Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa
File:                     af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa (raw, json)
Hash identifier:          45XxgleRU51/O/NLrGdTCf3BhKIZU4IbhoP0nlYUayI=
Subject key identifier:   FF:35:54:67:44:58:72:D1:E5:BB:F2:1B:C9:E7:CF:5A:AB:96:06:DB
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A1055E1F467F5A1AACF3E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        2607:f400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a1:05:5e:1f:46:7f:5a:1a:ac:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=20cf6e8f-1fb2-41ab-8ffc-21ff84a90d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:8e:af:e1:16:8c:e7:eb:5d:be:fc:16:fe:
                    da:00:ad:6a:5c:6b:52:c3:29:bf:82:8f:7a:ad:07:
                    00:78:00:ae:28:8f:34:e5:6d:3f:fd:65:0f:55:0c:
                    21:39:07:23:0c:d9:3b:1b:66:18:ac:06:cf:19:ff:
                    5d:b6:99:27:2c:a4:3d:e0:1d:0a:03:98:d8:e0:7a:
                    c7:57:ae:35:12:eb:21:3a:38:7b:d2:9e:c6:7b:b1:
                    e3:ae:31:5a:69:eb:e2:0c:bd:fc:fa:ae:ad:c6:65:
                    6f:36:1f:c6:23:5f:db:86:41:ab:8e:83:39:f6:f1:
                    a4:90:a6:9b:b0:fa:e2:3d:09:f4:0d:ac:b5:4d:55:
                    b6:e3:d2:29:c2:ea:3e:6c:b9:1e:32:a2:c9:51:e0:
                    c5:e1:ae:c0:83:44:b6:b2:a7:45:73:a2:82:be:c1:
                    62:8c:ba:28:49:29:5c:3c:95:f3:b1:01:a5:5d:6d:
                    8d:cb:04:33:14:36:3c:bb:6a:2c:aa:83:a6:8c:b4:
                    00:c8:ed:93:97:1a:b6:2a:50:3e:18:7a:c5:cf:ce:
                    ec:ac:2c:d9:00:e1:4c:cd:4b:7e:f9:98:25:5f:3e:
                    5a:1a:ec:84:b6:0b:85:ce:27:1b:32:3d:b9:e3:ed:
                    77:48:93:1e:b4:46:8b:d8:5b:8e:0a:ae:5d:51:0c:
                    a3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:35:54:67:44:58:72:D1:E5:BB:F2:1B:C9:E7:CF:5A:AB:96:06:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af6eb6ab-0205-37b4-b728-ce90ef44aee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:12:5d:cf:9b:fa:4b:b5:da:fb:e3:e2:55:8d:1b:01:2b:bd:
         00:48:1d:f3:7e:3e:1c:68:16:af:43:13:b4:f3:90:0b:c7:4a:
         04:f5:f1:76:b3:4c:4f:d5:20:29:3d:ad:da:54:08:ee:5b:9d:
         42:df:f9:1e:12:85:f3:0b:85:b3:94:7a:4b:5a:ed:7a:0e:57:
         6c:15:00:49:43:43:9b:c6:8a:b8:59:4a:c5:c3:c4:a3:3f:ec:
         ea:eb:45:4b:35:66:24:9e:25:8a:6b:4f:aa:89:77:78:9f:01:
         b0:5c:79:3e:bf:f7:e7:de:b2:6a:87:d4:d3:c0:54:9e:ef:d3:
         df:9e:3c:a5:e6:06:be:61:66:eb:2e:bf:b8:75:82:f3:1e:8c:
         09:d2:46:50:b4:6a:07:25:8f:6c:0c:b2:85:dc:a2:42:52:cc:
         d3:72:c7:8f:9c:86:6c:29:26:c1:f4:54:ba:b7:a4:65:0f:d4:
         e4:12:0f:bd:9a:d5:b3:5d:1d:9d:92:e1:03:65:74:64:fa:93:
         33:57:3d:19:53:ac:b1:99:8a:62:e3:87:ad:07:d1:f7:8a:09:
         28:f6:6d:56:f2:ae:ea:c4:3b:fb:d9:f0:06:80:4c:f9:0b:1f:
         71:fa:c0:0d:b5:bf:89:9a:d2:79:7d:c8:65:7b:62:3a:b3:e2:
         78:02:03:5d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqQoQVeH0Z/Whqs8+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
MjBjZjZlOGYtMWZiMi00MWFiLThmZmMtMjFmZjg0YTkwZDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIGOr+EWjOfrXb78Fv7aAK1qXGtSwym/go96
rQcAeACuKI805W0//WUPVQwhOQcjDNk7G2YYrAbPGf9dtpknLKQ94B0KA5jY4HrH
V641EushOjh70p7Ge7HjrjFaaeviDL38+q6txmVvNh/GI1/bhkGrjoM59vGkkKab
sPriPQn0Day1TVW249Ipwuo+bLkeMqLJUeDF4a7Ag0S2sqdFc6KCvsFijLooSSlc
PJXzsQGlXW2NywQzFDY8u2osqoOmjLQAyO2Tlxq2KlA+GHrFz87srCzZAOFMzUt+
+ZglXz5aGuyEtguFzicbMj254+13SJMetEaL2FuOCq5dUQyjVwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP81VGdEWHLR5bvyG8nnz1qrlgbbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWY2ZWI2YWItMDIwNS0z
N2I0LWI3MjgtY2U5MGVmNDRhZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQASEl3Pm/pLtdr74+JVjRsBK70ASB3zfj4caBavQxO085ALx0oE9fF2
s0xP1SApPa3aVAjuW51C3/keEoXzC4WzlHpLWu16DldsFQBJQ0Obxoq4WUrFw8Sj
P+zq60VLNWYkniWKa0+qiXd4nwGwXHk+v/fn3rJqh9TTwFSe79Pfnjyl5ga+YWbr
Lr+4dYLzHowJ0kZQtGoHJY9sDLKF3KJCUszTcsePnIZsKSbB9FS6t6RlD9TkEg+9
mtWzXR2dkuEDZXRk+pMzVz0ZU6yxmYpi44etB9H3igko9m1W8q7qxDv72fAGgEz5
Cx9x+sANtb+JmtJ5fchle2I6s+J4AgNd
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:06:31 2025 by rpki-client