Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/be0423cd-3e30-33b2-905e-76cb963a377d.roa
File:                     be0423cd-3e30-33b2-905e-76cb963a377d.roa (raw, json)
Hash identifier:          dx+U+ruDSZJGbyA2LqeZ+oMMKR3vdhXBpb/1KRlsG9U=
Subject key identifier:   48:72:A8:C3:D5:0F:CD:E0:2B:6A:2A:08:64:2D:16:E0:51:A5:6D:CF
Certificate issuer:       /CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f
Certificate serial:       010D0C9F4328584AC2E10D9F9559170A1388F820
Authority key identifier: 1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/be0423cd-3e30-33b2-905e-76cb963a377d.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     399788
IP address blocks:        2607:d440::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:0d:9f:95:59:17:0a:13:88:f8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=43758888-9ab5-4beb-806c-313e5964f948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:92:e1:f8:ff:b2:80:55:0c:7b:34:d3:0b:
                    0b:f6:ff:24:dc:11:07:2d:ea:04:66:98:dc:0c:45:
                    fe:93:65:69:62:e1:aa:3f:36:f7:70:05:42:6b:f7:
                    3b:5c:25:b9:ba:d8:1d:47:bc:3a:3d:0f:88:01:ea:
                    21:54:3e:32:87:e0:44:ae:5c:a7:b6:66:d3:bb:8c:
                    c3:77:fb:53:87:e9:12:d1:f0:17:d2:14:34:fa:4b:
                    7c:64:bd:d5:02:17:3a:69:ef:79:56:a0:76:04:8b:
                    26:6e:6e:fe:80:d8:63:c5:38:58:b8:16:23:5e:15:
                    10:72:dd:01:6f:f3:24:44:da:61:cf:bc:98:1a:a3:
                    39:a0:f9:3c:f2:75:98:7f:75:c5:ba:29:b9:c3:59:
                    cd:07:3f:04:a2:68:51:7a:79:51:3b:50:4d:5e:38:
                    e8:64:32:35:13:9f:4c:cc:d4:4c:33:68:1c:72:05:
                    8f:f6:78:69:e6:1e:77:7f:d6:58:b7:d2:73:42:0b:
                    cf:79:7b:ef:ca:e1:d6:8e:33:4a:23:bc:77:9b:96:
                    7c:88:f7:ee:7f:bd:95:ad:0e:cc:d5:44:95:a4:6a:
                    54:8b:c9:0a:d6:98:e9:ab:0e:df:86:4b:9b:81:c4:
                    c5:3c:f2:01:46:f5:06:7d:f3:ae:e6:48:a8:01:e8:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:72:A8:C3:D5:0F:CD:E0:2B:6A:2A:08:64:2D:16:E0:51:A5:6D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/be0423cd-3e30-33b2-905e-76cb963a377d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl

            X509v3 Authority Key Identifier:
                keyid:1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:47:18:3b:b6:a9:86:cb:42:14:51:9a:a0:45:13:38:bc:18:
         f8:cc:9c:80:81:67:10:8a:0a:f3:2e:16:53:5e:89:44:0e:55:
         ba:89:93:c4:e2:fd:2b:aa:2c:90:f9:69:7f:da:bb:3d:17:6e:
         d8:07:dc:1b:e8:05:ad:9f:18:9b:e3:8c:e0:4a:cf:db:bb:a0:
         cc:9b:14:fc:46:79:8b:5c:24:e5:c7:84:55:d6:b7:5a:d2:9e:
         96:0a:ad:71:6f:ae:05:34:f3:ab:67:0b:3b:60:f0:6e:73:e1:
         bc:2a:f1:5d:5b:3c:a4:71:0e:b8:56:e3:cc:91:1d:d8:d4:26:
         a1:bd:be:50:6a:c0:64:97:06:e4:23:08:29:a3:77:86:ec:87:
         84:f7:a1:2b:b3:3f:da:fd:9b:72:f0:20:f1:75:62:cc:03:3f:
         84:0e:74:37:cd:4d:68:02:ed:ae:81:ae:40:dd:23:74:9f:74:
         1f:90:a7:c8:b5:93:78:c5:f5:02:f1:fe:7a:a9:6c:75:0b:57:
         51:c4:55:96:ea:a1:5a:4e:45:97:ae:6b:90:c7:6e:f5:a0:e1:
         dc:0d:63:a7:66:e1:7f:00:67:b8:68:5d:35:d6:19:af:88:fe:
         f1:d7:5a:9e:46:78:47:23:be:0b:7b:22:3c:76:0e:32:93:69:
         c2:64:ce:a3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErC4Q2flVkXChOI+CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDI1NzlhYzEtYThiZS00M2M1LThkNmMtZGMwMmI5Zjdh
MzVmMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
NDM3NTg4ODgtOWFiNS00YmViLTgwNmMtMzEzZTU5NjRmOTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDSS4fj/soBVDHs00wsL9v8k3BEHLeoEZpjc
DEX+k2VpYuGqPzb3cAVCa/c7XCW5utgdR7w6PQ+IAeohVD4yh+BErlyntmbTu4zD
d/tTh+kS0fAX0hQ0+kt8ZL3VAhc6ae95VqB2BIsmbm7+gNhjxThYuBYjXhUQct0B
b/MkRNphz7yYGqM5oPk88nWYf3XFuim5w1nNBz8EomhRenlRO1BNXjjoZDI1E59M
zNRMM2gccgWP9nhp5h53f9ZYt9JzQgvPeXvvyuHWjjNKI7x3m5Z8iPfuf72VrQ7M
1USVpGpUi8kK1pjpqw7fhkubgcTFPPIBRvUGffOu5kioAehsrwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEhyqMPVD83gK2oqCGQtFuBRpW3PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMjU3
OWFjMS1hOGJlLTQzYzUtOGQ2Yy1kYzAyYjlmN2EzNWYvYmUwNDIzY2QtM2UzMC0z
M2IyLTkwNWUtNzZjYjk2M2EzNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDI1NzlhYzEtYThiZS00M2M1LThk
NmMtZGMwMmI5ZjdhMzVmLzAyNTc5YWMxLWE4YmUtNDNjNS04ZDZjLWRjMDJiOWY3
YTM1Zi5jcmwwHwYDVR0jBBgwFoAUGuutVOSPgfAfDrmVzeyJmDru2akwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wMjU3OWFjMS1hOGJlLTQzYzUtOGQ2Yy1kYzAy
YjlmN2EzNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfUQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBiRxg7tqmGy0IUUZqgRRM4vBj4zJyAgWcQigrzLhZTXolEDlW6iZPE
4v0rqiyQ+Wl/2rs9F27YB9wb6AWtnxib44zgSs/bu6DMmxT8RnmLXCTlx4RV1rda
0p6WCq1xb64FNPOrZws7YPBuc+G8KvFdWzykcQ64VuPMkR3Y1Cahvb5QasBklwbk
Iwgpo3eG7IeE96Ersz/a/Zty8CDxdWLMAz+EDnQ3zU1oAu2uga5A3SN0n3QfkKfI
tZN4xfUC8f56qWx1C1dRxFWW6qFaTkWXrmuQx271oOHcDWOnZuF/AGe4aF011hmv
iP7x11qeRnhHI74LeyI8dg4yk2nCZM6j
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:04:21 2025 by rpki-client