Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7ce0ef9d-2ab3-38e9-8f61-bf7385266e1d.roa
File:                     7ce0ef9d-2ab3-38e9-8f61-bf7385266e1d.roa (raw, json)
Hash identifier:          kfNIeSLcqc+mIrPfU0+ArN5oNEbXBMYu1f+EXMgoU9Q=
Subject key identifier:   84:5A:6E:1E:49:E8:9E:42:AF:28:7F:61:DE:05:3E:E1:52:6B:BE:F0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9659BDFB320881BE088580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7ce0ef9d-2ab3-38e9-8f61-bf7385266e1d.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:80db::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:59:bd:fb:32:08:81:be:08:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=f299e43b-3174-4b48-9380-e86f113cd616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7b:59:82:28:25:e8:f6:90:57:ba:92:3d:b3:
                    39:dc:4d:27:dd:42:d5:24:3f:6e:e8:71:14:66:f8:
                    c7:65:a4:7b:67:66:8c:00:cd:df:fe:ba:b5:56:46:
                    55:97:fa:86:5d:e8:db:44:fa:41:d5:c6:0b:b6:fd:
                    61:0f:a0:3e:cd:10:a8:dc:dd:12:1a:20:29:0c:d4:
                    38:c8:00:11:f5:9a:9f:b9:7d:1a:30:32:2c:74:e8:
                    37:99:35:ec:5f:4b:54:4f:29:4d:0f:0c:75:c4:d3:
                    37:b7:e3:2e:e5:91:2b:eb:69:68:b0:41:7d:ce:ca:
                    94:2c:dc:1b:e1:9e:ef:a4:48:f2:58:2f:ad:ad:56:
                    c3:d2:46:e1:bb:27:92:bc:49:46:09:1e:57:c7:01:
                    32:4e:97:80:65:a9:31:fa:35:4e:1a:35:30:24:49:
                    7f:e9:53:d5:53:00:c8:5d:39:d3:de:e8:b5:19:fa:
                    9f:be:b4:26:64:2b:ff:fc:70:41:cd:ff:f4:23:6b:
                    3d:14:68:00:de:af:a6:21:68:78:52:b2:28:fa:00:
                    b3:da:c4:f1:bd:1b:ca:41:58:c2:c8:19:e3:fc:d9:
                    05:9d:50:87:3b:5f:97:52:6f:19:d3:2a:7d:51:bb:
                    7d:74:0c:b3:34:81:8d:5d:c4:e5:b0:5e:85:46:45:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5A:6E:1E:49:E8:9E:42:AF:28:7F:61:DE:05:3E:E1:52:6B:BE:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7ce0ef9d-2ab3-38e9-8f61-bf7385266e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80db::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:78:9a:55:d2:67:e9:f9:36:e2:e6:22:6a:3b:bd:60:f5:
         83:f9:05:fe:13:14:a5:06:5d:7b:90:eb:a1:98:f2:73:02:50:
         c5:23:c0:b8:3b:7a:4a:03:2a:9b:34:bd:5f:72:21:a3:4e:5b:
         22:ab:95:4b:8a:92:b3:03:53:71:fc:d6:28:4e:7e:d8:6f:c6:
         c0:f9:13:1b:cd:14:ed:b1:d9:54:79:22:f0:90:53:0a:f8:45:
         78:74:dd:6f:4d:8e:b8:30:7f:b5:68:ab:c2:23:5c:a4:24:ce:
         94:8e:b3:7a:f9:82:25:19:95:00:4c:77:52:5d:f9:d0:f3:5f:
         bc:68:92:76:d4:8a:2c:b8:43:fe:88:41:8e:6a:ab:3e:cc:6a:
         3f:df:97:42:ee:8f:a9:b2:8b:33:c6:10:20:b8:b2:1d:e1:05:
         cf:79:0d:1a:30:55:a3:62:cf:90:63:28:df:53:ef:a2:d7:a8:
         99:98:e8:15:da:0e:0d:fe:af:5c:c2:07:c5:cd:0c:da:55:8d:
         50:8c:7a:8a:9f:54:ca:4d:d9:3a:18:95:b0:6a:a4:48:6a:6d:
         c4:65:d5:e2:d8:32:00:9e:d2:d2:7c:9f:43:04:da:49:56:0c:
         54:ea:49:51:31:55:e7:b6:7d:6e:31:58:1e:9c:d0:68:d7:45:
         86:01:6f:e6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqellm9+zIIgb4IhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
ZjI5OWU0M2ItMzE3NC00YjQ4LTkzODAtZTg2ZjExM2NkNjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHtZgigl6PaQV7qSPbM53E0n3ULVJD9u6HEU
ZvjHZaR7Z2aMAM3f/rq1VkZVl/qGXejbRPpB1cYLtv1hD6A+zRCo3N0SGiApDNQ4
yAAR9ZqfuX0aMDIsdOg3mTXsX0tUTylNDwx1xNM3t+Mu5ZEr62losEF9zsqULNwb
4Z7vpEjyWC+trVbD0kbhuyeSvElGCR5XxwEyTpeAZakx+jVOGjUwJEl/6VPVUwDI
XTnT3ui1GfqfvrQmZCv//HBBzf/0I2s9FGgA3q+mIWh4UrIo+gCz2sTxvRvKQVjC
yBnj/NkFnVCHO1+XUm8Z0yp9Ubt9dAyzNIGNXcTlsF6FRkVAhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIRabh5J6J5Cryh/Yd4FPuFSa77wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvN2NlMGVmOWQtMmFiMy0z
OGU5LThmNjEtYmY3Mzg1MjY2ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYDb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHKkeJpV0mfp+Tbi5iJqO71g9YP5Bf4TFKUGXXuQ66GY8nMCUMUj
wLg7ekoDKps0vV9yIaNOWyKrlUuKkrMDU3H81ihOfthvxsD5ExvNFO2x2VR5IvCQ
Uwr4RXh03W9Njrgwf7Voq8IjXKQkzpSOs3r5giUZlQBMd1Jd+dDzX7xoknbUiiy4
Q/6IQY5qqz7Maj/fl0Luj6myizPGECC4sh3hBc95DRowVaNiz5BjKN9T76LXqJmY
6BXaDg3+r1zCB8XNDNpVjVCMeoqfVMpN2ToYlbBqpEhqbcRl1eLYMgCe0tJ8n0ME
2klWDFTqSVExVee2fW4xWB6c0GjXRYYBb+Y=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:13 2025 by rpki-client