Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/7f497e5b-71be-3635-8250-53cfd646e02c.roa
File:                     7f497e5b-71be-3635-8250-53cfd646e02c.roa (raw, json)
Hash identifier:          s/8LwriPlKP17ol6CdDrDhbBpCTQrPHRwTGkinSyN0I=
Subject key identifier:   44:47:34:2B:7B:06:63:B1:22:FF:C3:08:B1:C7:F8:00:30:C6:1A:77
Certificate issuer:       /CN=faa26853-2597-4aa9-8c42-c61cf2081ff6
Certificate serial:       010D0C9F43285849EBEA562D0A22E48A0D2F6E80
Authority key identifier: 23:DF:F3:38:56:68:8A:EC:76:A7:53:D1:44:56:10:1D:A7:0E:BE:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/7f497e5b-71be-3635-8250-53cfd646e02c.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     21515
IP address blocks:        2604:9800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/faa26853-2597-4aa9-8c42-c61cf2081ff6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/faa26853-2597-4aa9-8c42-c61cf2081ff6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:56:2d:0a:22:e4:8a:0d:2f:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa26853-2597-4aa9-8c42-c61cf2081ff6
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=0dc7a695-cf9e-4a91-8fc0-663efb9d944b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f6:df:6b:f4:60:33:0d:a5:07:56:8f:56:86:
                    85:82:ad:c5:88:81:2d:cf:e9:a8:18:ab:d2:b3:9c:
                    ed:7c:86:11:dc:c6:d3:ac:15:31:9a:46:eb:2a:1d:
                    8f:91:25:44:b1:40:36:db:77:d9:95:f1:80:3b:56:
                    31:37:99:91:9f:13:40:66:b2:03:e9:41:37:ad:87:
                    cc:ec:50:59:9b:2a:dd:24:1a:19:86:8a:31:0f:7d:
                    6b:da:66:fd:bf:b7:8f:f6:32:03:46:c2:76:c8:07:
                    97:7c:a5:d4:5d:6e:32:2c:97:b1:43:09:49:36:72:
                    1c:cc:9a:35:f8:31:58:f6:aa:cc:07:b5:56:b4:38:
                    22:84:bd:af:90:0d:99:1f:4a:c3:5d:6a:1e:8f:5f:
                    d4:a6:12:c7:fb:23:74:45:05:e5:65:a2:59:e3:a4:
                    f6:5f:e0:b3:6f:db:56:ea:9d:6a:5c:3a:22:5b:a8:
                    fb:a1:2a:c1:43:73:ec:d8:9e:59:6f:21:5b:ba:36:
                    f5:ae:d6:96:cc:a2:dc:09:60:9b:da:a7:b4:a3:09:
                    57:cb:aa:69:4b:61:85:31:c9:dc:2f:d5:16:d3:95:
                    b7:b9:90:f8:b9:e0:09:6d:d1:3f:43:4b:2a:5f:7a:
                    ed:ac:9a:c5:c9:16:38:20:54:db:27:e7:c9:9d:33:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:47:34:2B:7B:06:63:B1:22:FF:C3:08:B1:C7:F8:00:30:C6:1A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/7f497e5b-71be-3635-8250-53cfd646e02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/faa26853-2597-4aa9-8c42-c61cf2081ff6.crl

            X509v3 Authority Key Identifier:
                keyid:23:DF:F3:38:56:68:8A:EC:76:A7:53:D1:44:56:10:1D:A7:0E:BE:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4c:90:72:c0:7e:96:2f:52:31:ed:67:97:55:66:60:74:d8:
         54:e1:41:3f:5d:52:1b:6d:f0:86:88:8d:fd:07:42:0a:98:55:
         7f:9b:be:bf:06:d5:67:96:4f:02:36:c8:42:bb:1e:e6:97:34:
         02:7f:12:dc:73:3e:1b:08:df:65:a8:22:dd:68:38:c5:3b:23:
         74:5b:40:74:61:21:d3:1c:31:b7:0a:f0:5f:3f:00:c9:0a:60:
         76:3a:46:a8:70:57:b6:97:d9:18:dd:b1:2f:f2:da:cf:dd:ba:
         73:32:dd:4f:6a:da:a5:b5:91:25:40:10:e3:f2:d4:8f:54:b3:
         9a:0b:cd:9f:77:55:0f:67:ee:bc:6b:e1:b1:30:8f:3e:50:02:
         2a:b4:51:a0:3e:05:25:c6:85:e5:3b:ac:15:0f:5b:a4:4f:a1:
         1c:1c:39:31:50:eb:1f:6f:7f:e4:60:3a:2f:9c:28:80:ae:31:
         4e:f2:77:4d:3f:38:84:c2:70:d7:4d:ab:41:45:21:0e:83:d5:
         42:12:7c:5d:81:5f:ff:18:32:b6:db:ca:cf:92:02:63:8f:7b:
         67:35:3d:27:7c:71:5a:25:e0:bf:fb:ca:57:48:33:36:9b:c2:
         3d:55:ae:2c:d1:5d:6e:1e:3d:88:25:4e:d7:9b:b5:37:1c:53:
         16:5b:c7:60
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnr6lYtCiLkig0vboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmFhMjY4NTMtMjU5Ny00YWE5LThjNDItYzYxY2YyMDgx
ZmY2MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
MGRjN2E2OTUtY2Y5ZS00YTkxLThmYzAtNjYzZWZiOWQ5NDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPbfa/RgMw2lB1aPVoaFgq3FiIEtz+moGKvS
s5ztfIYR3MbTrBUxmkbrKh2PkSVEsUA223fZlfGAO1YxN5mRnxNAZrID6UE3rYfM
7FBZmyrdJBoZhooxD31r2mb9v7eP9jIDRsJ2yAeXfKXUXW4yLJexQwlJNnIczJo1
+DFY9qrMB7VWtDgihL2vkA2ZH0rDXWoej1/UphLH+yN0RQXlZaJZ46T2X+Czb9tW
6p1qXDoiW6j7oSrBQ3Ps2J5ZbyFbujb1rtaWzKLcCWCb2qe0owlXy6ppS2GFMcnc
L9UW05W3uZD4ueAJbdE/Q0sqX3rtrJrFyRY4IFTbJ+fJnTPVaQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFERHNCt7BmOxIv/DCLHH+AAwxhp3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYWEy
Njg1My0yNTk3LTRhYTktOGM0Mi1jNjFjZjIwODFmZjYvN2Y0OTdlNWItNzFiZS0z
NjM1LTgyNTAtNTNjZmQ2NDZlMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmFhMjY4NTMtMjU5Ny00YWE5LThj
NDItYzYxY2YyMDgxZmY2L2ZhYTI2ODUzLTI1OTctNGFhOS04YzQyLWM2MWNmMjA4
MWZmNi5jcmwwHwYDVR0jBBgwFoAUI9/zOFZoiux2p1PRRFYQHacOvsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mYWEyNjg1My0yNTk3LTRhYTktOGM0Mi1jNjFj
ZjIwODFmZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSYADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAwTJBywH6WL1Ix7WeXVWZgdNhU4UE/XVIbbfCGiI39B0IKmFV/m76/
BtVnlk8CNshCux7mlzQCfxLccz4bCN9lqCLdaDjFOyN0W0B0YSHTHDG3CvBfPwDJ
CmB2OkaocFe2l9kY3bEv8trP3bpzMt1PatqltZElQBDj8tSPVLOaC82fd1UPZ+68
a+GxMI8+UAIqtFGgPgUlxoXlO6wVD1ukT6EcHDkxUOsfb3/kYDovnCiArjFO8ndN
PziEwnDXTatBRSEOg9VCEnxdgV//GDK228rPkgJjj3tnNT0nfHFaJeC/+8pXSDM2
m8I9Va4s0V1uHj2IJU7Xm7U3HFMWW8dg
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:28:41 2025 by rpki-client