Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa
File:                     985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa (raw, json)
Hash identifier:          nvzxk2scr0m6JGonpNd9Ucy7qyGs7rGN520ic9Tr9hk=
Subject key identifier:   9F:38:B0:B9:83:FD:CC:77:56:46:B3:68:11:27:B1:7E:F7:66:B6:AC
Certificate issuer:       /CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
Certificate serial:       010D0C9F4328584A23C00C5FF38C1848466B78C0
Authority key identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     54816
IP address blocks:        2607:67c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0c:5f:f3:8c:18:48:46:6b:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=ddf6af9e-7a00-4f83-b525-838a77c1b741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:ef:3c:3e:5d:45:ae:08:11:cf:71:15:37:
                    57:44:14:37:b3:5e:c1:59:87:2c:d0:7e:96:71:b4:
                    41:27:28:7b:1b:89:e3:fe:99:e0:27:a8:ba:7b:eb:
                    a4:de:68:b4:9c:07:ca:59:b7:7b:88:6d:e5:df:8b:
                    c8:13:28:36:fe:d0:f2:ea:40:85:30:ae:9c:d3:13:
                    d8:16:23:f6:6e:8a:b1:7a:05:52:d9:75:bb:26:fd:
                    b7:42:06:3c:3f:17:10:82:cb:a7:d8:c7:42:af:21:
                    ef:4b:87:0d:12:85:ee:2a:00:6e:16:3e:be:e6:a9:
                    56:e7:b3:96:ef:2b:9a:24:43:3f:29:05:b7:49:6e:
                    9b:6d:59:9d:60:b2:2d:79:88:28:6e:cb:79:71:c4:
                    4e:d6:98:c9:c1:8a:43:e9:2f:89:55:d1:64:47:3c:
                    c1:ef:c6:9c:9d:dd:2e:ce:02:cc:7a:7a:27:4f:71:
                    8f:c6:36:89:c3:36:d8:25:18:da:bf:a8:22:60:46:
                    04:c9:cb:9b:5a:0d:72:72:e3:29:ef:68:ad:e1:27:
                    70:c3:6b:5d:84:dc:d6:87:c3:d6:12:49:6d:d7:91:
                    28:37:cf:fb:ac:39:26:98:52:aa:5e:39:f0:5a:70:
                    29:e0:f7:2d:96:dc:c7:e5:8a:34:74:f9:50:92:67:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:38:B0:B9:83:FD:CC:77:56:46:B3:68:11:27:B1:7E:F7:66:B6:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:67c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:bf:17:fd:c6:6a:70:ff:f9:e5:5f:d1:e0:fd:dd:4c:96:
         41:5d:99:3e:86:6a:30:f7:34:8b:91:eb:ed:7d:b6:6c:37:1e:
         69:76:00:36:62:a0:84:7a:ff:d5:0c:22:58:3b:98:2d:6d:b7:
         08:c2:cb:07:f7:58:46:82:f8:94:69:8a:19:4f:90:2a:06:64:
         53:60:4b:f5:48:6f:14:94:e5:d4:12:47:d1:d6:4c:73:33:a5:
         22:2d:99:c6:16:5a:e4:e9:27:20:5a:4d:36:fe:b5:5d:c1:99:
         53:71:d4:97:33:86:e6:16:54:69:17:a7:eb:32:24:84:61:0e:
         94:97:29:7d:73:fd:80:d1:91:3d:03:18:8e:15:53:02:45:7b:
         9b:4a:e2:a5:97:7c:93:e8:df:c8:72:80:51:6c:6c:ca:ac:26:
         a0:6a:a6:64:d0:22:34:3c:dd:3c:0d:fb:eb:56:74:bf:8c:33:
         63:65:2f:b1:ec:8d:0f:fc:27:78:be:3c:39:6f:01:b7:63:d6:
         bc:57:8d:65:8d:a7:d2:a5:82:4d:fe:79:c1:be:49:0a:f1:87:
         1b:f3:aa:79:24:21:a8:f3:50:00:55:40:a8:7d:34:9f:77:0b:
         89:28:48:25:0c:3a:9f:51:ee:1c:1c:e0:1f:cf:ea:48:b3:0c:
         74:e6:4a:06
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEojwAxf84wYSEZreMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNmMDVlYTItZWE1Yi00ZTJiLWFiOWYtYzk1YjQ1OTBl
YTExMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
ZGRmNmFmOWUtN2EwMC00ZjgzLWI1MjUtODM4YTc3YzFiNzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAjvPD5dRa4IEc9xFTdXRBQ3s17BWYcs0H6W
cbRBJyh7G4nj/pngJ6i6e+uk3mi0nAfKWbd7iG3l34vIEyg2/tDy6kCFMK6c0xPY
FiP2boqxegVS2XW7Jv23QgY8PxcQgsun2MdCryHvS4cNEoXuKgBuFj6+5qlW57OW
7yuaJEM/KQW3SW6bbVmdYLIteYgobst5ccRO1pjJwYpD6S+JVdFkRzzB78acnd0u
zgLMenonT3GPxjaJwzbYJRjav6giYEYEycubWg1ycuMp72it4Sdww2tdhNzWh8PW
Eklt15EoN8/7rDkmmFKqXjnwWnAp4PctltzH5Yo0dPlQkmfHvwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ84sLmD/cx3VkazaBEnsX73ZrasMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wM2Yw
NWVhMi1lYTViLTRlMmItYWI5Zi1jOTViNDU5MGVhMTEvOTg1YWE1YTMtN2JjYi0z
YThmLTllNTAtOTI4NDVjMDU4OWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDNmMDVlYTItZWE1Yi00ZTJiLWFi
OWYtYzk1YjQ1OTBlYTExLzAzZjA1ZWEyLWVhNWItNGUyYi1hYjlmLWM5NWI0NTkw
ZWExMS5jcmwwHwYDVR0jBBgwFoAUrluZTbP2uJ2hUZR+wd/mkBCly6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wM2YwNWVhMi1lYTViLTRlMmItYWI5Zi1jOTVi
NDU5MGVhMTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdnwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB0vb8X/cZqcP/55V/R4P3dTJZBXZk+hmow9zSLkevtfbZsNx5pdgA2
YqCEev/VDCJYO5gtbbcIwssH91hGgviUaYoZT5AqBmRTYEv1SG8UlOXUEkfR1kxz
M6UiLZnGFlrk6ScgWk02/rVdwZlTcdSXM4bmFlRpF6frMiSEYQ6Ulyl9c/2A0ZE9
AxiOFVMCRXubSuKll3yT6N/IcoBRbGzKrCagaqZk0CI0PN08DfvrVnS/jDNjZS+x
7I0P/Cd4vjw5bwG3Y9a8V41ljafSpYJN/nnBvkkK8Ycb86p5JCGo81AAVUCofTSf
dwuJKEglDDqfUe4cHOAfz+pIswx05koG
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:40:50 2025 by rpki-client