Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/3670f5e8-841a-309c-868b-4fa1ef12c632.roa
File:                     3670f5e8-841a-309c-868b-4fa1ef12c632.roa (raw, json)
Hash identifier:          49s+bomDYj/nTvWvmjsDOUtQA/1OfhwI+EAoUtoKIpw=
Subject key identifier:   3A:66:A4:E6:B9:7C:A5:63:1A:F2:30:15:4E:90:D3:D4:8E:D5:26:2F
Certificate issuer:       /CN=07c482f6-0e64-42ff-a503-75a85635277e
Certificate serial:       010D0C9F4328584A0A9FD3A5AD8F2DD6413BA958
Authority key identifier: 9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/3670f5e8-841a-309c-868b-4fa1ef12c632.roa
Signing time:             Sun 01 Jun 2025 01:00:49 +0000
ROA not before:           Sun 01 Jun 2025 01:00:49 +0000
ROA not after:            Sat 30 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        2607:5f40:8100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0a:9f:d3:a5:ad:8f:2d:d6:41:3b:a9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c482f6-0e64-42ff-a503-75a85635277e
        Validity
            Not Before: Jun  1 01:00:49 2025 GMT
            Not After : Aug 30 01:00:49 2025 GMT
        Subject: CN=4fb75ad4-ed0a-4d35-9492-752e225c36f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:c2:13:45:09:f1:44:59:f7:8f:3c:61:5d:
                    db:1b:15:5d:df:e3:9e:f3:a1:99:74:aa:3f:1e:01:
                    d9:e3:4a:ba:dc:31:9a:b2:4b:bf:cd:b2:24:c4:1a:
                    24:3f:50:fc:d9:41:1b:e7:c4:67:9b:c9:0c:c2:d9:
                    32:66:b1:37:6d:3e:c1:9e:3d:31:07:5b:0e:e1:5e:
                    b1:7d:09:71:52:cc:d2:b6:8f:1d:2a:9b:dc:8e:e0:
                    ba:86:9a:bd:99:ef:aa:0f:55:f3:a5:41:25:53:22:
                    fa:dd:95:fd:17:62:cb:d8:48:dc:f9:ed:22:b0:92:
                    2a:a1:90:7a:39:17:0d:70:e2:04:bf:05:cb:43:d9:
                    f0:5c:d3:35:45:9e:0d:f2:41:6c:46:5d:a5:1b:a1:
                    14:5e:cc:3c:5a:c2:23:40:1d:db:ad:f9:6e:02:8c:
                    43:ac:fe:0f:ce:af:f7:71:d3:46:1d:bf:02:4b:1b:
                    9a:34:5d:5b:72:6e:bd:f7:38:d5:d7:eb:3a:44:38:
                    1a:23:a7:94:87:74:a2:1e:e5:33:bb:bc:71:3b:1c:
                    16:36:2e:63:6b:d4:7e:a2:ba:b5:d0:e8:a6:3b:86:
                    7b:55:3c:be:c5:20:49:85:94:8e:cb:5a:76:b2:1b:
                    95:07:25:97:83:a6:6d:f0:e2:59:5e:ac:96:a8:49:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:66:A4:E6:B9:7C:A5:63:1A:F2:30:15:4E:90:D3:D4:8E:D5:26:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/3670f5e8-841a-309c-868b-4fa1ef12c632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e/07c482f6-0e64-42ff-a503-75a85635277e.crl

            X509v3 Authority Key Identifier:
                keyid:9B:60:17:6F:03:4D:1C:65:68:81:31:15:5C:0D:5C:45:58:67:C1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/07c482f6-0e64-42ff-a503-75a85635277e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5f40:8100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d5:a9:cf:fb:54:06:46:4b:99:50:d1:79:88:8d:52:6e:72:
         be:b1:a8:ec:d5:61:8d:10:1a:49:9e:c0:74:42:46:6e:3b:7e:
         d4:ad:2a:e6:3b:27:d5:0a:2c:9a:ff:1a:73:39:35:62:30:eb:
         98:92:55:94:1d:77:71:0b:38:27:da:6c:a6:b8:ef:39:48:3b:
         8b:66:40:04:01:49:70:e4:12:b1:f2:9a:98:dc:11:70:9b:7a:
         f6:51:f6:db:f4:97:ce:a7:4d:10:ed:a0:ee:16:d3:80:2a:5f:
         1e:34:b6:80:62:c7:59:b9:87:d0:28:43:69:ba:60:6f:65:a7:
         0e:7b:8f:c7:4b:ff:f8:55:52:32:93:0a:d1:c4:c4:e2:d8:8a:
         70:17:90:c5:19:10:53:a4:ad:91:54:5e:1a:6f:59:be:d5:6b:
         b8:9c:79:ff:fa:fa:9e:b6:30:47:41:dc:89:ca:da:c9:28:ee:
         3a:5c:40:13:df:5e:35:8e:8b:d8:e4:f4:cd:09:55:a0:e0:7a:
         e8:ec:b6:ca:b6:c0:31:ae:bf:af:25:2f:70:d8:58:4d:b1:d7:
         a9:d4:0f:09:1c:e2:45:64:79:c5:b5:73:9e:25:a8:e3:bc:2d:
         b5:73:b1:a9:fd:41:79:1b:51:2a:04:56:f1:b6:19:fa:4c:8a:
         07:96:82:16
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoKn9OlrY8t1kE7qVgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDdjNDgyZjYtMGU2NC00MmZmLWE1MDMtNzVhODU2MzUy
NzdlMB4XDTI1MDYwMTAxMDA0OVoXDTI1MDgzMDAxMDA0OVowLzEtMCsGA1UEAxMk
NGZiNzVhZDQtZWQwYS00ZDM1LTk0OTItNzUyZTIyNWMzNmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP/CE0UJ8URZ9488YV3bGxVd3+Oe86GZdKo/
HgHZ40q63DGasku/zbIkxBokP1D82UEb58Rnm8kMwtkyZrE3bT7Bnj0xB1sO4V6x
fQlxUszSto8dKpvcjuC6hpq9me+qD1XzpUElUyL63ZX9F2LL2Ejc+e0isJIqoZB6
ORcNcOIEvwXLQ9nwXNM1RZ4N8kFsRl2lG6EUXsw8WsIjQB3brfluAoxDrP4Pzq/3
cdNGHb8CSxuaNF1bcm699zjV1+s6RDgaI6eUh3SiHuUzu7xxOxwWNi5ja9R+orq1
0OimO4Z7VTy+xSBJhZSOy1p2shuVByWXg6Zt8OJZXqyWqElJ8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDpmpOa5fKVjGvIwFU6Q09SO1SYvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wN2M0
ODJmNi0wZTY0LTQyZmYtYTUwMy03NWE4NTYzNTI3N2UvMzY3MGY1ZTgtODQxYS0z
MDljLTg2OGItNGZhMWVmMTJjNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDdjNDgyZjYtMGU2NC00MmZmLWE1
MDMtNzVhODU2MzUyNzdlLzA3YzQ4MmY2LTBlNjQtNDJmZi1hNTAzLTc1YTg1NjM1
Mjc3ZS5jcmwwHwYDVR0jBBgwFoAUm2AXbwNNHGVogTEVXA1cRVhnwSMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wN2M0ODJmNi0wZTY0LTQyZmYtYTUwMy03NWE4
NTYzNTI3N2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdfQIEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAH9Wpz/tUBkZLmVDReYiNUm5yvrGo7NVhjRAaSZ7AdEJGbjt+1K0q
5jsn1Qosmv8aczk1YjDrmJJVlB13cQs4J9psprjvOUg7i2ZABAFJcOQSsfKamNwR
cJt69lH22/SXzqdNEO2g7hbTgCpfHjS2gGLHWbmH0ChDabpgb2WnDnuPx0v/+FVS
MpMK0cTE4tiKcBeQxRkQU6StkVReGm9ZvtVruJx5//r6nrYwR0HcicraySjuOlxA
E99eNY6L2OT0zQlVoOB66Oy2yrbAMa6/ryUvcNhYTbHXqdQPCRziRWR5xbVzniWo
47wttXOxqf1BeRtRKgRW8bYZ+kyKB5aCFg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:32 2025 by rpki-client