Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/8671b8c7-29cb-389f-8097-41b06c4c4466.roa
File:                     8671b8c7-29cb-389f-8097-41b06c4c4466.roa (raw, json)
Hash identifier:          m8fQO9AJHiz0d+jHoIC17CcXM7g72xTyIuUCenU7bh4=
Subject key identifier:   0D:42:26:83:6B:5A:1E:EC:E7:12:86:7E:36:83:91:D9:00:9C:21:65
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584ABD4B7D341838327A92042600
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/8671b8c7-29cb-389f-8097-41b06c4c4466.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     209864
IP address blocks:        2605:f440:cafe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:7d:34:18:38:32:7a:92:04:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=4944ee89-cae5-4234-aff2-62fbf6edbae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:7a:f9:be:ff:0d:71:49:72:d3:de:55:88:
                    ad:4a:fe:99:95:a2:a9:01:63:bb:d4:b8:80:ef:5b:
                    2a:57:c3:3a:88:bd:9b:94:28:85:13:dc:cc:f7:76:
                    ed:9b:89:19:f5:98:a8:e6:7a:d6:ed:4b:09:b7:16:
                    c8:12:c3:29:f2:6c:fa:9a:5a:47:42:fa:da:6a:c0:
                    db:09:4b:66:ba:f7:2f:d7:ae:95:29:9f:b0:41:cd:
                    13:bc:a1:21:c3:8f:42:7f:38:8f:70:53:a6:18:d6:
                    4d:1a:95:aa:2e:3f:b0:00:9f:30:34:a4:6f:a1:43:
                    52:46:70:e4:dc:22:60:01:81:b9:3d:7b:bf:ac:68:
                    b2:61:51:46:82:13:67:1b:02:97:c4:dc:73:1a:c1:
                    93:22:5e:36:de:88:a1:19:11:af:b8:c6:6d:09:21:
                    9b:90:61:22:62:e7:7b:cc:aa:5b:43:98:ed:d6:29:
                    de:75:fe:af:ee:9b:98:20:0e:cc:ba:55:24:ec:f0:
                    64:eb:4e:45:fc:ae:06:6c:62:e8:21:c5:c3:51:29:
                    1e:b4:14:42:f0:6c:c4:d9:84:fb:5c:b3:84:10:5d:
                    ca:39:8d:32:d8:7f:cc:bb:33:81:83:8f:99:fc:a1:
                    dd:0a:10:a6:9f:32:ec:1e:f3:86:fc:25:b0:a8:f7:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:42:26:83:6B:5A:1E:EC:E7:12:86:7E:36:83:91:D9:00:9C:21:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/8671b8c7-29cb-389f-8097-41b06c4c4466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:cafe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e5:78:1c:87:c0:fe:89:7e:1c:a7:ef:09:fb:5f:68:26:f0:
         1d:29:53:09:f2:3e:06:a1:79:6a:44:1d:2e:a4:03:12:d6:64:
         d6:a1:bd:8d:08:1a:bd:51:77:1e:c3:c6:1c:ad:f8:14:27:a7:
         00:05:27:db:2b:1e:de:68:98:b4:f4:f8:24:f5:66:e8:62:41:
         c2:58:d6:e3:cb:ba:61:5d:95:89:c9:3e:f6:53:99:a5:69:94:
         41:35:9f:a9:12:b9:02:ca:ae:fa:88:86:3a:69:98:c1:e9:07:
         a5:8b:18:df:fb:66:85:5d:9f:e1:e1:f5:b1:8f:d6:89:3a:91:
         19:d1:5b:16:c0:e7:ad:4b:ba:69:d7:41:ff:80:67:b9:ec:94:
         51:7b:b4:f2:b5:72:80:d8:cc:da:ab:01:eb:d8:91:30:88:04:
         c7:55:8f:1f:ba:fe:a7:26:7c:d5:da:67:ee:84:8f:de:0f:00:
         9e:70:68:7c:48:d6:69:be:f7:80:7d:ae:ed:ef:0a:14:c8:51:
         b3:3a:63:cd:3b:56:ba:0d:a6:3e:29:5c:5f:9a:e8:2c:63:fa:
         db:a3:dc:d4:1a:60:41:ea:da:85:df:e8:e0:26:a2:b7:73:d7:
         97:cc:3a:80:d4:bc:9a:e1:e4:23:11:6e:48:e7:be:1c:56:8c:
         4c:31:ed:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq9S300GDgyepIEJgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4
ZjcyMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
NDk0NGVlODktY2FlNS00MjM0LWFmZjItNjJmYmY2ZWRiYWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUl6+b7/DXFJctPeVYitSv6ZlaKpAWO71LiA
71sqV8M6iL2blCiFE9zM93btm4kZ9Zio5nrW7UsJtxbIEsMp8mz6mlpHQvraasDb
CUtmuvcv166VKZ+wQc0TvKEhw49CfziPcFOmGNZNGpWqLj+wAJ8wNKRvoUNSRnDk
3CJgAYG5PXu/rGiyYVFGghNnGwKXxNxzGsGTIl423oihGRGvuMZtCSGbkGEiYud7
zKpbQ5jt1inedf6v7puYIA7MulUk7PBk605F/K4GbGLoIcXDUSketBRC8GzE2YT7
XLOEEF3KOY0y2H/MuzOBg4+Z/KHdChCmnzLsHvOG/CWwqPfy8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA1CJoNrWh7s5xKGfjaDkdkAnCFlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk
MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvODY3MWI4YzctMjljYi0z
ODlmLTgwOTctNDFiMDZjNGM0NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4
NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw
OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2
N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QMr+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIDleByHwP6Jfhyn7wn7X2gm8B0pUwnyPgaheWpEHS6kAxLWZNah
vY0IGr1Rdx7Dxhyt+BQnpwAFJ9srHt5omLT0+CT1ZuhiQcJY1uPLumFdlYnJPvZT
maVplEE1n6kSuQLKrvqIhjppmMHpB6WLGN/7ZoVdn+Hh9bGP1ok6kRnRWxbA561L
umnXQf+AZ7nslFF7tPK1coDYzNqrAevYkTCIBMdVjx+6/qcmfNXaZ+6Ej94PAJ5w
aHxI1mm+94B9ru3vChTIUbM6Y807VroNpj4pXF+a6Cxj+tuj3NQaYEHq2oXf6OAm
ordz15fMOoDUvJrh5CMRbkjnvhxWjEwx7XM=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:34:12 2025 by rpki-client