Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa
File:                     d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa (raw, json)
Hash identifier:          hjJroQdDuyoRVafwlR56OMUjSVOLuu68mCTjHJnZ/1k=
Subject key identifier:   6D:00:B8:82:49:6E:5C:41:72:1F:DF:44:29:0B:6B:E9:F0:5C:B1:DA
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F43285849CE9A695AD7605AFDA3AECD40
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     11260
IP address blocks:        2607:fbd8::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:69:5a:d7:60:5a:fd:a3:ae:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=119ea14f-dd40-42c8-9997-3700efc6ebb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:8c:1e:69:0c:da:b4:62:af:c3:1a:e5:0a:
                    de:2f:6c:86:15:b9:c2:c0:4f:80:9d:06:6d:0b:04:
                    5a:f6:e1:16:c6:e1:30:0d:a7:7f:f7:99:04:f3:9a:
                    5b:36:25:14:f5:a1:65:85:2a:f5:81:bf:e0:8b:04:
                    3a:b2:7a:63:5a:a0:f2:b5:92:d2:c5:1e:a8:84:5e:
                    54:ee:1a:9c:ef:16:bf:49:75:1d:c2:bf:13:91:3f:
                    e4:ef:3c:a6:1e:45:68:05:1b:53:1b:43:d0:a0:f2:
                    35:97:76:09:7d:18:18:29:78:e2:98:ea:b5:26:4c:
                    af:7b:c7:e6:55:7b:fb:a1:7f:f6:a9:82:16:05:3b:
                    ac:0c:a4:ac:72:6b:70:19:97:57:94:1f:b5:d5:09:
                    e6:92:a2:bc:90:01:47:e6:46:bf:27:23:d0:02:53:
                    fc:91:53:5e:b0:4a:82:fc:43:08:1c:ce:5d:e9:39:
                    23:38:6d:8c:57:68:67:88:e0:70:18:2b:2c:26:79:
                    28:e1:4b:8d:7a:fa:4e:ac:06:5e:ee:41:02:0b:eb:
                    77:11:79:09:56:3c:ec:04:b7:51:cc:fe:31:68:fa:
                    35:1e:a0:71:aa:6e:5b:56:81:9f:94:e5:13:29:f1:
                    a8:94:08:b3:2c:85:11:ec:43:58:df:f3:cd:43:48:
                    1f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:00:B8:82:49:6E:5C:41:72:1F:DF:44:29:0B:6B:E9:F0:5C:B1:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/d4cb5d83-def3-33fb-b0e3-92cf97dc2abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fbd8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:2b:6a:8b:8a:ea:6d:ea:66:ef:31:6b:a6:e4:f0:ea:02:4e:
         0b:60:93:37:62:59:7c:f8:2a:05:ae:b4:12:36:69:55:b9:c2:
         a2:ce:9d:33:94:ac:aa:b3:9f:99:44:b0:af:20:6e:d3:b6:74:
         8f:b9:0c:9e:e8:f0:61:16:76:32:5a:f9:54:0c:27:d5:eb:b0:
         7a:5a:7e:43:57:c6:c6:a0:ea:42:7e:0a:59:ac:88:38:7a:d0:
         49:c3:1f:70:4b:d6:0b:51:a4:de:ff:1b:e2:77:11:43:23:aa:
         c6:5e:a7:df:4b:32:33:96:ab:0e:9e:91:f4:2f:fa:e0:65:bf:
         3f:41:5b:aa:ff:61:6a:90:bd:60:95:2e:89:fa:83:a7:b2:97:
         f0:09:b5:b2:ab:c7:da:67:2c:1f:b8:42:0e:55:07:ae:54:90:
         7d:a4:8a:ff:ba:26:ed:56:3c:63:14:d3:70:d7:80:97:1b:2f:
         fd:87:a5:3e:22:80:eb:e0:99:eb:56:92:1d:bf:28:2c:57:b0:
         91:b0:78:c4:b2:da:73:df:e7:69:b0:07:f6:12:7a:65:92:66:
         2e:58:08:37:30:ad:1b:f2:f3:45:04:3f:5c:2a:3c:69:75:82:
         65:f5:16:8a:4b:bf:8a:b7:2a:6b:b6:e3:32:b6:07:38:62:f3:
         70:71:64:95
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnOmmla12Ba/aOuzUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj
MDU0MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
MTE5ZWExNGYtZGQ0MC00MmM4LTk5OTctMzcwMGVmYzZlYmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd2MHmkM2rRir8Ma5QreL2yGFbnCwE+AnQZt
CwRa9uEWxuEwDad/95kE85pbNiUU9aFlhSr1gb/giwQ6snpjWqDytZLSxR6ohF5U
7hqc7xa/SXUdwr8TkT/k7zymHkVoBRtTG0PQoPI1l3YJfRgYKXjimOq1Jkyve8fm
VXv7oX/2qYIWBTusDKSscmtwGZdXlB+11QnmkqK8kAFH5ka/JyPQAlP8kVNesEqC
/EMIHM5d6TkjOG2MV2hniOBwGCssJnko4UuNevpOrAZe7kECC+t3EXkJVjzsBLdR
zP4xaPo1HqBxqm5bVoGflOUTKfGolAizLIUR7ENY3/PNQ0gfgQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG0AuIJJblxBch/fRCkLa+nwXLHaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4
ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvZDRjYjVkODMtZGVmMy0z
M2ZiLWIwZTMtOTJjZjk3ZGMyYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw
NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz
YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3
YmM3M2MwNTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf72DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDXK2qLiupt6mbvMWum5PDqAk4LYJM3Yll8+CoFrrQSNmlVucKizp0z
lKyqs5+ZRLCvIG7TtnSPuQye6PBhFnYyWvlUDCfV67B6Wn5DV8bGoOpCfgpZrIg4
etBJwx9wS9YLUaTe/xvidxFDI6rGXqffSzIzlqsOnpH0L/rgZb8/QVuq/2FqkL1g
lS6J+oOnspfwCbWyq8faZywfuEIOVQeuVJB9pIr/uibtVjxjFNNw14CXGy/9h6U+
IoDr4JnrVpIdvygsV7CRsHjEstpz3+dpsAf2EnplkmYuWAg3MK0b8vNFBD9cKjxp
dYJl9RaKS7+KtyprtuMytgc4YvNwcWSV
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:33:45 2025 by rpki-client