Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/7ed31b16-52bd-3e5b-b31b-4a4b18c02fb5.roa
File:                     7ed31b16-52bd-3e5b-b31b-4a4b18c02fb5.roa (raw, json)
Hash identifier:          iGKrCnSMieYknlW5TLsG5SOC9Dmg0I2CbhvtETT43D8=
Subject key identifier:   50:79:08:DA:C5:EB:0C:C4:5C:58:D0:9A:2B:C3:9C:F6:EC:ED:C7:E2
Certificate issuer:       /CN=41911571-6038-4a97-80ce-9611c78f050e
Certificate serial:       010D0C9F4328584A9BCB6B0479EE8AA217F2E680
Authority key identifier: DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/7ed31b16-52bd-3e5b-b31b-4a4b18c02fb5.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     33574
IP address blocks:        2607:50c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:6b:04:79:ee:8a:a2:17:f2:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41911571-6038-4a97-80ce-9611c78f050e
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=3ffcd861-fb4d-48f9-b918-e78050bc0f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:dd:61:5d:49:86:40:bd:88:08:a8:21:2a:7e:
                    d7:43:bf:d6:d4:d1:f6:bc:d7:76:c5:e6:59:3d:55:
                    bd:4f:25:3b:ac:b9:01:0d:75:f6:84:67:34:3e:54:
                    1d:b7:29:2e:78:98:ba:58:81:88:24:86:34:1b:52:
                    fc:0f:9e:2c:10:89:05:1c:ba:ba:b9:36:6a:13:db:
                    18:6a:13:ae:de:44:73:fd:fe:9d:b4:27:5c:a2:52:
                    af:70:48:59:81:fb:80:f6:0f:a8:14:33:b9:e8:b7:
                    69:68:17:30:8c:82:e2:66:a6:19:9f:3e:c6:59:24:
                    50:b7:c8:8f:e0:e8:89:f1:c3:93:02:60:db:40:55:
                    ff:d3:95:ed:2c:3c:e1:e0:58:ca:e9:aa:93:84:d4:
                    39:fb:70:8f:28:32:6b:2a:15:a8:b9:57:95:29:2b:
                    7e:bf:18:13:8b:7f:60:43:b9:38:09:68:6d:72:9c:
                    ff:d8:e8:ae:b2:df:2f:29:d2:56:4c:41:33:c0:03:
                    3b:ab:c5:a1:95:b8:76:7a:69:31:45:89:62:54:2f:
                    75:21:3d:ac:02:ea:cb:3a:32:46:6d:10:96:63:cd:
                    b3:3b:7f:1d:5f:60:41:39:f4:02:97:0c:86:eb:1b:
                    c1:23:cd:29:b9:6d:e6:7c:e4:da:a5:b5:9e:f2:2b:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:79:08:DA:C5:EB:0C:C4:5C:58:D0:9A:2B:C3:9C:F6:EC:ED:C7:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/7ed31b16-52bd-3e5b-b31b-4a4b18c02fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl

            X509v3 Authority Key Identifier:
                keyid:DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:50c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e6:94:ac:82:f4:75:79:d7:fd:c4:ef:8e:bc:7a:c3:bf:9d:
         8a:b9:7a:48:f3:e4:09:92:e8:85:7d:53:a0:0b:34:73:e8:8a:
         1a:57:db:fc:25:95:22:15:c1:65:55:54:43:6f:12:71:f5:ed:
         a9:35:79:89:23:03:e6:b5:6a:22:67:90:08:23:ca:87:4f:21:
         08:27:0f:f8:0e:66:61:4f:45:93:91:68:d3:15:53:da:f8:ed:
         87:09:20:80:c3:fc:8a:a1:80:bf:30:23:b2:73:a1:9b:fa:0b:
         58:46:ef:ba:24:a8:7b:d9:ac:d7:e1:8f:9f:da:1f:ee:e1:14:
         94:e5:4c:44:88:d0:03:d4:41:7b:5d:7a:21:0a:02:e9:50:c7:
         f5:79:03:6a:15:21:f0:87:ec:a0:dd:b7:f9:e6:8c:3f:81:fe:
         5e:a5:b1:c9:26:a4:ba:14:53:4e:d5:eb:c0:06:4a:38:93:12:
         18:07:37:b6:41:26:20:e3:8e:d1:2f:e8:fa:b6:0f:4a:65:70:
         38:a6:b0:25:3f:23:d6:21:b2:f2:84:78:80:2b:65:92:97:29:
         a0:6f:db:3c:22:ea:02:7e:59:e0:0d:b4:4f:74:57:7f:c8:bc:
         c1:d2:6f:44:05:e0:fa:ef:ab:88:3a:44:4a:24:1d:ec:67:bd:
         ec:de:90:dc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqby2sEee6Kohfy5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE5MTE1NzEtNjAzOC00YTk3LTgwY2UtOTYxMWM3OGYw
NTBlMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk
M2ZmY2Q4NjEtZmI0ZC00OGY5LWI5MTgtZTc4MDUwYmMwZjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA991hXUmGQL2ICKghKn7XQ7/W1NH2vNd2xeZZ
PVW9TyU7rLkBDXX2hGc0PlQdtykueJi6WIGIJIY0G1L8D54sEIkFHLq6uTZqE9sY
ahOu3kRz/f6dtCdcolKvcEhZgfuA9g+oFDO56LdpaBcwjILiZqYZnz7GWSRQt8iP
4OiJ8cOTAmDbQFX/05XtLDzh4FjK6aqThNQ5+3CPKDJrKhWouVeVKSt+vxgTi39g
Q7k4CWhtcpz/2Oiust8vKdJWTEEzwAM7q8Whlbh2emkxRYliVC91IT2sAurLOjJG
bRCWY82zO38dX2BBOfQClwyG6xvBI80puW3mfOTapbWe8iuYKwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFB5CNrF6wzEXFjQmivDnPbs7cfiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MTkx
MTU3MS02MDM4LTRhOTctODBjZS05NjExYzc4ZjA1MGUvN2VkMzFiMTYtNTJiZC0z
ZTViLWIzMWItNGE0YjE4YzAyZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDE5MTE1NzEtNjAzOC00YTk3LTgw
Y2UtOTYxMWM3OGYwNTBlLzQxOTExNTcxLTYwMzgtNGE5Ny04MGNlLTk2MTFjNzhm
MDUwZS5jcmwwHwYDVR0jBBgwFoAU33DVtIgKccACLNhbw5BI3v+bU2kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MTkxMTU3MS02MDM4LTRhOTctODBjZS05NjEx
Yzc4ZjA1MGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdQwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCz5pSsgvR1edf9xO+OvHrDv52KuXpI8+QJkuiFfVOgCzRz6IoaV9v8
JZUiFcFlVVRDbxJx9e2pNXmJIwPmtWoiZ5AII8qHTyEIJw/4DmZhT0WTkWjTFVPa
+O2HCSCAw/yKoYC/MCOyc6Gb+gtYRu+6JKh72azX4Y+f2h/u4RSU5UxEiNAD1EF7
XXohCgLpUMf1eQNqFSHwh+yg3bf55ow/gf5epbHJJqS6FFNO1evABko4kxIYBze2
QSYg447RL+j6tg9KZXA4prAlPyPWIbLyhHiAK2WSlymgb9s8IuoCflngDbRPdFd/
yLzB0m9EBeD676uIOkRKJB3sZ73s3pDc
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:38 2025 by rpki-client