Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/368846e3-400c-37dc-a43c-72e0ba5ecb98.roa
File:                     368846e3-400c-37dc-a43c-72e0ba5ecb98.roa (raw, json)
Hash identifier:          mBU5xE9DtKXGv0StBv21+MEmjNCsJx1UtQIgZwMZYyo=
Subject key identifier:   58:96:3D:F6:73:5E:85:A1:5A:71:DA:B4:62:F1:ED:F6:D3:FB:2A:E7
Certificate issuer:       /CN=268a5abb-c59d-4272-ae23-caa16eb3b4d2
Certificate serial:       010D0C9F432858499829CF47B4346A8204027200
Authority key identifier: 5B:8F:4E:BB:E0:A4:40:79:62:87:93:BD:35:44:F8:57:64:93:27:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/368846e3-400c-37dc-a43c-72e0ba5ecb98.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     398317
IP address blocks:        2607:5b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/268a5abb-c59d-4272-ae23-caa16eb3b4d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/268a5abb-c59d-4272-ae23-caa16eb3b4d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:cf:47:b4:34:6a:82:04:02:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268a5abb-c59d-4272-ae23-caa16eb3b4d2
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=587b9bb3-41dc-4ab0-8626-84fea6b61fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:1f:a8:05:83:1e:b7:6f:0c:e2:7b:63:c3:
                    bc:8f:c7:5c:9a:0b:15:8d:49:5d:f3:7b:39:c6:ba:
                    a3:41:9c:31:ca:8e:c8:dd:b8:41:a1:d0:1d:e0:c4:
                    17:5e:32:b0:be:f1:ee:13:4c:a7:e7:a1:62:a4:30:
                    15:3f:ec:df:df:8c:40:5c:41:bf:cb:5d:0c:ae:45:
                    57:e0:eb:05:e3:e1:ab:1f:2f:eb:e8:0e:cd:73:a1:
                    81:b6:af:4c:b7:32:3e:1e:d7:c7:43:83:e0:cb:3e:
                    b6:7e:a4:ff:59:1c:02:6e:9b:f1:08:20:1e:3c:56:
                    ab:d5:e2:14:89:b8:8d:9d:f6:4a:6e:5d:34:d7:ad:
                    8a:50:5c:75:e5:66:25:94:1b:8a:73:48:04:1b:00:
                    58:7c:84:20:bc:ad:f3:8a:fd:28:34:d2:6c:8f:d3:
                    e7:c3:8a:91:ec:96:a2:df:8f:4b:98:bc:b7:f2:b5:
                    15:0e:0f:c5:c3:e1:c8:ef:c4:a2:e6:09:40:80:e4:
                    d5:e0:2e:c7:ea:2a:c2:75:ba:71:f0:db:43:ce:14:
                    30:dc:e6:68:c7:8c:c6:28:ef:8d:3d:0a:80:5f:06:
                    d8:c4:5e:f9:80:5b:52:fb:b4:9a:b3:4a:a0:3e:73:
                    6a:09:7c:00:ea:69:93:56:47:0d:42:7e:13:4d:46:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:3D:F6:73:5E:85:A1:5A:71:DA:B4:62:F1:ED:F6:D3:FB:2A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/368846e3-400c-37dc-a43c-72e0ba5ecb98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/268a5abb-c59d-4272-ae23-caa16eb3b4d2.crl

            X509v3 Authority Key Identifier:
                keyid:5B:8F:4E:BB:E0:A4:40:79:62:87:93:BD:35:44:F8:57:64:93:27:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e6:02:a3:57:7c:46:44:de:49:a1:73:a0:3b:4a:43:45:d7:
         5b:21:da:33:ce:3e:bc:5a:8b:56:dd:69:88:b0:f2:53:10:81:
         f3:d8:8a:81:3c:2a:48:1c:30:4a:4a:88:85:ef:7c:8c:e6:7d:
         fb:96:96:4e:e4:b6:84:9c:15:15:55:e8:17:d5:65:df:13:87:
         c7:26:5b:e5:a1:4c:de:1a:37:68:59:6f:7f:79:ce:87:67:24:
         f0:aa:fb:2c:aa:df:fc:35:35:a2:c2:61:0a:9e:4e:8d:21:61:
         71:6e:88:99:e5:84:6d:25:57:0f:52:18:e9:e9:7d:3e:62:c7:
         5a:fa:09:bb:2f:d8:e9:fa:8e:41:72:de:1f:f9:43:d4:b3:d9:
         fa:47:e8:51:8b:f3:3f:19:72:2a:1d:c8:35:c2:ed:3d:56:27:
         5e:80:96:32:4b:b5:84:9f:73:5b:47:c9:11:81:62:0d:7c:13:
         e5:62:b8:ac:73:1d:7f:8f:38:f6:b6:9a:f7:4f:1b:63:c7:7e:
         16:0e:43:88:f6:b7:ba:bf:ff:42:9b:d3:b0:0e:42:47:20:a2:
         fe:d2:51:21:ff:b2:4c:6f:19:2a:fb:a7:e5:21:1c:cc:35:93:
         e8:77:bb:8a:b0:63:38:b7:ab:d0:4a:c5:0e:7b:44:c6:c4:bc:
         72:32:c3:df
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmYKc9HtDRqggQCcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjY4YTVhYmItYzU5ZC00MjcyLWFlMjMtY2FhMTZlYjNi
NGQyMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
NTg3YjliYjMtNDFkYy00YWIwLTg2MjYtODRmZWE2YjYxZmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9MfqAWDHrdvDOJ7Y8O8j8dcmgsVjUld83s5
xrqjQZwxyo7I3bhBodAd4MQXXjKwvvHuE0yn56FipDAVP+zf34xAXEG/y10MrkVX
4OsF4+GrHy/r6A7Nc6GBtq9MtzI+HtfHQ4Pgyz62fqT/WRwCbpvxCCAePFar1eIU
ibiNnfZKbl00162KUFx15WYllBuKc0gEGwBYfIQgvK3ziv0oNNJsj9Pnw4qR7Jai
349LmLy38rUVDg/Fw+HI78Si5glAgOTV4C7H6irCdbpx8NtDzhQw3OZox4zGKO+N
PQqAXwbYxF75gFtS+7Sas0qgPnNqCXwA6mmTVkcNQn4TTUZAFwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFiWPfZzXoWhWnHatGLx7fbT+yrnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNjhh
NWFiYi1jNTlkLTQyNzItYWUyMy1jYWExNmViM2I0ZDIvMzY4ODQ2ZTMtNDAwYy0z
N2RjLWE0M2MtNzJlMGJhNWVjYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjY4YTVhYmItYzU5ZC00MjcyLWFl
MjMtY2FhMTZlYjNiNGQyLzI2OGE1YWJiLWM1OWQtNDI3Mi1hZTIzLWNhYTE2ZWIz
YjRkMi5jcmwwHwYDVR0jBBgwFoAUW49Ou+CkQHlih5O9NUT4V2STJyIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNjhhNWFiYi1jNTlkLTQyNzItYWUyMy1jYWEx
NmViM2I0ZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdbQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAZ5gKjV3xGRN5JoXOgO0pDRddbIdozzj68WotW3WmIsPJTEIHz2IqB
PCpIHDBKSoiF73yM5n37lpZO5LaEnBUVVegX1WXfE4fHJlvloUzeGjdoWW9/ec6H
ZyTwqvssqt/8NTWiwmEKnk6NIWFxboiZ5YRtJVcPUhjp6X0+Ysda+gm7L9jp+o5B
ct4f+UPUs9n6R+hRi/M/GXIqHcg1wu09VidegJYyS7WEn3NbR8kRgWINfBPlYris
cx1/jzj2tpr3Txtjx34WDkOI9re6v/9Cm9OwDkJHIKL+0lEh/7JMbxkq+6flIRzM
NZPod7uKsGM4t6vQSsUOe0TGxLxyMsPf
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:29:38 2025 by rpki-client