Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/8c15e199-df9d-3fa3-8769-5796c769ab2b.roa
File:                     8c15e199-df9d-3fa3-8769-5796c769ab2b.roa (raw, json)
Hash identifier:          k7vm8L8bXPBWo2o7xN8DsLe8oPflHyfuK9tjowffXpM=
Subject key identifier:   8A:BE:4A:F3:14:C1:EF:B8:F0:F4:6A:AE:E5:99:1F:D7:EC:39:94:9F
Certificate issuer:       /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
Certificate serial:       010D0C9F43285849F9DFBA5D3CE393BA2468B6F0
Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/8c15e199-df9d-3fa3-8769-5796c769ab2b.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     46484
IP address blocks:        2607:8d40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:ba:5d:3c:e3:93:ba:24:68:b6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=c794ace7-71ef-4c41-9944-5d461d21e4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5f:d6:53:28:98:b0:7e:47:63:03:a8:de:ab:
                    fc:84:92:5f:4d:8c:ab:8d:8d:da:15:97:52:13:03:
                    e0:ad:d0:02:77:36:9b:4f:2f:c5:cb:d0:3b:22:81:
                    1b:95:3a:0e:df:e0:7a:1a:cb:5e:9f:3d:79:78:ba:
                    bb:86:04:99:ef:a4:91:49:fa:68:a0:d1:b4:4b:d3:
                    97:21:77:ec:62:c9:10:1e:73:0f:92:47:2e:37:96:
                    43:be:10:e3:6e:e3:b3:ea:25:d2:7b:ea:5b:d7:a8:
                    5e:e4:73:9d:04:df:59:36:34:eb:a2:30:b3:1e:a6:
                    69:af:1a:cb:e5:46:31:12:f2:33:de:9b:06:24:83:
                    57:47:83:f3:0e:93:df:1e:31:be:a3:6c:15:b3:eb:
                    40:5e:ea:a5:75:53:b7:c7:fb:51:03:83:f5:1f:3c:
                    26:b5:b9:2f:04:35:59:30:bd:53:50:01:99:fc:f3:
                    e3:81:6a:4b:78:79:83:c6:aa:3f:18:85:14:6e:25:
                    ce:38:04:30:31:64:7b:f1:5d:34:dc:e6:06:7d:6a:
                    fe:6b:6a:6c:43:6d:61:a8:38:f6:3b:22:0b:c1:f4:
                    cd:17:a3:75:cd:c3:1a:8c:a8:76:51:14:76:23:83:
                    0f:d8:6e:91:fe:4e:c9:be:d6:ec:93:88:40:2c:89:
                    b8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BE:4A:F3:14:C1:EF:B8:F0:F4:6A:AE:E5:99:1F:D7:EC:39:94:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/8c15e199-df9d-3fa3-8769-5796c769ab2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:4e:87:19:0d:b0:76:2e:76:e6:c9:10:20:e4:54:f0:62:75:
         1d:91:c5:10:ee:1e:cb:3a:c7:2d:99:c7:d1:ae:95:39:45:42:
         d9:e9:9c:2c:cc:ef:ba:95:0c:6d:a2:a7:08:0a:79:9d:f6:4e:
         bc:55:86:06:6f:9e:cd:d0:d5:a0:3f:c4:0e:94:11:af:e4:df:
         3c:9c:b8:7c:fb:e9:50:a6:af:80:be:0e:92:df:7f:9e:d9:0c:
         07:bc:ac:ed:34:58:51:5a:54:8e:9a:23:58:da:f7:df:63:be:
         ea:08:52:3f:ed:60:9a:62:69:30:ff:34:02:e5:db:c1:79:cc:
         6c:8e:fb:26:3b:41:34:70:c0:b7:cc:29:c1:47:93:b3:3b:f4:
         92:90:4d:a1:6a:9a:5a:fa:06:90:c4:d2:32:bb:bb:7e:fa:e2:
         c9:98:d9:9a:f4:c8:21:df:f5:84:4f:c7:80:03:0d:31:06:c5:
         a7:f0:d0:ca:94:cd:77:df:d7:94:04:15:49:f9:af:26:74:56:
         98:6c:f1:57:96:b1:78:0b:f5:64:a2:aa:c1:84:15:26:e8:51:
         a1:06:82:1e:91:9a:17:a5:8e:57:70:32:36:3e:a5:70:dc:c4:
         ee:38:14:00:29:a5:76:8e:a4:94:15:21:bd:d0:82:02:d8:63:
         10:9c:e3:79
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn537pdPOOTuiRotvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRlMmQ1YWEtNTYwMC00ZTBjLTk1MjUtMjQxODdjMGVh
NjZiMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
Yzc5NGFjZTctNzFlZi00YzQxLTk5NDQtNWQ0NjFkMjFlNGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl/WUyiYsH5HYwOo3qv8hJJfTYyrjY3aFZdS
EwPgrdACdzabTy/Fy9A7IoEblToO3+B6Gstenz15eLq7hgSZ76SRSfpooNG0S9OX
IXfsYskQHnMPkkcuN5ZDvhDjbuOz6iXSe+pb16he5HOdBN9ZNjTrojCzHqZprxrL
5UYxEvIz3psGJINXR4PzDpPfHjG+o2wVs+tAXuqldVO3x/tRA4P1HzwmtbkvBDVZ
ML1TUAGZ/PPjgWpLeHmDxqo/GIUUbiXOOAQwMWR78V003OYGfWr+a2psQ21hqDj2
OyILwfTNF6N1zcMajKh2URR2I4MP2G6R/k7Jvtbsk4hALIm4RQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIq+SvMUwe+48PRqruWZH9fsOZSfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZGUy
ZDVhYS01NjAwLTRlMGMtOTUyNS0yNDE4N2MwZWE2NmIvOGMxNWUxOTktZGY5ZC0z
ZmEzLTg3NjktNTc5NmM3NjlhYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWRlMmQ1YWEtNTYwMC00ZTBjLTk1
MjUtMjQxODdjMGVhNjZiL2FkZTJkNWFhLTU2MDAtNGUwYy05NTI1LTI0MTg3YzBl
YTY2Yi5jcmwwHwYDVR0jBBgwFoAU+59lZmjkjRtkcXXXPwUAuz7UHZcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZGUyZDVhYS01NjAwLTRlMGMtOTUyNS0yNDE4
N2MwZWE2NmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeNQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCUTocZDbB2LnbmyRAg5FTwYnUdkcUQ7h7LOsctmcfRrpU5RULZ6Zws
zO+6lQxtoqcICnmd9k68VYYGb57N0NWgP8QOlBGv5N88nLh8++lQpq+Avg6S33+e
2QwHvKztNFhRWlSOmiNY2vffY77qCFI/7WCaYmkw/zQC5dvBecxsjvsmO0E0cMC3
zCnBR5OzO/SSkE2happa+gaQxNIyu7t++uLJmNma9Mgh3/WET8eAAw0xBsWn8NDK
lM1339eUBBVJ+a8mdFaYbPFXlrF4C/VkoqrBhBUm6FGhBoIekZoXpY5XcDI2PqVw
3MTuOBQAKaV2jqSUFSG90IIC2GMQnON5
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:51:59 2025 by rpki-client