Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/3a01ca3b-82fa-313e-9731-0878fe27d2c5.roa
File:                     3a01ca3b-82fa-313e-9731-0878fe27d2c5.roa (raw, json)
Hash identifier:          jXjJqsVoU4MFjwXIOTNvNUo3lvGca+GYluww0IiSZZA=
Subject key identifier:   05:E6:E5:85:65:56:D7:0E:4D:0B:7D:B2:12:C7:60:57:68:60:3A:0F
Certificate issuer:       /CN=db0c6eca-2399-410f-9a3e-c3cede4c4362
Certificate serial:       010D0C9F4328584AF5213261C149A4A9DA221380
Authority key identifier: 3C:39:77:48:E1:E8:88:33:B9:F2:CB:C9:E1:A3:49:E6:D0:87:15:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/3a01ca3b-82fa-313e-9731-0878fe27d2c5.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     13927
IP address blocks:        2607:ba00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:32:61:c1:49:a4:a9:da:22:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db0c6eca-2399-410f-9a3e-c3cede4c4362
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=6225d066-24fa-4374-886e-368299e529cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:4e:89:4f:0d:98:ee:94:3f:44:22:2d:9f:
                    00:f8:12:20:4e:c4:c9:26:c7:d6:c4:08:80:23:b4:
                    95:14:f5:10:e9:f9:c8:12:2b:f0:ac:2f:eb:94:cb:
                    dc:25:3f:6d:3d:da:dd:12:b3:55:22:d8:08:b3:66:
                    9a:8a:c3:c3:df:64:54:82:e4:b5:e3:5c:b9:70:0e:
                    8b:71:a5:a9:c4:28:e9:d0:c6:dd:5c:0a:01:5a:52:
                    a2:40:0d:db:1a:4d:60:fa:1e:bc:69:8a:d5:42:29:
                    8f:37:08:cf:0d:c0:e9:a3:cb:a7:44:09:28:8f:6c:
                    5a:08:58:e9:b3:e4:51:1b:24:3c:4e:48:1a:74:bb:
                    cb:48:2f:c5:1e:36:5a:c5:b8:2a:7e:f2:db:ce:91:
                    d4:17:ad:df:79:94:4d:24:19:15:7f:9f:9f:63:5e:
                    eb:f6:c3:0d:da:c6:25:33:9d:76:cf:04:92:95:ef:
                    5a:3d:72:30:0f:3d:1c:8b:07:3a:5c:37:bd:b7:48:
                    c4:51:65:6f:85:e7:d3:36:60:b4:5b:d7:3c:62:fc:
                    97:a7:d4:e9:c7:30:59:b6:52:bd:45:9f:c2:fd:b1:
                    d5:27:79:47:e3:2f:02:73:74:85:fb:92:10:f6:fb:
                    68:ed:1c:7c:c6:b3:15:a8:cf:c3:2b:c6:f4:db:14:
                    6f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E6:E5:85:65:56:D7:0E:4D:0B:7D:B2:12:C7:60:57:68:60:3A:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/3a01ca3b-82fa-313e-9731-0878fe27d2c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.crl

            X509v3 Authority Key Identifier:
                keyid:3C:39:77:48:E1:E8:88:33:B9:F2:CB:C9:E1:A3:49:E6:D0:87:15:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ba00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4a:74:e0:4d:ea:63:f0:58:cb:dd:a6:69:96:88:16:48:a3:
         98:b1:3e:10:96:f1:64:66:5c:23:d2:6b:e5:88:37:4a:53:46:
         1f:4c:88:55:d5:b2:58:22:b0:d3:fc:80:4e:af:02:d6:2d:d6:
         e6:bb:ef:00:e7:47:ea:93:74:9e:37:31:6c:b6:17:c3:0d:17:
         de:7e:d9:0c:91:61:ac:e5:9b:42:0e:86:c6:5a:0d:9b:fc:de:
         18:c2:e4:ba:5e:94:64:60:36:29:8f:51:d5:fd:3d:f0:1d:16:
         57:1b:cf:6e:cd:29:29:d5:4e:1b:fa:9f:10:be:15:a9:46:f3:
         a2:07:4d:6c:36:8c:a6:45:00:72:57:df:9c:ea:2c:92:8b:ee:
         d9:82:37:b7:12:c0:3f:28:f4:d2:7c:9c:d8:62:52:26:a4:d2:
         87:ae:70:0e:e9:ee:6e:11:9f:06:8f:78:89:b9:f7:7b:b6:6e:
         7a:ed:e0:fc:7f:1b:56:23:0e:70:08:83:1e:00:c3:83:8e:5b:
         d4:75:90:15:d8:40:ee:80:ce:aa:1e:a9:a0:07:6b:cf:8c:a8:
         61:15:5a:09:45:33:5b:1b:c3:02:1a:73:bf:21:df:1e:87:bd:
         de:43:54:ef:a4:10:fa:59:77:39:52:f3:c8:87:e5:71:cc:9d:
         19:f6:90:c8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr1ITJhwUmkqdoiE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGIwYzZlY2EtMjM5OS00MTBmLTlhM2UtYzNjZWRlNGM0
MzYyMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
NjIyNWQwNjYtMjRmYS00Mzc0LTg4NmUtMzY4Mjk5ZTUyOWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZBOiU8NmO6UP0QiLZ8A+BIgTsTJJsfWxAiA
I7SVFPUQ6fnIEivwrC/rlMvcJT9tPdrdErNVItgIs2aaisPD32RUguS141y5cA6L
caWpxCjp0MbdXAoBWlKiQA3bGk1g+h68aYrVQimPNwjPDcDpo8unRAkoj2xaCFjp
s+RRGyQ8TkgadLvLSC/FHjZaxbgqfvLbzpHUF63feZRNJBkVf5+fY17r9sMN2sYl
M512zwSSle9aPXIwDz0ciwc6XDe9t0jEUWVvhefTNmC0W9c8YvyXp9TpxzBZtlK9
RZ/C/bHVJ3lH4y8Cc3SF+5IQ9vto7Rx8xrMVqM/DK8b02xRvowIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAXm5YVlVtcOTQt9shLHYFdoYDoPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjBj
NmVjYS0yMzk5LTQxMGYtOWEzZS1jM2NlZGU0YzQzNjIvM2EwMWNhM2ItODJmYS0z
MTNlLTk3MzEtMDg3OGZlMjdkMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGIwYzZlY2EtMjM5OS00MTBmLTlh
M2UtYzNjZWRlNGM0MzYyL2RiMGM2ZWNhLTIzOTktNDEwZi05YTNlLWMzY2VkZTRj
NDM2Mi5jcmwwHwYDVR0jBBgwFoAUPDl3SOHoiDO58svJ4aNJ5tCHFRQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjBjNmVjYS0yMzk5LTQxMGYtOWEzZS1jM2Nl
ZGU0YzQzNjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge6ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBiSnTgTepj8FjL3aZplogWSKOYsT4QlvFkZlwj0mvliDdKU0YfTIhV
1bJYIrDT/IBOrwLWLdbmu+8A50fqk3SeNzFsthfDDRfeftkMkWGs5ZtCDobGWg2b
/N4YwuS6XpRkYDYpj1HV/T3wHRZXG89uzSkp1U4b+p8QvhWpRvOiB01sNoymRQBy
V9+c6iySi+7Zgje3EsA/KPTSfJzYYlImpNKHrnAO6e5uEZ8Gj3iJufd7tm567eD8
fxtWIw5wCIMeAMODjlvUdZAV2EDugM6qHqmgB2vPjKhhFVoJRTNbG8MCGnO/Id8e
h73eQ1TvpBD6WXc5UvPIh+VxzJ0Z9pDI
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:43:19 2025 by rpki-client