Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa
File:                     be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa (raw, json)
Hash identifier:          BEwKUiUNFyOC+2XLTurH/ODHhS/nQMl5+eJfIgxShJY=
Subject key identifier:   B7:14:F5:16:CB:0B:5E:ED:53:88:BC:89:90:F0:2B:25:F0:8B:65:18
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F43285849DC8FABA49423C31975425500
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     18875
IP address blocks:        2607:d880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:ab:a4:94:23:c3:19:75:42:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=dc7d786a-4c09-4489-bfd6-5c29885adaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:74:c1:3c:98:59:83:54:a1:5f:7e:8e:88:23:
                    a3:b6:7c:e6:3b:15:da:71:45:f6:9d:76:68:93:6e:
                    ce:98:07:54:f4:b8:b8:0f:91:b7:49:88:1b:5d:c4:
                    50:90:78:c0:e3:bb:9d:10:ad:45:00:63:1d:38:aa:
                    d2:e6:63:f7:a8:a0:0b:a3:fe:ef:61:ae:65:2d:77:
                    e8:6c:bb:10:9f:5a:3d:d5:65:c3:06:17:a2:08:10:
                    31:91:b1:d1:25:82:e1:0a:25:ca:c4:c4:cf:e2:b2:
                    95:0c:ae:0b:ce:a5:91:f7:19:a2:9e:1a:58:18:bc:
                    3d:4d:de:1a:11:d5:39:fc:8b:06:7f:ce:40:f0:b7:
                    65:40:bd:d2:20:bf:79:17:66:64:62:cb:be:a0:05:
                    a6:45:4d:38:fe:fa:e6:d7:2c:b4:0a:99:c8:5b:cd:
                    71:2c:9b:b7:da:6c:dd:ec:95:10:a7:28:a0:5f:5c:
                    49:1b:ff:cb:72:d7:cd:5e:b7:15:e6:4f:23:3d:ce:
                    c1:41:33:dd:97:27:62:f9:28:4c:cf:12:48:49:69:
                    0a:de:7d:76:62:8d:ef:3d:90:6f:cc:69:64:19:0b:
                    e7:ba:f3:12:5d:8c:c8:85:71:fb:f8:70:51:33:80:
                    66:25:c8:da:69:08:94:79:de:c3:42:91:e1:c6:7b:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:14:F5:16:CB:0B:5E:ED:53:88:BC:89:90:F0:2B:25:F0:8B:65:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/be165f07-6e8e-3144-8e98-8df39d6dd4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:70:50:52:bd:c3:51:6d:47:e0:75:66:7a:f3:f2:7a:4e:
         72:12:bf:1d:90:f5:d0:96:67:6d:12:7f:62:01:c3:a6:a8:44:
         0a:92:81:76:a0:8b:df:5a:a6:cc:df:3f:fa:6f:b4:e6:fb:66:
         a5:e1:82:a4:26:6f:76:c2:86:88:e8:f0:7c:28:e9:59:0c:bb:
         2e:58:76:ba:68:d4:66:46:f2:80:b5:89:9e:19:60:7f:38:5d:
         75:4e:4c:19:b0:4d:46:10:f7:6a:22:c8:85:ad:e3:c3:9f:36:
         57:f8:42:db:fd:08:d6:d6:16:7e:74:10:5d:bc:f9:11:35:b3:
         5c:c6:98:48:90:d3:ab:eb:3e:fe:56:a2:96:00:88:f1:ee:09:
         d8:bd:46:8f:0d:f0:0e:6c:cc:6e:96:b6:70:fd:16:71:01:91:
         25:25:53:2d:bc:ae:a9:35:81:9b:f6:7a:b2:7c:3a:74:7d:28:
         87:ba:c7:8a:9f:97:65:2d:1a:2d:71:cd:bd:3e:00:db:90:93:
         7d:db:ad:d5:2b:63:42:c5:9d:6e:7d:d0:f7:ad:9c:f8:58:40:
         bd:b9:48:3a:10:ae:19:a2:2b:f1:fe:41:c3:51:29:b4:43:0d:
         2f:d1:3d:e8:9a:c2:b2:08:10:f8:6b:09:1d:1d:9f:e7:8e:bd:
         73:24:1f:a5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEncj6uklCPDGXVCVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBhOTM2YzctNGExOS00NGE5LWI3NWQtY2MyMmMyNzRk
YjI2MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
ZGM3ZDc4NmEtNGMwOS00NDg5LWJmZDYtNWMyOTg4NWFkYWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3TBPJhZg1ShX36OiCOjtnzmOxXacUX2nXZo
k27OmAdU9Li4D5G3SYgbXcRQkHjA47udEK1FAGMdOKrS5mP3qKALo/7vYa5lLXfo
bLsQn1o91WXDBheiCBAxkbHRJYLhCiXKxMTP4rKVDK4LzqWR9xminhpYGLw9Td4a
EdU5/IsGf85A8LdlQL3SIL95F2ZkYsu+oAWmRU04/vrm1yy0CpnIW81xLJu32mzd
7JUQpyigX1xJG//LctfNXrcV5k8jPc7BQTPdlydi+ShMzxJISWkK3n12Yo3vPZBv
zGlkGQvnuvMSXYzIhXH7+HBRM4BmJcjaaQiUed7DQpHhxnvK+wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLcU9RbLC17tU4i8iZDwKyXwi2UYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5
MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIyYzI3NGRiMjYvYmUxNjVmMDctNmU4ZS0z
MTQ0LThlOTgtOGRmMzlkNmRkNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjBhOTM2YzctNGExOS00NGE5LWI3
NWQtY2MyMmMyNzRkYjI2LzYwYTkzNmM3LTRhMTktNDRhOS1iNzVkLWNjMjJjMjc0
ZGIyNi5jcmwwHwYDVR0jBBgwFoAUXsGx+knOv7rYWgzeKmEsO+5yM+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MGE5MzZjNy00YTE5LTQ0YTktYjc1ZC1jYzIy
YzI3NGRiMjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfYgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCMSXBQUr3DUW1H4HVmevPyek5yEr8dkPXQlmdtEn9iAcOmqEQKkoF2
oIvfWqbM3z/6b7Tm+2al4YKkJm92woaI6PB8KOlZDLsuWHa6aNRmRvKAtYmeGWB/
OF11TkwZsE1GEPdqIsiFrePDnzZX+ELb/QjW1hZ+dBBdvPkRNbNcxphIkNOr6z7+
VqKWAIjx7gnYvUaPDfAObMxulrZw/RZxAZElJVMtvK6pNYGb9nqyfDp0fSiHuseK
n5dlLRotcc29PgDbkJN9263VK2NCxZ1ufdD3rZz4WEC9uUg6EK4Zoivx/kHDUSm0
Qw0v0T3omsKyCBD4awkdHZ/njr1zJB+l
-----END CERTIFICATE-----
Generated at Mon Jun 16 06:06:19 2025 by rpki-client