Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/ddaf4074-e338-3a14-a27a-2a6fd89aad7d.roa
File:                     ddaf4074-e338-3a14-a27a-2a6fd89aad7d.roa (raw, json)
Hash identifier:          Pwfn5WQpjm8WF4jD0i+8c6yR5zkMlQaY6zzBx1ZY2o0=
Subject key identifier:   27:64:2C:83:7F:AA:90:CE:15:95:F1:B8:D2:76:6E:A2:16:06:21:79
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F4328584A90A0AEF7E4AED2DF71F1EC00
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/ddaf4074-e338-3a14-a27a-2a6fd89aad7d.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     398351
IP address blocks:        2602:80a:2000::/48 maxlen: 48
                          2602:80a:2004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:ae:f7:e4:ae:d2:df:71:f1:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=55cfbada-ca2a-4358-9399-5c29d263044d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:41:4e:6b:7d:7f:a5:24:04:b8:e2:c5:57:
                    a0:64:10:39:6b:74:81:a9:d9:d5:e9:a6:1f:8d:42:
                    11:59:32:2c:a2:06:4f:e7:60:a2:ce:d4:dc:3e:07:
                    72:c7:9b:8a:1f:83:af:e6:09:c8:ad:4a:eb:af:a0:
                    0a:a1:e7:0b:97:37:ee:a9:1d:5f:44:e6:40:a8:a1:
                    77:3d:a4:4a:d1:50:d2:82:ab:77:fb:1f:a4:c5:ce:
                    59:64:c8:b6:ff:2e:0a:5d:5d:1a:7e:e5:a4:09:66:
                    17:ee:d9:47:27:7e:77:f4:f9:72:ca:0e:10:a9:0e:
                    23:58:c7:dc:e4:a2:fd:71:a8:d6:a2:50:60:f9:60:
                    53:af:7f:05:6d:0c:1a:77:a7:0a:37:5b:9a:f7:4a:
                    ad:59:82:c7:b2:cc:86:1a:7b:06:d7:01:7e:0e:0c:
                    d2:db:50:de:cc:d0:aa:c1:f7:f2:02:05:d6:01:7a:
                    91:59:a0:0b:4b:d0:ec:0f:d3:40:ba:4f:48:a3:3e:
                    05:24:1d:58:aa:ea:d6:c3:d1:ad:33:4f:4e:65:2f:
                    e1:a9:fc:78:ca:c0:77:58:a4:66:4c:21:6b:99:73:
                    f6:75:02:7a:45:d6:1c:5c:1d:f9:3a:16:41:94:92:
                    20:bd:78:74:a9:f4:2b:97:59:4f:8a:5c:6a:a5:65:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:64:2C:83:7F:AA:90:CE:15:95:F1:B8:D2:76:6E:A2:16:06:21:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/ddaf4074-e338-3a14-a27a-2a6fd89aad7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2000::/48
                  2602:80a:2004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:61:72:d4:85:2d:0d:b9:f2:5e:96:76:9e:09:64:63:df:9f:
         dd:56:90:f9:88:94:cb:4c:36:92:76:c0:94:1e:99:f2:d2:69:
         3f:22:ea:bf:a2:7e:d2:22:dc:2f:ab:49:f9:69:a8:43:f9:4d:
         20:fa:d8:98:3a:4a:c0:56:e0:ed:0e:6e:3f:f8:33:d9:3f:26:
         5e:df:9a:b8:be:49:98:6a:eb:b1:b2:ce:68:db:35:a6:37:87:
         d7:ed:f2:26:4f:8e:61:9d:60:73:d3:16:14:13:e1:22:2a:14:
         62:cc:ec:4a:79:d1:65:44:e2:5a:04:a5:ae:f8:67:cf:1c:7e:
         ad:c5:47:d8:57:65:8b:ff:7a:15:2b:42:fd:bd:6b:48:9d:04:
         64:69:af:cb:81:05:44:06:a9:68:82:01:13:ba:62:f3:5c:9b:
         9e:e4:ca:29:32:aa:44:b6:22:b9:77:00:73:a8:c2:52:6a:4d:
         63:82:eb:fb:d9:7e:62:de:84:02:fd:5a:f5:b7:24:6b:1b:69:
         99:69:29:2f:a6:02:e4:f5:cc:b9:ff:76:d7:30:56:d3:b6:0f:
         ee:d5:a7:ad:b6:0e:88:b2:ed:21:a6:78:41:a8:0c:b8:97:97:
         37:df:74:75:ba:a6:b3:ff:e2:68:00:b0:eb:6d:d1:e6:00:db:
         6b:12:e4:a7
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEqQoK735K7S33Hx7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkxOGVlNTYtMzQzYy00MGRjLWIwMWQtZmI1ZWZkNTFl
MjZhMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
NTVjZmJhZGEtY2EyYS00MzU4LTkzOTktNWMyOWQyNjMwNDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS5BTmt9f6UkBLjixVegZBA5a3SBqdnV6aYf
jUIRWTIsogZP52CiztTcPgdyx5uKH4Ov5gnIrUrrr6AKoecLlzfuqR1fROZAqKF3
PaRK0VDSgqt3+x+kxc5ZZMi2/y4KXV0afuWkCWYX7tlHJ3539Plyyg4QqQ4jWMfc
5KL9cajWolBg+WBTr38FbQwad6cKN1ua90qtWYLHssyGGnsG1wF+DgzS21DezNCq
wffyAgXWAXqRWaALS9DsD9NAuk9Ioz4FJB1YqurWw9GtM09OZS/hqfx4ysB3WKRm
TCFrmXP2dQJ6RdYcXB35OhZBlJIgvXh0qfQrl1lPilxqpWUkiQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFCdkLIN/qpDOFZXxuNJ2bqIWBiF5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOTE4
ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVlZmQ1MWUyNmEvZGRhZjQwNzQtZTMzOC0z
YTE0LWEyN2EtMmE2ZmQ4OWFhZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTkxOGVlNTYtMzQzYy00MGRjLWIw
MWQtZmI1ZWZkNTFlMjZhLzE5MThlZTU2LTM0M2MtNDBkYy1iMDFkLWZiNWVmZDUx
ZTI2YS5jcmwwHwYDVR0jBBgwFoAUFzlJxoOm8qM5Fg81AM2BgXVrf+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOTE4ZWU1Ni0zNDNjLTQwZGMtYjAxZC1mYjVl
ZmQ1MWUyNmEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgIICiAA
AwcAJgIICiAEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAJFhctSFLQ258l6Wdp4JZGPfn91WkPmIlMtMNpJ2
wJQemfLSaT8i6r+iftIi3C+rSflpqEP5TSD62Jg6SsBW4O0Obj/4M9k/Jl7fmri+
SZhq67GyzmjbNaY3h9ft8iZPjmGdYHPTFhQT4SIqFGLM7Ep50WVE4loEpa74Z88c
fq3FR9hXZYv/ehUrQv29a0idBGRpr8uBBUQGqWiCARO6YvNcm57kyikyqkS2Irl3
AHOowlJqTWOC6/vZfmLehAL9WvW3JGsbaZlpKS+mAuT1zLn/dtcwVtO2D+7Vp622
Doiy7SGmeEGoDLiXlzffdHW6prP/4mgAsOtt0eYA22sS5Kc=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:20:49 2025 by rpki-client