Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/15bad8c2-3ff2-3fe5-9aff-970ec386eb67.roa
File:                     15bad8c2-3ff2-3fe5-9aff-970ec386eb67.roa (raw, json)
Hash identifier:          a5Icg8REhPTDQgYWyGllbb5ZUdohKOem9yHCFQCp4Ks=
Subject key identifier:   73:5B:8E:2C:F9:6A:C2:D9:AA:A9:A1:0C:D2:43:45:1A:CE:CB:01:BE
Certificate issuer:       /CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047
Certificate serial:       010D0C9F4328584A7A4B606A22C3F1C711A7B000
Authority key identifier: B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/15bad8c2-3ff2-3fe5-9aff-970ec386eb67.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     40216
IP address blocks:        2620:12f:e000::/40 maxlen: 40
                          2620:12f:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:60:6a:22:c3:f1:c7:11:a7:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=affa43ba-6b7a-4988-8b5f-a63f57a08127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:c6:e2:9a:9a:92:86:be:ff:13:1d:a1:bc:
                    fd:83:b6:d3:91:c7:b4:b8:34:2d:03:d1:67:97:4b:
                    f4:64:97:0b:08:e0:4d:95:26:45:04:e5:13:04:6a:
                    6e:5d:74:94:23:16:1a:48:0c:44:da:f0:68:f1:60:
                    11:9b:66:87:5f:43:07:51:d2:df:a3:1c:7c:a7:67:
                    d1:c4:33:46:a0:88:65:e3:d6:fe:25:ac:ad:44:32:
                    26:24:23:67:59:ad:99:04:af:65:37:83:be:2f:fe:
                    57:8b:dd:34:75:76:50:00:31:9d:16:2f:2c:eb:70:
                    c4:3d:97:3d:35:3f:a3:53:bf:20:3b:d4:7b:c6:ec:
                    a7:bc:40:9f:fd:a8:b2:4e:b2:f4:e0:15:54:08:f7:
                    6f:98:fc:2b:bc:0c:83:c2:9b:85:dd:e0:68:30:69:
                    57:38:4c:84:17:2e:68:e8:d0:0a:94:7f:68:2f:38:
                    2f:a9:15:08:a6:a8:cb:3e:bc:36:f1:da:38:31:d8:
                    3c:54:c9:68:19:23:e8:03:c7:a0:b1:45:8c:8a:21:
                    1d:af:03:1d:51:ca:2a:7a:36:43:a7:b5:be:7b:f8:
                    d9:57:64:4a:c7:18:a1:81:58:2b:cb:4e:17:60:24:
                    e9:80:be:bf:5d:26:a2:75:05:c5:56:76:f1:da:b5:
                    a9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5B:8E:2C:F9:6A:C2:D9:AA:A9:A1:0C:D2:43:45:1A:CE:CB:01:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/15bad8c2-3ff2-3fe5-9aff-970ec386eb67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D1:02:5E:55:81:34:30:8A:B5:B3:94:6B:F4:64:16:5E:04:FA:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b6ec7d-ca2d-4cdb-9e0b-9fc4a6b63047.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12f:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:67:ab:3b:d5:9b:c1:33:08:8e:ec:c3:3b:ba:b3:99:85:b9:
         41:80:a4:17:e6:38:73:95:eb:fe:2c:57:68:67:d2:70:20:17:
         8a:f2:d2:cd:11:e8:02:a8:16:dc:91:5f:98:85:39:63:1e:81:
         d7:59:f8:7d:cc:52:7f:ec:2c:d2:83:b0:42:f3:94:7b:ad:5b:
         36:e7:f6:b3:66:6e:1e:89:85:2b:92:f7:04:99:e2:0a:40:e1:
         97:03:d1:56:65:4b:88:36:b7:49:7c:13:26:e8:93:22:51:e3:
         a4:3e:a9:fb:a5:a0:09:10:82:f0:84:98:27:ba:47:cb:2e:37:
         32:13:57:bf:15:e9:4b:ce:38:3b:8f:99:7f:4b:65:33:77:12:
         07:d4:1d:89:ca:cc:43:81:48:d1:42:34:a5:58:9f:b2:99:c6:
         3c:10:c8:30:56:d8:ba:4f:d8:b7:19:f0:52:f6:57:bb:4e:55:
         38:5f:7c:c8:6a:a4:ac:60:dc:b0:0c:83:bd:f5:a0:07:8e:1d:
         b0:cb:f6:24:7c:28:97:94:3f:46:af:fb:14:b7:ef:51:c6:08:
         76:cf:9a:94:9f:11:c6:7e:e6:7e:b6:36:c3:6e:6a:9d:95:8b:
         ce:ca:78:eb:57:4b:71:b6:d8:c0:8a:1e:e3:59:e4:2b:19:c3:
         f7:12:73:49
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEp6S2BqIsPxxxGnsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFiNmVjN2QtY2EyZC00Y2RiLTllMGItOWZjNGE2YjYz
MDQ3MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
YWZmYTQzYmEtNmI3YS00OTg4LThiNWYtYTYzZjU3YTA4MTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0jG4pqakoa+/xMdobz9g7bTkce0uDQtA9Fn
l0v0ZJcLCOBNlSZFBOUTBGpuXXSUIxYaSAxE2vBo8WARm2aHX0MHUdLfoxx8p2fR
xDNGoIhl49b+JaytRDImJCNnWa2ZBK9lN4O+L/5Xi900dXZQADGdFi8s63DEPZc9
NT+jU78gO9R7xuynvECf/aiyTrL04BVUCPdvmPwrvAyDwpuF3eBoMGlXOEyEFy5o
6NAKlH9oLzgvqRUIpqjLPrw28do4Mdg8VMloGSPoA8egsUWMiiEdrwMdUcoqejZD
p7W+e/jZV2RKxxihgVgry04XYCTpgL6/XSaidQXFVnbx2rWpaQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHNbjiz5asLZqqmhDNJDRRrOywG+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMWI2
ZWM3ZC1jYTJkLTRjZGItOWUwYi05ZmM0YTZiNjMwNDcvMTViYWQ4YzItM2ZmMi0z
ZmU1LTlhZmYtOTcwZWMzODZlYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzFiNmVjN2QtY2EyZC00Y2RiLTll
MGItOWZjNGE2YjYzMDQ3LzMxYjZlYzdkLWNhMmQtNGNkYi05ZTBiLTlmYzRhNmI2
MzA0Ny5jcmwwHwYDVR0jBBgwFoAUtdECXlWBNDCKtbOUa/RkFl4E+lYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMWI2ZWM3ZC1jYTJkLTRjZGItOWUwYi05ZmM0
YTZiNjMwNDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABL+Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAiWerO9WbwTMIjuzDO7qzmYW5QYCkF+Y4c5Xr/ixXaGfScCAXivLS
zRHoAqgW3JFfmIU5Yx6B11n4fcxSf+ws0oOwQvOUe61bNuf2s2ZuHomFK5L3BJni
CkDhlwPRVmVLiDa3SXwTJuiTIlHjpD6p+6WgCRCC8ISYJ7pHyy43MhNXvxXpS844
O4+Zf0tlM3cSB9QdicrMQ4FI0UI0pVifspnGPBDIMFbYuk/YtxnwUvZXu05VOF98
yGqkrGDcsAyDvfWgB44dsMv2JHwol5Q/Rq/7FLfvUcYIds+alJ8Rxn7mfrY2w25q
nZWLzsp461dLcbbYwIoe41nkKxnD9xJzSQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:56:52 2025 by rpki-client