Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e51d7cb4-942d-32bd-96dc-3569d44bf9d5.roa
File:                     e51d7cb4-942d-32bd-96dc-3569d44bf9d5.roa (raw, json)
Hash identifier:          5lUggXWxMxKZVzkAVSQdNk7Njvf/HxQ+En/JgrB6RK8=
Subject key identifier:   00:37:AA:68:DD:63:F4:FD:29:9F:93:B4:A5:ED:E2:78:80:81:F7:83
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285849E38A3B2E255217F754157F20
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e51d7cb4-942d-32bd-96dc-3569d44bf9d5.roa
Signing time:             Sun 18 May 2025 01:00:47 +0000
ROA not before:           Sun 18 May 2025 01:00:47 +0000
ROA not after:            Sat 16 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        2607:fcf0:4000::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e3:8a:3b:2e:25:52:17:f7:54:15:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: May 18 01:00:47 2025 GMT
            Not After : Aug 16 01:00:47 2025 GMT
        Subject: CN=2f40b963-947c-4397-aa62-b5ef64fd4c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:da:24:13:56:7d:e3:03:4f:6a:d2:fa:b2:
                    53:7b:4f:25:a9:c8:39:35:80:1b:c0:61:de:fe:d5:
                    5c:be:fb:ec:dc:9d:36:9d:74:e6:62:96:4c:60:f9:
                    a3:a5:63:5a:e7:b7:1f:7c:29:79:57:79:60:73:c2:
                    ff:a0:08:13:02:ef:6e:e7:6a:8a:5e:f9:4b:0d:7e:
                    52:91:aa:fd:b0:54:9e:ed:5f:4c:6b:d3:c3:c2:60:
                    9c:87:a3:53:8e:08:4d:83:2b:4e:1e:ee:50:86:a9:
                    c2:df:55:2b:49:01:21:56:91:78:1e:7e:e3:cb:92:
                    88:92:fd:a2:a4:e5:bf:d1:a2:f7:54:dd:fd:93:3a:
                    7f:40:43:5b:b4:b9:fb:ae:22:90:cc:2a:8f:1d:ed:
                    30:73:cc:21:5d:a9:b9:79:53:b0:01:ee:c8:9b:66:
                    ba:fc:e7:5d:dd:b9:4c:fa:58:5d:c6:db:ea:09:ab:
                    1c:29:3c:3c:86:da:f1:f4:b4:db:30:9d:15:5f:60:
                    b9:e0:cc:72:1c:4f:43:be:60:ce:b1:b4:5f:8d:ea:
                    3b:24:ed:de:58:68:64:06:1a:1e:43:60:82:ae:f7:
                    e7:45:8a:79:a5:70:bd:86:18:da:4f:ff:60:d4:5b:
                    a4:64:d2:1c:63:9b:64:12:5d:90:57:41:4e:b7:29:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:37:AA:68:DD:63:F4:FD:29:9F:93:B4:A5:ED:E2:78:80:81:F7:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/e51d7cb4-942d-32bd-96dc-3569d44bf9d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:4000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:9b:4b:9e:df:d8:dd:5e:3c:60:89:ba:04:8f:23:bf:c8:45:
         fa:e9:7e:1d:bc:4c:12:ab:19:33:b6:b3:37:db:47:9b:e5:21:
         b9:60:58:bf:c8:c8:ff:c3:a7:8d:00:b8:97:b1:15:a0:2c:23:
         97:0c:c1:92:5c:27:f8:9c:0a:d3:70:ab:8f:93:3a:02:8c:80:
         2d:75:0d:9f:95:24:8b:98:d7:55:05:a2:2f:ca:9c:3d:33:88:
         03:7d:1e:d0:87:7e:01:54:67:10:3a:8e:24:95:f6:1e:f2:83:
         da:f1:bf:0a:aa:39:44:fe:b7:98:e6:48:38:d8:53:66:09:da:
         0b:40:bc:17:4b:cf:bc:45:c0:cc:54:25:c8:7f:a3:d5:d8:c5:
         ec:f3:4e:f6:0b:46:3c:e8:bc:dd:f1:14:89:5c:4c:8e:78:e3:
         ec:4b:fd:5f:53:71:ae:c1:3d:8c:8b:92:4f:d1:11:7b:df:1b:
         cd:39:d4:3e:3b:83:ee:ff:bf:44:20:bc:c9:61:8b:8f:a6:13:
         4f:37:94:40:e8:9a:90:b4:cc:e2:cb:36:e6:ea:fb:c7:db:47:
         d7:ac:d9:3c:5b:90:3e:32:f1:36:b2:84:a8:01:1b:f3:6a:db:
         92:f8:3a:c2:7a:66:0e:1b:6a:12:6a:ae:35:14:c5:29:00:7e:
         63:53:09:63
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnjijsuJVIX91QVfyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI1MDUxODAxMDA0N1oXDTI1MDgxNjAxMDA0N1owLzEtMCsGA1UEAxMk
MmY0MGI5NjMtOTQ3Yy00Mzk3LWFhNjItYjVlZjY0ZmQ0YzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEfaJBNWfeMDT2rS+rJTe08lqcg5NYAbwGHe
/tVcvvvs3J02nXTmYpZMYPmjpWNa57cffCl5V3lgc8L/oAgTAu9u52qKXvlLDX5S
kar9sFSe7V9Ma9PDwmCch6NTjghNgytOHu5QhqnC31UrSQEhVpF4Hn7jy5KIkv2i
pOW/0aL3VN39kzp/QENbtLn7riKQzCqPHe0wc8whXam5eVOwAe7Im2a6/Odd3blM
+lhdxtvqCascKTw8htrx9LTbMJ0VX2C54MxyHE9DvmDOsbRfjeo7JO3eWGhkBhoe
Q2CCrvfnRYp5pXC9hhjaT/9g1FukZNIcY5tkEl2QV0FOtynOVwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAA3qmjdY/T9KZ+TtKXt4niAgfeDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZTUxZDdjYjQtOTQyZC0z
MmJkLTk2ZGMtMzU2OWQ0NGJmOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgf88EAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgZtLnt/Y3V48YIm6BI8jv8hF+ul+HbxMEqsZM7azN9tHm+UhuWBY
v8jI/8OnjQC4l7EVoCwjlwzBklwn+JwK03Crj5M6AoyALXUNn5Uki5jXVQWiL8qc
PTOIA30e0Id+AVRnEDqOJJX2HvKD2vG/Cqo5RP63mOZIONhTZgnaC0C8F0vPvEXA
zFQlyH+j1djF7PNO9gtGPOi83fEUiVxMjnjj7Ev9X1NxrsE9jIuST9ERe98bzTnU
PjuD7v+/RCC8yWGLj6YTTzeUQOiakLTM4ss25ur7x9tH16zZPFuQPjLxNrKEqAEb
82rbkvg6wnpmDhtqEmquNRTFKQB+Y1MJYw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:52:29 2025 by rpki-client