Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/7ed31b16-52bd-3e5b-b31b-4a4b18c02fb5.roa
File:                     7ed31b16-52bd-3e5b-b31b-4a4b18c02fb5.roa (raw, json)
Hash identifier:          AbXX4F23VbptAH0cuhUtxFBpAugun9OCGGeWMSI/qR0=
Subject key identifier:   60:A0:BB:18:E2:41:50:B4:72:F2:A8:F6:B6:E2:14:1A:0A:9E:18:B9
Certificate issuer:       /CN=41911571-6038-4a97-80ce-9611c78f050e
Certificate serial:       010D0C9F4328584B7C875CCE36A4F5ABACE71080
Authority key identifier: DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/7ed31b16-52bd-3e5b-b31b-4a4b18c02fb5.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     33574
IP address blocks:        2607:50c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:5c:ce:36:a4:f5:ab:ac:e7:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41911571-6038-4a97-80ce-9611c78f050e
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=8041e787-e476-4186-9c9a-3a3f4197b285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:11:df:b7:70:1a:55:b3:a4:d8:75:f4:cf:
                    a8:a6:58:85:4d:73:75:66:c7:69:4b:a4:0f:8e:c1:
                    1b:2d:70:d4:24:9e:2e:1a:1f:6d:a2:c7:37:2b:69:
                    bc:0a:c0:3f:5a:0a:1a:c0:12:39:a3:c3:aa:82:7e:
                    d9:32:88:d4:0d:82:23:7c:f6:26:53:6e:4a:32:9b:
                    27:bf:5f:10:1d:b7:b1:64:ac:f5:82:50:8b:1a:6b:
                    05:fc:27:75:13:b5:76:0d:b2:03:8b:3b:d4:89:1b:
                    9b:38:99:05:32:74:41:ea:81:ac:09:30:39:5a:6a:
                    b2:07:12:2e:4e:b6:f1:1e:f5:22:f9:7b:54:a6:f6:
                    58:f2:2a:fc:19:81:8f:b4:3f:fa:20:e1:67:81:a4:
                    cb:54:c4:bd:33:12:5c:8d:65:55:3a:e5:2f:c6:33:
                    53:b4:79:82:50:b7:65:60:a4:00:17:91:18:c8:6f:
                    b5:bf:6e:ab:65:7a:a0:bf:70:41:ba:7d:9d:d5:0f:
                    00:48:40:fe:f9:a4:fe:81:da:88:a3:ec:5e:1e:79:
                    28:3b:75:9b:fa:64:30:62:37:8f:88:e9:5b:45:21:
                    7c:58:97:1e:fb:e9:df:ee:21:5a:ff:a9:ee:3b:2d:
                    cd:de:5a:d5:9c:a4:6b:14:9d:b1:df:01:8a:be:43:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A0:BB:18:E2:41:50:B4:72:F2:A8:F6:B6:E2:14:1A:0A:9E:18:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/7ed31b16-52bd-3e5b-b31b-4a4b18c02fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl

            X509v3 Authority Key Identifier:
                keyid:DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:50c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e5:b5:c8:7e:69:09:e9:79:67:99:3b:7d:bd:6c:80:f4:50:
         ed:35:43:51:72:76:05:e9:60:5f:b7:62:5f:f9:f5:1b:02:1d:
         6c:c5:4c:f4:57:f7:a3:20:47:57:db:b1:7f:63:80:d1:7e:32:
         bb:a3:30:de:56:89:6d:57:34:a7:2e:e9:cd:0b:9e:58:95:1b:
         1f:39:fd:e9:2e:ac:20:3a:f7:51:aa:a1:34:30:79:5e:b6:c6:
         90:76:03:a3:1b:97:1a:a8:af:6a:8c:49:78:12:28:73:6f:cc:
         28:6b:a0:69:cb:42:10:66:af:16:69:fc:e1:3e:6e:81:9c:f2:
         05:0c:f4:b3:5e:44:18:fc:61:5a:6b:27:95:f6:d6:17:20:8d:
         bb:69:5d:48:eb:4f:8b:70:87:fc:86:b7:93:a7:cb:61:d7:4d:
         5c:63:b5:20:ff:9e:67:73:ec:ac:d2:99:8c:5b:f0:bf:e8:34:
         03:ac:62:f5:3f:c4:c8:09:52:a6:48:79:93:d9:f3:fb:fc:69:
         eb:76:a8:5b:71:7a:9f:ad:a1:2c:01:21:06:46:aa:eb:d7:f8:
         2d:32:99:94:9a:1b:91:d3:73:92:eb:a6:b9:b5:18:9c:08:38:
         44:83:cc:c6:dd:75:0a:d7:0b:9c:4a:71:11:ca:c8:d7:c4:57:
         0d:4c:72:7c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt8h1zONqT1q6znEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE5MTE1NzEtNjAzOC00YTk3LTgwY2UtOTYxMWM3OGYw
NTBlMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk
ODA0MWU3ODctZTQ3Ni00MTg2LTljOWEtM2EzZjQxOTdiMjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mUR37dwGlWzpNh19M+opliFTXN1ZsdpS6QP
jsEbLXDUJJ4uGh9tosc3K2m8CsA/WgoawBI5o8Oqgn7ZMojUDYIjfPYmU25KMpsn
v18QHbexZKz1glCLGmsF/Cd1E7V2DbIDizvUiRubOJkFMnRB6oGsCTA5WmqyBxIu
TrbxHvUi+XtUpvZY8ir8GYGPtD/6IOFngaTLVMS9MxJcjWVVOuUvxjNTtHmCULdl
YKQAF5EYyG+1v26rZXqgv3BBun2d1Q8ASED++aT+gdqIo+xeHnkoO3Wb+mQwYjeP
iOlbRSF8WJce++nf7iFa/6nuOy3N3lrVnKRrFJ2x3wGKvkO4rwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGCguxjiQVC0cvKo9rbiFBoKnhi5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MTkx
MTU3MS02MDM4LTRhOTctODBjZS05NjExYzc4ZjA1MGUvN2VkMzFiMTYtNTJiZC0z
ZTViLWIzMWItNGE0YjE4YzAyZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDE5MTE1NzEtNjAzOC00YTk3LTgw
Y2UtOTYxMWM3OGYwNTBlLzQxOTExNTcxLTYwMzgtNGE5Ny04MGNlLTk2MTFjNzhm
MDUwZS5jcmwwHwYDVR0jBBgwFoAU33DVtIgKccACLNhbw5BI3v+bU2kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MTkxMTU3MS02MDM4LTRhOTctODBjZS05NjEx
Yzc4ZjA1MGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdQwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCx5bXIfmkJ6XlnmTt9vWyA9FDtNUNRcnYF6WBft2Jf+fUbAh1sxUz0
V/ejIEdX27F/Y4DRfjK7ozDeVoltVzSnLunNC55YlRsfOf3pLqwgOvdRqqE0MHle
tsaQdgOjG5caqK9qjEl4Eihzb8woa6Bpy0IQZq8WafzhPm6BnPIFDPSzXkQY/GFa
ayeV9tYXII27aV1I60+LcIf8hreTp8th101cY7Ug/55nc+ys0pmMW/C/6DQDrGL1
P8TICVKmSHmT2fP7/GnrdqhbcXqfraEsASEGRqrr1/gtMpmUmhuR03OS66a5tRic
CDhEg8zG3XUK1wucSnERysjXxFcNTHJ8
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:06:37 2025 by rpki-client