Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa
File:                     ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa (raw, json)
Hash identifier:          aTWegZ5pe8ArF87jHdCuqQN4KcQ//3I5pzBv5QYFXCI=
Subject key identifier:   53:DA:0C:8A:74:B7:F4:01:9B:9E:17:AA:79:24:CA:CC:33:DD:A0:A0
Certificate issuer:       /CN=00c081d9-ab0e-4270-b0f1-227e8a595105
Certificate serial:       010D0C9F4328584AA85BBC6D3C35BFDEB3E6F600
Authority key identifier: EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     401315
IP address blocks:        2620:cd:6000::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:bc:6d:3c:35:bf:de:b3:e6:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c081d9-ab0e-4270-b0f1-227e8a595105
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=a2bddd1e-b456-44e5-8fbd-fd0b3e817a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:c5:63:e7:6a:3a:a0:42:d2:5a:2d:0b:05:
                    bf:0b:91:e4:d2:21:fa:7e:6e:6a:90:92:39:f7:f5:
                    a8:71:74:40:f1:77:d3:9c:a6:40:ce:a6:f0:a3:bc:
                    b4:5e:e9:6c:5d:dc:64:90:9c:ed:1d:e3:23:f1:70:
                    c1:42:29:02:f1:de:10:42:d0:27:4c:15:4b:17:f2:
                    ca:3a:65:9e:28:04:c3:df:ea:25:cd:38:a3:db:eb:
                    86:34:46:ed:61:79:75:e5:84:f3:89:80:6c:9a:94:
                    a7:8b:14:1b:af:9f:b6:2b:9d:af:5c:26:52:db:e7:
                    2c:96:89:4b:c5:f4:32:49:75:ff:1e:a6:19:3e:c0:
                    32:12:77:4d:b2:71:d2:c6:93:fd:86:d1:0a:0a:df:
                    78:fe:02:a6:93:10:c1:87:fa:6d:d9:82:e8:c9:97:
                    98:5e:4f:0b:ce:76:a0:bf:31:6b:61:7c:64:f5:c3:
                    24:37:a1:f1:b0:62:ee:d5:f2:97:4b:e9:82:93:cd:
                    c7:5a:b0:59:36:b2:ab:9d:e1:cd:fd:3d:6f:e2:76:
                    6d:8b:b5:e7:2a:2e:ff:b2:2b:7f:12:70:73:55:31:
                    84:b3:8d:f6:19:6d:b7:75:c9:b3:1a:dd:75:e5:94:
                    98:32:52:88:88:0f:33:40:19:2e:e9:d8:fe:1f:f4:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DA:0C:8A:74:B7:F4:01:9B:9E:17:AA:79:24:CA:CC:33:DD:A0:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/ddb7a7ad-09ce-313a-be0b-7e15459882fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.crl

            X509v3 Authority Key Identifier:
                keyid:EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:cd:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ea:73:22:0b:81:8b:05:a1:2f:52:65:24:f5:89:ef:3c:99:
         57:3a:d7:c3:bc:0d:73:d9:50:85:24:d4:3c:29:56:3c:4f:45:
         58:61:24:7c:e9:61:57:d7:02:85:6d:94:3d:31:b8:2a:44:15:
         01:59:f5:f0:e8:6a:87:ab:75:af:b6:79:11:52:5e:c3:fe:2f:
         2f:c7:9f:fc:f6:47:2f:26:41:f5:90:26:34:ba:d2:a7:05:e6:
         59:29:11:b6:e3:6c:d2:df:a2:dd:17:bf:d5:65:06:b8:f7:ed:
         9b:18:09:d1:3f:aa:18:24:6c:f2:72:b1:1b:db:f7:80:dc:a5:
         65:5c:27:83:45:f3:0a:57:a3:c0:25:c0:48:8f:ed:04:14:55:
         e1:59:d2:a8:a0:f8:02:99:fb:53:e4:96:92:df:d1:2c:3d:8d:
         fb:07:c6:b4:e6:a0:53:b4:d3:47:12:1f:31:ec:25:7e:4b:45:
         dd:5a:b8:86:6a:db:9d:84:3e:fc:2e:7b:21:23:50:74:89:09:
         0d:74:5c:fd:89:df:9c:7d:08:7d:79:86:03:0d:a0:39:8b:47:
         38:a4:2d:eb:17:dd:bc:31:ce:75:e2:34:13:bb:f5:32:72:92:
         80:d2:72:f0:1c:52:0c:59:39:0a:74:5f:77:75:ba:a9:55:02:
         c2:02:6f:fa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqoW7xtPDW/3rPm9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBjMDgxZDktYWIwZS00MjcwLWIwZjEtMjI3ZThhNTk1
MTA1MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
YTJiZGRkMWUtYjQ1Ni00NGU1LThmYmQtZmQwYjNlODE3YThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/XFY+dqOqBC0lotCwW/C5Hk0iH6fm5qkJI5
9/WocXRA8XfTnKZAzqbwo7y0XulsXdxkkJztHeMj8XDBQikC8d4QQtAnTBVLF/LK
OmWeKATD3+olzTij2+uGNEbtYXl15YTziYBsmpSnixQbr5+2K52vXCZS2+cslolL
xfQySXX/HqYZPsAyEndNsnHSxpP9htEKCt94/gKmkxDBh/pt2YLoyZeYXk8Lznag
vzFrYXxk9cMkN6HxsGLu1fKXS+mCk83HWrBZNrKrneHN/T1v4nZti7XnKi7/sit/
EnBzVTGEs432GW23dcmzGt115ZSYMlKIiA8zQBku6dj+H/SV1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFPaDIp0t/QBm54Xqnkkyswz3aCgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMGMw
ODFkOS1hYjBlLTQyNzAtYjBmMS0yMjdlOGE1OTUxMDUvZGRiN2E3YWQtMDljZS0z
MTNhLWJlMGItN2UxNTQ1OTg4MmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDBjMDgxZDktYWIwZS00MjcwLWIw
ZjEtMjI3ZThhNTk1MTA1LzAwYzA4MWQ5LWFiMGUtNDI3MC1iMGYxLTIyN2U4YTU5
NTEwNS5jcmwwHwYDVR0jBBgwFoAU60jst+uTYGdIj0SDtV3OMVykfKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMGMwODFkOS1hYjBlLTQyNzAtYjBmMS0yMjdl
OGE1OTUxMDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAzWAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAnqcyILgYsFoS9SZST1ie88mVc618O8DXPZUIUk1DwpVjxPRVhh
JHzpYVfXAoVtlD0xuCpEFQFZ9fDoaoerda+2eRFSXsP+Ly/Hn/z2Ry8mQfWQJjS6
0qcF5lkpEbbjbNLfot0Xv9VlBrj37ZsYCdE/qhgkbPJysRvb94DcpWVcJ4NF8wpX
o8AlwEiP7QQUVeFZ0qig+AKZ+1PklpLf0Sw9jfsHxrTmoFO000cSHzHsJX5LRd1a
uIZq252EPvwueyEjUHSJCQ10XP2J35x9CH15hgMNoDmLRzikLesX3bwxznXiNBO7
9TJykoDScvAcUgxZOQp0X3d1uqlVAsICb/o=
-----END CERTIFICATE-----
Generated at Thu Aug 7 12:56:05 2025 by rpki-client