Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/54d0ff18-f0a3-3126-8f97-b5a44d66d1b3.roa
File:                     54d0ff18-f0a3-3126-8f97-b5a44d66d1b3.roa (raw, json)
Hash identifier:          rhO1wlitO1Ag97a77o3pHJetEGezznd5WktkBLed7a0=
Subject key identifier:   4C:3E:C6:5B:64:6A:A3:B3:A5:E9:6D:55:9E:49:45:BF:F4:EF:8C:0B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584AB220E00A0A40689188006D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/54d0ff18-f0a3-3126-8f97-b5a44d66d1b3.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     33363
IP address blocks:        2605:a408::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:e0:0a:0a:40:68:91:88:00:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=c74b2966-800a-4b8b-ae63-47d878ff926b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:8c:c8:c7:82:8c:a3:5b:7b:3a:e0:c3:72:
                    76:f1:0f:12:68:77:2d:56:64:c7:30:82:47:f5:b1:
                    7b:c9:aa:86:21:d7:cc:03:b0:d7:3e:db:34:5e:7c:
                    06:7d:f2:b9:35:cf:50:a5:d9:9b:39:f9:53:f9:53:
                    b7:27:57:52:22:85:d2:82:cc:bb:eb:3a:82:e2:1c:
                    2a:d3:35:ac:dc:d9:34:d5:39:b6:01:99:27:66:ec:
                    c5:a3:26:e6:63:38:55:0c:8c:57:c8:06:be:cd:7e:
                    39:4c:5e:35:29:c6:25:b5:d4:57:91:71:a9:7a:39:
                    18:a6:ce:e8:25:17:d2:48:73:cf:e6:c0:aa:bf:18:
                    bf:09:77:c5:2a:05:fa:f6:28:ac:cb:2d:3e:97:3e:
                    77:0d:41:b4:94:13:7c:72:b3:06:6a:d2:cf:82:61:
                    60:c9:1d:5d:6a:21:b4:95:f1:ed:90:0f:11:34:10:
                    a5:cc:27:bc:b1:cd:e3:3d:53:16:b4:aa:b3:b9:8f:
                    eb:b1:7c:8b:86:dc:87:fd:50:47:d0:25:dc:d0:32:
                    00:2a:fa:83:e6:63:45:5d:2f:c0:46:fd:c5:2d:10:
                    60:cb:79:a8:f2:2a:e2:d4:24:fa:88:5f:81:0d:d0:
                    b4:16:94:fd:a7:fe:07:97:d5:f7:1f:ab:c0:4d:50:
                    ea:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3E:C6:5B:64:6A:A3:B3:A5:E9:6D:55:9E:49:45:BF:F4:EF:8C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/54d0ff18-f0a3-3126-8f97-b5a44d66d1b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a408::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a4:f1:11:3e:3a:c7:33:0b:74:93:f4:cf:ff:d1:61:52:79:
         d9:bb:8a:76:7c:47:a3:e2:33:5c:a2:f7:61:03:f1:d2:61:bb:
         d1:8d:3d:f6:15:ec:9e:f9:f2:5f:5f:f7:b6:e4:f7:6e:85:52:
         62:20:83:cb:13:89:b7:ec:7a:a6:9d:c0:19:80:d3:b3:01:f9:
         df:f9:9b:ab:12:2e:fe:3d:32:b7:9e:ea:bc:70:53:07:fc:9b:
         fa:af:e9:7b:3e:4e:f5:47:f5:bf:25:92:23:55:25:27:c5:f3:
         24:f8:8f:ef:23:82:d1:5b:8c:94:3a:3e:df:5d:bc:d8:ff:3e:
         fb:23:ad:de:6e:6a:31:99:d5:36:6d:e9:4e:32:8d:62:7d:14:
         ce:33:b8:87:1e:8c:3a:fa:fe:ed:3e:24:7d:83:7b:19:d1:fd:
         91:f5:d1:3b:2b:ee:b2:88:62:67:ff:c2:ad:b3:7c:8a:80:f5:
         8b:93:ad:05:2b:7f:bc:03:da:61:c4:7f:87:ae:15:8c:84:2c:
         f7:f8:3a:08:f2:24:dd:b4:13:cc:3f:83:2f:11:31:6e:a2:0a:
         59:7c:a7:90:0a:5e:f2:b4:26:f7:f1:d4:fb:50:74:a5:9a:7d:
         00:04:13:37:31:fd:92:f3:d6:2c:7a:01:90:12:60:88:64:50:
         9b:b0:a0:b7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqyIOAKCkBokYgAbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
Yzc0YjI5NjYtODAwYS00YjhiLWFlNjMtNDdkODc4ZmY5MjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTiMyMeCjKNbezrgw3J28Q8SaHctVmTHMIJH
9bF7yaqGIdfMA7DXPts0XnwGffK5Nc9QpdmbOflT+VO3J1dSIoXSgsy76zqC4hwq
0zWs3Nk01Tm2AZknZuzFoybmYzhVDIxXyAa+zX45TF41KcYltdRXkXGpejkYps7o
JRfSSHPP5sCqvxi/CXfFKgX69iisyy0+lz53DUG0lBN8crMGatLPgmFgyR1daiG0
lfHtkA8RNBClzCe8sc3jPVMWtKqzuY/rsXyLhtyH/VBH0CXc0DIAKvqD5mNFXS/A
Rv3FLRBgy3mo8iri1CT6iF+BDdC0FpT9p/4Hl9X3H6vATVDqjQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEw+xltkaqOzpeltVZ5JRb/074wLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTRkMGZmMTgtZjBhMy0z
MTI2LThmOTctYjVhNDRkNjZkMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWkCDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBBpPERPjrHMwt0k/TP/9FhUnnZu4p2fEej4jNcovdhA/HSYbvRjT32
Feye+fJfX/e25PduhVJiIIPLE4m37HqmncAZgNOzAfnf+ZurEi7+PTK3nuq8cFMH
/Jv6r+l7Pk71R/W/JZIjVSUnxfMk+I/vI4LRW4yUOj7fXbzY/z77I63ebmoxmdU2
belOMo1ifRTOM7iHHow6+v7tPiR9g3sZ0f2R9dE7K+6yiGJn/8Kts3yKgPWLk60F
K3+8A9phxH+HrhWMhCz3+DoI8iTdtBPMP4MvETFuogpZfKeQCl7ytCb38dT7UHSl
mn0ABBM3Mf2S89YsegGQEmCIZFCbsKC3
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:43 2025 by rpki-client