Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0e5c31a9-6e7a-35ef-b7de-0f8088067c51.roa
File:                     0e5c31a9-6e7a-35ef-b7de-0f8088067c51.roa (raw, json)
Hash identifier:          2kXsAfBqjAsm7EwKFLTEnBRMzgWYkBmsuN19A9QJKnc=
Subject key identifier:   56:DB:87:DE:97:BD:4B:35:E9:4B:C6:EA:44:42:58:3F:DF:A2:55:19
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584AB220E01D060B9835D31E5080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0e5c31a9-6e7a-35ef-b7de-0f8088067c51.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     33363
IP address blocks:        2605:a40a::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:e0:1d:06:0b:98:35:d3:1e:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=4195fa93-55a7-4f2e-a48e-73020cee3469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:8c:45:5d:12:ed:f2:d7:66:25:d0:08:c3:
                    f8:94:0f:da:c4:92:43:e8:69:3d:f7:0e:a2:63:19:
                    e0:60:47:c5:98:1c:d5:7b:d1:93:07:0b:13:87:ee:
                    5e:ab:72:29:70:f0:fd:45:84:05:9d:99:00:c5:6e:
                    4a:ba:f8:ee:34:09:28:62:7a:1e:37:04:8c:d1:35:
                    24:12:46:cd:99:f1:0a:d5:09:e7:6d:48:55:40:ea:
                    f0:17:a9:52:95:72:57:eb:69:e1:e6:48:21:d7:fb:
                    7d:43:7c:f1:d0:d8:6c:90:4b:29:4b:45:ed:83:24:
                    ff:9e:c1:2b:14:ad:0d:ed:e7:fe:5f:5b:71:05:a9:
                    9b:9b:65:73:45:9a:95:d4:e2:88:8a:f9:25:2a:a5:
                    5e:e5:3e:b5:9c:b3:b0:5f:49:4b:0c:fa:ea:60:5f:
                    79:eb:32:52:b8:6d:0e:0a:f5:58:82:d2:e7:b0:f7:
                    3a:46:f7:f2:1a:c3:94:32:13:06:f7:b8:aa:95:01:
                    79:35:6b:7f:3e:45:5e:a3:f8:bb:20:29:82:6b:c1:
                    5d:27:5f:3f:88:82:31:db:d2:4d:a3:a3:c2:40:0a:
                    51:76:69:a4:91:a6:aa:44:53:ab:c4:2a:e8:33:e7:
                    ef:ba:c2:82:9b:f8:ad:39:79:68:d8:96:ba:7a:09:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DB:87:DE:97:BD:4B:35:E9:4B:C6:EA:44:42:58:3F:DF:A2:55:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0e5c31a9-6e7a-35ef-b7de-0f8088067c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a40a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:1c:0d:83:d5:98:3a:00:32:91:57:6e:06:39:86:85:2a:
         5a:c9:03:a0:bc:cd:46:aa:0b:4b:a8:96:48:03:38:e7:fc:6c:
         54:d7:bf:78:90:a0:cf:13:86:82:e6:40:ee:72:78:5e:e8:9b:
         29:55:35:03:9b:ec:ce:aa:7f:62:57:f1:71:03:4e:ca:f1:ea:
         04:4a:57:29:bf:06:76:47:02:d3:92:31:a4:41:67:ca:88:da:
         d5:5b:fb:e3:7c:0a:cb:80:96:98:f0:5d:6b:43:e8:5c:fe:34:
         65:02:be:52:81:5a:62:34:a0:02:32:27:5f:c7:a7:73:c6:32:
         fc:b0:cc:9b:ae:5b:14:d8:79:fb:57:59:4a:e6:79:82:1c:1b:
         3c:c3:8d:8e:5e:58:f4:37:e1:cf:6b:2f:0d:2b:e3:b4:b3:71:
         05:5c:2c:ad:aa:23:d7:22:a1:8a:5a:f0:94:48:83:b3:f1:98:
         db:9d:ef:89:1c:95:f8:a4:8e:79:1a:3c:76:4f:24:e9:69:5a:
         bb:52:0e:03:62:e0:91:f2:9d:b5:af:44:0b:03:43:d1:b8:af:
         c4:16:39:37:1b:4c:dd:6e:d4:22:13:f5:66:30:dd:65:a2:b7:
         3f:39:21:d0:38:96:14:bc:83:fe:ce:ef:6d:6b:4d:a8:99:e4:
         c2:0c:a6:72
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqyIOAdBguYNdMeUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NDE5NWZhOTMtNTVhNy00ZjJlLWE0OGUtNzMwMjBjZWUzNDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsyMRV0S7fLXZiXQCMP4lA/axJJD6Gk99w6i
YxngYEfFmBzVe9GTBwsTh+5eq3IpcPD9RYQFnZkAxW5KuvjuNAkoYnoeNwSM0TUk
EkbNmfEK1QnnbUhVQOrwF6lSlXJX62nh5kgh1/t9Q3zx0NhskEspS0XtgyT/nsEr
FK0N7ef+X1txBambm2VzRZqV1OKIivklKqVe5T61nLOwX0lLDPrqYF956zJSuG0O
CvVYgtLnsPc6RvfyGsOUMhMG97iqlQF5NWt/PkVeo/i7ICmCa8FdJ18/iIIx29JN
o6PCQApRdmmkkaaqRFOrxCroM+fvusKCm/itOXlo2Ja6egkarwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFbbh96XvUs16UvG6kRCWD/folUZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMGU1YzMxYTktNmU3YS0z
NWVmLWI3ZGUtMGY4MDg4MDY3YzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWkCjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCO2BwNg9WYOgAykVduBjmGhSpayQOgvM1GqgtLqJZIAzjn/GxU1794
kKDPE4aC5kDucnhe6JspVTUDm+zOqn9iV/FxA07K8eoESlcpvwZ2RwLTkjGkQWfK
iNrVW/vjfArLgJaY8F1rQ+hc/jRlAr5SgVpiNKACMidfx6dzxjL8sMybrlsU2Hn7
V1lK5nmCHBs8w42OXlj0N+HPay8NK+O0s3EFXCytqiPXIqGKWvCUSIOz8Zjbne+J
HJX4pI55Gjx2TyTpaVq7Ug4DYuCR8p21r0QLA0PRuK/EFjk3G0zdbtQiE/VmMN1l
orc/OSHQOJYUvIP+zu9ta02omeTCDKZy
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:10 2025 by rpki-client