Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/184d7a01-14b6-338a-be8b-84eefea2da4b.roa
File:                     184d7a01-14b6-338a-be8b-84eefea2da4b.roa (raw, json)
Hash identifier:          pyNsJxNmk6t7b70yJDEnctv8bBfcGyiSqBv9wR2eM2A=
Subject key identifier:   13:45:7C:31:8C:9A:57:D3:60:97:B2:1E:05:99:BD:23:BF:B0:49:CC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965E78750A3691DBC8D7A0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/184d7a01-14b6-338a-be8b-84eefea2da4b.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:801e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:5e:78:75:0a:36:91:db:c8:d7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=c8a79e1b-f5ca-4e03-bfd4-3943565e546d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:f2:e9:fc:8c:92:2a:d8:f2:79:42:b3:6a:
                    ee:fa:76:28:b2:8b:fa:c9:ca:95:f6:2c:e4:fb:77:
                    b1:ef:f8:5c:39:f1:49:93:6f:3c:7d:6e:0a:a0:15:
                    bd:72:dd:f3:60:8f:08:5d:b1:93:91:50:dd:f9:5d:
                    d5:78:6a:ca:91:22:dd:43:92:17:4e:ee:ae:f0:4d:
                    19:a9:be:fb:52:a5:fe:c5:43:00:f9:bd:fd:35:5d:
                    89:39:21:19:fc:2e:30:8d:f0:f2:d9:c7:6b:99:ac:
                    9b:8b:9b:26:49:08:1c:eb:79:b6:3b:32:91:43:b7:
                    dc:1d:f7:d0:a9:77:72:aa:91:e2:74:08:b0:04:28:
                    48:3b:5b:20:ba:fe:e2:d7:60:81:30:50:30:88:e2:
                    23:61:4b:17:20:0e:1d:75:dc:c5:5c:c7:d4:6e:af:
                    13:83:d3:c3:35:48:c5:85:ee:a3:44:2a:ca:70:1f:
                    19:3b:9d:45:26:de:e7:32:f8:9a:c6:39:35:b0:80:
                    d7:dd:e0:b1:01:80:2c:25:80:e9:f8:49:60:5c:67:
                    50:ac:c6:c4:cc:9c:c2:4c:bd:05:a6:83:7e:41:9c:
                    db:3c:ac:43:b8:6a:51:f9:42:7c:c3:1f:34:8b:10:
                    11:42:22:d6:47:da:84:fa:c6:7b:34:6d:fe:4d:a5:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:45:7C:31:8C:9A:57:D3:60:97:B2:1E:05:99:BD:23:BF:B0:49:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/184d7a01-14b6-338a-be8b-84eefea2da4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:801e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:37:57:4a:0a:8b:45:1c:85:db:08:0f:77:e1:2f:d9:35:26:
         cf:d7:2c:09:0d:31:c0:a7:ef:2c:46:a1:f2:2a:9a:74:da:93:
         f8:76:57:8b:83:d2:1c:7c:f4:55:b7:cb:7d:d5:10:45:6f:a1:
         27:ab:c7:f2:af:f2:12:c7:0a:be:af:c7:d7:88:87:10:ad:95:
         86:fd:a2:e5:66:3c:99:ee:61:e7:6d:df:5d:e0:f2:c2:b3:7d:
         e7:60:5f:ae:51:8e:9c:7a:bf:38:57:12:07:35:72:1f:6e:28:
         db:7d:7d:3b:c1:16:89:a0:77:2c:d5:26:ae:dd:bf:23:98:bb:
         2c:56:95:23:3e:5d:36:63:f2:e2:5f:0f:b3:93:f1:68:37:cb:
         3e:e7:a2:17:98:24:4a:da:da:58:d6:fd:08:a9:1b:ab:db:6a:
         4c:a9:10:07:03:d4:2b:bf:46:5c:ca:9a:ad:e0:bb:b7:dc:72:
         70:31:a3:ed:57:25:19:81:23:44:d8:3e:7c:46:c9:f2:87:71:
         68:a2:6c:64:9b:8e:91:b9:0e:ad:be:8c:79:ce:87:9b:69:e0:
         91:19:38:61:a5:32:01:67:03:33:ee:51:3e:04:b1:2b:df:3e:
         3e:f2:5f:c3:e0:39:d8:21:b7:31:4c:4c:90:c5:00:ea:76:47:
         d6:0d:d4:45
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqell54dQo2kdvI16AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
YzhhNzllMWItZjVjYS00ZTAzLWJmZDQtMzk0MzU2NWU1NDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmULy6fyMkirY8nlCs2ru+nYosov6ycqV9izk
+3ex7/hcOfFJk288fW4KoBW9ct3zYI8IXbGTkVDd+V3VeGrKkSLdQ5IXTu6u8E0Z
qb77UqX+xUMA+b39NV2JOSEZ/C4wjfDy2cdrmaybi5smSQgc63m2OzKRQ7fcHffQ
qXdyqpHidAiwBChIO1sguv7i12CBMFAwiOIjYUsXIA4dddzFXMfUbq8Tg9PDNUjF
he6jRCrKcB8ZO51FJt7nMviaxjk1sIDX3eCxAYAsJYDp+ElgXGdQrMbEzJzCTL0F
poN+QZzbPKxDuGpR+UJ8wx80ixARQiLWR9qE+sZ7NG3+TaUtwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBNFfDGMmlfTYJeyHgWZvSO/sEnMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMTg0ZDdhMDEtMTRiNi0z
MzhhLWJlOGItODRlZWZlYTJkYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYAe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHU3V0oKi0UchdsID3fhL9k1Js/XLAkNMcCn7yxGofIqmnTak/h2
V4uD0hx89FW3y33VEEVvoSerx/Kv8hLHCr6vx9eIhxCtlYb9ouVmPJnuYedt313g
8sKzfedgX65Rjpx6vzhXEgc1ch9uKNt9fTvBFomgdyzVJq7dvyOYuyxWlSM+XTZj
8uJfD7OT8Wg3yz7noheYJEra2ljW/QipG6vbakypEAcD1Cu/RlzKmq3gu7fccnAx
o+1XJRmBI0TYPnxGyfKHcWiibGSbjpG5Dq2+jHnOh5tp4JEZOGGlMgFnAzPuUT4E
sSvfPj7yX8PgOdghtzFMTJDFAOp2R9YN1EU=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:03 2025 by rpki-client