Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa
File:                     d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa (raw, json)
Hash identifier:          ed2UaJXSJ6mVbzEMg2OAWvQkSbOlnKZP/rS0YbptzmI=
Subject key identifier:   63:FE:72:05:7E:1C:62:90:46:CD:FB:DB:58:92:C1:82:C3:C5:33:0E
Certificate issuer:       /CN=3878fd50-eae1-4b38-a142-8eff8910579b
Certificate serial:       010D0C9F4328584A78E5FC260B002C21EC7C17C0
Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     14807
IP address blocks:        2607:b7c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e5:fc:26:0b:00:2c:21:ec:7c:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=4fa79ae5-955d-4c0a-b4dc-8d5c145a2537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:78:10:0a:b5:47:33:23:52:66:c5:b7:00:
                    0d:fb:3a:b2:6e:fa:e4:29:8d:1c:59:e6:9b:09:d3:
                    b9:2f:1e:75:af:0d:49:de:ef:38:dc:ba:b5:a0:4a:
                    2e:ce:a0:38:95:18:66:2e:3d:99:7e:00:ec:8f:49:
                    03:d8:43:da:1b:c7:dd:bc:26:8b:a4:52:7b:89:91:
                    e0:a0:fe:50:26:d8:56:ef:98:47:63:36:0d:44:6f:
                    f3:d9:4c:d4:3c:d1:a1:35:6c:35:ea:d5:73:e4:64:
                    66:13:0e:58:f6:e2:22:c0:49:d5:63:52:f3:81:bc:
                    5b:c0:b3:52:1f:eb:00:49:9f:a7:93:6e:10:95:1a:
                    85:ac:ad:46:43:21:6a:82:9b:6c:24:00:da:7b:d9:
                    df:0b:5d:44:6e:2b:f8:03:0a:87:1f:8d:51:f0:02:
                    7c:12:5e:64:fa:38:b4:1b:ba:a9:4e:b4:83:30:93:
                    e5:19:47:ed:d7:6b:1e:10:44:c6:10:05:3a:23:1e:
                    95:e2:e3:21:3a:01:71:b8:7d:86:e4:35:0b:50:cb:
                    b6:24:38:df:0a:f5:82:a8:e2:f2:2b:b1:c8:f8:2c:
                    63:7f:a0:3a:19:90:80:e3:d1:21:b7:ac:1c:88:5a:
                    b5:1b:ea:5c:61:bc:9e:21:cf:3b:63:c9:61:08:9c:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FE:72:05:7E:1C:62:90:46:CD:FB:DB:58:92:C1:82:C3:C5:33:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl

            X509v3 Authority Key Identifier:
                keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b2:51:61:12:95:6c:22:a8:1d:ab:eb:ac:cc:49:72:03:1d:
         e8:d2:e1:e7:a6:72:24:8f:6e:7a:2f:eb:08:78:ea:f4:63:8b:
         0d:d1:6a:23:53:74:0d:62:aa:33:64:3d:dd:11:ac:20:29:07:
         0e:16:fa:67:15:65:79:54:2b:21:53:1c:2e:ae:dd:20:c9:c2:
         2c:61:fa:63:c8:11:d9:8b:bf:ab:c7:59:26:8d:99:b1:8a:e4:
         52:1c:59:0d:9e:34:12:47:77:8f:0b:a0:ce:0f:48:03:bb:08:
         c9:70:92:55:bd:e5:00:11:cf:9b:49:da:16:8c:53:b8:04:eb:
         2d:a3:f3:5e:b9:ca:c1:8a:4a:0e:68:e1:82:8b:f5:fe:61:2f:
         e6:83:1c:06:09:30:1a:50:c4:8e:10:47:fc:63:81:92:ae:88:
         fd:93:0c:42:ff:12:5f:32:e7:f0:4c:bf:61:e1:ef:31:db:db:
         8e:84:77:c1:35:2b:c5:b6:37:b1:bc:18:50:a8:09:34:aa:6c:
         a9:6d:51:fe:d8:4d:4e:3d:f4:22:3a:c9:15:d5:91:87:ad:0a:
         9b:d7:57:71:03:a3:da:6c:ef:fc:03:f1:89:a1:f1:df:69:76:
         2c:8f:99:2f:3e:d3:0b:a2:4f:77:07:0e:64:65:2f:99:b0:d1:
         e3:98:84:ab
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp45fwmCwAsIex8F8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg3OGZkNTAtZWFlMS00YjM4LWExNDItOGVmZjg5MTA1
NzliMB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk
NGZhNzlhZTUtOTU1ZC00YzBhLWI0ZGMtOGQ1YzE0NWEyNTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6V4EAq1RzMjUmbFtwAN+zqybvrkKY0cWeab
CdO5Lx51rw1J3u843Lq1oEouzqA4lRhmLj2ZfgDsj0kD2EPaG8fdvCaLpFJ7iZHg
oP5QJthW75hHYzYNRG/z2UzUPNGhNWw16tVz5GRmEw5Y9uIiwEnVY1LzgbxbwLNS
H+sASZ+nk24QlRqFrK1GQyFqgptsJADae9nfC11Ebiv4AwqHH41R8AJ8El5k+ji0
G7qpTrSDMJPlGUft12seEETGEAU6Ix6V4uMhOgFxuH2G5DULUMu2JDjfCvWCqOLy
K7HI+Cxjf6A6GZCA49Eht6wciFq1G+pcYbyeIc87Y8lhCJza6wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGP+cgV+HGKQRs3721iSwYLDxTMOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zODc4
ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZmODkxMDU3OWIvZDg4ZjE5ZGYtNzdmNS0z
ZGM1LWE0OGEtOWIxNGM1YzllNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzg3OGZkNTAtZWFlMS00YjM4LWEx
NDItOGVmZjg5MTA1NzliLzM4NzhmZDUwLWVhZTEtNGIzOC1hMTQyLThlZmY4OTEw
NTc5Yi5jcmwwHwYDVR0jBBgwFoAUQMXDZ1KqbdY9NOCuMynjdcOGqMEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zODc4ZmQ1MC1lYWUxLTRiMzgtYTE0Mi04ZWZm
ODkxMDU3OWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge3wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBsslFhEpVsIqgdq+uszElyAx3o0uHnpnIkj256L+sIeOr0Y4sN0Woj
U3QNYqozZD3dEawgKQcOFvpnFWV5VCshUxwurt0gycIsYfpjyBHZi7+rx1kmjZmx
iuRSHFkNnjQSR3ePC6DOD0gDuwjJcJJVveUAEc+bSdoWjFO4BOsto/NeucrBikoO
aOGCi/X+YS/mgxwGCTAaUMSOEEf8Y4GSroj9kwxC/xJfMufwTL9h4e8x29uOhHfB
NSvFtjexvBhQqAk0qmypbVH+2E1OPfQiOskV1ZGHrQqb11dxA6PabO/8A/GJofHf
aXYsj5kvPtMLok93Bw5kZS+ZsNHjmISr
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:46 2025 by rpki-client