Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
File:                     b7ba221b-48ce-3f30-a243-211b86357982.roa (raw, json)
Hash identifier:          6h4QJMcTnVnNbdCjQ5vjlAopyXh8HV2SNVfb+cVnvkE=
Subject key identifier:   68:9E:7F:50:6A:84:52:42:4F:C6:F5:D0:B5:3E:FC:BB:17:B5:07:7E
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F43285849F17FD31C9FA6CC6DB2174588
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2607:d540:fc0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d3:1c:9f:a6:cc:6d:b2:17:45:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=4fb18de5-e378-42be-a4a2-7efe97a03c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:70:86:49:ba:5f:fa:89:cf:5c:6d:a8:a8:
                    fc:40:72:e7:b9:ea:32:40:0a:24:c1:fa:c9:80:9e:
                    4b:4c:f0:62:d3:04:1b:6a:33:8c:cf:14:8d:e1:7c:
                    70:e5:cd:91:a0:da:c9:40:46:fa:7b:d4:a6:68:d9:
                    eb:d7:46:d5:a2:3f:65:b4:18:68:1a:c3:d3:30:ae:
                    6a:6c:a4:07:e5:cc:27:da:9e:66:a6:3a:29:00:0e:
                    6a:91:41:08:c8:01:8a:c3:e7:91:22:24:4b:69:31:
                    82:83:4d:56:cd:01:69:ff:64:c4:e4:a5:18:cd:b4:
                    03:60:e3:37:2d:ba:be:52:f2:52:12:23:9f:e7:14:
                    37:91:20:b6:30:04:ee:38:4b:2d:80:50:6f:d7:3c:
                    da:18:23:20:71:2d:4e:b8:a1:40:23:79:75:a2:71:
                    6f:20:b5:b3:7f:03:f5:14:7a:fb:01:12:bd:96:6d:
                    6a:8d:8a:a2:80:a4:f4:b9:4f:af:80:ec:1a:b9:c0:
                    ca:6f:f5:fa:cc:6f:a1:5a:e9:96:f2:60:70:da:eb:
                    52:4a:6b:64:02:be:d1:09:14:a7:ff:5f:50:ec:06:
                    7a:e0:40:93:3b:3e:16:66:ce:39:f7:68:e5:b7:00:
                    37:15:e4:2a:2f:d0:f3:03:eb:92:f3:04:8d:ae:54:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9E:7F:50:6A:84:52:42:4F:C6:F5:D0:B5:3E:FC:BB:17:B5:07:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/b7ba221b-48ce-3f30-a243-211b86357982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540:fc0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:a3:b4:5e:6d:66:50:97:d9:05:2a:c1:80:0a:7a:ed:a9:8e:
         30:dd:d3:b0:91:98:ae:2d:d4:85:37:19:f3:1c:0c:2a:77:cf:
         09:e0:40:33:9c:71:a6:06:10:2a:26:d4:39:e2:95:7e:16:4d:
         4e:2b:47:cb:9e:45:84:fd:af:19:77:b4:c7:7a:f1:57:ad:19:
         43:a2:62:c7:92:29:21:af:7e:02:7f:6e:14:a3:05:8d:2e:9e:
         1d:d4:4d:17:96:7d:9a:7a:f5:33:1c:e0:27:d1:f7:6f:4b:79:
         14:7d:9f:42:47:5e:03:61:7b:c5:b6:40:5c:0e:10:e7:0f:1d:
         18:ea:35:54:0b:12:2b:61:c9:78:c0:b2:66:e9:e5:2e:c2:f4:
         0f:0e:a1:08:47:32:44:5b:2e:15:cc:ff:fc:a3:17:e9:81:ff:
         20:3f:ef:bd:3d:fa:b5:c0:ed:a8:b3:8d:52:df:cf:aa:c9:fb:
         a0:70:85:ac:af:1f:c7:7d:f7:ea:c5:f1:dd:e2:b9:ca:18:8b:
         1e:46:c9:30:a3:14:83:cc:cb:f7:69:09:67:01:cf:ea:af:7c:
         aa:e5:8c:18:b9:92:e0:34:fb:34:54:a5:b2:ee:05:dc:36:dc:
         e7:c5:70:74:ea:82:cc:30:16:f1:e7:86:47:55:82:9b:9c:b2:
         a9:83:31:83
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxf9Mcn6bMbbIXRYgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ4MGRhYTUtNzlkYy00YzJhLTg4NzktMjQ4YTNmM2Uz
MzljMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
NGZiMThkZTUtZTM3OC00MmJlLWE0YTItN2VmZTk3YTAzYzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraZwhkm6X/qJz1xtqKj8QHLnueoyQAokwfrJ
gJ5LTPBi0wQbajOMzxSN4Xxw5c2RoNrJQEb6e9SmaNnr10bVoj9ltBhoGsPTMK5q
bKQH5cwn2p5mpjopAA5qkUEIyAGKw+eRIiRLaTGCg01WzQFp/2TE5KUYzbQDYOM3
Lbq+UvJSEiOf5xQ3kSC2MATuOEstgFBv1zzaGCMgcS1OuKFAI3l1onFvILWzfwP1
FHr7ARK9lm1qjYqigKT0uU+vgOwaucDKb/X6zG+hWumW8mBw2utSSmtkAr7RCRSn
/19Q7AZ64ECTOz4WZs4592jltwA3FeQqL9DzA+uS8wSNrlTS0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGief1BqhFJCT8b10LU+/LsXtQd+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgw
ZGFhNS03OWRjLTRjMmEtODg3OS0yNDhhM2YzZTMzOWMvYjdiYTIyMWItNDhjZS0z
ZjMwLWEyNDMtMjExYjg2MzU3OTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ4MGRhYTUtNzlkYy00YzJhLTg4
NzktMjQ4YTNmM2UzMzljLzRkODBkYWE1LTc5ZGMtNGMyYS04ODc5LTI0OGEzZjNl
MzM5Yy5jcmwwHwYDVR0jBBgwFoAURSS0Po4TMO3Vlg05oMUNPZbAVvowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgwZGFhNS03OWRjLTRjMmEtODg3OS0yNDhh
M2YzZTMzOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgfVQA/A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANijtF5tZlCX2QUqwYAKeu2pjjDd07CRmK4t1IU3GfMcDCp3zwng
QDOccaYGECom1DnilX4WTU4rR8ueRYT9rxl3tMd68VetGUOiYseSKSGvfgJ/bhSj
BY0unh3UTReWfZp69TMc4CfR929LeRR9n0JHXgNhe8W2QFwOEOcPHRjqNVQLEith
yXjAsmbp5S7C9A8OoQhHMkRbLhXM//yjF+mB/yA/7709+rXA7aizjVLfz6rJ+6Bw
hayvH8d99+rF8d3iucoYix5GyTCjFIPMy/dpCWcBz+qvfKrljBi5kuA0+zRUpbLu
Bdw23OfFcHTqgswwFvHnhkdVgpucsqmDMYM=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:26:13 2025 by rpki-client