2d:e9:50:66:20:04:
                    c3:7b:f6:9f:91:a7:9b:4c:ff:85:30:08:21:a0:a9:
                    b8:03:3f:2b:06:c1:72:61:b2:68:b3:8a:0c:45:53:
                    a1:f7:d2:f0:64:9f:a1:97:5d:18:e4:13:8a:c7:54:
                    d9:89:03:93:5f:6d:84:6a:17:e4:2f:fa:fe:29:74:
                    a4:90:41:bc:9a:73:c9:76:6a:9a:e5:75:bc:b0:b1:
                    8a:9f:80:34:e2:7a:13:f5:ee:fd:72:1a:f5:06:f0:
                    49:70:b5:84:58:bd:98:b3:d4:71:d2:e6:aa:ce:8c:
                    3f:5d:19:c0:f0:dc:5c:57:f4:ce:ea:ef:15:24:3e:
                    6f:0d:66:68:8d:ab:e0:4b:a2:e9:42:f4:72:67:27:
                    91:3e:6e:f9:de:eb:08:ce:c2:2e:5c:4c:b0:47:84:
                    c8:90:5a:e7:b0:de:dc:27:3b:3e:3c:dc:97:d9:c5:
                    90:b8:9b:62:78:a4:c6:e0:05:16:e6:22:a8:9e:19:
                    a5:8b:4b:eb:d7:f6:57:a4:8a:7e:1b:81:e7:8e:2d:
                    8b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F9:16:41:1C:93:C0:4A:11:24:E6:0C:7D:BF:46:67:E3:A8:71:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ceaca840-5713-3426-8399-6e52e4dc1ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c15::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:e9:27:6c:4b:8f:96:79:6a:d4:20:f1:1a:8d:3e:41:12:
         9a:d4:bc:47:fe:53:e8:ff:b1:23:de:99:65:b9:c3:11:de:76:
         42:23:e9:7f:1b:f5:24:f6:08:66:1c:81:3b:41:f2:89:29:75:
         af:ae:31:32:8e:be:e8:89:b3:f2:d3:bd:12:46:a5:9f:8e:db:
         6f:b6:9a:d2:cd:8d:dc:0b:dd:4b:9a:98:07:d7:a3:73:b1:89:
         b7:46:0b:2a:59:a6:fa:9b:20:4b:40:69:1f:9f:69:30:09:4f:
         da:90:8a:72:70:a2:df:00:a1:4a:5c:d4:90:08:2b:bc:fe:f0:
         2b:5a:78:0b:34:12:a3:26:4d:c6:6d:d7:1d:ee:7c:da:5e:f3:
         16:c0:1b:98:23:3f:7e:a2:a0:5b:ca:73:72:ad:b4:73:16:01:
         26:5b:4a:53:4e:91:98:ab:db:99:90:f3:b2:8b:82:3c:9b:b0:
         4c:68:7f:16:02:3a:5e:6f:db:f9:75:2c:d4:c5:a5:cd:90:41:
         1a:48:d4:da:40:a9:24:f1:97:db:22:6f:4b:73:cf:b2:7b:0c:
         57:5f:7a:26:f3:ed:44:3f:f1:26:8c:40:d6:3d:9c:ea:d2:c5:
         3f:35:5a:9f:68:73:7d:b8:8a:9b:6a:b0:9c:b9:4f:95:d9:3a:
         01:d3:d0:c3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoiWrzpe5M6T5pyJcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk
NGUzYTY1NTMtOWZjNC00ZjEzLWJlYzctN2I1NmQ2YTcxMmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/aUrDYF8eYcQdN8L9NHZXe5OPk5/1ZVpNy+
BSpRFouJcVhPdEL9wTQGn0jhB0f6eRt5Iist6VBmIATDe/afkaebTP+FMAghoKm4
Az8rBsFyYbJos4oMRVOh99LwZJ+hl10Y5BOKx1TZiQOTX22EahfkL/r+KXSkkEG8
mnPJdmqa5XW8sLGKn4A04noT9e79chr1BvBJcLWEWL2Ys9Rx0uaqzow/XRnA8Nxc
V/TO6u8VJD5vDWZojavgS6LpQvRyZyeRPm753usIzsIuXEywR4TIkFrnsN7cJzs+
PNyX2cWQuJtieKTG4AUW5iKonhmli0vr1/ZXpIp+G4Hnji2L0wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDn5FkEck8BKESTmDH2/RmfjqHExMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2VhY2E4NDAtNTcxMy0z
NDI2LTgzOTktNmU1MmU0ZGMxZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABe/6SdsS4+WeWrUIPEajT5BEprUvEf+U+j/sSPemWW5wxHedkIj
6X8b9ST2CGYcgTtB8okpda+uMTKOvuiJs/LTvRJGpZ+O22+2mtLNjdwL3UuamAfX
o3OxibdGCypZpvqbIEtAaR+faTAJT9qQinJwot8AoUpc1JAIK7z+8CtaeAs0EqMm
TcZt1x3ufNpe8xbAG5gjP36ioFvKc3KttHMWASZbSlNOkZir25mQ87KLgjybsExo
fxYCOl5v2/l1LNTFpc2QQRpI1NpAqSTxl9sib0tzz7J7DFdfeibz7UQ/8SaMQNY9
nOrSxT81Wp9oc324iptqsJy5T5XZOgHT0MM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:32:54 2025 by rpki-client