Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/419dc84b-1701-3b3f-9064-f7013b5c6c12.roa
File:                     419dc84b-1701-3b3f-9064-f7013b5c6c12.roa (raw, json)
Hash identifier:          BBEr5eaIHaQ1vJbA/5jJid23tM8D8kzUd9hbvH0jJNo=
Subject key identifier:   96:E9:FA:15:4C:2F:B4:00:65:6A:82:38:0B:DD:09:2E:51:3F:67:1C
Certificate issuer:       /CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Certificate serial:       010D0C9F4328584A3A158D917B287B69722EE100
Authority key identifier: E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/419dc84b-1701-3b3f-9064-f7013b5c6c12.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     55211
IP address blocks:        2607:b3c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8d:91:7b:28:7b:69:72:2e:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=94cc40dc-b049-422c-8664-9df6234c47a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:09:ee:f0:aa:76:45:8c:d1:30:af:4a:6c:dc:
                    21:05:b7:48:75:f0:33:87:4c:cd:47:95:b7:b7:61:
                    b0:40:71:ba:be:4e:53:c8:c8:05:17:d2:95:78:ab:
                    14:de:38:9e:a1:01:42:c6:71:36:9d:03:50:02:5e:
                    92:be:8a:f2:c5:17:4f:73:12:2f:9e:f7:bf:bd:e3:
                    a0:f0:1e:23:5f:bb:6c:d1:46:f9:4b:44:75:21:8a:
                    b7:df:81:1d:36:a0:7f:1c:d0:a3:b9:64:99:c0:f9:
                    21:df:06:f4:32:6d:e6:86:50:39:ea:f2:be:46:0b:
                    94:0b:0f:a8:6d:98:1f:0b:e1:76:17:79:20:aa:ac:
                    20:2e:e7:e2:98:13:47:9e:cf:ef:cc:7a:aa:96:ca:
                    48:c9:e2:98:3a:f9:bf:34:8c:4b:9a:56:34:42:5d:
                    49:cf:33:26:77:20:97:64:f4:e8:5b:a5:17:f4:36:
                    99:12:45:a1:4b:c6:5a:f4:f7:37:90:c8:db:3f:3c:
                    c8:92:8c:8a:b8:3c:e0:db:ac:c3:81:e7:d1:7a:3d:
                    ca:d9:c6:22:47:15:82:30:de:4e:70:c6:b8:c3:aa:
                    d9:76:39:86:23:77:dd:f6:69:aa:13:f0:8d:80:2a:
                    52:21:17:c5:02:16:aa:3d:b4:3b:47:7a:3c:9e:a4:
                    25:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E9:FA:15:4C:2F:B4:00:65:6A:82:38:0B:DD:09:2E:51:3F:67:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/419dc84b-1701-3b3f-9064-f7013b5c6c12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl

            X509v3 Authority Key Identifier:
                keyid:E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b3c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b1:2f:f4:c0:b8:d4:1c:8a:df:1c:2e:9b:35:90:51:b6:c6:
         45:16:68:b8:f0:3c:1f:8d:97:1a:ee:b8:08:93:fb:79:be:7c:
         b8:9a:df:99:a9:d6:8f:27:e2:8b:05:c2:f0:0c:7a:c2:d5:41:
         3d:db:06:3f:0e:20:c8:36:9c:f9:03:5c:8c:2a:60:4d:04:35:
         3d:76:41:00:d1:f6:14:c4:66:70:a1:1d:c6:bc:e9:13:a6:bb:
         db:bd:0c:97:e1:b4:5a:e6:d3:95:50:0f:4f:7d:8d:a6:0f:3c:
         0c:2f:fe:88:56:2c:eb:67:a1:ab:fb:fd:a9:88:3f:31:d2:53:
         a3:79:73:19:84:40:fd:70:a7:e8:01:58:e6:54:84:63:6d:8a:
         e8:4b:0e:bf:18:12:b4:91:3e:c2:62:75:e3:d6:41:b7:ae:34:
         40:3b:d7:ac:d8:40:0b:54:81:3d:39:81:28:17:c2:10:e5:f1:
         32:77:ed:f6:8f:dc:2b:61:74:9c:44:14:d4:7b:ab:af:07:3b:
         33:ed:dc:9f:a9:46:42:02:9d:db:37:2b:eb:9b:60:50:88:83:
         26:40:45:29:82:68:ea:d4:9a:9c:05:af:04:e9:7b:58:50:ea:
         b8:d7:43:95:a8:aa:f2:c0:ac:1f:60:3a:c7:79:56:0d:6f:a9:
         09:74:76:7d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEo6FY2Reyh7aXIu4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU5N2NmMTYtYjJiYi00NzYzLTk2MDktOWI0MmVhNDVh
ODhmMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
OTRjYzQwZGMtYjA0OS00MjJjLTg2NjQtOWRmNjIzNGM0N2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAnu8Kp2RYzRMK9KbNwhBbdIdfAzh0zNR5W3
t2GwQHG6vk5TyMgFF9KVeKsU3jieoQFCxnE2nQNQAl6SvoryxRdPcxIvnve/veOg
8B4jX7ts0Ub5S0R1IYq334EdNqB/HNCjuWSZwPkh3wb0Mm3mhlA56vK+RguUCw+o
bZgfC+F2F3kgqqwgLufimBNHns/vzHqqlspIyeKYOvm/NIxLmlY0Ql1JzzMmdyCX
ZPToW6UX9DaZEkWhS8Za9Pc3kMjbPzzIkoyKuDzg26zDgefRej3K2cYiRxWCMN5O
cMa4w6rZdjmGI3fd9mmqE/CNgCpSIRfFAhaqPbQ7R3o8nqQlJwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJbp+hVML7QAZWqCOAvdCS5RP2ccMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZTk3
Y2YxNi1iMmJiLTQ3NjMtOTYwOS05YjQyZWE0NWE4OGYvNDE5ZGM4NGItMTcwMS0z
YjNmLTkwNjQtZjcwMTNiNWM2YzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmU5N2NmMTYtYjJiYi00NzYzLTk2
MDktOWI0MmVhNDVhODhmL2JlOTdjZjE2LWIyYmItNDc2My05NjA5LTliNDJlYTQ1
YTg4Zi5jcmwwHwYDVR0jBBgwFoAU6YvCUQnziTlS01wBbJpfs9Uf1SUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iZTk3Y2YxNi1iMmJiLTQ3NjMtOTYwOS05YjQy
ZWE0NWE4OGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgezwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA0sS/0wLjUHIrfHC6bNZBRtsZFFmi48DwfjZca7rgIk/t5vny4mt+Z
qdaPJ+KLBcLwDHrC1UE92wY/DiDINpz5A1yMKmBNBDU9dkEA0fYUxGZwoR3GvOkT
prvbvQyX4bRa5tOVUA9PfY2mDzwML/6IVizrZ6Gr+/2piD8x0lOjeXMZhED9cKfo
AVjmVIRjbYroSw6/GBK0kT7CYnXj1kG3rjRAO9es2EALVIE9OYEoF8IQ5fEyd+32
j9wrYXScRBTUe6uvBzsz7dyfqUZCAp3bNyvrm2BQiIMmQEUpgmjq1JqcBa8E6XtY
UOq410OVqKrywKwfYDrHeVYNb6kJdHZ9
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:06:19 2025 by rpki-client