Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa
File:                     94cc771e-e665-32c4-8307-085edb945c30.roa (raw, json)
Hash identifier:          WoVL3gxk2oBXS22hPTD9UmcRaMBvYu2+KWteWKbzMpI=
Subject key identifier:   EA:80:03:7A:7F:CD:8E:FC:F7:2B:0F:C0:86:A6:93:4E:C2:EF:F0:7F
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584AC2E0FBD793CC241A58E8E640
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2607:f368:804::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:fb:d7:93:cc:24:1a:58:e8:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=a17d882e-e149-4c76-a83e-3de6e52964c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7f:20:2f:78:9a:d4:f0:95:13:ca:4c:cc:19:
                    7a:a4:d3:b6:3b:52:eb:61:9a:90:a7:ae:f2:bf:18:
                    38:43:88:bc:3a:30:e3:34:10:8e:1c:47:d2:a0:55:
                    7e:8e:5b:51:37:b1:7c:e1:ca:2b:04:a0:1b:b0:80:
                    cd:41:d0:8d:71:93:c0:a4:9c:5a:d9:f1:5d:1c:50:
                    f3:31:da:fd:1b:78:d1:85:9a:e1:b6:ef:27:8c:3d:
                    c7:83:33:50:42:7a:d6:b3:66:d9:40:66:cf:29:54:
                    08:05:1b:0d:2b:34:bd:4c:a3:8a:06:c9:d6:94:22:
                    c9:05:c4:ff:0a:bb:6e:85:18:a1:fd:59:c5:ef:14:
                    88:0e:06:99:36:09:32:5b:e5:5f:de:69:31:ea:4f:
                    24:13:d7:a8:bf:55:84:3a:30:c2:30:94:eb:2e:52:
                    a5:b1:01:af:db:fd:6f:d0:a0:ae:7c:7f:1b:03:5e:
                    f7:07:28:e2:25:2b:c3:43:00:75:15:ec:87:02:b2:
                    a2:5e:ca:13:84:bd:cf:34:4d:13:1d:1f:f3:2a:5e:
                    ba:54:3d:5b:1d:49:63:27:db:94:2c:03:b5:ff:1b:
                    e7:df:b8:c8:69:c3:13:7e:2d:ee:d1:1e:6b:f4:6d:
                    1c:8e:f5:24:cf:30:9b:5c:01:46:67:0e:29:45:3b:
                    17:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:03:7A:7F:CD:8E:FC:F7:2B:0F:C0:86:A6:93:4E:C2:EF:F0:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:5c:65:7b:2f:87:b6:c8:a9:18:83:c3:5b:97:bd:cc:92:3c:
         c8:ff:82:4b:59:a3:22:cd:61:07:2d:0b:66:ea:5d:22:0a:10:
         3d:18:d0:64:b5:a4:c3:b9:f7:66:1d:0c:67:b9:e8:b6:47:c8:
         12:db:cf:ec:f0:12:46:cf:19:e1:2e:44:68:c7:db:08:92:58:
         1b:11:ea:e3:9d:b3:da:71:54:a8:54:94:8e:3b:81:de:6c:40:
         4a:1d:3b:b1:54:0f:b6:86:0d:97:10:63:50:6c:64:dc:83:44:
         26:b8:8c:57:14:4d:af:cd:62:91:16:5f:83:f5:1e:30:3d:73:
         1f:6d:cf:82:e9:2c:a3:29:f1:2d:22:a4:4c:fa:91:8c:8c:c8:
         84:8d:cd:f6:d7:90:d1:a6:bb:c3:34:9d:25:8a:fe:12:0e:a7:
         c6:60:83:8e:0e:c5:da:32:42:c5:56:e3:59:28:d6:29:1c:13:
         8c:9c:ca:70:ce:0c:53:49:b1:d0:3d:73:26:1c:1e:e9:bf:69:
         90:37:65:76:9f:f4:24:21:18:b9:af:2f:98:58:4b:bf:5f:14:
         80:00:60:69:ef:08:5a:6b:39:66:72:59:3b:9b:d3:d9:bc:20:
         9e:89:c6:fb:c0:3b:18:de:84:90:86:1d:1a:02:92:06:47:0e:
         08:c0:e8:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErC4PvXk8wkGljo5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNk
OWM3MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
YTE3ZDg4MmUtZTE0OS00Yzc2LWE4M2UtM2RlNmU1Mjk2NGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH8gL3ia1PCVE8pMzBl6pNO2O1LrYZqQp67y
vxg4Q4i8OjDjNBCOHEfSoFV+jltRN7F84corBKAbsIDNQdCNcZPApJxa2fFdHFDz
Mdr9G3jRhZrhtu8njD3HgzNQQnrWs2bZQGbPKVQIBRsNKzS9TKOKBsnWlCLJBcT/
CrtuhRih/VnF7xSIDgaZNgkyW+Vf3mkx6k8kE9eov1WEOjDCMJTrLlKlsQGv2/1v
0KCufH8bA173ByjiJSvDQwB1FeyHArKiXsoThL3PNE0THR/zKl66VD1bHUljJ9uU
LAO1/xvn37jIacMTfi3u0R5r9G0cjvUkzzCbXAFGZw4pRTsXqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOqAA3p/zY789ysPwIamk07C7/B/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjAx
YjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvOTRjYzc3MWUtZTY2NS0z
MmM0LTgzMDctMDg1ZWRiOTQ1YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYwMWI2OTQtNjI0Mi00YjFjLWE4
NDEtZDBhNzIxNGNkOWM3L2U2MDFiNjk0LTYyNDItNGIxYy1hODQxLWQwYTcyMTRj
ZDljNy5jcmwwHwYDVR0jBBgwFoAUlnqmOy7TqmVEC36L9Uu68e2VUAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3
MjE0Y2Q5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgfzaAgE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABlcZXsvh7bIqRiDw1uXvcySPMj/gktZoyLNYQctC2bqXSIKED0Y
0GS1pMO592YdDGe56LZHyBLbz+zwEkbPGeEuRGjH2wiSWBsR6uOds9pxVKhUlI47
gd5sQEodO7FUD7aGDZcQY1BsZNyDRCa4jFcUTa/NYpEWX4P1HjA9cx9tz4LpLKMp
8S0ipEz6kYyMyISNzfbXkNGmu8M0nSWK/hIOp8Zgg44OxdoyQsVW41ko1ikcE4yc
ynDODFNJsdA9cyYcHum/aZA3ZXaf9CQhGLmvL5hYS79fFIAAYGnvCFprOWZyWTub
09m8IJ6JxvvAOxjehJCGHRoCkgZHDgjA6Ko=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:15:50 2025 by rpki-client