Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bfb11dcb-2448-3847-af76-78341b0b2817.roa
File:                     bfb11dcb-2448-3847-af76-78341b0b2817.roa (raw, json)
Hash identifier:          31b2f6q05JMR2xBqxwhNTPpmB9N7mL8FwwZCqFyZXbw=
Subject key identifier:   BE:75:D7:F6:41:7C:4D:60:E2:3C:D2:18:72:9F:5E:C5:CA:CB:F0:86
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962C37E166C9B40CA96200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bfb11dcb-2448-3847-af76-78341b0b2817.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8052::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2c:37:e1:66:c9:b4:0c:a9:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=3c4f3b7c-ba4e-408a-8089-9543d2eafa68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:67:32:4c:51:01:c3:e7:81:ec:f2:f2:72:
                    c2:ca:3f:b2:60:99:1c:ee:a7:83:9f:3d:7f:d1:93:
                    20:c5:35:02:7c:9f:01:21:d0:4a:8e:c4:cb:2f:e5:
                    e8:3f:fd:55:78:d3:1e:b6:47:d7:54:58:ec:54:17:
                    5b:c3:92:c7:6a:4e:53:8d:7c:c5:26:71:09:81:a7:
                    df:fd:58:70:53:15:f1:07:0b:cb:39:f1:00:13:61:
                    b3:7a:90:b2:26:79:9c:06:d0:17:cc:dc:f9:fb:f6:
                    96:b3:73:0b:a5:23:93:75:bc:c2:8a:22:1a:dd:5b:
                    52:80:64:66:5f:ce:13:0e:5a:ca:46:06:06:f5:eb:
                    d0:8c:4f:2e:ca:12:3f:ca:05:8b:39:5e:fb:82:2f:
                    09:68:58:4b:a7:56:ed:65:b6:37:21:a2:28:59:c5:
                    24:23:02:05:67:b1:1e:37:5f:c3:86:f8:05:f2:f4:
                    24:30:53:af:ab:a1:84:0b:94:25:5c:53:f5:c8:1b:
                    4e:f7:7a:8b:ec:48:24:c0:bc:84:b1:08:f8:ba:bb:
                    af:dc:ba:d4:b7:c0:af:fd:32:32:63:ab:fd:b8:a2:
                    5f:fe:98:78:f5:25:4e:81:36:1e:50:72:95:0d:68:
                    0e:eb:fd:60:4b:d7:9e:2e:5f:a7:75:b5:b7:e0:4c:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:75:D7:F6:41:7C:4D:60:E2:3C:D2:18:72:9F:5E:C5:CA:CB:F0:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bfb11dcb-2448-3847-af76-78341b0b2817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8052::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:8e:53:e8:01:07:8c:f9:77:5b:fc:f0:85:77:2a:75:aa:
         93:32:e7:b3:f3:9a:e9:e4:b2:6e:e3:a3:e2:11:0d:c7:9e:16:
         95:07:a3:f4:3f:6e:7b:f5:b6:5d:3f:2f:2b:ed:16:71:5e:13:
         19:94:0a:4c:ea:db:d2:4b:d9:81:aa:bf:59:79:5f:d8:55:1e:
         4e:88:a5:35:2f:f2:5f:2c:0a:c0:c8:05:da:e3:a4:4d:29:c6:
         34:21:fc:a9:c6:17:4f:c5:b2:20:96:1f:db:85:1d:ab:29:4d:
         45:4b:c0:7a:b6:3c:34:48:f2:64:36:b7:2d:23:09:d3:be:a8:
         2b:9d:a9:a4:d2:60:fe:e5:86:35:0f:01:22:e2:40:b2:f7:3a:
         c5:fb:64:b4:69:a6:80:ba:82:70:09:c8:55:f0:bc:24:c7:60:
         1d:1e:bc:d2:78:c8:47:c3:ec:b3:6e:6b:15:ec:27:c7:a4:17:
         42:fa:ef:21:d4:b0:10:06:48:21:92:d4:40:16:14:06:da:d6:
         ca:af:0d:62:2b:fc:fd:25:54:10:ad:30:ac:90:9c:80:eb:c3:
         28:71:1f:c4:a0:73:a7:c7:c5:e1:b8:60:a8:e0:00:56:7f:04:
         3d:cd:44:b3:af:e1:bf:76:cd:ab:dd:c5:bf:8d:d8:0a:fb:7f:
         59:89:5e:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqeliw34WbJtAypYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
M2M0ZjNiN2MtYmE0ZS00MDhhLTgwODktOTU0M2QyZWFmYTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3lnMkxRAcPngezy8nLCyj+yYJkc7qeDnz1/
0ZMgxTUCfJ8BIdBKjsTLL+XoP/1VeNMetkfXVFjsVBdbw5LHak5TjXzFJnEJgaff
/VhwUxXxBwvLOfEAE2GzepCyJnmcBtAXzNz5+/aWs3MLpSOTdbzCiiIa3VtSgGRm
X84TDlrKRgYG9evQjE8uyhI/ygWLOV77gi8JaFhLp1btZbY3IaIoWcUkIwIFZ7Ee
N1/DhvgF8vQkMFOvq6GEC5QlXFP1yBtO93qL7EgkwLyEsQj4uruv3LrUt8Cv/TIy
Y6v9uKJf/ph49SVOgTYeUHKVDWgO6/1gS9eeLl+ndbW34EyOPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL511/ZBfE1g4jzSGHKfXsXKy/CGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYmZiMTFkY2ItMjQ0OC0z
ODQ3LWFmNzYtNzgzNDFiMGIyODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYBS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJvTjlPoAQeM+Xdb/PCFdyp1qpMy57Pzmunksm7jo+IRDceeFpUH
o/Q/bnv1tl0/LyvtFnFeExmUCkzq29JL2YGqv1l5X9hVHk6IpTUv8l8sCsDIBdrj
pE0pxjQh/KnGF0/FsiCWH9uFHaspTUVLwHq2PDRI8mQ2ty0jCdO+qCudqaTSYP7l
hjUPASLiQLL3OsX7ZLRppoC6gnAJyFXwvCTHYB0evNJ4yEfD7LNuaxXsJ8ekF0L6
7yHUsBAGSCGS1EAWFAba1sqvDWIr/P0lVBCtMKyQnIDrwyhxH8Sgc6fHxeG4YKjg
AFZ/BD3NRLOv4b92zavdxb+N2Ar7f1mJXgo=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:56:51 2025 by rpki-client