Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa
File:                     7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa (raw, json)
Hash identifier:          OFx8hCNnf6hvv+kRedHPstS7hvxODsT7tBvhN+SZBJM=
Subject key identifier:   D1:F1:4B:7E:F7:22:01:C3:50:82:65:14:10:C0:9F:09:ED:50:BE:58
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F43285849DC8FB0D20690D03ED93A9900
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     212149
IP address blocks:        2605:f440:b00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b0:d2:06:90:d0:3e:d9:3a:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=ef4ee160-2287-481c-9da9-6b99a4d1ccc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:89:9d:db:09:bf:7c:19:0f:cd:2d:82:16:
                    e9:9b:09:86:94:ee:56:ac:f9:dd:9f:86:9d:4c:37:
                    d5:75:05:94:e0:b8:7a:66:46:fa:4b:cf:86:ce:22:
                    68:ee:0d:35:95:10:c6:97:96:47:95:f7:56:78:64:
                    37:d3:e8:e4:d6:d8:aa:64:95:38:a2:65:81:b0:fa:
                    de:ce:c9:8a:c6:7a:80:76:74:15:84:19:47:cd:a8:
                    69:5a:d3:cc:58:2f:9f:da:34:12:f4:03:bd:87:44:
                    a5:d7:a2:81:36:26:e3:8a:2a:3b:c6:93:25:c9:aa:
                    b1:23:91:7e:e7:30:8c:8e:91:dd:39:bd:51:4b:bb:
                    a0:85:bd:f7:68:12:b1:72:62:e7:69:2c:98:4b:9e:
                    b6:cc:29:7e:13:51:9e:06:fe:f5:7a:a2:13:1d:04:
                    4b:09:9b:b9:a5:4c:c4:1a:13:4c:13:4e:5e:e0:b9:
                    5d:a6:e2:8d:cf:67:84:91:58:e8:e4:a3:d4:cd:3d:
                    3e:19:d6:cc:9a:e0:e4:4b:26:59:57:22:8a:9d:a4:
                    83:4d:24:23:b7:68:87:d4:a0:37:6c:52:03:67:12:
                    6a:bc:ae:ed:d6:7e:94:c3:d0:b4:71:f6:fe:82:6b:
                    e6:f2:1e:21:1d:26:ea:42:56:5c:8e:8a:25:47:db:
                    fa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F1:4B:7E:F7:22:01:C3:50:82:65:14:10:C0:9F:09:ED:50:BE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:b00b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:76:dc:27:a3:d3:7b:ff:79:59:c0:81:ef:e0:47:fe:4e:24:
         6f:fd:07:88:39:3f:1f:07:14:37:08:18:35:4f:b7:7b:08:e9:
         86:36:27:41:92:e9:4a:95:25:9f:07:57:c3:bf:a5:86:8a:28:
         48:1b:26:2e:0e:58:3e:bc:ae:ab:64:32:74:a7:13:85:17:16:
         7f:13:c0:12:08:6f:6d:b8:c1:09:e2:12:98:3b:45:d3:ab:c9:
         84:ab:29:11:7e:fc:82:cd:56:04:a9:60:9c:ff:5e:a9:3e:f3:
         a2:cd:fb:01:f4:a2:ae:22:ca:a8:07:7c:01:bd:5f:e4:3d:86:
         77:12:d1:7e:7f:14:c1:39:e3:a1:14:f1:b1:30:ca:90:7e:fe:
         02:77:db:54:95:aa:3c:70:c7:0d:e3:fa:70:5b:4a:9d:7b:cf:
         4f:bc:48:dc:2a:43:92:2d:97:0e:c2:e7:99:bd:d5:ac:b7:b4:
         f4:42:93:b6:7a:f1:9d:f1:c0:05:c9:38:48:3d:bf:40:2c:68:
         04:36:17:71:40:a1:21:87:2e:64:75:ad:31:a8:58:00:d3:9a:
         4f:13:5c:c5:07:72:35:f4:b2:72:77:0e:a2:e0:a6:c2:62:e0:
         c7:a7:e9:80:06:bb:ad:bc:56:f5:a4:b7:02:fd:aa:67:af:4c:
         2c:21:bb:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncj7DSBpDQPtk6mQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
ZWY0ZWUxNjAtMjI4Ny00ODFjLTlkYTktNmI5OWE0ZDFjY2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0aJndsJv3wZD80tghbpmwmGlO5WrPndn4ad
TDfVdQWU4Lh6Zkb6S8+GziJo7g01lRDGl5ZHlfdWeGQ30+jk1tiqZJU4omWBsPre
zsmKxnqAdnQVhBlHzahpWtPMWC+f2jQS9AO9h0Sl16KBNibjiio7xpMlyaqxI5F+
5zCMjpHdOb1RS7ughb33aBKxcmLnaSyYS562zCl+E1GeBv71eqITHQRLCZu5pUzE
GhNME05e4LldpuKNz2eEkVjo5KPUzT0+GdbMmuDkSyZZVyKKnaSDTSQjt2iH1KA3
bFIDZxJqvK7t1n6Uw9C0cfb+gmvm8h4hHSbqQlZcjoolR9v60wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNHxS373IgHDUIJlFBDAnwntUL5YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvN2IxYjAwYzUtN2Y2NS0z
ZTE1LThiYjUtNTZhOTRkZmE0MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QLAL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIJ23Cej03v/eVnAge/gR/5OJG/9B4g5Px8HFDcIGDVPt3sI6YY2
J0GS6UqVJZ8HV8O/pYaKKEgbJi4OWD68rqtkMnSnE4UXFn8TwBIIb224wQniEpg7
RdOryYSrKRF+/ILNVgSpYJz/Xqk+86LN+wH0oq4iyqgHfAG9X+Q9hncS0X5/FME5
46EU8bEwypB+/gJ321SVqjxwxw3j+nBbSp17z0+8SNwqQ5Itlw7C55m91ay3tPRC
k7Z68Z3xwAXJOEg9v0AsaAQ2F3FAoSGHLmR1rTGoWADTmk8TXMUHcjX0snJ3DqLg
psJi4Men6YAGu628VvWktwL9qmevTCwhu68=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:07:25 2025 by rpki-client