Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5bf27709-5e0e-3b9c-b3aa-07dd4e1dd63c.roa
File:                     5bf27709-5e0e-3b9c-b3aa-07dd4e1dd63c.roa (raw, json)
Hash identifier:          uATcZvd9AAe24suN0UO+F5OdgOO3ZDD8X43obyw5r80=
Subject key identifier:   73:61:2B:DA:C8:7A:F4:CB:01:03:47:63:43:DA:61:D1:78:8B:BA:47
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F43285849CB86BF2F0F7270AA0AD2E080
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5bf27709-5e0e-3b9c-b3aa-07dd4e1dd63c.roa
Signing time:             Fri 09 May 2025 10:34:25 +0000
ROA not before:           Fri 09 May 2025 10:34:25 +0000
ROA not after:            Thu 07 Aug 2025 10:34:25 +0000
asID:                     26383
IP address blocks:        2605:e440:46::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:86:bf:2f:0f:72:70:aa:0a:d2:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: May  9 10:34:25 2025 GMT
            Not After : Aug  7 10:34:25 2025 GMT
        Subject: CN=ccde549b-a6f9-4013-a921-52d62a977733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:69:ac:f3:34:8f:72:9b:11:7c:66:01:af:f6:
                    c5:33:a1:5e:72:41:ee:e0:47:21:cc:1e:3b:1d:b9:
                    77:0a:6a:5d:5b:27:99:91:a3:94:ed:cf:59:bd:7d:
                    85:ca:b6:79:23:4c:2b:92:4e:d8:5b:7f:d9:53:86:
                    bd:4a:3c:d7:63:69:53:06:94:28:86:b6:c3:ac:9d:
                    8e:59:54:88:60:51:0c:47:03:48:cd:10:d3:08:ee:
                    36:d5:cd:f6:52:de:0e:f9:6a:aa:65:c5:16:75:64:
                    80:d6:50:a9:f5:f5:61:f0:89:25:59:bf:9d:28:96:
                    fa:ce:ca:75:2a:8f:a4:01:e6:02:2e:cd:ce:30:98:
                    28:cf:05:26:ca:43:6a:68:31:15:7c:b2:a8:7d:4e:
                    57:6c:0e:69:b6:8b:21:87:54:c4:a0:0b:bb:7b:35:
                    a1:4f:2a:27:94:63:70:dd:ab:2d:98:dc:a6:a6:fa:
                    3c:47:e9:12:a7:cc:ed:4f:09:17:cf:c4:70:88:15:
                    e4:f9:cb:d4:5b:36:c8:5e:aa:e8:67:ea:43:2c:8a:
                    ed:5a:58:d3:e2:27:8b:c6:83:7a:16:20:01:f5:10:
                    49:a0:e0:e0:4d:f3:2f:06:0b:92:65:59:be:2d:fb:
                    7d:8b:d7:c9:33:78:5c:be:f6:23:b5:bc:6a:00:9a:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:61:2B:DA:C8:7A:F4:CB:01:03:47:63:43:DA:61:D1:78:8B:BA:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5bf27709-5e0e-3b9c-b3aa-07dd4e1dd63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:46::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:3f:31:9e:eb:08:41:2f:51:a1:67:43:4d:b8:0c:06:a7:ca:
         39:95:de:0c:cd:91:92:b6:22:2c:62:a6:c5:32:9c:bb:82:6e:
         05:b6:37:3f:61:57:e6:0c:63:4a:c3:80:b6:86:c9:b7:1d:5a:
         14:e8:d8:a9:37:05:76:26:11:47:ee:c4:d7:8d:38:f8:38:90:
         7b:db:a1:e2:46:2c:c3:5f:b3:8c:96:e6:fd:e8:97:d9:d8:e6:
         34:5e:9d:f4:33:e4:93:35:89:58:e9:e3:b3:b2:03:c2:02:97:
         27:f3:f8:e3:3d:a1:03:be:a2:c4:6c:37:51:57:ff:10:58:58:
         35:6c:18:0a:cf:e0:17:78:d9:b1:61:04:9d:9a:b3:cf:9c:94:
         2d:ce:ea:98:6f:b5:26:07:de:08:53:27:57:fb:47:df:dd:aa:
         94:b8:2a:07:e1:9a:c2:3e:dc:22:c1:49:a7:18:b4:e3:81:92:
         bd:f7:56:76:b9:43:d8:12:48:da:31:91:43:4b:3a:0b:b3:ad:
         4d:61:b0:ff:3a:a2:51:d4:41:e2:9e:be:d0:2d:d4:1d:c3:5b:
         c8:4c:8a:15:ac:3c:ac:4c:55:84:d2:8a:0f:7e:fe:c8:8a:5a:
         4a:07:37:c5:9f:e6:cb:9c:5a:a5:21:96:57:7b:a4:54:25:9b:
         ef:f6:52:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnLhr8vD3JwqgrS4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4
ZjgxMB4XDTI1MDUwOTEwMzQyNVoXDTI1MDgwNzEwMzQyNVowLzEtMCsGA1UEAxMk
Y2NkZTU0OWItYTZmOS00MDEzLWE5MjEtNTJkNjJhOTc3NzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimms8zSPcpsRfGYBr/bFM6FeckHu4EchzB47
Hbl3CmpdWyeZkaOU7c9ZvX2FyrZ5I0wrkk7YW3/ZU4a9SjzXY2lTBpQohrbDrJ2O
WVSIYFEMRwNIzRDTCO421c32Ut4O+WqqZcUWdWSA1lCp9fVh8IklWb+dKJb6zsp1
Ko+kAeYCLs3OMJgozwUmykNqaDEVfLKofU5XbA5ptoshh1TEoAu7ezWhTyonlGNw
3astmNympvo8R+kSp8ztTwkXz8RwiBXk+cvUWzbIXqroZ+pDLIrtWljT4ieLxoN6
FiAB9RBJoODgTfMvBguSZVm+Lft9i9fJM3hcvvYjtbxqAJoBxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHNhK9rIevTLAQNHY0PaYdF4i7pHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj
YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvNWJmMjc3MDktNWUwZS0z
YjljLWIzYWEtMDdkZDRlMWRkNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh
ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5
OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy
ZDA4OThmODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXkQABG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEM/MZ7rCEEvUaFnQ024DAanyjmV3gzNkZK2IixipsUynLuCbgW2
Nz9hV+YMY0rDgLaGybcdWhTo2Kk3BXYmEUfuxNeNOPg4kHvboeJGLMNfs4yW5v3o
l9nY5jRenfQz5JM1iVjp47OyA8IClyfz+OM9oQO+osRsN1FX/xBYWDVsGArP4Bd4
2bFhBJ2as8+clC3O6phvtSYH3ghTJ1f7R9/dqpS4KgfhmsI+3CLBSacYtOOBkr33
Vna5Q9gSSNoxkUNLOguzrU1hsP86olHUQeKevtAt1B3DW8hMihWsPKxMVYTSig9+
/siKWkoHN8Wf5sucWqUhlld7pFQlm+/2Uqo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:18:15 2025 by rpki-client