Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa
File:                     a6ff856c-46ae-36b6-987f-46ef805f5376.roa (raw, json)
Hash identifier:          1eTSDhRWBWuYu6xYfr6rN/ZpOEB4VgxTBgjai7g0N94=
Subject key identifier:   A0:9B:06:9E:39:AC:03:EF:A1:71:EE:57:B1:1D:92:7F:F1:EB:84:4F
Certificate issuer:       /CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
Certificate serial:       010D0C9F4328584AF3BBDB981CE56215FF66F770
Authority key identifier: F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa
Signing time:             Sat 23 Aug 2025 13:00:41 +0000
ROA not before:           Sat 23 Aug 2025 13:00:41 +0000
ROA not after:            Fri 21 Nov 2025 14:00:41 +0000
asID:                     22351
IP address blocks:        2607:f668::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f3:bb:db:98:1c:e5:62:15:ff:66:f7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e4a49c-611c-4e83-b76d-40efcd29fa53
        Validity
            Not Before: Aug 23 13:00:41 2025 GMT
            Not After : Nov 21 14:00:41 2025 GMT
        Subject: CN=58f778a4-bee7-4995-a674-d6eebb46896a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:07:87:eb:8e:71:0a:80:03:13:e1:26:e0:
                    8e:a2:46:f2:67:a3:85:b0:d4:0f:fe:46:3a:40:7c:
                    c1:2f:91:19:3b:39:07:5e:89:1a:1f:79:7d:20:76:
                    6f:5f:ce:ae:51:06:8c:fb:4f:04:e7:28:39:f0:95:
                    65:ee:9c:6d:a0:00:14:5e:a2:f8:f6:db:8c:93:04:
                    57:43:66:bb:7f:23:63:75:cb:3d:64:46:ec:73:fa:
                    90:1f:1f:a4:56:a1:2a:bb:c3:20:69:f4:6a:42:11:
                    eb:3c:c0:1a:04:bd:a3:b9:04:5e:fd:57:c4:ab:99:
                    87:d1:db:67:f1:14:eb:19:f2:c8:6c:1b:cd:c4:7c:
                    6f:dc:1a:a1:6b:86:24:c0:bd:b9:1f:d7:29:c6:36:
                    0a:bc:64:06:d7:b6:58:de:57:66:28:8f:43:f6:ee:
                    cb:ad:8c:74:ca:02:78:23:9f:f9:90:e4:02:d1:9c:
                    e9:44:7f:7e:7e:df:bc:2b:90:29:b8:c0:4f:55:69:
                    ed:a0:49:82:65:f7:e6:84:6d:84:eb:67:59:c2:b5:
                    81:ba:6b:a8:53:e7:57:7e:75:b0:af:cb:9d:61:78:
                    f5:8b:71:c4:9d:d8:7e:29:84:b4:27:78:59:75:3a:
                    cd:78:7a:ad:43:92:e7:f3:17:f4:7d:4b:f2:9d:71:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:06:9E:39:AC:03:EF:A1:71:EE:57:B1:1D:92:7F:F1:EB:84:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/a6ff856c-46ae-36b6-987f-46ef805f5376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53/00e4a49c-611c-4e83-b76d-40efcd29fa53.crl

            X509v3 Authority Key Identifier:
                keyid:F2:C9:A5:C3:24:56:69:C6:EE:14:90:90:DF:28:F4:58:30:CB:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/00e4a49c-611c-4e83-b76d-40efcd29fa53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f668::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:b7:94:12:bb:f1:c5:99:b2:5b:c9:9d:f1:47:cd:66:ff:36:
         86:6e:6c:93:08:21:8f:7d:40:bf:8b:b2:6f:bb:6b:27:84:e1:
         c4:97:24:59:ca:19:d5:d0:e7:e2:3b:76:b4:4f:79:e3:53:fe:
         b5:e6:95:16:60:3f:2a:f7:e2:c1:ad:e3:9f:9f:b8:97:68:31:
         e5:87:6a:55:ec:e4:c5:06:c2:e0:8f:2e:b9:db:2b:e2:fb:bc:
         11:de:62:7d:0f:fc:66:71:d9:06:88:89:9f:f0:78:a5:50:0a:
         8a:b6:36:07:1e:05:8f:ba:4a:9a:8f:46:4c:6e:06:7c:b6:15:
         2f:d9:12:2a:a8:03:38:9b:fa:cf:3a:99:83:0a:f9:af:04:f5:
         cc:bb:30:25:69:9e:63:59:aa:a1:89:9c:92:03:14:c4:8f:d3:
         02:db:e0:95:1a:8d:8b:4a:2b:69:02:04:2d:f7:f4:35:47:91:
         da:5b:23:e9:d7:c4:04:28:c9:c5:45:f7:be:d8:9b:00:ea:f1:
         39:7e:c9:7a:a0:ab:c6:24:ef:96:cc:4c:43:4f:2b:bb:4a:f0:
         c7:51:b0:0f:78:e8:04:93:53:bf:4b:cf:9e:5d:d9:ac:d3:89:
         7d:58:81:20:0a:ed:da:03:61:4f:56:1b:1c:7a:fb:00:84:71:
         42:18:9b:79
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErzu9uYHOViFf9m93AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBlNGE0OWMtNjExYy00ZTgzLWI3NmQtNDBlZmNkMjlm
YTUzMB4XDTI1MDgyMzEzMDA0MVoXDTI1MTEyMTE0MDA0MVowLzEtMCsGA1UEAxMk
NThmNzc4YTQtYmVlNy00OTk1LWE2NzQtZDZlZWJiNDY4OTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt8Hh+uOcQqAAxPhJuCOokbyZ6OFsNQP/kY6
QHzBL5EZOzkHXokaH3l9IHZvX86uUQaM+08E5yg58JVl7pxtoAAUXqL49tuMkwRX
Q2a7fyNjdcs9ZEbsc/qQHx+kVqEqu8MgafRqQhHrPMAaBL2juQRe/VfEq5mH0dtn
8RTrGfLIbBvNxHxv3Bqha4YkwL25H9cpxjYKvGQG17ZY3ldmKI9D9u7LrYx0ygJ4
I5/5kOQC0ZzpRH9+ft+8K5ApuMBPVWntoEmCZffmhG2E62dZwrWBumuoU+dXfnWw
r8udYXj1i3HEndh+KYS0J3hZdTrNeHqtQ5Ln8xf0fUvynXGTgQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKCbBp45rAPvoXHuV7Edkn/x64RPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0
YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVmY2QyOWZhNTMvYTZmZjg1NmMtNDZhZS0z
NmI2LTk4N2YtNDZlZjgwNWY1Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDBlNGE0OWMtNjExYy00ZTgzLWI3
NmQtNDBlZmNkMjlmYTUzLzAwZTRhNDljLTYxMWMtNGU4My1iNzZkLTQwZWZjZDI5
ZmE1My5jcmwwHwYDVR0jBBgwFoAU8smlwyRWacbuFJCQ3yj0WDDLkiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMGU0YTQ5Yy02MTFjLTRlODMtYjc2ZC00MGVm
Y2QyOWZhNTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf2aDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCWt5QSu/HFmbJbyZ3xR81m/zaGbmyTCCGPfUC/i7Jvu2snhOHElyRZ
yhnV0OfiO3a0T3njU/615pUWYD8q9+LBreOfn7iXaDHlh2pV7OTFBsLgjy652yvi
+7wR3mJ9D/xmcdkGiImf8HilUAqKtjYHHgWPukqaj0ZMbgZ8thUv2RIqqAM4m/rP
OpmDCvmvBPXMuzAlaZ5jWaqhiZySAxTEj9MC2+CVGo2LSitpAgQt9/Q1R5HaWyPp
18QEKMnFRfe+2JsA6vE5fsl6oKvGJO+WzExDTyu7SvDHUbAPeOgEk1O/S8+eXdms
04l9WIEgCu3aA2FPVhscevsAhHFCGJt5
-----END CERTIFICATE-----
Generated at Mon Aug 25 06:12:01 2025 by rpki-client