Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa
File:                     66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa (raw, json)
Hash identifier:          vQ0i75Lb+CoBkNXKsQi/1Z5MtvS+o6SC7psA3HVBBa8=
Subject key identifier:   2A:F5:0E:B5:A1:ED:07:72:4F:FD:D8:CC:4C:CB:B2:40:01:7B:5D:DB
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584AC0163146FD34A4411D7524C0
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     6128
IP address blocks:        2001:48a0::/32 maxlen: 64
                          2600:4800::/28 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:31:46:fd:34:a4:41:1d:75:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=988d4018-432f-4045-b954-b3bd7bd09f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7c:87:d6:3c:9e:0d:fc:a6:f8:b8:56:4e:21:
                    03:53:e2:93:72:f2:34:5b:98:7c:4e:a4:31:7b:f1:
                    b1:43:84:72:5b:e1:88:55:43:2c:58:d0:7c:8a:2f:
                    0c:78:b4:18:5e:70:54:a4:d5:d7:e5:42:51:c9:55:
                    aa:5d:3d:aa:7d:d3:09:fd:49:c4:00:7d:39:5d:e2:
                    53:f9:f1:03:e6:e5:2d:68:66:ce:01:8c:b6:3a:b4:
                    a2:d6:52:06:bd:0e:ee:9f:85:cf:ac:52:eb:14:24:
                    fa:37:3e:89:cd:4d:b6:8e:83:f0:c2:74:80:ad:0e:
                    bf:47:93:2a:88:48:5d:43:27:88:e8:a1:13:71:69:
                    58:2a:cf:ad:3d:18:be:b5:db:c8:8f:f7:e7:44:92:
                    15:1e:4e:eb:ef:6d:88:ed:a9:5c:36:8c:3a:63:aa:
                    93:b1:be:c2:65:03:92:f8:60:ae:64:87:e3:18:9a:
                    0a:54:66:e7:d1:de:bf:07:5a:37:81:eb:25:14:1b:
                    c6:d4:36:60:d5:c2:87:d3:40:3d:5a:58:a0:61:8a:
                    07:ab:be:2a:e7:50:7b:af:88:e9:dd:4e:f3:81:36:
                    96:f5:d4:d2:47:7e:d3:f9:ee:ab:5c:67:6d:8e:02:
                    77:eb:f2:90:08:5d:5d:f7:11:c9:ec:24:c1:75:59:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F5:0E:B5:A1:ED:07:72:4F:FD:D8:CC:4C:CB:B2:40:01:7B:5D:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/66a861cd-a944-3742-a8bd-e5f91ba0a0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a0::/32
                  2600:4800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:43:e6:c8:8e:5c:fe:66:5d:c2:f4:b6:14:8a:a3:c0:7a:
         e9:0d:dc:9a:d5:da:0e:d7:a5:ab:cc:e3:89:73:94:e1:af:a7:
         60:36:f2:f5:e8:1b:c7:11:22:e2:d5:1b:8b:16:93:d9:02:86:
         cd:22:87:fa:27:a9:42:02:44:25:13:10:45:13:38:2d:9a:b3:
         9c:e1:58:6f:af:f4:6d:72:e9:66:7a:8e:e2:15:5d:5e:ae:ef:
         52:43:76:e2:39:45:1a:7c:56:c0:a7:a7:fc:fc:d4:72:2e:ac:
         6a:13:8b:2a:01:4d:ab:4c:45:9b:27:6c:3d:11:0f:7b:7b:b5:
         87:dc:f8:e3:4d:0b:6a:a3:1a:12:38:66:d9:c2:93:7c:c8:1f:
         35:fb:1f:7f:b9:9f:e5:f9:24:07:d6:f9:05:e5:82:d1:c0:a5:
         00:c9:eb:e6:b3:4a:45:7e:a5:b6:1e:05:b7:6b:90:3f:1c:8d:
         6d:f0:1e:f4:a2:85:aa:97:45:28:f0:64:16:02:5f:06:ab:d4:
         6e:2a:0f:b5:bc:fa:c6:86:6f:4c:34:ea:50:72:ca:37:8e:7c:
         9d:09:53:40:59:75:ce:04:23:db:b2:17:4a:b8:fc:8a:40:29:
         93:57:f1:c4:da:80:1c:a2:66:86:91:82:6e:98:44:67:99:e9:
         02:80:e5:28
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErAFjFG/TSkQR11JMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU0NTliZTEtZjJjNy00NGEyLWFjNjktMDFkMjM4ZjFi
MGRlMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
OTg4ZDQwMTgtNDMyZi00MDQ1LWI5NTQtYjNiZDdiZDA5ZjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nyH1jyeDfym+LhWTiEDU+KTcvI0W5h8TqQx
e/GxQ4RyW+GIVUMsWNB8ii8MeLQYXnBUpNXX5UJRyVWqXT2qfdMJ/UnEAH05XeJT
+fED5uUtaGbOAYy2OrSi1lIGvQ7un4XPrFLrFCT6Nz6JzU22joPwwnSArQ6/R5Mq
iEhdQyeI6KETcWlYKs+tPRi+tdvIj/fnRJIVHk7r722I7alcNow6Y6qTsb7CZQOS
+GCuZIfjGJoKVGbn0d6/B1o3geslFBvG1DZg1cKH00A9WligYYoHq74q51B7r4jp
3U7zgTaW9dTSR37T+e6rXGdtjgJ36/KQCF1d9xHJ7CTBdVlQ+wIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFCr1DrWh7QdyT/3YzEzLskABe13bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1
OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQyMzhmMWIwZGUvNjZhODYxY2QtYTk0NC0z
NzQyLWE4YmQtZTVmOTFiYTBhMGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU0NTliZTEtZjJjNy00NGEyLWFj
NjktMDFkMjM4ZjFiMGRlLzE1NDU5YmUxLWYyYzctNDRhMi1hYzY5LTAxZDIzOGYx
YjBkZS5jcmwwHwYDVR0jBBgwFoAUBXpuInCyuuyxWzzTdkAFIVAzxRUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQy
MzhmMWIwZGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAIAFIoAMF
BCYASAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAbfRD5siOXP5mXcL0thSKo8B66Q3cmtXaDtelq8zjiXOU
4a+nYDby9egbxxEi4tUbixaT2QKGzSKH+iepQgJEJRMQRRM4LZqznOFYb6/0bXLp
ZnqO4hVdXq7vUkN24jlFGnxWwKen/PzUci6sahOLKgFNq0xFmydsPREPe3u1h9z4
400LaqMaEjhm2cKTfMgfNfsff7mf5fkkB9b5BeWC0cClAMnr5rNKRX6lth4Ft2uQ
PxyNbfAe9KKFqpdFKPBkFgJfBqvUbioPtbz6xoZvTDTqUHLKN458nQlTQFl1zgQj
27IXSrj8ikApk1fxxNqAHKJmhpGCbphEZ5npAoDlKA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:59 2025 by rpki-client