Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ad4798a0-b865-3094-9439-c153ddea64bc.roa
File:                     ad4798a0-b865-3094-9439-c153ddea64bc.roa (raw, json)
Hash identifier:          OqGlEVpv0SYeYbBgGp4b6+JkeKy6aT6xBMpseH4je7w=
Subject key identifier:   97:20:1F:3B:E4:04:8E:FC:30:D8:31:F1:46:00:1C:09:C2:2E:DE:08
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9631AF96517A22DF554E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ad4798a0-b865-3094-9439-c153ddea64bc.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8038::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:31:af:96:51:7a:22:df:55:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=1aea935f-8c96-4227-a5ef-4a44bbb7ae4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:d8:bd:71:b0:97:6c:73:d0:c0:a0:c8:77:
                    dd:fe:02:d3:d8:0e:89:2f:b6:5d:91:81:7a:ef:bc:
                    e2:7d:2f:e6:ea:42:4f:99:0b:0a:d3:ea:e0:fa:98:
                    7a:72:5f:43:3b:e6:22:c6:71:47:7b:5a:c2:e0:77:
                    70:e1:e6:c0:8a:81:3b:4b:21:a8:c4:91:a7:41:e6:
                    d0:68:7b:3a:45:ec:bc:fb:53:81:c6:24:3b:b3:1c:
                    e8:dd:da:98:32:60:37:2d:7b:1a:2b:c7:dc:86:83:
                    fb:62:17:8a:65:9e:b7:51:d4:9b:97:e8:49:5b:be:
                    74:84:eb:76:0b:b3:88:a4:3d:3d:10:1e:dd:13:67:
                    a5:ba:c5:b5:37:cd:b6:fd:6a:f0:35:7b:b8:d3:91:
                    6b:20:4c:ac:58:cb:57:56:ae:71:1a:fc:22:47:8c:
                    88:bb:21:db:93:7c:31:52:6d:2f:88:ef:75:10:6b:
                    74:aa:50:f0:11:c1:6d:d9:87:e6:07:a1:60:f9:03:
                    95:5c:88:14:54:e9:6b:36:99:8b:d2:10:d0:13:64:
                    9e:45:7a:b8:ff:30:1f:20:fb:01:cd:33:2c:12:bc:
                    6c:d2:c2:f0:44:bf:59:93:d3:63:bf:09:09:6e:5a:
                    8d:90:71:58:50:2f:c4:35:31:93:8d:09:12:92:4d:
                    87:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:20:1F:3B:E4:04:8E:FC:30:D8:31:F1:46:00:1C:09:C2:2E:DE:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ad4798a0-b865-3094-9439-c153ddea64bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8038::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:62:a5:49:4d:db:0a:15:74:74:0a:f3:02:33:58:00:88:73:
         85:ab:0e:dd:33:ef:83:99:93:a0:46:0d:51:7e:4f:38:47:63:
         32:a2:58:c2:66:b6:cd:22:11:b9:95:94:50:5f:f1:61:a1:18:
         29:d8:2f:ad:0a:84:3c:d5:27:4f:ab:ee:1f:ba:61:96:33:6f:
         6e:79:96:36:9d:94:0d:fe:f6:8f:a1:db:91:f0:72:37:7e:ec:
         2c:15:e7:25:16:c9:ce:5a:4e:b6:a1:89:11:ac:ad:33:d0:32:
         17:52:21:b4:be:90:0c:2f:d8:1c:69:be:5d:05:80:58:a8:a4:
         b2:e6:e9:01:fb:4d:10:fa:a8:12:29:84:ae:68:38:7a:24:1b:
         14:83:ed:dd:d1:5c:75:9e:59:a8:9e:d9:81:e4:b1:5e:ec:92:
         e5:3e:86:56:d9:06:f3:1f:6e:6f:a4:d3:a2:2d:00:1d:a8:0a:
         29:20:14:e0:8a:ea:a6:41:ab:66:3c:5b:dc:57:8f:ec:9e:b4:
         2d:da:20:2c:a1:76:ab:96:71:eb:56:b5:3d:40:d6:b3:c6:56:
         3c:c3:40:72:b6:78:5d:62:01:04:b3:6e:db:57:3b:5a:f3:6b:
         7d:26:6b:c3:1e:87:b4:c4:31:b8:f0:3b:e8:bd:84:bf:e8:87:
         92:d0:62:e8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqeljGvllF6It9VTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
MWFlYTkzNWYtOGM5Ni00MjI3LWE1ZWYtNGE0NGJiYjdhZTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ3YvXGwl2xz0MCgyHfd/gLT2A6JL7ZdkYF6
77zifS/m6kJPmQsK0+rg+ph6cl9DO+YixnFHe1rC4Hdw4ebAioE7SyGoxJGnQebQ
aHs6Rey8+1OBxiQ7sxzo3dqYMmA3LXsaK8fchoP7YheKZZ63UdSbl+hJW750hOt2
C7OIpD09EB7dE2elusW1N822/WrwNXu405FrIEysWMtXVq5xGvwiR4yIuyHbk3wx
Um0viO91EGt0qlDwEcFt2YfmB6Fg+QOVXIgUVOlrNpmL0hDQE2SeRXq4/zAfIPsB
zTMsErxs0sLwRL9Zk9NjvwkJblqNkHFYUC/ENTGTjQkSkk2H6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJcgHzvkBI78MNgx8UYAHAnCLt4IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYWQ0Nzk4YTAtYjg2NS0z
MDk0LTk0MzktYzE1M2RkZWE2NGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYA4
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD5ipUlN2woVdHQK8wIzWACIc4WrDt0z74OZk6BGDVF+TzhHYzKi
WMJmts0iEbmVlFBf8WGhGCnYL60KhDzVJ0+r7h+6YZYzb255ljadlA3+9o+h25Hw
cjd+7CwV5yUWyc5aTrahiRGsrTPQMhdSIbS+kAwv2Bxpvl0FgFiopLLm6QH7TRD6
qBIphK5oOHokGxSD7d3RXHWeWaie2YHksV7skuU+hlbZBvMfbm+k06ItAB2oCikg
FOCK6qZBq2Y8W9xXj+yetC3aICyhdquWcetWtT1A1rPGVjzDQHK2eF1iAQSzbttX
O1rza30ma8Meh7TEMbjwO+i9hL/oh5LQYug=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:26 2025 by rpki-client