Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/9969d787-94bd-3df5-b9ba-65642a4d54a7.roa
File:                     9969d787-94bd-3df5-b9ba-65642a4d54a7.roa (raw, json)
Hash identifier:          GpIPaZWOcTEUfGBDTNph6R7KiqdHElSCqAEo4lYXm8M=
Subject key identifier:   E2:43:51:09:AA:B8:C5:40:A9:2E:AC:88:0A:F3:39:8F:20:E3:AC:D3
Certificate issuer:       /CN=56c0805c-5631-4805-a7f4-dcc62b92b16f
Certificate serial:       010D0C9F4328584A96369321D7012DC7A3809600
Authority key identifier: C8:3E:94:9F:AF:94:43:DB:C0:D6:17:62:14:4F:4A:58:02:68:35:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/9969d787-94bd-3df5-b9ba-65642a4d54a7.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     69
IP address blocks:        2607:f470:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:93:21:d7:01:2d:c7:a3:80:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c0805c-5631-4805-a7f4-dcc62b92b16f
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=5dd60ce8-1827-4b18-a846-e20231473222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:07:0d:f1:f9:a7:b1:6f:26:ad:26:15:4d:ac:
                    57:92:6a:81:71:a0:a6:3d:29:6d:73:aa:a7:3e:bc:
                    7a:c7:4b:62:8f:28:57:0c:a1:78:c5:8e:43:23:72:
                    08:1b:e6:fa:00:df:7d:1b:e3:8e:ac:5a:5e:30:dc:
                    3d:18:36:c8:bf:34:72:b6:07:67:18:b2:d9:ee:1a:
                    02:21:3e:87:50:c7:b6:2b:4b:3a:94:bd:fd:b2:b1:
                    ae:ab:5a:06:68:55:9b:37:3b:dc:42:a8:30:f4:e2:
                    2c:cc:40:f2:e1:cd:0a:48:a2:dc:75:be:ff:4c:ba:
                    35:45:75:69:c3:38:1d:90:ca:b5:66:26:2f:38:0d:
                    76:40:02:83:56:8c:6a:12:13:1e:71:4e:4c:b5:af:
                    bf:80:1e:b5:2c:2b:87:a2:ea:5d:bc:0e:cb:09:e5:
                    84:ef:94:3a:3f:48:9e:79:1e:c6:3d:08:76:11:fa:
                    f3:e7:f8:3c:67:b2:90:66:95:7b:4b:c7:67:7a:a8:
                    5e:bc:5c:fe:cd:14:89:5a:9b:f0:cf:c0:ab:b9:86:
                    b8:eb:1f:64:ec:0f:8e:6f:d4:b7:63:ef:01:5b:30:
                    b2:13:07:f5:77:70:9c:a2:cc:8c:0a:d1:22:af:1d:
                    fe:ae:f4:79:cd:8b:c2:85:05:86:f3:7f:e5:f8:3a:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:43:51:09:AA:B8:C5:40:A9:2E:AC:88:0A:F3:39:8F:20:E3:AC:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/9969d787-94bd-3df5-b9ba-65642a4d54a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3E:94:9F:AF:94:43:DB:C0:D6:17:62:14:4F:4A:58:02:68:35:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f470:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:81:de:cf:f0:ee:5a:f4:a4:aa:cb:54:87:f8:27:df:72:7b:
         47:3c:d3:17:9f:8e:dc:da:82:75:af:8d:3a:8e:f0:04:4f:e2:
         e5:54:7f:3b:5a:e2:b6:f7:de:62:f7:6e:58:4d:fb:97:15:8c:
         f1:ad:7e:bb:98:8c:d5:b7:d0:a9:f3:1f:62:e3:f9:07:8d:b7:
         9c:a9:03:7c:c7:ea:9f:51:7d:81:3f:43:0f:df:3e:50:22:87:
         dc:1a:3c:bf:9b:ff:2c:58:b7:54:31:fb:7d:1f:3a:7a:41:a4:
         1d:f4:28:f2:0d:c2:97:7f:45:12:4d:5b:7f:7f:49:06:e5:52:
         31:37:81:2e:a3:f0:7a:35:f6:57:c8:89:78:e5:91:67:47:bf:
         67:5d:41:5a:61:a4:48:73:7e:b7:9e:4e:f6:49:9e:8d:82:6d:
         54:02:df:8d:9d:f5:af:96:b4:7a:80:97:d1:5a:45:e3:93:eb:
         2a:94:52:fd:76:4e:e1:7f:f6:b8:ae:8e:0d:a9:03:07:14:2a:
         ec:89:c4:80:be:31:7c:f4:1a:f8:54:9d:8e:a2:c6:ca:2a:e0:
         79:98:54:8e:1f:18:1c:82:33:1f:3b:da:38:9c:6b:fb:ff:33:
         58:50:73:f5:4d:cc:c0:ad:82:fe:1a:84:6c:aa:e0:b6:7c:4f:
         07:2b:2b:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqWNpMh1wEtx6OAlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZjMDgwNWMtNTYzMS00ODA1LWE3ZjQtZGNjNjJiOTJi
MTZmMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
NWRkNjBjZTgtMTgyNy00YjE4LWE4NDYtZTIwMjMxNDczMjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAcN8fmnsW8mrSYVTaxXkmqBcaCmPSltc6qn
Prx6x0tijyhXDKF4xY5DI3IIG+b6AN99G+OOrFpeMNw9GDbIvzRytgdnGLLZ7hoC
IT6HUMe2K0s6lL39srGuq1oGaFWbNzvcQqgw9OIszEDy4c0KSKLcdb7/TLo1RXVp
wzgdkMq1ZiYvOA12QAKDVoxqEhMecU5Mta+/gB61LCuHoupdvA7LCeWE75Q6P0ie
eR7GPQh2Efrz5/g8Z7KQZpV7S8dneqhevFz+zRSJWpvwz8CruYa46x9k7A+Ob9S3
Y+8BWzCyEwf1d3CcosyMCtEirx3+rvR5zYvChQWG83/l+DpskwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOJDUQmquMVAqS6siArzOY8g46zTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NmMw
ODA1Yy01NjMxLTQ4MDUtYTdmNC1kY2M2MmI5MmIxNmYvOTk2OWQ3ODctOTRiZC0z
ZGY1LWI5YmEtNjU2NDJhNGQ1NGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTZjMDgwNWMtNTYzMS00ODA1LWE3
ZjQtZGNjNjJiOTJiMTZmLzU2YzA4MDVjLTU2MzEtNDgwNS1hN2Y0LWRjYzYyYjky
YjE2Zi5jcmwwHwYDVR0jBBgwFoAUyD6Un6+UQ9vA1hdiFE9KWAJoNZcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NmMwODA1Yy01NjMxLTQ4MDUtYTdmNC1kY2M2
MmI5MmIxNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf0cAAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHWB3s/w7lr0pKrLVIf4J99ye0c80xefjtzagnWvjTqO8ARP4uVU
fzta4rb33mL3blhN+5cVjPGtfruYjNW30KnzH2Lj+QeNt5ypA3zH6p9RfYE/Qw/f
PlAih9waPL+b/yxYt1Qx+30fOnpBpB30KPINwpd/RRJNW39/SQblUjE3gS6j8Ho1
9lfIiXjlkWdHv2ddQVphpEhzfreeTvZJno2CbVQC342d9a+WtHqAl9FaReOT6yqU
Uv12TuF/9riujg2pAwcUKuyJxIC+MXz0GvhUnY6ixsoq4HmYVI4fGByCMx872jic
a/v/M1hQc/VNzMCtgv4ahGyq4LZ8TwcrK64=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:26 2025 by rpki-client