Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa
File:                     3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa (raw, json)
Hash identifier:          17hcoOYLqtzcNJCNZtfFQY2dZWkSpwR+BUWEjSH9zCo=
Subject key identifier:   D0:A4:12:03:3E:84:23:15:24:16:EB:21:60:5C:8A:6B:A3:F5:FC:6E
Certificate issuer:       /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f
Certificate serial:       010D0C9F4328584AAB265B869C2AD48226CC0A9E
Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     19518
IP address blocks:        2605:1500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5b:86:9c:2a:d4:82:26:cc:0a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=9819685a-ec9a-462b-832e-386710ff10b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:c1:0a:b1:7a:22:d8:82:db:6a:cd:40:8c:
                    ac:bc:69:8f:42:03:23:8e:0a:97:c0:6a:b5:c3:cf:
                    68:13:13:f6:b8:57:2f:78:bb:91:73:ad:c7:ed:da:
                    c1:f6:10:a7:fd:ad:7d:42:37:40:b3:bb:2d:62:3c:
                    f3:2a:5f:77:ac:23:f1:9b:5d:c2:65:71:aa:cd:5f:
                    4b:fe:02:95:5d:a4:13:8a:ae:83:dd:2a:a4:e3:dd:
                    c5:a1:0b:1f:54:2c:f7:9a:df:ef:b3:23:20:ee:3d:
                    c0:99:df:54:aa:e7:82:6a:53:69:1a:26:c9:5c:4c:
                    35:44:2e:2b:fa:6c:3c:6d:15:af:98:b1:2d:a5:c4:
                    64:dc:34:ea:af:b2:61:c0:be:4a:59:53:23:60:7b:
                    a6:c4:94:c9:c2:25:d4:22:01:63:f6:db:41:f2:89:
                    1b:37:fd:fe:83:2d:17:f2:9d:b8:f7:27:3a:26:c7:
                    65:f9:c6:e7:d1:c8:73:24:3f:ce:42:98:dd:a0:63:
                    b7:63:4c:5a:85:e1:41:7e:77:65:c2:11:be:d2:fb:
                    6d:62:66:d1:53:dd:3b:85:0d:c0:f0:c6:b3:8b:98:
                    df:5d:4d:54:06:f3:18:d3:f4:5e:53:c3:25:ab:4f:
                    28:fb:b5:e9:c4:df:c3:15:42:3b:f6:c8:80:24:eb:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A4:12:03:3E:84:23:15:24:16:EB:21:60:5C:8A:6B:A3:F5:FC:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:95:e5:dd:d1:2a:8f:e1:a1:17:08:30:32:b0:34:2e:61:59:
         4f:48:c8:99:b9:60:3e:8a:c2:cc:64:0b:6c:dd:5d:59:f9:6a:
         4b:7a:92:0d:87:c6:c8:dc:68:de:73:9b:14:55:8b:60:18:a1:
         14:62:56:cf:ff:2c:d1:a2:2f:04:84:c1:81:65:d3:11:6e:47:
         ee:7f:23:7a:e3:8b:13:e9:cd:fb:eb:38:b6:86:44:13:f5:42:
         34:c3:75:08:d2:f4:72:22:84:dd:91:7f:1f:62:e4:f3:dc:09:
         be:68:b2:74:b7:9b:62:1b:7a:c1:b6:ee:7c:12:e7:aa:d5:63:
         9f:b3:54:b3:d2:b8:a5:da:ef:db:d9:e5:39:b6:1c:0f:47:d1:
         bd:57:6f:49:54:89:ea:ee:90:11:5d:1c:59:34:4d:09:f5:bd:
         e2:f2:57:73:d4:29:7c:9d:a3:98:9d:16:3b:97:5d:9f:a2:90:
         7d:4a:38:1c:2c:8d:2c:6a:9a:5e:89:93:73:d7:06:8e:5b:52:
         58:46:61:f4:50:b1:4b:dc:e6:1e:35:f7:b2:b3:6f:c3:e7:21:
         a8:d1:65:9c:d1:8e:6a:af:6d:cd:b7:af:66:b6:53:36:6b:f4:
         c6:ed:72:f5:cd:10:df:af:ac:e4:18:0f:1e:8b:9f:4b:43:09:
         8b:93:0f:18
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqrJluGnCrUgibMCp4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWJkOTViYjYtZjhlNi00ZDY2LThkN2ItZDVhMzQyYjM1
ODdmMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
OTgxOTY4NWEtZWM5YS00NjJiLTgzMmUtMzg2NzEwZmYxMGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq7BCrF6ItiC22rNQIysvGmPQgMjjgqXwGq1
w89oExP2uFcveLuRc63H7drB9hCn/a19QjdAs7stYjzzKl93rCPxm13CZXGqzV9L
/gKVXaQTiq6D3Sqk493FoQsfVCz3mt/vsyMg7j3Amd9UqueCalNpGibJXEw1RC4r
+mw8bRWvmLEtpcRk3DTqr7JhwL5KWVMjYHumxJTJwiXUIgFj9ttB8okbN/3+gy0X
8p249yc6Jsdl+cbn0chzJD/OQpjdoGO3Y0xaheFBfndlwhG+0vttYmbRU907hQ3A
8Mazi5jfXU1UBvMY0/ReU8Mlq08o+7XpxN/DFUI79siAJOtKtwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNCkEgM+hCMVJBbrIWBcimuj9fxuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5
NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEzNDJiMzU4N2YvM2Q4NjQ1ZmMtMzVjOC0z
NWRhLWFjODgtN2E0ZTQxYzRiZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWJkOTViYjYtZjhlNi00ZDY2LThk
N2ItZDVhMzQyYjM1ODdmLzFiZDk1YmI2LWY4ZTYtNGQ2Ni04ZDdiLWQ1YTM0MmIz
NTg3Zi5jcmwwHwYDVR0jBBgwFoAUt1f5a1swFAeafsmLHd40lt3uqFAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEz
NDJiMzU4N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUVADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBhleXd0SqP4aEXCDAysDQuYVlPSMiZuWA+isLMZAts3V1Z+WpLepIN
h8bI3Gjec5sUVYtgGKEUYlbP/yzRoi8EhMGBZdMRbkfufyN644sT6c376zi2hkQT
9UI0w3UI0vRyIoTdkX8fYuTz3Am+aLJ0t5tiG3rBtu58Eueq1WOfs1Sz0ril2u/b
2eU5thwPR9G9V29JVInq7pARXRxZNE0J9b3i8ldz1Cl8naOYnRY7l12fopB9Sjgc
LI0sappeiZNz1waOW1JYRmH0ULFL3OYeNfeys2/D5yGo0WWc0Y5qr23Nt69mtlM2
a/TG7XL1zRDfr6zkGA8ei59LQwmLkw8Y
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:31 2025 by rpki-client