Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa
File:                     bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa (raw, json)
Hash identifier:          v5ubc3p2FN/1nGJQtXMtnP6M8H/lWGX/DbqtuRPTZ6k=
Subject key identifier:   6F:E9:86:11:85:CE:3D:7A:EC:A1:C2:30:2A:17:12:76:D0:B1:02:A8
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F43285849C4D4C1983FE3E4A86E5C1400
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     54113
IP address blocks:        2607:71c0:fff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c1:98:3f:e3:e4:a8:6e:5c:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=a2ad70d4-3bab-432f-bfdd-35142b407ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:41:a7:d4:ac:60:05:3b:cd:43:74:3c:1c:
                    1a:c4:a6:ed:46:fa:79:e8:28:e4:0c:b6:00:80:f4:
                    66:78:1a:5d:69:d6:c4:4c:c9:a6:8a:50:f0:04:0a:
                    c1:f0:59:e6:75:65:11:d4:e2:ed:e1:89:54:10:ae:
                    ce:d2:24:e2:42:0f:d5:5d:f3:c0:50:54:3a:26:28:
                    51:27:5b:15:ec:9d:95:80:e3:0b:81:40:a3:06:32:
                    9a:98:f2:b8:a5:11:0c:eb:88:6b:e6:09:21:86:bd:
                    f5:40:4a:b5:6f:f2:28:bd:08:b6:da:07:b5:61:81:
                    6f:df:82:d3:83:23:5a:fa:1b:9a:3e:15:27:9b:1b:
                    8b:a4:97:8e:77:36:23:8d:16:07:ce:b2:04:20:79:
                    2e:2b:6b:02:77:6c:2d:92:c8:56:d8:a0:19:e4:6a:
                    1b:1e:0c:b4:c2:00:98:c5:0c:d4:d9:ba:d5:c6:22:
                    70:75:ed:4f:fa:27:62:ae:8d:de:51:c2:b9:b2:bd:
                    13:3c:0c:d2:5d:3d:81:c7:a2:51:a3:91:19:4c:61:
                    e2:32:cc:12:4b:18:82:14:7a:d3:19:1f:23:55:16:
                    33:15:f2:eb:e3:84:7b:ca:1d:75:b8:d5:55:68:5f:
                    52:ef:b9:6f:7a:15:2e:cb:8d:41:e6:06:fd:0a:df:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E9:86:11:85:CE:3D:7A:EC:A1:C2:30:2A:17:12:76:D0:B1:02:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:71c0:fff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:72:93:4c:31:36:d4:28:08:8b:74:2a:0d:84:b9:53:67:36:
         35:78:5e:04:4d:7d:46:e3:50:fa:03:c1:77:f1:bd:70:2d:3f:
         a7:f1:a7:ed:11:49:af:93:cc:e8:ad:34:c8:14:94:3a:40:89:
         8f:ad:59:4f:b9:c7:03:9a:d7:39:4e:a3:af:e9:15:54:b2:ed:
         0c:42:b6:d5:a6:4a:ad:65:25:a6:55:b6:e2:31:ca:18:75:19:
         bf:2b:9a:ce:4b:21:b0:f9:67:39:c6:51:64:3a:e5:57:c3:9e:
         e5:43:25:c2:be:d4:1b:df:62:74:46:d8:53:b2:da:47:52:57:
         dd:e2:b1:46:ca:5e:49:31:ed:7b:b7:fc:5c:20:a7:83:6f:5a:
         c3:c9:a8:c6:32:29:87:62:4b:57:ea:40:b9:6f:b6:78:f7:50:
         da:cb:7b:d9:dd:ff:bb:df:32:56:26:a6:b9:65:0a:ed:a8:fc:
         73:81:03:3c:1d:2f:ae:af:c9:e4:82:4d:b0:ff:fb:3b:ae:7f:
         8d:be:cf:1a:5d:5d:88:ed:1d:0c:05:1e:9b:c7:c8:30:b5:42:
         67:f7:f8:ed:fa:f4:41:60:03:b9:c2:9a:5e:84:34:e2:1f:67:
         41:15:dd:26:82:05:3e:e7:58:53:c5:e6:52:23:60:d5:39:9a:
         b5:9e:44:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnE1MGYP+PkqG5cFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk
YTJhZDcwZDQtM2JhYi00MzJmLWJmZGQtMzUxNDJiNDA3ZWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXxBp9SsYAU7zUN0PBwaxKbtRvp56CjkDLYA
gPRmeBpdadbETMmmilDwBArB8FnmdWUR1OLt4YlUEK7O0iTiQg/VXfPAUFQ6JihR
J1sV7J2VgOMLgUCjBjKamPK4pREM64hr5gkhhr31QEq1b/IovQi22ge1YYFv34LT
gyNa+huaPhUnmxuLpJeOdzYjjRYHzrIEIHkuK2sCd2wtkshW2KAZ5GobHgy0wgCY
xQzU2brVxiJwde1P+idiro3eUcK5sr0TPAzSXT2Bx6JRo5EZTGHiMswSSxiCFHrT
GR8jVRYzFfLr44R7yh11uNVVaF9S77lvehUuy41B5gb9Ct9mlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG/phhGFzj167KHCMCoXEnbQsQKoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvYmYxYmI0OTgtYjhhMS0z
YjE5LTg3NmUtNDIzZjBkZjZkZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgdxwP/w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAJyk0wxNtQoCIt0Kg2EuVNnNjV4XgRNfUbjUPoDwXfxvXAtP6fx
p+0RSa+TzOitNMgUlDpAiY+tWU+5xwOa1zlOo6/pFVSy7QxCttWmSq1lJaZVtuIx
yhh1Gb8rms5LIbD5ZznGUWQ65VfDnuVDJcK+1BvfYnRG2FOy2kdSV93isUbKXkkx
7Xu3/Fwgp4NvWsPJqMYyKYdiS1fqQLlvtnj3UNrLe9nd/7vfMlYmprllCu2o/HOB
AzwdL66vyeSCTbD/+zuuf42+zxpdXYjtHQwFHpvHyDC1Qmf3+O369EFgA7nCml6E
NOIfZ0EV3SaCBT7nWFPF5lIjYNU5mrWeRJI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:27:23 2025 by rpki-client