Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
File:                     4443ea3e-5515-393f-9b6c-71ed5816326b.roa (raw, json)
Hash identifier:          kR/2bNNUPsIFAx28Hdxo/Z0UKw7wI4ROtktRDgC8vcs=
Subject key identifier:   D6:2C:6E:60:E1:04:ED:29:46:B8:DE:22:EE:93:CD:D2:5B:E3:4E:A8
Certificate issuer:       /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Certificate serial:       010D0C9F4328584A90A0AC146F8573A9F262C700
Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     394449
IP address blocks:        2604:3dc0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:ac:14:6f:85:73:a9:f2:62:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=6b757b16-9f6c-412a-9492-3259a6905717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:11:77:37:28:39:8c:8f:ce:b9:89:0e:19:ed:
                    29:70:a2:6e:9f:b2:14:54:b8:0d:89:67:5c:8c:d6:
                    7c:63:b3:aa:4c:d0:be:37:4e:8c:bb:a2:01:42:37:
                    56:43:73:ec:58:c7:bf:4d:b4:7c:c9:05:fe:e5:85:
                    95:c0:a8:40:07:42:7b:d9:42:d0:8e:03:4c:40:5d:
                    7a:b8:76:0f:c0:f6:01:44:1a:18:17:ec:fd:68:bd:
                    4f:30:65:99:e9:69:76:51:d0:33:68:1a:d0:f8:98:
                    98:49:b2:9c:35:ac:3d:3d:51:f3:1d:9c:6f:17:8c:
                    a7:8a:dc:55:3a:b9:f8:43:3f:1e:fd:60:d9:59:2e:
                    75:b7:b2:be:54:0e:5b:d2:78:77:51:cb:0d:a6:b6:
                    f2:40:6b:6b:0a:c2:26:03:1a:bd:f0:7d:2a:74:97:
                    7d:45:6e:e4:5d:6c:2e:5f:dc:39:32:41:e9:9a:53:
                    5c:18:df:94:9d:97:e1:50:15:0c:32:08:93:91:9c:
                    ff:65:30:8e:09:2d:3f:8e:4f:79:41:50:9e:9d:86:
                    c0:62:b3:e6:d6:b3:3f:b2:1e:d5:bf:94:9b:c6:ae:
                    f6:44:e1:35:2e:cd:00:3b:90:34:8f:d8:cd:4b:c6:
                    e7:8b:c1:91:59:14:59:92:2e:13:75:71:da:d7:ae:
                    b8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2C:6E:60:E1:04:ED:29:46:B8:DE:22:EE:93:CD:D2:5B:E3:4E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl

            X509v3 Authority Key Identifier:
                keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3dc0:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:27:c7:27:7c:ca:ad:0f:a3:cb:34:d4:ea:14:fa:83:5c:10:
         ca:93:6d:ae:ba:f5:62:a8:ce:cd:c2:a4:fd:6e:3b:7b:f9:41:
         49:3f:6f:73:34:c2:32:d6:3f:93:d0:aa:44:80:e4:dd:cd:45:
         2f:1f:e8:8e:c4:f6:86:0a:6a:82:39:2c:1c:2a:6d:0f:ea:90:
         fe:b3:d3:af:fa:ef:b3:3f:9f:c4:23:f1:36:23:39:0e:fb:57:
         c7:8a:5a:ce:48:54:45:d5:08:44:9d:c5:65:1d:d2:55:db:d3:
         bd:60:8e:99:42:7b:ee:1a:bf:75:b7:3a:28:a7:b0:3d:16:5e:
         c1:90:88:3c:6e:c9:8c:be:63:cf:c7:22:97:04:db:fa:0e:b9:
         11:19:a5:43:7e:9e:62:c7:41:48:5d:00:24:b8:ac:46:04:8e:
         63:3d:3a:5a:85:d0:89:ff:2e:84:ff:33:ca:44:4f:32:af:d3:
         13:4b:b2:01:12:7f:08:6c:af:cb:cf:f0:89:58:02:57:c1:12:
         36:1a:d1:9f:a9:3d:0f:a8:8d:5e:62:a2:d6:1c:2b:c9:ca:59:
         f9:e6:7f:5c:cb:1c:0b:52:9b:f3:ba:38:53:e2:ed:ad:e0:db:
         14:b9:66:a7:04:46:5a:91:dc:4e:c4:4a:d7:d6:6b:6b:68:6f:
         63:9b:f0:78
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqQoKwUb4VzqfJixwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx
OTc5MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
NmI3NTdiMTYtOWY2Yy00MTJhLTk0OTItMzI1OWE2OTA1NzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhF3Nyg5jI/OuYkOGe0pcKJun7IUVLgNiWdc
jNZ8Y7OqTNC+N06Mu6IBQjdWQ3PsWMe/TbR8yQX+5YWVwKhAB0J72ULQjgNMQF16
uHYPwPYBRBoYF+z9aL1PMGWZ6Wl2UdAzaBrQ+JiYSbKcNaw9PVHzHZxvF4ynitxV
Orn4Qz8e/WDZWS51t7K+VA5b0nh3UcsNprbyQGtrCsImAxq98H0qdJd9RW7kXWwu
X9w5MkHpmlNcGN+UnZfhUBUMMgiTkZz/ZTCOCS0/jk95QVCenYbAYrPm1rM/sh7V
v5Sbxq72ROE1Ls0AO5A0j9jNS8bni8GRWRRZki4TdXHa1664HQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNYsbmDhBO0pRrjeIu6TzdJb406oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3
ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvNDQ0M2VhM2UtNTUxNS0z
OTNmLTliNmMtNzFlZDU4MTYzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk
OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj
MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0
NThmYzE5NzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQ9wAAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD0nxyd8yq0Po8s01OoU+oNcEMqTba669WKozs3CpP1uO3v5QUk/
b3M0wjLWP5PQqkSA5N3NRS8f6I7E9oYKaoI5LBwqbQ/qkP6z06/677M/n8Qj8TYj
OQ77V8eKWs5IVEXVCESdxWUd0lXb071gjplCe+4av3W3OiinsD0WXsGQiDxuyYy+
Y8/HIpcE2/oOuREZpUN+nmLHQUhdACS4rEYEjmM9OlqF0In/LoT/M8pETzKv0xNL
sgESfwhsr8vP8IlYAlfBEjYa0Z+pPQ+ojV5iotYcK8nKWfnmf1zLHAtSm/O6OFPi
7a3g2xS5ZqcERlqR3E7EStfWa2tob2Ob8Hg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:57 2025 by rpki-client