Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa
File:                     3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa (raw, json)
Hash identifier:          QjBLtzTxsyN4a3DC2Py+np0vkbb/EnzcQVaITg4CwSE=
Subject key identifier:   28:8B:65:1E:83:1B:67:B1:AD:5B:F2:BB:AB:46:E6:94:7C:6D:42:46
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584A90A0B4113A45C0ACE8A00D30
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     26383
IP address blocks:        2605:e440:11::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b4:11:3a:45:c0:ac:e8:a0:0d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=4d22dc9d-bcb4-4a46-aa60-eafb88f2871c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:fc:23:b0:93:b8:60:10:14:e3:e8:c6:29:
                    6a:bb:b6:9b:3f:ff:b2:6b:26:a5:ab:14:1b:84:7f:
                    b3:86:93:c2:8e:83:73:8a:1b:13:bb:c0:57:76:b4:
                    f2:07:f1:b4:73:33:de:f9:1f:5e:9a:ac:fd:2b:e7:
                    80:ef:c3:22:c3:cf:8b:6f:0b:8f:49:f8:cf:53:a8:
                    6c:93:b6:8c:50:6c:c6:cc:2c:07:28:bf:72:2d:50:
                    40:62:90:a3:96:ce:6d:39:88:f6:67:94:92:31:1c:
                    86:93:62:a4:81:87:df:37:d1:94:1e:0b:e9:ea:11:
                    ed:8f:3c:d4:87:45:3f:12:2c:7e:e6:40:80:da:cc:
                    5c:a3:1c:f8:d8:60:62:09:a6:11:8d:f8:b6:50:1a:
                    6b:ac:48:ff:c6:08:f3:98:b8:70:8b:10:8c:2e:9e:
                    b1:6d:44:3e:8d:c0:f9:94:53:10:3c:3e:46:08:c8:
                    6d:f0:c5:05:bc:51:50:bc:be:29:53:60:57:88:c0:
                    d7:87:a7:9f:67:e4:7c:d3:67:4d:5d:74:25:4c:92:
                    63:df:96:8b:bc:b1:34:2a:c6:5c:c5:e5:25:59:c8:
                    2e:3d:08:0e:91:74:10:98:c8:7d:b9:ee:87:74:cd:
                    29:7f:36:a7:3e:a2:a7:f2:51:0b:27:b0:f0:26:45:
                    17:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8B:65:1E:83:1B:67:B1:AD:5B:F2:BB:AB:46:E6:94:7C:6D:42:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:11::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:85:24:89:a6:10:08:49:06:e6:e9:f7:5f:08:c1:ea:f8:e8:
         a7:bb:38:50:0d:98:d9:55:ab:3c:b6:df:a7:a8:04:b5:d8:17:
         4a:4c:82:85:6a:5a:6b:7b:f8:cc:ef:99:22:1d:4f:e2:61:e3:
         75:31:ca:3f:c9:f7:f0:72:0b:e9:64:f0:ed:c4:19:4b:18:28:
         f4:48:e8:29:b3:8f:ec:70:db:be:5c:a6:f8:30:4f:2a:24:f0:
         88:e3:70:c9:61:ad:29:4e:af:ba:ab:83:0b:36:61:e8:75:12:
         49:dd:e1:b1:f0:c9:ca:d4:4e:e7:78:94:c5:36:e1:21:7d:45:
         b2:9b:df:d6:00:d0:46:04:f5:bc:87:71:51:42:59:f1:54:bb:
         03:6d:a9:b0:4c:10:80:c6:c6:9a:5b:a0:ea:a3:f8:b0:eb:32:
         c0:eb:a9:63:24:6f:38:88:59:c3:79:bc:73:10:7b:9d:75:86:
         1e:bc:f8:3e:71:85:d1:b3:99:5d:6f:b9:06:cf:c6:0a:f3:5d:
         63:f1:35:eb:48:05:d5:aa:9a:6d:37:48:3a:ad:08:42:ae:5f:
         32:ee:67:4c:59:92:aa:ac:91:e4:ab:e4:4e:fa:6c:bf:3d:be:
         36:a1:0b:b9:28:f2:eb:a9:96:c6:a8:69:40:23:23:64:67:7a:
         1a:97:f3:f7
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEqQoLQROkXArOigDTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4
ZjgxMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
NGQyMmRjOWQtYmNiNC00YTQ2LWFhNjAtZWFmYjg4ZjI4NzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7X8I7CTuGAQFOPoxilqu7abP/+yayalqxQb
hH+zhpPCjoNzihsTu8BXdrTyB/G0czPe+R9emqz9K+eA78Miw8+LbwuPSfjPU6hs
k7aMUGzGzCwHKL9yLVBAYpCjls5tOYj2Z5SSMRyGk2KkgYffN9GUHgvp6hHtjzzU
h0U/Eix+5kCA2sxcoxz42GBiCaYRjfi2UBprrEj/xgjzmLhwixCMLp6xbUQ+jcD5
lFMQPD5GCMht8MUFvFFQvL4pU2BXiMDXh6efZ+R802dNXXQlTJJj35aLvLE0KsZc
xeUlWcguPQgOkXQQmMh9ue6HdM0pfzanPqKn8lELJ7DwJkUX4QIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFCiLZR6DG2exrVvyu6tG5pR8bUJGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj
YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvM2FkMTdkZDQtZmJmMC0z
MjQwLWFiODItMzNjMTZmYmMxYmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh
ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5
OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy
ZDA4OThmODEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgXkQAAR
AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAEoUkiaYQCEkG5un3XwjB6vjop7s4UA2Y2VWrPLbfp6gEtdgX
SkyChWpaa3v4zO+ZIh1P4mHjdTHKP8n38HIL6WTw7cQZSxgo9EjoKbOP7HDbvlym
+DBPKiTwiONwyWGtKU6vuquDCzZh6HUSSd3hsfDJytRO53iUxTbhIX1Fspvf1gDQ
RgT1vIdxUUJZ8VS7A22psEwQgMbGmlug6qP4sOsywOupYyRvOIhZw3m8cxB7nXWG
Hrz4PnGF0bOZXW+5Bs/GCvNdY/E160gF1aqabTdIOq0IQq5fMu5nTFmSqqyR5Kvk
Tvpsvz2+NqELuSjy66mWxqhpQCMjZGd6Gpfz9w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:05 2025 by rpki-client