Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/065eb59d-7e95-3972-8ef2-0fd454c209e5.roa
File:                     065eb59d-7e95-3972-8ef2-0fd454c209e5.roa (raw, json)
Hash identifier:          2nStJFpEOXMV1U+AGcBepuUNYd7AIV9UZB3JfjYK/eQ=
Subject key identifier:   5B:7E:65:3D:E8:2B:C1:16:8F:83:2F:ED:3D:8F:F9:C4:D8:8A:AA:76
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849FCAA7E2601E1CB7903CFCDC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/065eb59d-7e95-3972-8ef2-0fd454c209e5.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        2001:418:8404:1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7e:26:01:e1:cb:79:03:cf:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=64d66403-5e61-409b-9472-b61bd241505f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:5c:c1:37:53:b4:11:bd:ec:c4:3d:8d:35:
                    06:8e:99:2d:42:2f:2a:2a:d0:dc:9a:be:2d:51:e4:
                    f6:43:1d:d3:33:28:34:b9:ad:e0:f7:2a:2e:1b:03:
                    ee:1f:98:b3:53:33:8c:4a:13:2c:16:e1:9f:24:1a:
                    75:a3:16:d9:69:69:b6:1b:b4:cb:c4:27:c3:26:ea:
                    96:b1:dd:b5:a9:89:62:24:14:7e:3a:0e:7e:fe:45:
                    58:a7:36:5a:8d:ee:7f:ca:5b:9f:9f:b0:7d:ac:fd:
                    22:8d:58:18:bc:db:c4:bf:14:fa:e8:c0:7c:06:34:
                    3d:bf:43:4d:db:06:56:08:6b:3a:64:dd:7d:9e:66:
                    22:ff:d0:1c:3c:b8:3c:1a:ce:31:6a:8a:d8:42:28:
                    f3:6d:da:f0:3f:e9:56:94:91:55:c9:4d:2c:f6:c1:
                    ed:57:04:5f:24:5f:aa:ea:c8:00:3d:52:eb:0e:e7:
                    da:d4:2d:8e:d1:a1:35:de:65:4c:dd:e8:ed:eb:62:
                    25:25:da:70:54:bc:b9:ca:08:a5:af:a4:7d:c0:32:
                    9f:5f:62:75:1c:5d:26:f5:b4:1b:98:2a:f6:93:2e:
                    23:40:df:b3:44:d8:f5:9e:16:3f:bf:fc:42:72:e8:
                    1e:d8:83:58:26:79:fc:49:a6:d9:85:6d:c6:8d:9f:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7E:65:3D:E8:2B:C1:16:8F:83:2F:ED:3D:8F:F9:C4:D8:8A:AA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/065eb59d-7e95-3972-8ef2-0fd454c209e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:8404:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:62:b0:b1:62:88:7d:c0:25:22:f3:89:b0:67:64:34:6e:54:
         cb:9f:4f:5f:d4:64:f2:00:a6:34:1f:a6:5a:ac:a7:82:be:9c:
         12:61:34:16:e7:68:55:e1:07:ba:6e:df:25:f6:78:79:9e:40:
         4e:52:68:b0:a5:12:b9:4c:3e:0d:69:49:f6:e3:b6:32:82:65:
         d4:8e:39:5a:bd:28:f0:93:df:4d:26:bd:ae:bd:a9:60:c9:b3:
         80:d6:6b:b5:d1:f8:24:7f:ae:d8:1d:be:91:5d:51:0d:62:11:
         28:76:bc:be:e8:82:e4:b4:a1:ba:9a:46:5a:21:d5:8f:d8:17:
         b6:e5:26:1d:7b:5f:79:98:3d:9d:39:a9:10:0f:2c:3b:f8:af:
         52:31:2d:4c:fd:60:47:3e:dc:64:0a:1c:99:5f:41:28:a0:a8:
         8c:68:bd:2b:48:91:29:40:6c:47:38:a7:74:df:72:39:4a:69:
         d1:a3:68:ae:56:3f:68:50:c1:b4:ec:65:03:ca:7c:ba:41:5d:
         2a:79:59:a4:9d:df:b1:5f:c9:6a:8c:9d:12:06:b1:a8:93:77:
         05:9a:f9:c3:e1:8f:51:b3:c7:59:8e:b8:21:c3:06:2a:6f:53:
         76:d7:00:9a:a3:7f:49:e7:2e:38:60:43:36:0c:09:5d:b7:4b:
         e1:f5:c9:96
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEn8qn4mAeHLeQPPzcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
NjRkNjY0MDMtNWU2MS00MDliLTk0NzItYjYxYmQyNDE1MDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1VcwTdTtBG97MQ9jTUGjpktQi8qKtDcmr4t
UeT2Qx3TMyg0ua3g9youGwPuH5izUzOMShMsFuGfJBp1oxbZaWm2G7TLxCfDJuqW
sd21qYliJBR+Og5+/kVYpzZaje5/ylufn7B9rP0ijVgYvNvEvxT66MB8BjQ9v0NN
2wZWCGs6ZN19nmYi/9AcPLg8Gs4xaorYQijzbdrwP+lWlJFVyU0s9sHtVwRfJF+q
6sgAPVLrDufa1C2O0aE13mVM3ejt62IlJdpwVLy5ygilr6R9wDKfX2J1HF0m9bQb
mCr2ky4jQN+zRNj1nhY/v/xCcuge2INYJnn8SabZhW3GjZ9+KwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFFt+ZT3oK8EWj4Mv7T2P+cTYiqp2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDY1ZWI1OWQtN2U5NS0z
OTcyLThlZjItMGZkNDU0YzIwOWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGIQE
AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAomKwsWKIfcAlIvOJsGdkNG5Uy59PX9Rk8gCmNB+mWqyngr6c
EmE0FudoVeEHum7fJfZ4eZ5ATlJosKUSuUw+DWlJ9uO2MoJl1I45Wr0o8JPfTSa9
rr2pYMmzgNZrtdH4JH+u2B2+kV1RDWIRKHa8vuiC5LShuppGWiHVj9gXtuUmHXtf
eZg9nTmpEA8sO/ivUjEtTP1gRz7cZAocmV9BKKCojGi9K0iRKUBsRzindN9yOUpp
0aNorlY/aFDBtOxlA8p8ukFdKnlZpJ3fsV/JaoydEgaxqJN3BZr5w+GPUbPHWY64
IcMGKm9TdtcAmqN/SecuOGBDNgwJXbdL4fXJlg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:09:38 2025 by rpki-client