Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa
File:                     961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa (raw, json)
Hash identifier:          JXAotv7zZkrDz0ok84ut8DvAgkhzoQaDyefW+Q2a1uo=
Subject key identifier:   96:A4:0C:8F:63:A4:ED:DC:69:13:DA:4D:AA:99:C9:6E:8E:3F:4E:77
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9659DBC5C991C9C8A35F00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:80e6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:59:db:c5:c9:91:c9:c8:a3:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=b5c1f443-54a1-4a48-bd16-7a4d14a11434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:59:da:6d:2f:d5:05:5f:a5:f0:db:14:02:
                    77:cd:b1:0f:db:56:db:60:bf:54:14:7b:46:fa:b9:
                    22:da:10:7f:01:57:10:09:2e:a3:c8:24:85:41:0c:
                    3c:3c:6b:ce:f2:c2:a0:22:8a:be:26:e8:ed:38:54:
                    bd:67:29:e5:77:87:ec:82:56:7f:f8:83:02:40:21:
                    1f:9a:1c:33:76:2c:b9:ac:d0:2c:46:f1:7d:86:db:
                    33:6d:3a:e9:50:1c:77:43:21:5c:c6:f1:93:19:d5:
                    97:df:40:ef:85:a7:23:ad:8b:b5:03:a3:d7:99:c5:
                    be:1e:fa:63:78:1b:74:2e:c9:9a:46:a2:86:d9:6f:
                    7a:28:58:39:16:6e:f3:0c:48:fa:94:32:13:80:e7:
                    7b:14:82:d0:2b:01:1b:03:ef:0d:c8:d9:13:91:74:
                    c7:cc:07:33:9f:7e:8f:11:ee:20:f9:b9:a0:12:30:
                    bb:cd:34:2f:f1:3f:9d:f2:30:44:fb:46:21:e9:54:
                    7a:a7:6a:96:ea:2e:af:8e:1e:98:d9:8e:7d:28:b1:
                    76:30:97:90:83:a0:23:60:39:24:18:3f:e4:ab:f3:
                    e3:2d:dd:8a:7d:c8:85:64:32:fe:fc:b1:1f:df:09:
                    7f:4c:74:5d:da:b6:0e:55:92:5f:6e:6d:82:99:4e:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A4:0C:8F:63:A4:ED:DC:69:13:DA:4D:AA:99:C9:6E:8E:3F:4E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/961f9069-ede8-3b32-9cd9-dda85a2fbedd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:02:10:d2:82:c0:b0:e2:7f:75:2d:66:43:a0:64:d7:f6:26:
         f6:6c:87:f0:37:9b:3b:d2:e6:90:16:e8:f0:31:55:5a:11:ea:
         17:d8:a6:51:d9:c8:3b:b7:89:76:dd:8f:56:50:8c:61:e9:00:
         2e:68:50:55:75:57:4e:f5:9e:5c:e2:8d:e6:d1:bb:b6:bd:6f:
         ec:63:98:c5:ef:f6:0c:ed:02:ce:58:1b:36:2e:5b:a3:14:f9:
         e6:da:a1:ca:5f:4e:3b:04:d9:6c:c8:94:34:76:c4:ab:8f:84:
         6d:90:5b:f0:a7:22:68:b5:35:02:8b:ad:0b:26:5b:30:a0:37:
         58:ce:66:f4:4b:6d:ae:5c:68:8c:16:a0:d1:a7:77:03:99:fc:
         f9:9c:b9:47:07:98:68:05:f1:d0:e8:b6:bb:1f:8b:61:76:44:
         3d:a3:8e:de:3c:d9:4c:a5:5c:22:36:c8:48:c3:25:ef:f6:15:
         7d:7a:13:7c:94:75:30:38:1d:f4:a0:4b:72:5e:98:05:c7:59:
         39:89:74:66:5a:ab:49:63:8a:1d:45:87:d2:ec:32:d8:4a:40:
         ef:74:69:50:56:94:e8:22:cc:1e:61:cd:c9:49:34:0a:88:2f:
         52:b0:4d:c3:c6:e9:39:15:b1:38:48:89:ce:f9:54:14:3b:8b:
         ab:e8:9a:0c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqellnbxcmRycijXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
YjVjMWY0NDMtNTRhMS00YTQ4LWJkMTYtN2E0ZDE0YTExNDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3RZ2m0v1QVfpfDbFAJ3zbEP21bbYL9UFHtG
+rki2hB/AVcQCS6jyCSFQQw8PGvO8sKgIoq+JujtOFS9Zynld4fsglZ/+IMCQCEf
mhwzdiy5rNAsRvF9htszbTrpUBx3QyFcxvGTGdWX30DvhacjrYu1A6PXmcW+Hvpj
eBt0LsmaRqKG2W96KFg5Fm7zDEj6lDITgOd7FILQKwEbA+8NyNkTkXTHzAczn36P
Ee4g+bmgEjC7zTQv8T+d8jBE+0Yh6VR6p2qW6i6vjh6Y2Y59KLF2MJeQg6AjYDkk
GD/kq/PjLd2KfciFZDL+/LEf3wl/THRd2rYOVZJfbm2CmU6rWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJakDI9jpO3caRPaTaqZyW6OP053MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOTYxZjkwNjktZWRlOC0z
YjMyLTljZDktZGRhODVhMmZiZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYDm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGgCENKCwLDif3UtZkOgZNf2JvZsh/A3mzvS5pAW6PAxVVoR6hfY
plHZyDu3iXbdj1ZQjGHpAC5oUFV1V071nlzijebRu7a9b+xjmMXv9gztAs5YGzYu
W6MU+ebaocpfTjsE2WzIlDR2xKuPhG2QW/CnImi1NQKLrQsmWzCgN1jOZvRLba5c
aIwWoNGndwOZ/PmcuUcHmGgF8dDotrsfi2F2RD2jjt482UylXCI2yEjDJe/2FX16
E3yUdTA4HfSgS3JemAXHWTmJdGZaq0ljih1Fh9LsMthKQO90aVBWlOgizB5hzclJ
NAqIL1KwTcPG6TkVsThIic75VBQ7i6vomgw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:05 2025 by rpki-client