Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa
File:                     28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa (raw, json)
Hash identifier:          R/48e+HwnHTsUmDTQPSQk1gi/e5bKhyMivDg6PxGz80=
Subject key identifier:   15:D1:24:BB:F0:42:8E:E9:9F:F8:FF:1E:94:B9:38:97:FC:AE:19:64
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584A45403E4C8EF972E887617138
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     22781
IP address blocks:        2607:fb50::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:3e:4c:8e:f9:72:e8:87:61:71:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=a6625908-bf85-4492-99e8-80a3e1a68f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:7f:81:0c:c4:6a:9b:6f:50:b4:f0:e4:79:
                    f0:ce:bb:65:0d:59:4e:bc:4f:44:55:64:ec:fe:92:
                    3d:29:b7:d1:c0:c1:79:70:ea:50:a5:e6:12:d2:8e:
                    ce:46:58:0c:b7:94:43:af:d2:38:96:8c:6e:2e:d6:
                    29:89:5c:8d:4e:39:86:5f:ff:1a:a6:7f:a5:bf:72:
                    89:3f:ec:ad:31:1a:11:d8:70:03:6a:7e:8b:da:0c:
                    c2:11:76:3e:00:e1:7a:9a:50:4d:51:73:0f:63:b8:
                    3b:da:e7:bd:ee:bc:b1:0f:e2:a6:ae:1d:fe:2d:12:
                    d8:92:1e:5e:ee:b9:cd:38:23:cf:6e:b0:0c:c6:13:
                    11:49:f6:77:97:85:06:7c:1a:6f:dc:a7:3d:a2:ba:
                    76:da:9c:0d:40:08:ae:3e:52:2c:68:e5:91:e1:07:
                    7c:4e:3f:69:79:28:14:c3:fd:ea:5e:ae:bb:bc:1a:
                    d6:8d:88:78:01:cf:7d:05:5d:ee:b6:6e:81:61:a8:
                    9c:4c:7e:39:5c:4f:85:53:ef:70:ee:10:fe:38:2e:
                    dc:f6:05:86:4f:96:7f:58:d7:16:7c:1d:ed:21:82:
                    21:0b:70:88:7f:cd:81:39:64:b9:b3:82:61:97:2e:
                    d2:22:2d:c4:a0:a2:51:41:21:dc:05:4c:cb:eb:ad:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D1:24:BB:F0:42:8E:E9:9F:F8:FF:1E:94:B9:38:97:FC:AE:19:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28d8023b-5b50-38c4-a6ca-09bf964ed5b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb50::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:5d:5d:e8:f9:e3:70:50:33:88:f1:35:10:69:63:31:ce:4f:
         de:ba:b1:1e:1e:a2:3b:bd:0b:d6:6a:93:33:97:59:81:00:34:
         89:5e:95:6b:14:98:3c:aa:9b:f8:4e:6b:a9:6f:77:07:ba:bb:
         27:4a:03:87:d8:ec:0d:db:7c:b5:03:4b:2e:ea:9b:98:55:e1:
         6a:eb:52:d9:12:dd:13:c6:1f:6f:47:cd:63:8c:5a:e7:5e:87:
         76:d1:3c:bb:2f:49:e4:b0:3c:06:d2:4d:99:7a:69:88:b2:13:
         e0:bf:43:7d:48:af:88:5a:e2:45:64:14:b5:c0:68:c7:cc:7e:
         7f:69:85:70:ba:5d:c7:3d:55:5a:07:36:86:df:ca:45:28:3c:
         1b:ca:55:19:ff:6e:50:27:5e:7e:a9:de:dc:77:f4:54:30:44:
         c0:aa:b7:10:af:bc:b5:a6:8b:00:f6:78:dd:f3:a0:63:3c:c7:
         62:23:16:98:09:92:08:96:e7:2e:f3:77:72:61:d6:7d:04:c4:
         6d:6c:9f:ba:b3:75:4b:18:4f:53:90:06:ee:7d:2f:5e:f2:15:
         42:fb:8a:b1:5f:60:b6:53:59:ef:66:7b:dd:19:f1:58:bc:a7:
         38:88:b6:d4:4c:ef:20:2c:f4:c4:d5:80:19:9f:02:10:b5:c0:
         d8:d3:35:13
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpFQD5Mjvly6IdhcTgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk
YTY2MjU5MDgtYmY4NS00NDkyLTk5ZTgtODBhM2UxYTY4Zjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp31/gQzEaptvULTw5HnwzrtlDVlOvE9EVWTs
/pI9KbfRwMF5cOpQpeYS0o7ORlgMt5RDr9I4loxuLtYpiVyNTjmGX/8apn+lv3KJ
P+ytMRoR2HADan6L2gzCEXY+AOF6mlBNUXMPY7g72ue97ryxD+Kmrh3+LRLYkh5e
7rnNOCPPbrAMxhMRSfZ3l4UGfBpv3Kc9orp22pwNQAiuPlIsaOWR4Qd8Tj9peSgU
w/3qXq67vBrWjYh4Ac99BV3utm6BYaicTH45XE+FU+9w7hD+OC7c9gWGT5Z/WNcW
fB3tIYIhC3CIf82BOWS5s4Jhly7SIi3EoKJRQSHcBUzL6603VQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBXRJLvwQo7pn/j/HpS5OJf8rhlkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjhkODAyM2ItNWI1MC0z
OGM0LWE2Y2EtMDliZjk2NGVkNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgf7UAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARV1d6PnjcFAziPE1EGljMc5P3rqxHh6iO70L1mqTM5dZgQA0iV6V
axSYPKqb+E5rqW93B7q7J0oDh9jsDdt8tQNLLuqbmFXhautS2RLdE8Yfb0fNY4xa
516HdtE8uy9J5LA8BtJNmXppiLIT4L9DfUiviFriRWQUtcBox8x+f2mFcLpdxz1V
Wgc2ht/KRSg8G8pVGf9uUCdefqne3Hf0VDBEwKq3EK+8taaLAPZ43fOgYzzHYiMW
mAmSCJbnLvN3cmHWfQTEbWyfurN1SxhPU5AG7n0vXvIVQvuKsV9gtlNZ72Z73Rnx
WLynOIi21EzvICz0xNWAGZ8CELXA2NM1Ew==
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:17:22 2025 by rpki-client