Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/87bc001e-190b-3e44-a051-4ca709f13cec.roa
File:                     87bc001e-190b-3e44-a051-4ca709f13cec.roa (raw, json)
Hash identifier:          8HzYyhTVBTuqetK09zZZE1ehdtfqul+wxTY32CUXe6I=
Subject key identifier:   C1:91:60:80:D5:02:93:E2:CD:E9:6C:A4:41:5E:5A:63:C8:54:3C:2A
Certificate issuer:       /CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
Certificate serial:       010D0C9F4328584AA9FA171DD2483B3E99772B00
Authority key identifier: D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/87bc001e-190b-3e44-a051-4ca709f13cec.roa
Signing time:             Mon 28 Jul 2025 02:55:35 +0000
ROA not before:           Mon 28 Jul 2025 02:55:35 +0000
ROA not after:            Sun 26 Oct 2025 02:55:35 +0000
asID:                     401815
IP address blocks:        2604:1760:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:fa:17:1d:d2:48:3b:3e:99:77:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41e310e-2b6f-4f90-9f70-bc303b64a823
        Validity
            Not Before: Jul 28 02:55:35 2025 GMT
            Not After : Oct 26 02:55:35 2025 GMT
        Subject: CN=f9b4858c-e4c5-4070-9bf6-19e0cb3a0541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:c2:2f:c8:e7:b0:54:10:29:84:f0:0d:28:
                    1f:ae:4a:95:ef:96:04:8c:e0:3a:6d:cf:ff:fb:6c:
                    f4:f9:19:85:3c:88:a7:c2:a4:0f:c4:6d:47:72:27:
                    93:fc:e9:37:2d:b4:60:44:48:3e:30:5b:3b:2d:79:
                    eb:7e:3e:24:ca:45:52:94:e2:32:3d:ca:a1:80:c4:
                    8a:90:64:53:03:79:75:ba:2d:75:6f:6c:97:5b:28:
                    ed:46:6a:84:03:fc:d5:69:9e:a1:60:5a:a1:c6:68:
                    cd:fc:66:28:74:b3:d4:db:22:72:0f:14:aa:b7:06:
                    1d:8b:7a:62:b0:70:8a:47:40:a6:3f:4d:dd:6e:00:
                    d4:ef:f2:45:62:be:0c:d9:0b:d6:36:e0:11:cd:80:
                    ca:9c:a0:57:eb:79:0b:cc:4f:9c:f5:0c:f4:bf:9b:
                    73:fa:10:1b:15:09:88:7a:6f:6a:87:eb:a1:7a:bc:
                    81:ee:d9:58:8f:5e:2f:bc:08:bb:f0:01:b0:35:cf:
                    e1:06:41:cf:ae:86:34:3a:91:e1:82:f8:54:bb:1f:
                    4d:cc:0f:8f:fa:48:49:80:8f:1d:46:d7:a8:a7:aa:
                    ac:72:49:34:37:37:ec:2a:3a:35:80:db:da:bc:8b:
                    7c:f4:79:6d:85:a5:d0:60:7b:b1:93:76:e9:6c:ca:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:91:60:80:D5:02:93:E2:CD:E9:6C:A4:41:5E:5A:63:C8:54:3C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/87bc001e-190b-3e44-a051-4ca709f13cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823/d41e310e-2b6f-4f90-9f70-bc303b64a823.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1F:02:7D:0E:D3:31:BA:F5:C5:80:CE:B4:D2:95:31:07:11:BA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d41e310e-2b6f-4f90-9f70-bc303b64a823.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1760:18::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ca:ea:be:64:58:07:b7:06:ff:ad:e2:8c:1c:e6:d5:10:f6:
         c1:c9:3e:10:ce:ba:c7:48:f1:9a:33:38:eb:ed:24:e6:b0:48:
         b6:2d:94:75:67:3e:e8:9b:fc:5c:c7:37:f0:2b:74:fb:3a:21:
         40:24:53:27:b6:cd:1b:89:d5:e3:55:49:91:19:c5:1e:0e:5c:
         90:52:14:55:08:7e:ee:4b:ef:6f:06:ea:e0:1b:cb:7d:fd:2a:
         04:b0:0d:f0:85:18:25:05:65:54:c6:42:dc:49:f7:d5:ef:75:
         62:7a:62:31:6b:64:c4:c8:79:47:ab:14:3c:7e:97:9e:fa:1d:
         c2:27:5b:b4:78:17:52:a2:ef:4c:d2:40:c7:28:71:81:68:b8:
         63:b0:16:56:62:60:08:71:ab:17:b6:4d:fb:8a:35:51:3d:8d:
         7f:dd:86:0c:58:1a:3a:a8:3a:08:74:b3:35:8d:bc:3c:ff:7e:
         35:61:67:e0:36:11:84:22:c3:57:1e:06:c4:e4:11:8a:b3:07:
         ea:fe:0e:5d:4d:e8:10:e6:dc:a5:63:a8:93:16:9c:95:7b:85:
         a5:53:04:0b:4b:25:d4:30:83:2f:98:dc:6e:3b:9e:7e:69:2f:
         02:90:80:72:79:cd:68:ad:1f:8f:9a:a5:4a:c4:7b:2b:30:e1:
         6b:7c:41:89
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqp+hcd0kg7Ppl3KwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQxZTMxMGUtMmI2Zi00ZjkwLTlmNzAtYmMzMDNiNjRh
ODIzMB4XDTI1MDcyODAyNTUzNVoXDTI1MTAyNjAyNTUzNVowLzEtMCsGA1UEAxMk
ZjliNDg1OGMtZTRjNS00MDcwLTliZjYtMTllMGNiM2EwNTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmLCL8jnsFQQKYTwDSgfrkqV75YEjOA6bc//
+2z0+RmFPIinwqQPxG1HcieT/Ok3LbRgREg+MFs7LXnrfj4kykVSlOIyPcqhgMSK
kGRTA3l1ui11b2yXWyjtRmqEA/zVaZ6hYFqhxmjN/GYodLPU2yJyDxSqtwYdi3pi
sHCKR0CmP03dbgDU7/JFYr4M2QvWNuARzYDKnKBX63kLzE+c9Qz0v5tz+hAbFQmI
em9qh+uheryB7tlYj14vvAi78AGwNc/hBkHProY0OpHhgvhUux9NzA+P+khJgI8d
Rteop6qsckk0NzfsKjo1gNvavIt89HlthaXQYHuxk3bpbMr+SQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMGRYIDVApPizelspEFeWmPIVDwqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFl
MzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMwM2I2NGE4MjMvODdiYzAwMWUtMTkwYi0z
ZTQ0LWEwNTEtNGNhNzA5ZjEzY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDQxZTMxMGUtMmI2Zi00ZjkwLTlm
NzAtYmMzMDNiNjRhODIzL2Q0MWUzMTBlLTJiNmYtNGY5MC05ZjcwLWJjMzAzYjY0
YTgyMy5jcmwwHwYDVR0jBBgwFoAU1x8CfQ7TMbr1xYDOtNKVMQcRuiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kNDFlMzEwZS0yYjZmLTRmOTAtOWY3MC1iYzMw
M2I2NGE4MjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQXYAAY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHXK6r5kWAe3Bv+t4owc5tUQ9sHJPhDOusdI8ZozOOvtJOawSLYt
lHVnPuib/FzHN/ArdPs6IUAkUye2zRuJ1eNVSZEZxR4OXJBSFFUIfu5L728G6uAb
y339KgSwDfCFGCUFZVTGQtxJ99XvdWJ6YjFrZMTIeUerFDx+l576HcInW7R4F1Ki
70zSQMcocYFouGOwFlZiYAhxqxe2TfuKNVE9jX/dhgxYGjqoOgh0szWNvDz/fjVh
Z+A2EYQiw1ceBsTkEYqzB+r+Dl1N6BDm3KVjqJMWnJV7haVTBAtLJdQwgy+Y3G47
nn5pLwKQgHJ5zWitH4+apUrEeysw4Wt8QYk=
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:41:21 2025 by rpki-client