Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa
File:                     aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa (raw, json)
Hash identifier:          KOqOxbqkdrp1NRykTxc2Fxcii5CKhhWCxaToYMigfs4=
Subject key identifier:   BF:E9:1F:22:C6:24:F6:94:51:B4:4C:C9:48:2F:2C:80:0D:15:CA:07
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A96369862CDAAAAEC1CE86680
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     400040
IP address blocks:        2001:438:fffe:e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:98:62:cd:aa:aa:ec:1c:e8:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=93273723-cb16-40df-a6ab-044bede9659c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:3d:85:9d:48:c1:5c:64:b4:4a:34:07:6a:
                    87:12:71:8c:b6:f8:0e:d4:32:62:91:8f:65:9e:1e:
                    62:a5:0f:d1:66:88:15:a0:1f:c9:6b:56:bd:8a:07:
                    3c:42:3f:8b:ba:3c:92:ee:e8:34:a5:91:9c:55:fa:
                    f0:3e:37:cc:a0:ac:0b:80:c2:ae:cd:49:2a:57:fa:
                    1d:69:22:f8:69:81:63:0b:dc:60:05:af:f3:14:2c:
                    26:1d:92:9d:2f:15:34:2d:f2:1c:24:77:c9:99:68:
                    17:60:97:44:b8:5e:1a:e6:f7:e2:6c:a9:bf:75:23:
                    61:e1:54:e6:10:0d:62:2c:cd:71:53:ec:04:fa:bb:
                    b8:6f:2f:4f:d0:be:7e:86:b0:f1:26:f2:05:74:1a:
                    50:95:ca:26:07:26:38:d3:ff:cf:36:b7:8f:ff:b5:
                    3a:66:ec:3e:8a:c6:c1:44:dc:59:b9:9f:1b:c2:76:
                    f5:b4:a4:50:03:da:3f:e5:52:e4:99:15:9b:d2:f1:
                    a4:77:b2:47:ff:be:55:57:01:33:04:f8:a7:b3:d7:
                    15:c2:d6:2f:a6:5d:f1:9e:ae:bf:f0:79:8b:12:c3:
                    8d:91:4f:23:49:98:bb:42:d7:98:4d:f2:d3:f7:dd:
                    58:d0:41:cc:49:62:62:3c:56:fd:22:e2:b2:b7:1c:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E9:1F:22:C6:24:F6:94:51:B4:4C:C9:48:2F:2C:80:0D:15:CA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa62e8f4-6631-3b88-b288-2e2678cb2a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:fffe:e::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:47:20:cc:b3:e1:f5:a5:b2:55:8d:33:ed:8d:52:98:33:9c:
         cd:ec:e6:18:4b:b9:57:ad:0d:1d:20:8f:29:97:5c:d5:64:02:
         b7:14:1b:ac:3b:24:d5:d9:30:f7:60:76:b5:79:db:16:68:14:
         f8:69:6c:04:19:53:22:bc:6f:fb:80:d5:12:bc:ae:37:1f:08:
         4a:82:1b:2b:05:0f:a3:d0:2f:06:a2:a9:f9:0d:73:4e:50:66:
         cb:af:bc:f1:c2:03:b2:52:e8:00:cd:65:58:cd:40:66:3c:a2:
         45:f4:f7:39:c6:5a:7e:26:c6:f9:2c:22:ee:2e:ba:4b:c4:2e:
         4a:0c:f7:b4:35:30:b8:c0:d9:06:e2:2d:a1:b2:1e:e5:a9:43:
         8a:de:3b:38:42:fe:d4:21:c0:42:4e:df:30:0d:20:36:e7:8b:
         e7:74:4d:33:8e:4d:35:75:fd:1f:52:ed:11:9e:ee:7e:1a:42:
         0c:9b:0d:76:78:c2:4b:38:e4:6f:79:46:44:18:45:9e:f0:e9:
         97:01:ee:3f:e7:09:ab:e0:4c:7d:aa:0a:3b:4d:29:a4:46:90:
         49:fe:93:be:e7:5f:2d:5c:d6:a4:3d:f2:61:40:78:a9:c6:d9:
         c5:32:d1:e6:4c:af:7f:2a:80:fa:a7:23:17:cf:2b:a1:86:11:
         2f:40:04:3b
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEqWNphizaqq7BzoZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
OTMyNzM3MjMtY2IxNi00MGRmLWE2YWItMDQ0YmVkZTk2NTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu709hZ1IwVxktEo0B2qHEnGMtvgO1DJikY9l
nh5ipQ/RZogVoB/Ja1a9igc8Qj+LujyS7ug0pZGcVfrwPjfMoKwLgMKuzUkqV/od
aSL4aYFjC9xgBa/zFCwmHZKdLxU0LfIcJHfJmWgXYJdEuF4a5vfibKm/dSNh4VTm
EA1iLM1xU+wE+ru4by9P0L5+hrDxJvIFdBpQlcomByY40//PNreP/7U6Zuw+isbB
RNxZuZ8bwnb1tKRQA9o/5VLkmRWb0vGkd7JH/75VVwEzBPins9cVwtYvpl3xnq6/
8HmLEsONkU8jSZi7QteYTfLT991Y0EHMSWJiPFb9IuKytxwPtwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFL/pHyLGJPaUUbRMyUgvLIANFcoHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYWE2MmU4ZjQtNjYzMS0z
Yjg4LWIyODgtMmUyNjc4Y2IyYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEOP/+
AA4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAwUcgzLPh9aWyVY0z7Y1SmDOczezmGEu5V60NHSCPKZdc1WQC
txQbrDsk1dkw92B2tXnbFmgU+GlsBBlTIrxv+4DVEryuNx8ISoIbKwUPo9AvBqKp
+Q1zTlBmy6+88cIDslLoAM1lWM1AZjyiRfT3OcZafibG+Swi7i66S8QuSgz3tDUw
uMDZBuItobIe5alDit47OEL+1CHAQk7fMA0gNueL53RNM45NNXX9H1LtEZ7ufhpC
DJsNdnjCSzjkb3lGRBhFnvDplwHuP+cJq+BMfaoKO00ppEaQSf6TvudfLVzWpD3y
YUB4qcbZxTLR5kyvfyqA+qcjF88roYYRL0AEOw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:40 2025 by rpki-client