Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa
File:                     5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa (raw, json)
Hash identifier:          37MAytwpkB0QryM1J6gLr6dOqzALPE0AAcJdsWiI1TI=
Subject key identifier:   1D:71:0D:A5:D0:43:9F:07:CA:AF:F6:80:F4:2F:10:C1:2C:62:76:7C
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584AA6F626147AED362AB44F2000
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     31898
IP address blocks:        2603:5000:2040::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:26:14:7a:ed:36:2a:b4:4f:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=f5409067-42c4-43f6-b352-51424e88732f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f2:bd:ca:13:b7:b4:3f:5c:f1:47:84:1f:e0:
                    0c:49:ac:e5:61:60:ab:7a:99:b7:5a:3e:f1:59:ac:
                    3c:a0:ef:17:77:3a:f3:97:0a:dd:87:48:25:fc:79:
                    0d:62:7d:5b:56:9a:ce:11:e0:ac:b0:aa:ed:55:35:
                    c7:5b:10:19:6a:9c:13:15:d4:3f:71:d5:52:60:6b:
                    32:1a:fb:52:f1:ab:29:03:1a:41:b6:32:57:5d:f7:
                    67:38:50:28:25:3c:f8:9a:87:6d:3a:8d:3c:93:25:
                    fb:30:5a:5a:be:71:35:00:66:a6:6d:28:8e:6d:3d:
                    b8:1c:f1:2b:e0:a0:50:cc:66:b6:3e:33:47:52:95:
                    a8:19:7f:08:64:c6:a4:a4:38:83:57:b0:94:02:c0:
                    30:e7:92:1b:9a:7b:d3:e3:54:52:40:44:48:1a:b7:
                    a5:fb:d8:d0:e3:04:87:58:1b:89:93:5b:3a:3d:cf:
                    a5:a0:8d:15:42:35:ce:15:5d:a8:35:34:98:31:9e:
                    a6:3e:9d:f8:3d:d1:59:7c:50:6e:0b:e3:82:3f:3d:
                    01:13:0a:75:c3:c6:62:98:62:44:27:bf:9f:f0:30:
                    f2:d8:8a:b3:b9:55:65:5c:0f:5f:e3:ae:a9:1b:ce:
                    ab:83:cb:e2:ec:61:e0:e6:f0:7f:c5:8c:8f:fb:9b:
                    de:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:71:0D:A5:D0:43:9F:07:CA:AF:F6:80:F4:2F:10:C1:2C:62:76:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/5bb6ac4e-20f7-3ff9-9823-a7fa8228204e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5000:2040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:b9:3b:d9:13:ba:fe:11:73:69:eb:de:34:c9:4e:e5:de:bc:
         b2:a9:cf:32:31:0e:c0:23:58:20:65:75:ca:5c:96:e0:01:46:
         8d:29:65:64:a9:54:5d:53:9d:1a:37:ea:f3:22:ed:cb:df:b0:
         f0:11:c6:7a:0b:29:d2:62:a8:0a:3f:9b:f5:e2:22:80:82:43:
         20:ec:15:89:f5:0b:cb:b6:73:83:ac:f1:4e:55:f9:51:ec:71:
         ab:b4:e8:ba:4e:b0:69:10:b9:fe:1f:65:90:39:5c:f1:43:5e:
         9c:7d:9a:d8:e1:df:01:c7:ea:4c:46:1c:36:68:07:28:4e:b6:
         92:6e:9e:81:88:2a:c2:a3:89:bc:ef:0d:55:67:4e:82:cd:4a:
         2f:16:b4:58:84:bf:66:08:1f:c2:3b:5b:35:6f:94:43:5f:0d:
         37:9a:6f:f0:1c:07:fe:6d:9a:96:51:ae:10:c8:66:10:a2:03:
         81:a5:72:7d:cd:90:a0:bd:55:3b:13:73:ae:9c:58:18:8c:4e:
         1e:f8:19:5e:d8:dd:a5:5d:9d:63:42:fe:2d:b8:83:ec:b6:d9:
         59:07:0c:20:f8:69:49:f4:6a:da:ab:bd:2e:21:70:dc:02:65:
         f9:17:d4:fd:8c:f5:bb:84:38:81:8c:66:28:a1:59:0f:a6:c8:
         f1:6a:ed:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqm9iYUeu02KrRPIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc1ZDIwZjYtMWNmYS00ODNlLWJlMGYtZDE1ZWI1NDhm
NjZkMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
ZjU0MDkwNjctNDJjNC00M2Y2LWIzNTItNTE0MjRlODg3MzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvK9yhO3tD9c8UeEH+AMSazlYWCrepm3Wj7x
Waw8oO8Xdzrzlwrdh0gl/HkNYn1bVprOEeCssKrtVTXHWxAZapwTFdQ/cdVSYGsy
GvtS8aspAxpBtjJXXfdnOFAoJTz4modtOo08kyX7MFpavnE1AGambSiObT24HPEr
4KBQzGa2PjNHUpWoGX8IZMakpDiDV7CUAsAw55IbmnvT41RSQERIGrel+9jQ4wSH
WBuJk1s6Pc+loI0VQjXOFV2oNTSYMZ6mPp34PdFZfFBuC+OCPz0BEwp1w8ZimGJE
J7+f8DDy2IqzuVVlXA9f466pG86rg8vi7GHg5vB/xYyP+5vezwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB1xDaXQQ58Hyq/2gPQvEMEsYnZ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NzVk
MjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVlYjU0OGY2NmQvNWJiNmFjNGUtMjBmNy0z
ZmY5LTk4MjMtYTdmYTgyMjgyMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc1ZDIwZjYtMWNmYS00ODNlLWJl
MGYtZDE1ZWI1NDhmNjZkLzc3NWQyMGY2LTFjZmEtNDgzZS1iZTBmLWQxNWViNTQ4
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUGy2qCGYWpuHYP/G3Oy3sdH8TIz4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83NzVkMjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVl
YjU0OGY2NmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgNQACBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKC5O9kTuv4Rc2nr3jTJTuXevLKpzzIxDsAjWCBldcpcluABRo0p
ZWSpVF1TnRo36vMi7cvfsPARxnoLKdJiqAo/m/XiIoCCQyDsFYn1C8u2c4Os8U5V
+VHscau06LpOsGkQuf4fZZA5XPFDXpx9mtjh3wHH6kxGHDZoByhOtpJunoGIKsKj
ibzvDVVnToLNSi8WtFiEv2YIH8I7WzVvlENfDTeab/AcB/5tmpZRrhDIZhCiA4Gl
cn3NkKC9VTsTc66cWBiMTh74GV7Y3aVdnWNC/i24g+y22VkHDCD4aUn0atqrvS4h
cNwCZfkX1P2M9buEOIGMZiihWQ+myPFq7VU=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:04 2025 by rpki-client