Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/807afee1-1b10-3f51-a423-dc69b22df685.roa
File:                     807afee1-1b10-3f51-a423-dc69b22df685.roa (raw, json)
Hash identifier:          MOKTL7dLUP1jF4aYbeFAuDUcdg7Yqe4x4DHIJudyiMI=
Subject key identifier:   DB:37:EC:3F:5F:97:9C:4C:E3:39:A4:46:77:29:8D:56:7C:A2:73:04
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584A0A9FD331B285EBE79740E600
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/807afee1-1b10-3f51-a423-dc69b22df685.roa
Signing time:             Sun 01 Jun 2025 01:00:49 +0000
ROA not before:           Sun 01 Jun 2025 01:00:49 +0000
ROA not after:            Sat 30 Aug 2025 01:00:49 +0000
asID:                     27539
IP address blocks:        2604:a900:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0a:9f:d3:31:b2:85:eb:e7:97:40:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jun  1 01:00:49 2025 GMT
            Not After : Aug 30 01:00:49 2025 GMT
        Subject: CN=197a378f-4c78-4107-9448-6fda7180b50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:a6:0a:32:ae:14:fe:aa:47:33:68:67:ff:
                    74:a8:da:04:c4:d0:75:02:a4:a8:01:4e:b6:73:8e:
                    02:eb:0f:01:2d:d6:d2:df:84:9d:08:c4:e3:dd:7e:
                    d2:a4:1b:26:5f:3e:f8:3f:77:26:ed:7b:a2:74:1c:
                    22:e9:84:50:b6:b1:e2:7c:8e:13:f0:51:de:73:ce:
                    a1:44:2f:45:2f:2d:d7:fa:9d:62:1d:0c:a9:a1:46:
                    59:86:21:9b:ac:08:fb:fc:e0:d7:93:7d:a0:2a:84:
                    01:a9:48:fa:e4:bc:37:af:45:66:19:39:76:8b:2e:
                    63:a7:06:ab:12:b3:ba:6e:aa:de:e4:51:6a:e1:0a:
                    20:47:93:bd:15:31:fa:ca:75:0b:dc:ae:de:05:ac:
                    f4:2e:83:83:b5:4a:4e:ac:15:cd:28:ea:3a:f6:d0:
                    fc:26:0a:66:f0:a8:00:bc:bf:de:c5:ad:05:5c:a6:
                    14:74:91:49:de:f3:d6:e1:13:b5:33:3a:b0:6f:81:
                    57:6a:30:95:f6:f3:4f:3f:b2:1d:cb:fd:bc:33:ec:
                    30:30:7d:16:94:83:26:ae:c2:7b:60:b9:83:4b:7a:
                    a1:84:29:9f:a9:0c:04:88:62:8f:68:79:ed:3b:35:
                    96:df:11:16:a6:de:cb:eb:96:e1:b1:e3:a6:e4:91:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:37:EC:3F:5F:97:9C:4C:E3:39:A4:46:77:29:8D:56:7C:A2:73:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/807afee1-1b10-3f51-a423-dc69b22df685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:6000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:13:87:1c:18:cc:95:61:b1:bf:31:e7:cc:9b:18:5d:fa:1e:
         79:e7:64:3b:d7:b9:95:94:f6:77:42:dc:41:87:83:e2:d1:f4:
         20:ff:20:f9:19:c1:dc:e2:14:26:c0:1d:c8:6f:b4:7f:5a:f2:
         ff:0b:9c:2d:95:d6:fb:11:a1:15:d4:58:d8:54:a7:2d:07:bf:
         91:94:1d:ea:f3:52:13:90:7b:97:67:6f:66:a6:8d:f7:92:cb:
         3e:aa:d0:c3:eb:6a:2b:7c:7b:28:a2:2f:f2:40:60:c4:d6:59:
         bc:2b:cb:f4:41:40:58:fc:ed:c0:0f:b7:02:46:ca:d2:a6:9c:
         1c:99:0a:96:70:61:fc:9f:b3:ac:6e:3a:f2:af:6a:fd:35:2a:
         23:32:16:05:99:4a:9d:c8:44:b8:e7:f4:10:a2:16:dc:4c:68:
         70:7b:9e:f5:d7:12:0c:6c:0e:c8:c6:0d:99:93:28:d7:ac:8e:
         d7:de:47:b3:be:0a:fd:91:60:4f:16:d3:19:6c:2e:6f:27:42:
         6b:be:cd:0e:8c:c7:5f:a4:7b:8a:53:47:b6:3f:62:92:03:33:
         4a:e3:09:44:6c:8a:4f:d9:92:7b:4a:95:f5:de:0e:5f:80:b2:
         02:1c:76:6e:d6:be:28:22:83:3f:e3:4f:bd:c2:7a:09:6f:57:
         28:3d:29:89
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoKn9MxsoXr55dA5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli
OWI2MB4XDTI1MDYwMTAxMDA0OVoXDTI1MDgzMDAxMDA0OVowLzEtMCsGA1UEAxMk
MTk3YTM3OGYtNGM3OC00MTA3LTk0NDgtNmZkYTcxODBiNTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuemCjKuFP6qRzNoZ/90qNoExNB1AqSoAU62
c44C6w8BLdbS34SdCMTj3X7SpBsmXz74P3cm7XuidBwi6YRQtrHifI4T8FHec86h
RC9FLy3X+p1iHQypoUZZhiGbrAj7/ODXk32gKoQBqUj65Lw3r0VmGTl2iy5jpwar
ErO6bqre5FFq4QogR5O9FTH6ynUL3K7eBaz0LoODtUpOrBXNKOo69tD8Jgpm8KgA
vL/exa0FXKYUdJFJ3vPW4RO1Mzqwb4FXajCV9vNPP7Idy/28M+wwMH0WlIMmrsJ7
YLmDS3qhhCmfqQwEiGKPaHntOzWW3xEWpt7L65bhseOm5JHCgQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNs37D9fl5xM4zmkRncpjVZ8onMEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh
NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvODA3YWZlZTEtMWIxMC0z
ZjUxLWE0MjMtZGM2OWIyMmRmNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4
MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5
YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk
OGRjOWI5YjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgSpAGAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFxOHHBjMlWGxvzHnzJsYXfoeeedkO9e5lZT2d0LcQYeD4tH0IP8g
+RnB3OIUJsAdyG+0f1ry/wucLZXW+xGhFdRY2FSnLQe/kZQd6vNSE5B7l2dvZqaN
95LLPqrQw+tqK3x7KKIv8kBgxNZZvCvL9EFAWPztwA+3AkbK0qacHJkKlnBh/J+z
rG468q9q/TUqIzIWBZlKnchEuOf0EKIW3ExocHue9dcSDGwOyMYNmZMo16yO195H
s74K/ZFgTxbTGWwubydCa77NDozHX6R7ilNHtj9ikgMzSuMJRGyKT9mSe0qV9d4O
X4CyAhx2bta+KCKDP+NPvcJ6CW9XKD0piQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:35:05 2025 by rpki-client