Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2cae84c-f3b7-3305-98a8-d02c88ae0fc9.roa
File:                     a2cae84c-f3b7-3305-98a8-d02c88ae0fc9.roa (raw, json)
Hash identifier:          U6HteTAUVstdLqzXsiktBgr4gXfumUCUt62GupsowYU=
Subject key identifier:   9F:01:15:40:E4:E7:EA:1A:1A:42:BE:1D:47:C4:D3:23:EF:21:F7:CD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96580EFB03633F7FA71E40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2cae84c-f3b7-3305-98a8-d02c88ae0fc9.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:803c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:58:0e:fb:03:63:3f:7f:a7:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=459b17b9-9140-4c13-b8a5-bf950f62d357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:0c:b6:f5:ff:ae:6f:ba:a1:64:ec:6c:40:
                    fb:d5:cf:94:16:6a:ff:77:e9:f2:96:76:83:ed:2a:
                    d1:b8:0c:37:eb:fd:77:6c:d5:af:5f:6c:23:fc:f6:
                    55:8f:57:bd:1f:b1:11:53:5f:78:70:89:e2:5b:58:
                    ea:ed:dd:fc:8e:4f:5e:eb:47:b5:ed:99:ab:5f:d2:
                    c8:9f:8c:34:1f:b4:c2:86:fc:b2:1e:6f:ca:8b:d6:
                    b3:32:30:8d:f9:e9:9f:b7:cb:ab:df:35:cd:03:89:
                    07:fa:ce:86:70:14:e1:da:51:ce:25:51:32:dd:cc:
                    a9:04:34:0b:1d:68:d2:1f:fe:dc:de:26:a3:5e:3d:
                    99:bf:1f:7f:90:2e:f6:2f:6a:43:3a:a0:2f:c7:56:
                    2e:6c:d9:03:03:b0:79:cb:72:77:ba:41:3d:98:f5:
                    c8:81:26:0f:90:25:cc:bb:50:20:40:4d:79:eb:ed:
                    06:b2:73:27:66:9b:68:dc:88:96:e3:b8:b5:c9:6c:
                    93:c9:ae:e4:a4:86:b9:16:2a:d5:6a:00:79:06:c0:
                    d1:60:aa:93:40:ad:97:2d:fb:54:95:96:f3:d1:32:
                    00:69:04:ea:e4:eb:2b:bb:b4:4b:8a:21:3c:e7:53:
                    94:8d:4b:ac:74:3c:26:67:0a:38:4b:a5:7c:cd:5f:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:01:15:40:E4:E7:EA:1A:1A:42:BE:1D:47:C4:D3:23:EF:21:F7:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2cae84c-f3b7-3305-98a8-d02c88ae0fc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:803c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7d:3f:d1:73:3f:c4:b7:ea:f4:1e:77:b0:d3:83:d8:46:fc:
         8e:0a:0d:b5:f9:6a:25:3c:aa:cb:0a:b3:54:a6:e4:da:56:76:
         2a:d6:b0:24:5d:f9:89:71:9f:37:bf:0b:b4:4a:6e:69:23:e6:
         81:37:c4:bf:ae:f7:de:d6:c7:3c:aa:60:cc:9d:1b:a9:cc:46:
         80:df:21:98:99:8d:8f:ab:eb:cd:dc:b1:c3:1a:0c:7d:6c:8a:
         f1:64:26:5a:53:9e:05:5d:40:91:5f:f6:c9:af:98:5d:0b:3c:
         71:97:07:1b:42:c1:e1:3a:35:97:8e:ca:ca:08:a6:a0:84:4c:
         90:77:8e:c0:fb:e1:86:8e:41:ee:ec:d3:ec:1c:2a:f6:20:42:
         c0:db:a9:76:2a:a9:81:a4:df:ec:b3:ad:bf:06:16:9c:f5:28:
         a5:ae:dd:1e:c4:cc:94:67:c5:2a:83:a4:43:a4:82:af:0a:e9:
         f3:37:1e:5a:16:21:6a:d7:1a:d5:e0:03:e5:bb:39:57:28:4c:
         5e:95:88:64:73:80:42:3e:8f:ec:51:fa:6e:ec:ca:01:07:79:
         0f:67:f5:d2:fe:6c:f8:f1:cd:a5:2a:84:54:5a:b3:51:c5:8f:
         bb:73:b4:73:81:a3:6f:a9:40:cc:02:9a:88:d6:7d:e8:5a:45:
         c9:76:34:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqellgO+wNjP3+nHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
NDU5YjE3YjktOTE0MC00YzEzLWI4YTUtYmY5NTBmNjJkMzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBQMtvX/rm+6oWTsbED71c+UFmr/d+nylnaD
7SrRuAw36/13bNWvX2wj/PZVj1e9H7ERU194cIniW1jq7d38jk9e60e17ZmrX9LI
n4w0H7TChvyyHm/Ki9azMjCN+emft8ur3zXNA4kH+s6GcBTh2lHOJVEy3cypBDQL
HWjSH/7c3iajXj2Zvx9/kC72L2pDOqAvx1YubNkDA7B5y3J3ukE9mPXIgSYPkCXM
u1AgQE156+0GsnMnZpto3IiW47i1yWyTya7kpIa5FirVagB5BsDRYKqTQK2XLftU
lZbz0TIAaQTq5Osru7RLiiE851OUjUusdDwmZwo4S6V8zV9sYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ8BFUDk5+oaGkK+HUfE0yPvIffNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTJjYWU4NGMtZjNiNy0z
MzA1LTk4YTgtZDAyYzg4YWUwZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYA8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGd9P9FzP8S36vQed7DTg9hG/I4KDbX5aiU8qssKs1Sm5NpWdirW
sCRd+Ylxnze/C7RKbmkj5oE3xL+u997WxzyqYMydG6nMRoDfIZiZjY+r683cscMa
DH1sivFkJlpTngVdQJFf9smvmF0LPHGXBxtCweE6NZeOysoIpqCETJB3jsD74YaO
Qe7s0+wcKvYgQsDbqXYqqYGk3+yzrb8GFpz1KKWu3R7EzJRnxSqDpEOkgq8K6fM3
HloWIWrXGtXgA+W7OVcoTF6ViGRzgEI+j+xR+m7sygEHeQ9n9dL+bPjxzaUqhFRa
s1HFj7tztHOBo2+pQMwCmojWfehaRcl2NHE=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:17:41 2025 by rpki-client