Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/7ecfd189-4826-3556-8c70-785555dca56c.roa
File:                     7ecfd189-4826-3556-8c70-785555dca56c.roa (raw, json)
Hash identifier:          FyxZ6MCql4uEk7+jOCW/VsX1SAvmOWwjE7pA1RpfZHw=
Subject key identifier:   C9:92:67:C9:70:42:A6:B7:17:08:F9:33:85:83:C4:A9:13:8F:BD:61
Certificate issuer:       /CN=c3506568-5ea6-49b1-a753-c6ef423abb8b
Certificate serial:       010D0C9F4328584AC2E11CB3E8DCBA70723D1000
Authority key identifier: AB:EF:A6:40:22:51:E7:AA:0A:A6:98:76:48:19:56:4B:35:55:09:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/7ecfd189-4826-3556-8c70-785555dca56c.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     394142
IP address blocks:        2605:1140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/c3506568-5ea6-49b1-a753-c6ef423abb8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/c3506568-5ea6-49b1-a753-c6ef423abb8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:1c:b3:e8:dc:ba:70:72:3d:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3506568-5ea6-49b1-a753-c6ef423abb8b
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=d7130108-75fa-4918-a45b-d9a17b0ee05e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f0:86:22:36:c5:92:4d:72:af:7d:8d:2b:dd:
                    73:3d:0d:a7:c1:dc:b4:d3:a9:31:16:4e:56:20:7c:
                    07:a4:8b:b9:7e:cb:67:18:7b:0b:14:79:d5:5b:94:
                    41:ca:70:f4:e5:d9:fe:44:1a:59:66:69:0a:9b:4d:
                    b8:9e:40:74:15:26:e8:79:ce:5c:6f:91:d3:ca:21:
                    74:6a:ec:69:f9:55:c3:c1:27:73:b6:f6:3e:96:7c:
                    3d:94:a1:c1:3f:12:5d:4a:ab:62:d2:13:1b:21:e5:
                    bf:17:28:9e:48:08:65:ea:07:54:17:af:d7:11:94:
                    8a:26:66:06:59:22:a2:5e:83:2c:fd:79:63:d3:f3:
                    5a:60:43:9c:1f:47:5c:3d:f3:b5:ad:25:db:20:18:
                    21:55:60:c2:72:24:52:ef:dd:19:39:df:b0:9a:32:
                    94:26:fd:b9:1e:45:0d:fb:5a:ef:57:37:13:e4:92:
                    73:27:6b:9c:52:b7:c6:58:a4:55:5e:d0:d0:be:40:
                    b6:20:f8:38:af:0c:6a:b2:b8:0d:0b:f3:c3:9f:d6:
                    87:ae:60:85:ae:86:4c:52:32:b2:67:d4:03:81:d5:
                    18:55:37:55:64:96:58:6d:26:1d:10:da:2e:ce:e3:
                    36:ee:b6:cc:b9:ea:2e:dd:4b:85:e1:f4:99:77:8d:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:92:67:C9:70:42:A6:B7:17:08:F9:33:85:83:C4:A9:13:8F:BD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/7ecfd189-4826-3556-8c70-785555dca56c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/c3506568-5ea6-49b1-a753-c6ef423abb8b.crl

            X509v3 Authority Key Identifier:
                keyid:AB:EF:A6:40:22:51:E7:AA:0A:A6:98:76:48:19:56:4B:35:55:09:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:88:3c:9f:08:85:57:3b:c1:46:3b:4b:47:5f:9b:ff:f2:28:
         ef:80:70:1f:b6:3f:45:f0:de:f1:d9:6a:35:de:43:83:00:e3:
         42:6c:aa:55:cb:e6:05:c7:6a:33:c1:0c:54:97:12:f8:18:f4:
         78:ce:4f:d9:af:53:bb:fe:f0:f1:b6:9b:48:41:93:f0:4d:8e:
         bb:50:f4:c7:3a:64:46:5e:4a:49:dc:b7:66:69:7a:9a:9f:ec:
         7b:d9:b8:8b:88:ae:d2:a5:fa:4a:46:7c:de:01:da:22:e7:ad:
         6a:e5:09:77:b3:af:1e:7b:68:93:55:17:08:59:07:7c:49:49:
         ea:94:8d:3b:23:76:d7:81:c2:f9:6d:e6:da:db:b9:89:1e:8c:
         b8:be:e9:85:f6:09:f8:fa:1b:56:9e:02:53:b5:68:57:07:3e:
         27:d8:d3:e5:d1:7c:4c:aa:ba:1c:95:42:a1:d3:a4:67:27:4b:
         a6:8f:03:64:13:12:ee:64:59:09:39:67:25:02:22:d6:8b:3f:
         87:4d:59:e0:d6:68:32:81:01:af:2b:18:35:42:9f:e2:dd:2e:
         05:f5:5e:34:82:e7:2e:fc:23:95:6c:b8:a7:40:01:84:dc:53:
         8c:35:b8:20:65:70:ff:3f:0c:ab:2f:90:84:25:38:11:c7:b1:
         6b:fa:a1:d2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErC4Ryz6Ny6cHI9EAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzM1MDY1NjgtNWVhNi00OWIxLWE3NTMtYzZlZjQyM2Fi
YjhiMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
ZDcxMzAxMDgtNzVmYS00OTE4LWE0NWItZDlhMTdiMGVlMDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifCGIjbFkk1yr32NK91zPQ2nwdy006kxFk5W
IHwHpIu5fstnGHsLFHnVW5RBynD05dn+RBpZZmkKm024nkB0FSboec5cb5HTyiF0
auxp+VXDwSdztvY+lnw9lKHBPxJdSqti0hMbIeW/FyieSAhl6gdUF6/XEZSKJmYG
WSKiXoMs/Xlj0/NaYEOcH0dcPfO1rSXbIBghVWDCciRS790ZOd+wmjKUJv25HkUN
+1rvVzcT5JJzJ2ucUrfGWKRVXtDQvkC2IPg4rwxqsrgNC/PDn9aHrmCFroZMUjKy
Z9QDgdUYVTdVZJZYbSYdENouzuM27rbMueou3UuF4fSZd4185wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMmSZ8lwQqa3Fwj5M4WDxKkTj71hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jMzUw
NjU2OC01ZWE2LTQ5YjEtYTc1My1jNmVmNDIzYWJiOGIvN2VjZmQxODktNDgyNi0z
NTU2LThjNzAtNzg1NTU1ZGNhNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzM1MDY1NjgtNWVhNi00OWIxLWE3
NTMtYzZlZjQyM2FiYjhiL2MzNTA2NTY4LTVlYTYtNDliMS1hNzUzLWM2ZWY0MjNh
YmI4Yi5jcmwwHwYDVR0jBBgwFoAUq++mQCJR56oKpph2SBlWSzVVCW8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jMzUwNjU2OC01ZWE2LTQ5YjEtYTc1My1jNmVm
NDIzYWJiOGIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgURQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCCiDyfCIVXO8FGO0tHX5v/8ijvgHAftj9F8N7x2Wo13kODAONCbKpV
y+YFx2ozwQxUlxL4GPR4zk/Zr1O7/vDxtptIQZPwTY67UPTHOmRGXkpJ3LdmaXqa
n+x72biLiK7SpfpKRnzeAdoi561q5Ql3s68ee2iTVRcIWQd8SUnqlI07I3bXgcL5
beba27mJHoy4vumF9gn4+htWngJTtWhXBz4n2NPl0XxMqroclUKh06RnJ0umjwNk
ExLuZFkJOWclAiLWiz+HTVng1mgygQGvKxg1Qp/i3S4F9V40gucu/COVbLinQAGE
3FOMNbggZXD/PwyrL5CEJTgRx7Fr+qHS
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:53:02 2025 by rpki-client