Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1362605f-69e6-3d2a-baa3-3d636058aaf3.roa
File:                     1362605f-69e6-3d2a-baa3-3d636058aaf3.roa (raw, json)
Hash identifier:          BuUN6nlt23ynZ1NjAz5RHmwCRlczF6/7r5aoBXRlx2U=
Subject key identifier:   71:D8:82:32:F6:63:17:A4:9A:98:C7:16:09:2C:53:D3:ED:C3:FB:7C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A841195FFF4378AE353C5BA80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1362605f-69e6-3d2a-baa3-3d636058aaf3.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        2607:f8b0:4011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:95:ff:f4:37:8a:e3:53:c5:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c9c1d65a-fa14-4c7b-a753-24087bdb11fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:05:b4:56:fe:f9:58:70:22:1f:d6:9b:a3:
                    8a:08:ae:54:0c:c2:95:6f:e5:3e:94:a7:c4:c2:ae:
                    bd:c4:59:2e:39:b0:e4:79:23:1e:2e:80:1b:9e:64:
                    40:f1:ef:a4:b7:48:59:d2:70:2c:9e:89:60:0b:8c:
                    f4:b5:0f:b2:09:b7:74:23:d6:0f:96:66:48:2a:ea:
                    9b:ce:42:cb:69:06:8d:3e:6c:83:a5:c2:88:44:2c:
                    f0:76:5c:11:fa:86:4a:80:36:59:93:ef:62:cb:d9:
                    bd:40:d9:28:d2:27:86:49:c2:4e:2e:8f:25:29:c1:
                    1a:d9:2a:9f:b6:97:31:fa:00:63:fa:de:62:a5:78:
                    49:94:78:80:91:96:fc:09:63:85:74:34:d6:23:7f:
                    b4:91:cf:1a:86:81:73:7b:0d:47:ea:b7:50:d1:a1:
                    67:ef:61:da:95:35:f7:76:89:de:63:84:8f:33:e0:
                    6b:d3:2b:fc:c0:7b:48:cc:1f:7a:68:f7:44:1b:54:
                    47:11:86:21:34:71:0b:1e:75:e4:33:de:e0:51:83:
                    6a:52:0d:e3:0a:0e:4a:c2:cf:65:a7:c1:7c:44:50:
                    7a:68:c2:25:d6:0d:39:90:66:05:07:de:a8:db:f0:
                    0e:c3:f9:4c:9d:a6:78:13:e0:24:fb:c0:61:63:22:
                    a4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D8:82:32:F6:63:17:A4:9A:98:C7:16:09:2C:53:D3:ED:C3:FB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1362605f-69e6-3d2a-baa3-3d636058aaf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:4011::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c2:4a:29:e4:6b:c4:74:5a:2a:d2:40:49:a0:5e:64:7f:cd:
         06:99:34:b1:5f:45:91:49:33:e0:24:79:2e:ef:d1:c6:de:b2:
         b7:69:84:38:0c:af:ae:58:8f:b0:fb:65:95:9b:0b:c3:73:d3:
         29:41:c2:c8:a2:8f:f4:ab:38:e8:33:9c:60:46:d5:e7:65:df:
         cd:a8:a5:d3:24:7d:66:bd:27:ab:6f:c2:a4:56:87:83:17:39:
         a7:70:34:ec:c2:ab:8a:12:ef:26:28:98:0a:f1:66:8a:8d:2e:
         0b:91:35:af:94:47:96:4d:b0:92:cf:00:fb:15:0f:e5:6b:ca:
         16:51:1e:90:cc:2c:0f:1a:44:65:d9:51:ba:c9:db:2c:3c:a0:
         ba:40:1c:3e:04:4c:95:7e:74:b5:09:da:ab:07:e5:47:ee:d4:
         e6:fb:31:03:69:80:37:75:69:f3:6b:f7:65:21:49:e0:61:69:
         bf:41:02:d6:e7:c5:37:44:5b:b1:7c:1c:9d:d0:6e:f5:d0:b6:
         37:5e:7d:28:b6:d4:75:a2:ee:ac:33:d4:4e:70:0b:88:9e:d8:
         a4:bf:b2:5e:8f:08:56:39:91:0d:89:ca:25:f9:de:71:ee:1d:
         86:79:d0:d3:6d:92:4a:2a:08:58:4a:2c:aa:89:8e:1f:c3:dd:
         24:00:b7:28
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEZX/9DeK41PFuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YzljMWQ2NWEtZmExNC00YzdiLWE3NTMtMjQwODdiZGIxMWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotcFtFb++VhwIh/Wm6OKCK5UDMKVb+U+lKfE
wq69xFkuObDkeSMeLoAbnmRA8e+kt0hZ0nAsnolgC4z0tQ+yCbd0I9YPlmZIKuqb
zkLLaQaNPmyDpcKIRCzwdlwR+oZKgDZZk+9iy9m9QNko0ieGScJOLo8lKcEa2Sqf
tpcx+gBj+t5ipXhJlHiAkZb8CWOFdDTWI3+0kc8ahoFzew1H6rdQ0aFn72HalTX3
doneY4SPM+Br0yv8wHtIzB96aPdEG1RHEYYhNHELHnXkM97gUYNqUg3jCg5Kws9l
p8F8RFB6aMIl1g05kGYFB96o2/AOw/lMnaZ4E+Ak+8BhYyKkmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHHYgjL2YxekmpjHFgksU9Ptw/t8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTM2MjYwNWYtNjllNi0z
ZDJhLWJhYTMtM2Q2MzYwNThhYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABbCSinka8R0WirSQEmgXmR/zQaZNLFfRZFJM+AkeS7v0cbesrdp
hDgMr65Yj7D7ZZWbC8Nz0ylBwsiij/SrOOgznGBG1edl382opdMkfWa9J6tvwqRW
h4MXOadwNOzCq4oS7yYomArxZoqNLguRNa+UR5ZNsJLPAPsVD+VryhZRHpDMLA8a
RGXZUbrJ2yw8oLpAHD4ETJV+dLUJ2qsH5Ufu1Ob7MQNpgDd1afNr92UhSeBhab9B
AtbnxTdEW7F8HJ3QbvXQtjdefSi21HWi7qwz1E5wC4ie2KS/sl6PCFY5kQ2JyiX5
3nHuHYZ50NNtkkoqCFhKLKqJjh/D3SQAtyg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:11 2025 by rpki-client