Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f6af021-f44a-3247-84ae-d1916638160c.roa
File:                     8f6af021-f44a-3247-84ae-d1916638160c.roa (raw, json)
Hash identifier:          aX6974R6/qcrw2RkwLXIBU3PtfK/6xcfpZ2FNOY/oIo=
Subject key identifier:   85:AD:22:9F:F1:EA:F9:B6:AF:E1:38:A8:CD:E1:CA:6E:DE:C1:2A:77
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9653A176D074B215016840
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f6af021-f44a-3247-84ae-d1916638160c.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2607:f098:20ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:53:a1:76:d0:74:b2:15:01:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=506c2f76-5acf-4054-bad4-cebf99dbcc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:fb:ab:85:5c:d3:28:49:a1:a0:de:55:ac:
                    73:e3:8c:77:36:ff:c6:8e:35:75:e3:8c:fc:f2:b3:
                    dc:8f:8b:92:fc:b6:bc:56:bf:8a:d4:d8:ef:5c:49:
                    f0:09:86:31:14:db:2f:b1:f6:11:56:46:65:a8:5e:
                    da:6f:84:ef:15:b8:d0:27:9e:91:e3:ee:fd:9d:58:
                    93:c2:7e:f4:98:72:48:21:90:fd:37:ac:91:2a:b8:
                    55:7b:b6:54:1e:bb:85:3a:03:eb:83:70:00:ac:6a:
                    e2:26:90:b6:91:de:4a:3d:f0:79:37:f4:e5:46:31:
                    d5:cf:9f:44:5c:aa:f7:1c:c2:cb:e5:7c:f1:e7:eb:
                    bf:3f:93:d9:85:f5:7b:73:3f:cd:1a:6c:97:13:69:
                    23:58:31:f9:1f:5d:8f:d7:e4:da:9a:c6:bb:44:b2:
                    45:3d:ec:38:e7:62:35:b0:a7:e8:9d:17:2d:8d:1e:
                    cb:8b:70:ab:a2:27:80:18:61:7f:c6:05:18:39:8c:
                    af:20:dc:a4:93:d1:43:0b:c2:3f:fe:98:72:e2:01:
                    fe:fb:d5:a7:6d:6e:f9:9b:3b:7d:ec:e5:5c:7d:f0:
                    e7:8b:b9:e1:49:31:4b:5d:08:c9:02:05:4f:33:a4:
                    b2:5e:4c:4b:ae:78:49:f1:6f:4a:af:86:4b:0c:29:
                    3b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AD:22:9F:F1:EA:F9:B6:AF:E1:38:A8:CD:E1:CA:6E:DE:C1:2A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f6af021-f44a-3247-84ae-d1916638160c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:20ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ab:fa:b8:17:02:bb:80:0a:04:20:95:c6:e4:86:7c:49:cc:
         7c:d2:ea:0d:ce:16:33:46:d4:5a:93:50:b5:d0:1e:8d:eb:e0:
         c4:cd:e0:da:62:86:31:77:b8:99:a6:55:38:1d:b3:0b:33:0c:
         76:63:3d:0f:dc:86:60:1d:ef:e3:e1:92:8a:80:c0:c7:ce:a9:
         2d:4c:49:82:17:b1:66:d3:fe:25:87:07:fa:7d:c4:51:72:dd:
         6d:69:e3:6f:10:7c:0e:9b:0b:00:d6:eb:f5:da:97:00:ba:dd:
         38:86:79:db:63:de:ca:40:e8:00:1a:b7:5b:78:f7:b7:16:df:
         4f:a3:0f:46:64:15:80:fe:58:ad:59:c9:35:5e:22:b4:8f:75:
         1f:11:78:c6:93:6a:59:b1:b0:d7:19:85:7b:80:b6:f5:60:2b:
         89:e4:6d:cb:c0:30:49:27:20:84:26:b5:0b:94:bc:9d:1f:b2:
         a7:de:e8:5e:ff:d1:9b:20:50:13:3d:30:02:0e:88:e8:f6:1f:
         31:dc:b4:03:16:4c:90:cf:d3:e6:51:0f:f0:31:ab:99:73:04:
         6d:90:83:a3:31:ac:18:e7:70:ee:21:23:f7:d5:8d:25:55:0c:
         af:ee:70:80:22:7a:16:23:ea:4a:cd:cc:4d:4f:a9:90:e9:22:
         c7:d2:2f:c9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqellOhdtB0shUBaEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
NTA2YzJmNzYtNWFjZi00MDU0LWJhZDQtY2ViZjk5ZGJjYzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXz7q4Vc0yhJoaDeVaxz44x3Nv/GjjV144z8
8rPcj4uS/La8Vr+K1NjvXEnwCYYxFNsvsfYRVkZlqF7ab4TvFbjQJ56R4+79nViT
wn70mHJIIZD9N6yRKrhVe7ZUHruFOgPrg3AArGriJpC2kd5KPfB5N/TlRjHVz59E
XKr3HMLL5Xzx5+u/P5PZhfV7cz/NGmyXE2kjWDH5H12P1+Tamsa7RLJFPew452I1
sKfonRctjR7Li3CroieAGGF/xgUYOYyvINykk9FDC8I//phy4gH++9WnbW75mzt9
7OVcffDni7nhSTFLXQjJAgVPM6SyXkxLrnhJ8W9Kr4ZLDCk7hwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIWtIp/x6vm2r+E4qM3hym7ewSp3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOGY2YWYwMjEtZjQ0YS0z
MjQ3LTg0YWUtZDE5MTY2MzgxNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwmCD/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHGr+rgXAruACgQglcbkhnxJzHzS6g3OFjNG1FqTULXQHo3r4MTN
4NpihjF3uJmmVTgdswszDHZjPQ/chmAd7+PhkoqAwMfOqS1MSYIXsWbT/iWHB/p9
xFFy3W1p428QfA6bCwDW6/XalwC63TiGedtj3spA6AAat1t497cW30+jD0ZkFYD+
WK1ZyTVeIrSPdR8ReMaTalmxsNcZhXuAtvVgK4nkbcvAMEknIIQmtQuUvJ0fsqfe
6F7/0ZsgUBM9MAIOiOj2HzHctAMWTJDP0+ZRD/Axq5lzBG2Qg6MxrBjncO4hI/fV
jSVVDK/ucIAiehYj6krNzE1PqZDpIsfSL8k=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:09:04 2025 by rpki-client