Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/b57e69b3-afc9-328d-8a2e-dea01a41b613.roa
File:                     b57e69b3-afc9-328d-8a2e-dea01a41b613.roa (raw, json)
Hash identifier:          XQ6YBfL2vdMxkBEP2bK7MioBW+VrOukKz3p1FK+6/Vk=
Subject key identifier:   16:8F:5B:A6:31:2F:98:F9:2E:19:68:C5:45:6A:34:46:4D:F9:96:81
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584AA6F6263E39E710523D16DC00
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/b57e69b3-afc9-328d-8a2e-dea01a41b613.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     31898
IP address blocks:        2603:5000:4040::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:26:3e:39:e7:10:52:3d:16:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=c20d7713-22db-4056-b97d-bcc6ce0c7060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:8f:fa:81:79:08:bf:ac:25:39:12:aa:0c:
                    fd:cf:11:ab:ef:8f:20:4e:a2:a8:d5:81:ff:f2:bf:
                    3a:e8:95:e1:94:f1:01:9b:25:d3:38:22:60:a9:91:
                    16:65:10:46:f8:db:fd:34:cd:27:70:bd:27:ca:e7:
                    63:67:73:16:50:9d:d0:61:1f:0f:58:c9:06:9c:d5:
                    28:94:67:e1:72:1b:04:3d:cb:8f:7b:9d:1f:9b:31:
                    ac:aa:9f:6b:09:53:ed:e5:b5:61:e7:fe:e2:ce:dc:
                    2e:71:84:c6:08:1a:e5:b4:33:9e:2e:45:d3:e8:b7:
                    94:6a:e0:55:20:0f:a1:f7:9a:b3:36:30:07:c0:6d:
                    19:1b:43:aa:31:e5:f4:08:f2:aa:3b:59:86:91:63:
                    1b:1a:26:8c:26:82:28:45:a6:6a:de:db:15:ed:84:
                    e5:83:71:e2:f2:2d:5d:06:fa:ee:03:e7:b4:01:81:
                    74:43:93:e9:6e:b8:ef:cf:77:b9:c9:0f:32:54:11:
                    98:23:cb:68:7c:f9:4e:99:50:28:a0:98:54:20:11:
                    07:d5:d0:5d:95:b5:0f:be:7a:d0:82:01:2f:ec:a7:
                    37:f2:e5:86:de:c7:23:58:4f:2a:ce:99:c3:6b:9f:
                    2b:9c:fc:9c:58:31:51:27:66:98:46:7f:50:da:ee:
                    1f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8F:5B:A6:31:2F:98:F9:2E:19:68:C5:45:6A:34:46:4D:F9:96:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/b57e69b3-afc9-328d-8a2e-dea01a41b613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5000:4040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:f3:d8:6d:b2:24:df:96:5a:08:ad:46:c1:d5:6a:ed:b3:94:
         cc:63:02:1b:e2:03:5d:27:0d:dd:de:8f:f2:f3:de:46:07:10:
         7e:43:ac:6a:30:72:34:f8:b6:e6:f9:a2:d3:90:c9:7d:99:a9:
         c0:e3:07:fa:dd:5f:bf:38:bb:29:b7:02:fc:ae:d4:bc:5a:52:
         d7:db:a8:12:bb:f1:7c:4c:55:ad:62:f0:81:2b:e5:ac:df:0d:
         57:b0:ea:f9:dd:d9:84:b8:43:30:22:66:b8:3d:b8:ed:ec:40:
         a7:0d:83:38:45:16:aa:dd:8f:f8:c5:d6:fc:9e:e4:a5:5e:d1:
         60:a1:11:26:a1:a4:85:89:f6:43:82:1b:0c:bc:3c:37:30:f3:
         a9:5b:e7:2a:c1:3b:41:2b:47:14:89:7e:a6:24:02:87:df:ef:
         95:b6:70:c8:52:af:b1:21:b5:61:d8:e1:2c:d0:3c:f0:10:ed:
         81:24:6c:fa:09:b1:6f:4d:43:d3:5b:4c:30:61:ea:c9:f7:c0:
         a5:9b:64:cf:b1:ff:d1:ef:c9:4e:08:65:28:09:82:6b:6b:6b:
         b5:db:a1:00:79:b5:c2:00:a3:b1:fa:14:50:59:cf:e8:14:80:
         51:b8:fe:77:4f:2c:a3:5a:0d:c1:32:e9:01:02:ad:96:87:92:
         ef:e8:ef:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqm9iY+OecQUj0W3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc1ZDIwZjYtMWNmYS00ODNlLWJlMGYtZDE1ZWI1NDhm
NjZkMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
YzIwZDc3MTMtMjJkYi00MDU2LWI5N2QtYmNjNmNlMGM3MDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyOP+oF5CL+sJTkSqgz9zxGr748gTqKo1YH/
8r866JXhlPEBmyXTOCJgqZEWZRBG+Nv9NM0ncL0nyudjZ3MWUJ3QYR8PWMkGnNUo
lGfhchsEPcuPe50fmzGsqp9rCVPt5bVh5/7iztwucYTGCBrltDOeLkXT6LeUauBV
IA+h95qzNjAHwG0ZG0OqMeX0CPKqO1mGkWMbGiaMJoIoRaZq3tsV7YTlg3Hi8i1d
BvruA+e0AYF0Q5Ppbrjvz3e5yQ8yVBGYI8tofPlOmVAooJhUIBEH1dBdlbUPvnrQ
ggEv7Kc38uWG3scjWE8qzpnDa58rnPycWDFRJ2aYRn9Q2u4foQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBaPW6YxL5j5LhloxUVqNEZN+ZaBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NzVk
MjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVlYjU0OGY2NmQvYjU3ZTY5YjMtYWZjOS0z
MjhkLThhMmUtZGVhMDFhNDFiNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc1ZDIwZjYtMWNmYS00ODNlLWJl
MGYtZDE1ZWI1NDhmNjZkLzc3NWQyMGY2LTFjZmEtNDgzZS1iZTBmLWQxNWViNTQ4
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUGy2qCGYWpuHYP/G3Oy3sdH8TIz4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83NzVkMjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVl
YjU0OGY2NmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgNQAEBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKzz2G2yJN+WWgitRsHVau2zlMxjAhviA10nDd3ej/Lz3kYHEH5D
rGowcjT4tub5otOQyX2ZqcDjB/rdX784uym3Avyu1LxaUtfbqBK78XxMVa1i8IEr
5azfDVew6vnd2YS4QzAiZrg9uO3sQKcNgzhFFqrdj/jF1vye5KVe0WChESahpIWJ
9kOCGwy8PDcw86lb5yrBO0ErRxSJfqYkAoff75W2cMhSr7EhtWHY4SzQPPAQ7YEk
bPoJsW9NQ9NbTDBh6sn3wKWbZM+x/9HvyU4IZSgJgmtra7XboQB5tcIAo7H6FFBZ
z+gUgFG4/ndPLKNaDcEy6QECrZaHku/o7xg=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:06:01 2025 by rpki-client