Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/46ad49ab-2a2d-3c20-bcf6-1c35f6133b7f.roa
File:                     46ad49ab-2a2d-3c20-bcf6-1c35f6133b7f.roa (raw, json)
Hash identifier:          e2KfJNNZBEfJ2rohtvcMhR7RiXgyHgqZNxCl49E/4Oc=
Subject key identifier:   DB:DB:5D:6B:E1:42:EC:8C:43:EE:57:84:04:CD:85:E5:FC:10:A8:73
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584A89A6181A13E4FE640B7E0080
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/46ad49ab-2a2d-3c20-bcf6-1c35f6133b7f.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     30037
IP address blocks:        2620:10f:400e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:18:1a:13:e4:fe:64:0b:7e:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=60c41dd6-fbb6-4267-bfa0-f4779bbf2e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:be:37:1b:b0:8c:60:af:4e:b1:72:c9:02:
                    78:a3:ff:5c:8c:27:01:d8:9a:89:e9:fc:3e:bb:ef:
                    e5:d1:95:0a:a7:d4:2d:b1:e7:9e:9c:b6:c3:98:c0:
                    52:fd:f8:0c:a4:93:38:7b:69:8d:c3:79:72:75:55:
                    34:7e:05:b8:13:53:bd:fe:f4:a6:b8:0e:61:39:5c:
                    39:f9:9b:d9:a3:66:24:0a:2d:be:eb:40:60:87:de:
                    fe:be:d2:e1:39:ae:a3:58:6b:6f:70:e0:65:a0:24:
                    f3:47:cd:52:28:dd:41:d9:01:c2:be:7e:1f:7a:43:
                    99:03:a0:ab:f9:c2:d9:98:9b:09:07:73:46:6e:fa:
                    c4:08:a4:da:e5:fa:c6:54:11:01:f1:e7:c5:1a:0d:
                    96:b2:14:90:69:c2:27:2d:89:9c:dc:c3:36:6b:7c:
                    c1:20:7a:f6:5d:6a:02:37:7f:aa:99:0e:8d:a3:25:
                    52:89:5d:b3:6b:26:09:f0:e3:a8:00:89:d6:f2:e1:
                    c1:34:4d:9b:de:33:87:2a:a4:f2:b0:c5:78:64:9d:
                    75:35:56:5f:38:70:56:1e:5f:e7:aa:62:c6:b7:75:
                    b3:c9:d0:51:3f:88:30:d8:d9:5d:00:15:80:1d:f3:
                    61:7e:73:7b:d7:c5:b6:bd:86:a5:f6:5c:32:d1:7f:
                    80:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DB:5D:6B:E1:42:EC:8C:43:EE:57:84:04:CD:85:E5:FC:10:A8:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/46ad49ab-2a2d-3c20-bcf6-1c35f6133b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:400e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3f:07:d8:af:f0:c9:97:50:3b:bc:11:fd:63:2c:fd:cb:16:
         84:3c:59:b3:07:e0:58:1b:8f:be:bd:95:ed:5c:af:88:d9:ce:
         4b:94:cb:64:5d:65:26:cd:17:09:6d:fd:80:2b:bc:1b:97:1d:
         34:e4:e4:ef:ac:d2:d9:37:29:57:53:7d:84:9b:0b:b8:99:c2:
         13:26:cf:bb:73:95:4b:af:ae:9a:7a:02:1b:ee:f6:20:42:1a:
         73:1d:27:fa:e4:a0:60:49:0d:d6:51:3c:fc:83:5a:ae:cd:14:
         be:80:20:d2:8c:e0:b8:33:e2:0b:00:65:17:b4:84:36:36:35:
         81:d2:ba:be:de:b1:ea:06:e6:b1:f5:87:18:75:5f:d9:01:ed:
         29:54:be:86:ef:d1:7b:84:ad:0c:c8:62:69:50:c5:9c:8f:77:
         75:d9:f6:e0:b4:fa:b0:40:6a:04:83:eb:a1:44:8c:c4:e8:72:
         b8:7b:bd:93:a6:7f:07:03:c7:15:04:d7:5a:73:81:e5:83:3d:
         d9:af:d4:f7:c1:29:15:0a:85:0a:a9:1c:f0:66:93:57:9b:14:
         69:ad:be:1d:b1:6e:14:c7:c1:bd:12:8f:97:80:c5:d3:95:10:
         f8:e0:3f:64:3b:34:91:6b:3e:34:c0:ce:6c:ed:c4:4f:fd:48:
         ba:c0:50:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqJphgaE+T+ZAt+AIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0
ZDUyMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
NjBjNDFkZDYtZmJiNi00MjY3LWJmYTAtZjQ3NzliYmYyZTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwe+NxuwjGCvTrFyyQJ4o/9cjCcB2JqJ6fw+
u+/l0ZUKp9QtseeenLbDmMBS/fgMpJM4e2mNw3lydVU0fgW4E1O9/vSmuA5hOVw5
+ZvZo2YkCi2+60Bgh97+vtLhOa6jWGtvcOBloCTzR81SKN1B2QHCvn4fekOZA6Cr
+cLZmJsJB3NGbvrECKTa5frGVBEB8efFGg2WshSQacInLYmc3MM2a3zBIHr2XWoC
N3+qmQ6NoyVSiV2zayYJ8OOoAInW8uHBNE2b3jOHKqTysMV4ZJ11NVZfOHBWHl/n
qmLGt3WzydBRP4gw2NldABWAHfNhfnN718W2vYal9lwy0X+AkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNvbXWvhQuyMQ+5XhATNheX8EKhzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl
ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNDZhZDQ5YWItMmEyZC0z
YzIwLWJjZjYtMWMzNWY2MTMzYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5
ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4
NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4
MGFjODRkNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABD0AO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA8/B9iv8MmXUDu8Ef1jLP3LFoQ8WbMH4Fgbj769le1cr4jZzkuU
y2RdZSbNFwlt/YArvBuXHTTk5O+s0tk3KVdTfYSbC7iZwhMmz7tzlUuvrpp6Ahvu
9iBCGnMdJ/rkoGBJDdZRPPyDWq7NFL6AINKM4Lgz4gsAZRe0hDY2NYHSur7eseoG
5rH1hxh1X9kB7SlUvobv0XuErQzIYmlQxZyPd3XZ9uC0+rBAagSD66FEjMTocrh7
vZOmfwcDxxUE11pzgeWDPdmv1PfBKRUKhQqpHPBmk1ebFGmtvh2xbhTHwb0Sj5eA
xdOVEPjgP2Q7NJFrPjTAzmztxE/9SLrAUBQ=
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:51:13 2025 by rpki-client