Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/1a39e9ab-299b-33c9-9b54-58d9c1d81572.roa
File:                     1a39e9ab-299b-33c9-9b54-58d9c1d81572.roa (raw, json)
Hash identifier:          c9OVHos+u31vVDybNgabG7YBEw44zdHw/DAmvZ2eff8=
Subject key identifier:   7B:4B:54:43:9F:CC:14:CB:8C:B9:C9:2A:90:7A:F2:0C:DE:28:88:E0
Certificate issuer:       /CN=c9f25ce3-01f4-4dff-bf38-059af5b64d3b
Certificate serial:       010D0C9F43285849B14A0C7EA2423823411D2920
Authority key identifier: 22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/1a39e9ab-299b-33c9-9b54-58d9c1d81572.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     11925
IP address blocks:        2607:7140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0c:7e:a2:42:38:23:41:1d:29:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f25ce3-01f4-4dff-bf38-059af5b64d3b
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=2f0376a3-8774-4f32-aaaf-d90361db28d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:05:5f:28:bd:95:59:a8:d4:83:d9:aa:11:42:
                    0f:ab:29:d3:67:09:18:5c:fc:82:0f:2a:b3:52:68:
                    60:0f:82:b8:08:14:f8:fc:38:8b:2b:d9:34:9b:2d:
                    37:8d:0f:5d:6b:ec:cf:8c:8d:e9:63:59:52:7f:89:
                    60:8b:bc:f5:4a:a6:85:c9:7c:88:ad:d3:e5:25:f1:
                    b7:75:37:df:08:45:d7:ae:b2:bd:10:4a:49:0b:40:
                    af:fb:de:95:d1:cc:93:61:67:66:61:94:c5:b9:ca:
                    dd:cb:ee:de:61:cf:0c:9e:e2:c2:b3:00:7e:65:5f:
                    36:5d:9a:9c:c6:10:53:53:bf:c2:ae:9f:00:6b:ca:
                    a1:51:e9:70:09:a7:d7:ab:f8:1c:09:02:d6:74:bf:
                    f6:21:ee:80:f7:04:69:ab:de:bb:6d:f3:5a:e9:a0:
                    49:a9:00:22:1e:b3:32:58:29:27:b8:4f:24:8b:7e:
                    cd:71:1d:ec:3f:6c:10:02:75:8d:5a:02:46:48:e9:
                    ce:f0:a9:47:b4:f3:01:e1:14:49:3d:cf:ed:dc:dd:
                    ca:ad:05:a7:9f:fd:8c:b2:20:e1:8d:e2:d3:70:29:
                    95:ad:ae:ae:8e:13:2b:c2:05:76:fe:b7:7a:a9:c6:
                    b8:9f:b0:84:98:7a:e9:d9:fa:c1:66:95:23:ff:7f:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4B:54:43:9F:CC:14:CB:8C:B9:C9:2A:90:7A:F2:0C:DE:28:88:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/1a39e9ab-299b-33c9-9b54-58d9c1d81572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.crl

            X509v3 Authority Key Identifier:
                keyid:22:5A:CC:2D:57:96:FF:3A:CE:BC:72:6B:24:0F:D9:DB:23:9A:D2:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9f25ce3-01f4-4dff-bf38-059af5b64d3b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f9:56:f8:57:d6:63:f5:29:60:9b:d6:64:9c:6d:90:cd:bc:
         f2:af:19:48:ed:30:0f:62:bb:19:a4:5c:79:b3:1c:dd:4e:53:
         1d:c7:11:d6:c0:e7:97:76:e3:39:02:98:15:2a:bd:a9:72:82:
         a2:0f:bf:4f:96:25:f8:2d:32:6a:2b:4f:8f:2c:8b:62:b4:7a:
         f1:63:7d:c7:d1:6e:47:d0:28:39:21:9b:23:87:5a:54:a7:fb:
         60:17:19:e0:6d:45:a6:48:24:6f:f3:2d:b9:5d:51:ee:e5:93:
         3c:e8:15:07:7d:50:5f:1f:f9:7f:1a:fd:f2:a6:b1:52:88:8a:
         ed:52:21:3b:4b:56:ef:c2:8a:7e:bc:1b:30:f0:c5:b8:27:e8:
         51:80:d1:3a:59:44:9b:0b:d7:f2:93:75:36:9d:5c:b5:a2:3e:
         b3:1d:6e:de:e4:f8:96:e6:8e:01:42:8b:ca:5c:3f:9f:86:e2:
         42:ca:85:32:d7:33:f9:aa:31:b6:6c:3a:28:ae:9f:19:7e:82:
         52:31:fc:d3:cc:a4:c1:4f:19:f3:74:f8:74:bf:b7:c5:57:37:
         83:c0:26:c4:98:29:93:5b:32:01:26:a7:6f:07:f1:39:d6:97:
         be:d3:5e:92:a3:69:13:d0:bc:6b:56:f8:68:bf:a7:14:37:e2:
         86:b3:61:58
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSgx+okI4I0EdKSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlmMjVjZTMtMDFmNC00ZGZmLWJmMzgtMDU5YWY1YjY0
ZDNiMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
MmYwMzc2YTMtODc3NC00ZjMyLWFhYWYtZDkwMzYxZGIyOGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAVfKL2VWajUg9mqEUIPqynTZwkYXPyCDyqz
UmhgD4K4CBT4/DiLK9k0my03jQ9da+zPjI3pY1lSf4lgi7z1SqaFyXyIrdPlJfG3
dTffCEXXrrK9EEpJC0Cv+96V0cyTYWdmYZTFucrdy+7eYc8MnuLCswB+ZV82XZqc
xhBTU7/Crp8Aa8qhUelwCafXq/gcCQLWdL/2Ie6A9wRpq967bfNa6aBJqQAiHrMy
WCknuE8ki37NcR3sP2wQAnWNWgJGSOnO8KlHtPMB4RRJPc/t3N3KrQWnn/2MsiDh
jeLTcCmVra6ujhMrwgV2/rd6qca4n7CEmHrp2frBZpUj/3/c7wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHtLVEOfzBTLjLnJKpB68gzeKIjgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOWYy
NWNlMy0wMWY0LTRkZmYtYmYzOC0wNTlhZjViNjRkM2IvMWEzOWU5YWItMjk5Yi0z
M2M5LTliNTQtNThkOWMxZDgxNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzlmMjVjZTMtMDFmNC00ZGZmLWJm
MzgtMDU5YWY1YjY0ZDNiL2M5ZjI1Y2UzLTAxZjQtNGRmZi1iZjM4LTA1OWFmNWI2
NGQzYi5jcmwwHwYDVR0jBBgwFoAUIlrMLVeW/zrOvHJrJA/Z2yOa0iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jOWYyNWNlMy0wMWY0LTRkZmYtYmYzOC0wNTlh
ZjViNjRkM2IuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdxQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAx+Vb4V9Zj9Slgm9ZknG2QzbzyrxlI7TAPYrsZpFx5sxzdTlMdxxHW
wOeXduM5ApgVKr2pcoKiD79PliX4LTJqK0+PLItitHrxY33H0W5H0Cg5IZsjh1pU
p/tgFxngbUWmSCRv8y25XVHu5ZM86BUHfVBfH/l/Gv3yprFSiIrtUiE7S1bvwop+
vBsw8MW4J+hRgNE6WUSbC9fyk3U2nVy1oj6zHW7e5PiW5o4BQovKXD+fhuJCyoUy
1zP5qjG2bDoorp8ZfoJSMfzTzKTBTxnzdPh0v7fFVzeDwCbEmCmTWzIBJqdvB/E5
1pe+016So2kT0LxrVvhov6cUN+KGs2FY
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:18:52 2025 by rpki-client