Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa
File:                     9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa (raw, json)
Hash identifier:          3JgZQYFLyLrWaUdYnH4kGdRTqdp4FgDelUa1Vmbnzkg=
Subject key identifier:   09:EF:FB:85:93:E8:04:13:EE:89:59:AE:F4:9E:68:A1:B5:80:F2:79
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584A9FFB9D744E7B82C59326A580
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     36734
IP address blocks:        2607:5100::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9d:74:4e:7b:82:c5:93:26:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=0f98d131-b6a8-46f5-af4d-1c706757c6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:80:ee:57:2d:fb:c1:a8:cb:27:07:02:6f:
                    51:82:fe:98:5d:43:f8:f6:a8:b4:81:fa:d3:aa:cb:
                    f3:1e:aa:96:7d:a9:bd:b0:46:0d:86:8e:b4:ca:0f:
                    14:bc:bb:cd:18:f0:fe:f4:82:af:fb:04:cc:11:dd:
                    dd:ea:8e:b1:c4:99:03:6d:0e:22:b9:f1:53:63:20:
                    f4:f9:fb:68:db:c3:09:c0:31:4b:33:5a:64:b4:a8:
                    9a:6d:a5:81:fa:95:70:14:39:21:36:9d:49:f9:72:
                    1c:f7:90:8e:cb:47:f3:ea:5e:5f:67:b9:93:d2:ee:
                    9e:0d:dd:19:dc:55:77:57:76:dc:73:67:40:43:13:
                    96:63:70:8b:4e:f6:77:05:e1:1b:43:59:00:61:70:
                    b4:4b:dd:57:9e:5e:79:90:a7:a5:56:43:af:55:a3:
                    a8:ca:d4:97:47:8d:87:89:bf:39:b1:f0:fb:b3:b7:
                    53:4b:3b:8c:06:8e:ef:de:18:1d:64:ce:7d:b6:ba:
                    33:d6:03:6f:f4:51:6f:ac:9f:d6:7f:f0:e0:b4:2c:
                    6b:c3:a3:2f:3c:c9:6a:18:02:92:a6:3c:89:60:b0:
                    d6:4d:8b:a4:c6:e3:af:5a:5b:b3:c7:83:80:80:78:
                    07:f1:10:8a:21:ce:2a:09:df:d7:2d:f4:d4:1c:84:
                    a3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EF:FB:85:93:E8:04:13:EE:89:59:AE:F4:9E:68:A1:B5:80:F2:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/9aad5e4e-dbba-3824-8f34-d21bd8ee2f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5100::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:a5:26:2a:11:78:22:29:78:30:1e:8d:c0:13:48:8d:69:
         c7:a8:5e:fc:ec:85:7a:6d:fd:92:98:61:60:65:17:b0:6e:4e:
         27:07:8f:9c:d3:75:b1:90:60:8b:d2:43:e2:4b:3b:94:69:f9:
         da:2a:f7:7f:75:1e:ad:5c:71:d8:dd:57:7e:26:de:f8:8e:98:
         48:af:d9:fb:ee:7f:e3:76:39:6d:ff:2e:5a:7d:4d:95:8a:7b:
         90:c4:7e:e8:ba:7d:d5:04:bf:a3:fc:93:fc:62:7b:5a:42:1c:
         19:3f:28:8e:7e:fb:01:4b:a3:f4:15:e3:33:dd:ad:f0:ce:ff:
         36:ee:93:9d:bd:8e:bf:a9:4c:ff:ef:ae:99:ae:dc:ce:50:62:
         1b:ae:3d:81:b0:b1:5c:9e:d9:6a:74:45:11:1d:9d:b5:62:74:
         e3:ec:71:a0:c1:4e:2c:47:95:eb:6e:db:66:dd:90:3b:36:ea:
         7b:9b:23:4b:30:2f:7f:d8:8d:5e:a4:9e:3e:02:0f:2f:d8:2f:
         75:6b:5f:bd:9b:0f:08:4c:a7:d2:86:15:c8:6c:ca:8e:03:77:
         b2:f2:20:52:ba:72:b8:71:ad:2b:79:4c:8f:4b:ea:57:fe:2a:
         c8:d8:df:ec:22:00:25:ec:78:41:63:97:f9:a2:97:26:3a:61:
         5e:9a:be:d3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+510TnuCxZMmpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWNiZTJjYWYtYWZkMC00ZWRmLWE3NDMtYjM1MGMyM2Uz
MDdkMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
MGY5OGQxMzEtYjZhOC00NmY1LWFmNGQtMWM3MDY3NTdjNmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBuA7lct+8GoyycHAm9Rgv6YXUP49qi0gfrT
qsvzHqqWfam9sEYNho60yg8UvLvNGPD+9IKv+wTMEd3d6o6xxJkDbQ4iufFTYyD0
+fto28MJwDFLM1pktKiabaWB+pVwFDkhNp1J+XIc95COy0fz6l5fZ7mT0u6eDd0Z
3FV3V3bcc2dAQxOWY3CLTvZ3BeEbQ1kAYXC0S91Xnl55kKelVkOvVaOoytSXR42H
ib85sfD7s7dTSzuMBo7v3hgdZM59troz1gNv9FFvrJ/Wf/DgtCxrw6MvPMlqGAKS
pjyJYLDWTYukxuOvWluzx4OAgHgH8RCKIc4qCd/XLfTUHISj+wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAnv+4WT6AQT7olZrvSeaKG1gPJ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2Jl
MmNhZi1hZmQwLTRlZGYtYTc0My1iMzUwYzIzZTMwN2QvOWFhZDVlNGUtZGJiYS0z
ODI0LThmMzQtZDIxYmQ4ZWUyZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWNiZTJjYWYtYWZkMC00ZWRmLWE3
NDMtYjM1MGMyM2UzMDdkL2VjYmUyY2FmLWFmZDAtNGVkZi1hNzQzLWIzNTBjMjNl
MzA3ZC5jcmwwHwYDVR0jBBgwFoAUwnZy+KO6PDsEP1vhWw2QXNk6WFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2JlMmNhZi1hZmQwLTRlZGYtYTc0My1iMzUw
YzIzZTMwN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgdRADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBcqqUmKhF4Iil4MB6NwBNIjWnHqF787IV6bf2SmGFgZRewbk4nB4+c
03WxkGCL0kPiSzuUafnaKvd/dR6tXHHY3Vd+Jt74jphIr9n77n/jdjlt/y5afU2V
inuQxH7oun3VBL+j/JP8YntaQhwZPyiOfvsBS6P0FeMz3a3wzv827pOdvY6/qUz/
766ZrtzOUGIbrj2BsLFcntlqdEURHZ21YnTj7HGgwU4sR5Xrbttm3ZA7Nup7myNL
MC9/2I1epJ4+Ag8v2C91a1+9mw8ITKfShhXIbMqOA3ey8iBSunK4ca0reUyPS+pX
/irI2N/sIgAl7HhBY5f5opcmOmFemr7T
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:07 2025 by rpki-client