Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/7bcfb844-8373-30d1-b332-b6503cf8d4fc.roa
File:                     7bcfb844-8373-30d1-b332-b6503cf8d4fc.roa (raw, json)
Hash identifier:          bDRcPv7hF+oyMoNMrJKzEXJYK0lPeJzs2HyL/V2S3uo=
Subject key identifier:   B5:53:9B:E0:E0:C3:13:6C:F2:AE:4C:7F:C6:80:DC:06:98:E7:23:2C
Certificate issuer:       /CN=31423667-ebcc-4a10-8150-8758941bb075
Certificate serial:       010D0C9F4328584ABD4B948BAF10DCF795693800
Authority key identifier: 91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/7bcfb844-8373-30d1-b332-b6503cf8d4fc.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     19218
IP address blocks:        2604:fd00:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:94:8b:af:10:dc:f7:95:69:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31423667-ebcc-4a10-8150-8758941bb075
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=deb467ca-37af-43ef-8250-20945e02e61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:77:b8:09:b5:df:8b:8f:f4:09:8f:69:92:
                    89:ee:13:bb:df:26:a6:31:d3:7d:1e:2b:44:6b:e9:
                    40:c0:e3:c4:b4:2f:13:cc:4c:24:53:4f:4f:18:d0:
                    16:8a:3c:38:b6:e3:2c:78:3e:65:ab:c6:a0:b6:f7:
                    3d:f8:66:0a:06:24:a4:dd:4f:2d:aa:bb:4f:c3:cd:
                    07:d2:58:c7:69:92:f5:6d:58:24:8f:b8:2d:1b:4a:
                    40:ba:43:60:9e:68:70:61:f4:3b:a1:70:54:2d:a7:
                    b2:0e:bd:d8:6e:d7:52:d2:f8:65:c9:16:57:36:3a:
                    32:05:c3:ba:e2:d3:54:31:24:99:1f:bd:c0:7d:fc:
                    6f:03:63:ae:66:81:36:4c:b9:f7:ec:c1:9b:ee:78:
                    53:9c:02:d2:12:cb:a1:3f:39:0d:4d:cb:99:a1:05:
                    4a:1b:7a:57:4f:7e:a0:c0:8e:dc:6c:7f:4e:a6:a9:
                    2b:3c:25:0c:18:44:09:95:b3:7d:24:98:6b:34:de:
                    6e:26:9c:9f:30:25:fe:ca:5e:39:ad:8d:ef:3b:eb:
                    1b:32:d7:be:9e:00:19:12:d7:2f:b6:f1:11:8b:4b:
                    03:95:c6:a0:d3:80:53:75:2d:d9:c7:44:6d:88:60:
                    0d:aa:20:07:74:45:95:aa:bc:67:60:db:5b:5c:33:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:53:9B:E0:E0:C3:13:6C:F2:AE:4C:7F:C6:80:DC:06:98:E7:23:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/7bcfb844-8373-30d1-b332-b6503cf8d4fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl

            X509v3 Authority Key Identifier:
                keyid:91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fd00:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7d:02:ca:5b:db:3d:e5:c2:fa:8c:8d:1e:b9:43:bb:d2:16:
         e2:00:24:a8:81:37:7a:08:3d:46:15:e5:e6:4a:b3:30:39:e6:
         f7:fb:3b:86:41:4e:9f:c6:dc:1f:f3:ef:08:d4:fc:ab:45:f2:
         b4:b0:9a:ff:52:66:e5:7c:43:ca:dd:dd:82:ab:ce:39:ae:2d:
         01:2f:b0:66:44:c3:58:52:5c:9a:75:1a:2e:d2:e1:31:43:b4:
         67:c6:83:c6:c5:26:8e:ff:ef:42:71:d9:10:51:b9:a6:38:d5:
         1a:bc:e8:1e:5c:bb:c2:51:67:fb:d5:4f:0e:62:73:5b:d7:2c:
         e9:24:1e:8b:a0:a5:72:ac:6b:2a:b9:92:9d:5c:d5:9a:46:ac:
         ca:f5:0e:3b:aa:39:36:a7:99:7f:ba:ab:ee:4b:99:e9:5b:05:
         d3:ff:b0:7b:62:c2:ca:e7:1b:09:a6:6c:16:e3:fd:02:a6:d7:
         0d:33:34:fe:fd:28:eb:9c:bd:dc:97:cc:08:d5:ef:fc:0c:d1:
         87:25:de:34:9b:aa:54:18:a3:0b:a5:d0:ce:ed:a5:66:5d:f4:
         50:48:48:42:a0:5f:fa:96:ff:3b:ec:28:fb:99:46:84:c8:77:
         af:72:07:ef:b9:fd:75:f3:b3:48:28:1e:87:80:1c:76:69:a6:
         6f:17:02:a8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq9S5SLrxDc95VpOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE0MjM2NjctZWJjYy00YTEwLTgxNTAtODc1ODk0MWJi
MDc1MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZGViNDY3Y2EtMzdhZi00M2VmLTgyNTAtMjA5NDVlMDJlNjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCd3uAm134uP9AmPaZKJ7hO73yamMdN9HitE
a+lAwOPEtC8TzEwkU09PGNAWijw4tuMseD5lq8agtvc9+GYKBiSk3U8tqrtPw80H
0ljHaZL1bVgkj7gtG0pAukNgnmhwYfQ7oXBULaeyDr3YbtdS0vhlyRZXNjoyBcO6
4tNUMSSZH73AffxvA2OuZoE2TLn37MGb7nhTnALSEsuhPzkNTcuZoQVKG3pXT36g
wI7cbH9OpqkrPCUMGEQJlbN9JJhrNN5uJpyfMCX+yl45rY3vO+sbMte+ngAZEtcv
tvERi0sDlcag04BTdS3Zx0RtiGANqiAHdEWVqrxnYNtbXDPhcwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLVTm+DgwxNs8q5Mf8aA3AaY5yMsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQy
MzY2Ny1lYmNjLTRhMTAtODE1MC04NzU4OTQxYmIwNzUvN2JjZmI4NDQtODM3My0z
MGQxLWIzMzItYjY1MDNjZjhkNGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MjM2NjctZWJjYy00YTEwLTgx
NTAtODc1ODk0MWJiMDc1LzMxNDIzNjY3LWViY2MtNGExMC04MTUwLTg3NTg5NDFi
YjA3NS5jcmwwHwYDVR0jBBgwFoAUkQEusqFRXIm1A6wTdU03pFEmA3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQyMzY2Ny1lYmNjLTRhMTAtODE1MC04NzU4
OTQxYmIwNzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgT9ACAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAi30CylvbPeXC+oyNHrlDu9IW4gAkqIE3egg9RhXl5kqzMDnm9/s7
hkFOn8bcH/PvCNT8q0XytLCa/1Jm5XxDyt3dgqvOOa4tAS+wZkTDWFJcmnUaLtLh
MUO0Z8aDxsUmjv/vQnHZEFG5pjjVGrzoHly7wlFn+9VPDmJzW9cs6SQei6Clcqxr
KrmSnVzVmkasyvUOO6o5NqeZf7qr7kuZ6VsF0/+we2LCyucbCaZsFuP9AqbXDTM0
/v0o65y93JfMCNXv/AzRhyXeNJuqVBijC6XQzu2lZl30UEhIQqBf+pb/O+wo+5lG
hMh3r3IH77n9dfOzSCgeh4AcdmmmbxcCqA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:32 2025 by rpki-client