Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/40bcae07-9b09-355c-a3c0-9d2bb5d44c86.roa
File:                     40bcae07-9b09-355c-a3c0-9d2bb5d44c86.roa (raw, json)
Hash identifier:          VxR8DqkcQcjsDzA+08zfgC1NHroxiycNW2lQiHCAUOY=
Subject key identifier:   4D:65:1E:71:14:71:75:98:25:6B:65:CC:78:58:DC:06:CB:07:FF:D2
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584AADF11326A58F6CC1B02A8DC0
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/40bcae07-9b09-355c-a3c0-9d2bb5d44c86.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     3356
IP address blocks:        69.41.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:13:26:a5:8f:6c:c1:b0:2a:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=97bdf982-1173-4221-913d-7133cabc663c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:b6:33:f2:04:46:a2:42:4b:2e:78:eb:27:
                    00:9b:da:d2:68:09:0f:a7:51:66:53:e2:47:96:64:
                    c5:1e:1d:34:d4:4a:da:6e:99:20:0c:32:45:ff:3c:
                    2a:b9:5d:a9:f3:8a:6b:1e:37:f2:07:c4:a5:6b:7b:
                    da:35:83:06:55:fe:8c:0f:83:26:81:92:44:86:f2:
                    af:c8:f5:84:9a:d5:f2:8e:25:b7:77:0c:4b:4b:a7:
                    d8:2c:98:1a:8a:c7:fe:a0:dd:95:8a:d5:47:22:70:
                    19:98:9d:7c:3b:eb:b9:85:cc:69:08:0d:cd:46:ae:
                    3a:c0:0a:e8:76:9c:5d:66:84:a4:d3:a8:51:e2:2e:
                    18:2f:0d:1f:be:22:4a:86:8a:e2:0c:09:d8:70:b4:
                    c1:e9:dc:e6:e3:77:32:76:c6:0d:4f:8d:9e:70:2b:
                    cb:e1:a5:cf:bf:62:02:97:ad:de:88:40:7c:1b:9d:
                    8a:09:86:e3:28:c9:af:7c:dd:98:ad:ac:91:f6:d1:
                    28:b1:88:d2:ea:37:6a:a3:92:62:f2:65:80:7a:0a:
                    61:d1:94:64:9a:9c:55:78:11:e2:26:21:43:9f:e1:
                    9d:2b:0a:9f:72:6c:ec:b7:8a:17:07:d6:5e:f4:52:
                    0c:a7:b4:8a:80:9e:3c:ac:5f:cb:95:74:0f:92:92:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:65:1E:71:14:71:75:98:25:6B:65:CC:78:58:DC:06:CB:07:FF:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/40bcae07-9b09-355c-a3c0-9d2bb5d44c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ef:c6:4b:c1:0a:66:c6:10:08:87:86:8e:99:e9:71:83:96:
         98:bc:17:b8:f6:6d:83:ec:b3:cd:85:88:4a:c8:59:6e:cf:72:
         3a:10:0a:47:99:f8:b8:d0:cd:f9:ca:6d:94:3f:23:3f:a7:34:
         ab:53:80:49:3c:7a:5a:33:39:7f:27:20:0c:81:3c:5f:73:d9:
         43:80:39:1c:d8:38:d2:1f:7f:ef:55:dc:37:f7:f8:4d:05:44:
         ee:5b:b3:e6:3a:46:53:10:a1:12:6e:16:66:5c:80:59:07:7a:
         12:59:e6:ca:67:2f:cc:e6:a6:2c:da:85:e0:e3:4c:a3:ed:04:
         3e:f9:60:b9:11:7d:4d:17:e7:37:39:73:8d:f5:bc:56:a3:e7:
         81:5a:f3:2f:78:2d:a2:fd:23:a9:a6:57:44:98:df:47:06:41:
         89:6a:23:a2:7b:8c:4f:50:47:b2:45:b5:b0:8b:54:3d:ea:bf:
         78:53:15:18:e8:96:ad:46:11:68:94:7a:ff:69:ec:21:6d:ff:
         e5:4b:cb:46:f6:ca:e6:2f:7c:dd:61:61:e6:50:70:2e:32:56:
         34:65:c6:88:a1:c0:26:c3:74:f0:ba:c5:f8:86:3d:96:88:40:
         a0:30:01:1c:e3:20:cb:14:ae:ce:82:af:e1:c9:10:9d:f0:b3:
         8e:d8:b0:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RMmpY9swbAqjcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY2Zjc2MjMtMDc4OC00MTBhLWI5ZGQtODA0MDg3OWFh
OTI0MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
OTdiZGY5ODItMTE3My00MjIxLTkxM2QtNzEzM2NhYmM2NjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYO2M/IERqJCSy546ycAm9rSaAkPp1FmU+JH
lmTFHh001ErabpkgDDJF/zwquV2p84prHjfyB8Sla3vaNYMGVf6MD4MmgZJEhvKv
yPWEmtXyjiW3dwxLS6fYLJgaisf+oN2VitVHInAZmJ18O+u5hcxpCA3NRq46wAro
dpxdZoSk06hR4i4YLw0fviJKhoriDAnYcLTB6dzm43cydsYNT42ecCvL4aXPv2IC
l63eiEB8G52KCYbjKMmvfN2YrayR9tEosYjS6jdqo5Ji8mWAegph0ZRkmpxVeBHi
JiFDn+GdKwqfcmzst4oXB9Ze9FIMp7SKgJ48rF/LlXQPkpJOQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE1lHnEUcXWYJWtlzHhY3AbLB//SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZm
NzYyMy0wNzg4LTQxMGEtYjlkZC04MDQwODc5YWE5MjQvNDBiY2FlMDctOWIwOS0z
NTVjLWEzYzAtOWQyYmI1ZDQ0Yzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWY2Zjc2MjMtMDc4OC00MTBhLWI5
ZGQtODA0MDg3OWFhOTI0LzVmNmY3NjIzLTA3ODgtNDEwYS1iOWRkLTgwNDA4Nzlh
YTkyNC5jcmwwHwYDVR0jBBgwFoAUbPE4qdyRiteX1uAs/Tbql2Czz34wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZmNzYyMy0wNzg4LTQxMGEtYjlkZC04MDQw
ODc5YWE5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSkuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKjvxkvBCmbGEAiHho6Z6XGDlpi8F7j2bYPss82FiErIWW7PcjoQCkeZ
+LjQzfnKbZQ/Iz+nNKtTgEk8elozOX8nIAyBPF9z2UOAORzYONIff+9V3Df3+E0F
RO5bs+Y6RlMQoRJuFmZcgFkHehJZ5spnL8zmpizaheDjTKPtBD75YLkRfU0X5zc5
c431vFaj54Fa8y94LaL9I6mmV0SY30cGQYlqI6J7jE9QR7JFtbCLVD3qv3hTFRjo
lq1GEWiUev9p7CFt/+VLy0b2yuYvfN1hYeZQcC4yVjRlxoihwCbDdPC6xfiGPZaI
QKAwARzjIMsUrs6Cr+HJEJ3ws47YsCI=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:10:23 2025 by rpki-client