Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa
File:                     7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa (raw, json)
Hash identifier:          dDVjtztJNKTF6k9Yy0CNNkc4VBRm2F+lhMF4XTJx4r8=
Subject key identifier:   44:EA:92:54:D7:87:01:8E:0B:32:9C:90:45:08:8F:78:BC:BB:AC:CE
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F43285849B30E5B37CD9722077CD8AA80
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa
Signing time:             Wed 30 Apr 2025 16:12:27 +0000
ROA not before:           Wed 30 Apr 2025 16:12:27 +0000
ROA not after:            Tue 29 Jul 2025 16:12:27 +0000
asID:                     4473
IP address blocks:        2607:9bc0:1030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:0e:5b:37:cd:97:22:07:7c:d8:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Apr 30 16:12:27 2025 GMT
            Not After : Jul 29 16:12:27 2025 GMT
        Subject: CN=38bde218-4341-4b0c-8443-6e248c1e61fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:96:58:c2:e1:cf:de:c8:81:b9:4c:a3:dd:
                    0b:0f:8f:d1:7e:b5:73:e8:c4:92:7a:d1:cc:06:6f:
                    e5:43:43:33:0d:bb:2f:82:e2:c8:5a:98:74:e7:34:
                    92:88:55:f2:a7:1a:aa:37:b8:6e:07:5f:54:c2:ce:
                    e0:a9:93:4e:d7:c7:f4:71:0f:93:1d:3e:bb:03:9d:
                    c4:39:0b:dc:73:2c:16:b5:2b:6d:93:ad:1d:11:3d:
                    40:a7:97:5d:54:d3:10:f5:27:13:7f:d6:61:b2:eb:
                    dc:81:c6:a3:48:5f:9b:62:c1:4a:d3:f0:d0:89:c4:
                    73:f8:76:f4:31:6f:9b:22:6e:ff:8f:88:28:f2:6e:
                    46:a7:4e:c4:c1:ce:56:e5:f3:c7:23:25:17:10:9b:
                    58:46:16:80:9d:91:2d:be:ca:72:25:f0:7e:b5:16:
                    d2:e0:d8:d8:9f:f0:b3:68:79:18:4f:b0:26:7c:33:
                    57:a6:ca:9c:91:f4:8f:ab:1d:29:1f:b9:21:96:9d:
                    7c:5c:6b:96:99:d4:f3:c1:3b:6e:50:49:29:62:5b:
                    7a:8f:12:0b:d7:dc:14:80:f7:00:5c:76:ba:87:c6:
                    bf:93:13:a7:e7:1c:e4:42:97:d0:aa:c2:79:a8:a5:
                    13:a3:95:35:6f:c3:19:4b:5d:42:ee:aa:33:87:c3:
                    21:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:92:54:D7:87:01:8E:0B:32:9C:90:45:08:8F:78:BC:BB:AC:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6f:16:d6:82:1d:19:b0:05:e5:50:e2:72:33:de:e7:7a:02:
         3f:e0:81:68:53:31:3b:b8:6a:93:a4:9e:c5:9b:97:6d:fe:bc:
         63:80:d7:c8:d3:d7:f4:7f:2e:ca:66:2c:9f:d2:46:fb:c2:1e:
         68:80:29:6a:f5:44:6e:05:14:cd:83:3f:d0:d2:66:72:29:95:
         e2:56:8b:42:be:9a:21:cb:28:54:07:d5:58:f5:2a:ce:62:51:
         ef:0e:1a:a8:26:e3:eb:3a:7a:94:ab:af:e8:a4:01:37:19:f3:
         8b:cd:05:80:ae:ff:d5:0f:27:30:9e:6a:4d:10:99:5f:1c:e1:
         c3:10:17:23:c2:74:c3:b8:20:8d:cc:a5:b8:e9:52:33:38:4a:
         7c:4a:3f:98:74:88:8f:7e:2d:f6:03:70:9e:0f:b5:9f:68:ef:
         be:5a:eb:55:65:7b:fd:71:d7:f0:78:17:33:b0:6b:43:7d:a5:
         35:a6:a8:90:6c:00:08:f4:c8:d6:24:81:88:b6:7c:83:9d:29:
         04:e4:05:e1:b1:38:33:26:f9:b8:04:ea:eb:83:19:59:a2:3c:
         00:87:6c:5d:0a:84:cc:f2:c2:c2:b0:e8:4b:1b:33:5f:f6:85:
         1b:c7:71:7d:6a:32:d5:aa:b9:65:7c:8e:ca:7e:de:1b:89:d0:
         0f:b7:d3:6a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmzDls3zZciB3zYqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJkYThlYTItYTE2OC00YThiLWIwMWItMjFhNDIxZTcx
MzBlMB4XDTI1MDQzMDE2MTIyN1oXDTI1MDcyOTE2MTIyN1owLzEtMCsGA1UEAxMk
MzhiZGUyMTgtNDM0MS00YjBjLTg0NDMtNmUyNDhjMWU2MWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAWWWMLhz97IgblMo90LD4/RfrVz6MSSetHM
Bm/lQ0MzDbsvguLIWph05zSSiFXypxqqN7huB19Uws7gqZNO18f0cQ+THT67A53E
OQvccywWtSttk60dET1Ap5ddVNMQ9ScTf9ZhsuvcgcajSF+bYsFK0/DQicRz+Hb0
MW+bIm7/j4go8m5Gp07Ewc5W5fPHIyUXEJtYRhaAnZEtvspyJfB+tRbS4NjYn/Cz
aHkYT7AmfDNXpsqckfSPqx0pH7khlp18XGuWmdTzwTtuUEkpYlt6jxIL19wUgPcA
XHa6h8a/kxOn5xzkQpfQqsJ5qKUTo5U1b8MZS11C7qozh8MhZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFETqklTXhwGOCzKckEUIj3i8u6zOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRh
OGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFlNzEzMGUvN2YxN2VhYTgtNTIyMS0z
NWM5LWFkN2EtYmM2OTRlNTY4OTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGJkYThlYTItYTE2OC00YThiLWIw
MWItMjFhNDIxZTcxMzBlL2RiZGE4ZWEyLWExNjgtNGE4Yi1iMDFiLTIxYTQyMWU3
MTMwZS5jcmwwHwYDVR0jBBgwFoAUr/w7HHl4MT3z8v6+TaRLIToIXqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0
MjFlNzEzMGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgebwBAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHxvFtaCHRmwBeVQ4nIz3ud6Aj/ggWhTMTu4apOknsWbl23+vGOA
18jT1/R/LspmLJ/SRvvCHmiAKWr1RG4FFM2DP9DSZnIpleJWi0K+miHLKFQH1Vj1
Ks5iUe8OGqgm4+s6epSrr+ikATcZ84vNBYCu/9UPJzCeak0QmV8c4cMQFyPCdMO4
II3MpbjpUjM4SnxKP5h0iI9+LfYDcJ4PtZ9o775a61Vle/1x1/B4FzOwa0N9pTWm
qJBsAAj0yNYkgYi2fIOdKQTkBeGxODMm+bgE6uuDGVmiPACHbF0KhMzywsKw6Esb
M1/2hRvHcX1qMtWquWV8jsp+3huJ0A+302o=
-----END CERTIFICATE-----
Generated at Thu May 1 02:52:16 2025 by rpki-client