Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/248a2e95-2e14-37da-95b2-fd2655abd5d8.roa
File:                     248a2e95-2e14-37da-95b2-fd2655abd5d8.roa (raw, json)
Hash identifier:          5RT/RWO/bPho4/ijQTzfHIkncFk7PXaAqu72bSRMnl0=
Subject key identifier:   0F:CD:1C:4D:A6:17:58:DE:0B:16:2B:F4:C1:76:5D:E5:3D:1E:70:9F
Certificate issuer:       /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial:       010D0C9F4328584AC1D5893A092E5A0F50DBD700
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/248a2e95-2e14-37da-95b2-fd2655abd5d8.roa
Signing time:             Tue 05 Aug 2025 16:02:01 +0000
ROA not before:           Tue 05 Aug 2025 16:02:01 +0000
ROA not after:            Mon 03 Nov 2025 17:02:01 +0000
asID:                     7859
IP address blocks:        2607:f440::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:d5:89:3a:09:2e:5a:0f:50:db:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
        Validity
            Not Before: Aug  5 16:02:01 2025 GMT
            Not After : Nov  3 17:02:01 2025 GMT
        Subject: CN=640c99b0-31da-47aa-bbb4-4737eb4bd77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:93:b4:eb:e6:cc:3c:b7:ac:b6:09:2b:17:
                    1c:75:1f:ea:70:7c:a5:15:16:60:0a:76:78:a4:e1:
                    a5:b0:03:bf:e0:48:46:41:bd:db:29:76:11:87:c5:
                    0d:98:d4:ac:de:b3:9d:b8:34:27:12:67:63:d9:f0:
                    2e:9c:58:51:c7:4b:c1:2a:3a:df:5b:d2:92:63:9d:
                    a3:d7:ec:1d:c9:72:10:a2:cb:c6:6a:18:d6:78:d7:
                    81:cf:27:5b:64:0b:bb:1e:f2:29:e7:f9:c3:6e:90:
                    3a:8e:ed:2d:2c:a2:fa:b3:f4:de:56:98:d0:27:f4:
                    a3:3a:a5:8f:51:ec:3a:52:ee:c1:b0:5f:1d:a8:04:
                    b4:3b:d2:ed:03:21:bc:86:67:74:cf:65:ef:be:7c:
                    9f:36:c2:7e:f6:9a:70:c0:66:e4:7a:71:7a:06:23:
                    9b:2d:24:c1:d5:9a:2b:57:88:e3:2d:83:55:fe:31:
                    58:c4:45:bf:72:d5:98:dc:1a:f9:b6:d7:69:89:5c:
                    7b:cf:17:32:42:91:3f:22:22:51:53:4e:f2:a5:cf:
                    62:c4:08:5f:c3:4c:c2:a4:2f:02:b6:5d:fd:e1:7a:
                    3e:a3:62:70:ca:6a:d7:34:3a:05:6f:6b:c6:5a:1e:
                    52:7b:fe:1b:e2:e3:e7:62:8f:97:8f:9a:35:7b:ae:
                    33:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CD:1C:4D:A6:17:58:DE:0B:16:2B:F4:C1:76:5D:E5:3D:1E:70:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/248a2e95-2e14-37da-95b2-fd2655abd5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl

            X509v3 Authority Key Identifier:
                keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:9a:66:ad:1b:db:4e:e8:01:fa:a8:27:c9:a7:a7:81:27:0e:
         65:94:19:f1:a3:6c:fa:ab:b3:3c:38:eb:91:27:b0:ef:61:e7:
         d6:0e:38:e9:e3:08:59:f5:ef:d2:27:91:d1:41:8c:c0:b9:14:
         bb:87:81:78:1e:7a:dc:4c:f9:77:13:6a:90:45:25:93:e3:74:
         d1:96:f6:dd:7c:28:52:28:a7:16:7a:92:18:c7:2f:06:99:e8:
         4c:2c:8a:e2:88:4f:cc:82:55:23:bd:35:cd:53:a1:0f:77:64:
         16:75:c6:9f:8a:7b:56:00:f5:1c:6c:ea:56:3e:01:9f:d1:4c:
         2f:5a:84:18:79:cb:d5:20:98:41:2a:e8:c0:18:6b:1b:d5:a6:
         fc:37:b3:a6:7b:0e:b8:09:18:31:a6:81:1a:c4:c8:31:70:d3:
         0a:16:dc:f8:93:e4:a6:ee:e3:0a:65:be:20:9b:79:00:a6:92:
         a3:a8:2c:97:4f:ca:d4:3a:ca:53:a9:81:26:08:b5:00:54:39:
         c0:c3:61:f6:98:a4:68:35:2d:65:6a:90:e8:0a:64:a0:bf:69:
         14:7f:a3:22:06:66:a0:91:72:85:e7:a2:fc:dd:b3:a8:ff:00:
         4e:a7:e8:b5:c5:9c:88:d9:91:7e:b9:1d:57:fb:54:75:7a:94:
         24:1f:51:55
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErB1Yk6CS5aD1Db1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj
YTM4MB4XDTI1MDgwNTE2MDIwMVoXDTI1MTEwMzE3MDIwMVowLzEtMCsGA1UEAxMk
NjQwYzk5YjAtMzFkYS00N2FhLWJiYjQtNDczN2ViNGJkNzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiViTtOvmzDy3rLYJKxccdR/qcHylFRZgCnZ4
pOGlsAO/4EhGQb3bKXYRh8UNmNSs3rOduDQnEmdj2fAunFhRx0vBKjrfW9KSY52j
1+wdyXIQosvGahjWeNeBzydbZAu7HvIp5/nDbpA6ju0tLKL6s/TeVpjQJ/SjOqWP
Uew6Uu7BsF8dqAS0O9LtAyG8hmd0z2XvvnyfNsJ+9ppwwGbkenF6BiObLSTB1Zor
V4jjLYNV/jFYxEW/ctWY3Br5ttdpiVx7zxcyQpE/IiJRU07ypc9ixAhfw0zCpC8C
tl394Xo+o2JwymrXNDoFb2vGWh5Se/4b4uPnYo+Xj5o1e64zGQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA/NHE2mF1jeCxYr9MF2XeU9HnCfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2
ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvMjQ4YTJlOTUtMmUxNC0z
N2RhLTk1YjItZmQyNjU1YWJkNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3
ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4
Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh
NTkwOGNhMzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBommatG9tO6AH6qCfJp6eBJw5llBnxo2z6q7M8OOuRJ7DvYefWDjjp
4whZ9e/SJ5HRQYzAuRS7h4F4HnrcTPl3E2qQRSWT43TRlvbdfChSKKcWepIYxy8G
mehMLIriiE/MglUjvTXNU6EPd2QWdcafintWAPUcbOpWPgGf0UwvWoQYecvVIJhB
KujAGGsb1ab8N7Omew64CRgxpoEaxMgxcNMKFtz4k+Sm7uMKZb4gm3kAppKjqCyX
T8rUOspTqYEmCLUAVDnAw2H2mKRoNS1lapDoCmSgv2kUf6MiBmagkXKF56L83bOo
/wBOp+i1xZyI2ZF+uR1X+1R1epQkH1FV
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:08:13 2025 by rpki-client