Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b62cd67-aed1-3414-99ea-68b685db108e.roa
File:                     1b62cd67-aed1-3414-99ea-68b685db108e.roa (raw, json)
Hash identifier:          2ldhxLZ9lKl5JQBpZ+8Zz4lCKNwx56UnjfyuT5vb+Hc=
Subject key identifier:   FC:57:79:6D:C7:1A:89:CF:37:A9:CA:91:6D:D0:0D:D8:21:A3:8B:97
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849FCAA80C5B3EC2F73EBDF5D80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b62cd67-aed1-3414-99ea-68b685db108e.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     22006
IP address blocks:        2001:418:1456:b01::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:80:c5:b3:ec:2f:73:eb:df:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=8a819def-4598-42ef-9e75-8f9bda5d8474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:b5:b4:76:9c:a5:94:59:25:72:ed:00:55:
                    17:f2:ae:49:2c:2e:f8:55:07:7e:13:c9:e2:ed:c8:
                    d3:4f:33:ae:f8:45:25:b0:c6:b9:06:5a:77:fd:f5:
                    6a:3e:61:9f:56:d7:ae:fd:3a:4c:4a:5a:92:12:b9:
                    18:f1:67:5d:0d:96:df:dc:12:6a:69:c1:44:25:c1:
                    e4:6a:97:ae:ce:98:9d:72:97:ed:75:6a:ee:81:c0:
                    62:53:e3:ed:29:6f:48:42:92:48:9d:9a:4d:15:ae:
                    1c:46:67:be:6d:e9:be:8e:b2:4f:0c:9f:87:b0:c0:
                    f1:8d:29:33:dc:7a:f4:4d:e6:b5:c2:b2:a2:44:70:
                    f4:85:e3:45:ec:ea:b9:b8:d5:f3:9a:a8:41:61:27:
                    54:28:0e:33:ed:c1:9c:de:ba:ac:ce:51:94:79:43:
                    d1:58:12:77:fb:31:59:99:f3:fd:59:09:d3:2c:d7:
                    91:b1:4c:a5:79:0d:78:af:c9:4b:c1:6f:3c:12:e9:
                    8e:4e:d3:22:37:e5:9a:59:3d:67:5a:26:ce:bf:18:
                    54:51:2c:69:83:21:74:04:6c:56:30:dd:9b:74:7b:
                    e3:2c:dc:3c:3f:2d:43:6e:68:d3:1e:3b:62:a1:05:
                    5a:67:9f:40:b6:03:13:23:7a:01:d5:e6:b0:c3:46:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:57:79:6D:C7:1A:89:CF:37:A9:CA:91:6D:D0:0D:D8:21:A3:8B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1b62cd67-aed1-3414-99ea-68b685db108e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:b01::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6b:eb:83:e8:0c:a8:bc:f0:4b:4b:a2:5f:e8:c1:27:75:df:
         93:4f:21:23:f6:15:15:31:15:fd:c6:73:c7:db:00:83:90:34:
         4b:b1:d9:dd:ff:62:dc:02:0b:26:f2:b7:cd:4f:e1:b5:32:00:
         16:af:85:a9:62:47:ff:bd:9c:64:91:3d:7e:4d:3f:b0:90:2e:
         aa:8a:3d:35:5d:d1:c4:7b:0c:23:2f:ba:43:e5:bb:24:50:4d:
         c7:2f:c3:81:97:ec:de:d4:9a:ff:57:ba:32:3e:29:ba:47:a2:
         5c:0b:ee:36:e4:6c:b8:c1:1f:01:a2:70:6a:e1:92:b8:68:37:
         15:c6:61:cc:f2:6e:9a:9c:78:29:a7:dd:46:98:21:3b:06:9d:
         e8:69:1a:48:0f:7f:0a:4a:67:3c:09:5a:53:42:3d:7b:1c:40:
         ed:d1:68:af:20:7a:85:cb:ef:83:50:81:fd:c8:10:37:72:1a:
         24:6a:7d:4a:8a:34:33:ea:04:b9:c7:b1:a5:a7:36:06:8c:80:
         5a:8e:9e:ba:e0:9b:c3:7e:32:c5:3a:77:dc:10:37:90:ce:bc:
         44:81:fd:07:eb:d9:44:e4:80:74:2a:05:f5:4a:da:30:8b:69:
         a6:73:98:6f:77:7b:a3:0c:53:3f:2c:71:6d:29:e6:7d:17:d5:
         69:5f:a3:89
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEn8qoDFs+wvc+vfXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
OGE4MTlkZWYtNDU5OC00MmVmLTllNzUtOGY5YmRhNWQ4NDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoe1tHacpZRZJXLtAFUX8q5JLC74VQd+E8ni
7cjTTzOu+EUlsMa5Blp3/fVqPmGfVteu/TpMSlqSErkY8WddDZbf3BJqacFEJcHk
apeuzpidcpftdWrugcBiU+PtKW9IQpJInZpNFa4cRme+bem+jrJPDJ+HsMDxjSkz
3Hr0Tea1wrKiRHD0heNF7Oq5uNXzmqhBYSdUKA4z7cGc3rqszlGUeUPRWBJ3+zFZ
mfP9WQnTLNeRsUyleQ14r8lLwW88EumOTtMiN+WaWT1nWibOvxhUUSxpgyF0BGxW
MN2bdHvjLNw8Py1DbmjTHjtioQVaZ59AtgMTI3oB1eaww0bdjQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFPxXeW3HGonPN6nKkW3QDdgho4uXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWI2MmNkNjctYWVkMS0z
NDE0LTk5ZWEtNjhiNjg1ZGIxMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBRW
CwEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEATmvrg+gMqLzwS0uiX+jBJ3Xfk08hI/YVFTEV/cZzx9sAg5A0
S7HZ3f9i3AILJvK3zU/htTIAFq+FqWJH/72cZJE9fk0/sJAuqoo9NV3RxHsMIy+6
Q+W7JFBNxy/DgZfs3tSa/1e6Mj4pukeiXAvuNuRsuMEfAaJwauGSuGg3FcZhzPJu
mpx4KafdRpghOwad6GkaSA9/CkpnPAlaU0I9exxA7dForyB6hcvvg1CB/cgQN3Ia
JGp9Soo0M+oEucexpac2BoyAWo6euuCbw34yxTp33BA3kM68RIH9B+vZROSAdCoF
9UraMItppnOYb3d7owxTPyxxbSnmfRfVaV+jiQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:10:00 2025 by rpki-client