Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/167df5e4-9539-35bd-83ee-39c1f78d4e32.roa
File:                     167df5e4-9539-35bd-83ee-39c1f78d4e32.roa (raw, json)
Hash identifier:          29USvhtbBooYmTk4Op2CjPIoKc6sgGbN38CHATzFBXQ=
Subject key identifier:   A1:33:AF:00:69:BE:70:C9:A4:BE:5E:8D:B8:50:FA:C0:C6:36:70:A3
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584A30503BFBB5F9E7AA38CB4400
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/167df5e4-9539-35bd-83ee-39c1f78d4e32.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     7992
IP address blocks:        2001:1970::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3b:fb:b5:f9:e7:aa:38:cb:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=225e9b71-cda2-437e-88c7-93b7ebba1399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f7:63:b3:e8:aa:85:b6:df:4c:e3:74:8f:dd:
                    8c:26:7a:26:63:b7:2e:c8:03:1a:10:d5:96:56:3a:
                    22:b6:77:47:59:e9:66:ab:64:3f:e5:cb:b6:bf:4c:
                    e3:37:73:6f:6c:15:e9:14:55:2a:a7:d5:a0:54:d3:
                    28:ab:a8:bb:c2:06:a0:9a:4b:f6:27:76:0d:bd:06:
                    cc:00:e8:c5:26:a0:fe:e6:fa:8d:8e:36:fb:1d:5e:
                    9d:33:ce:66:f3:80:34:8f:39:00:74:ea:a5:bf:24:
                    d4:dd:ee:15:2a:b6:4f:6e:bc:14:18:30:11:39:88:
                    ed:99:9c:55:c3:fc:21:5c:f9:fc:bb:b9:f5:7c:94:
                    1a:bb:f5:24:cf:06:ab:3e:74:31:09:c0:f9:6c:77:
                    13:0a:63:0c:81:56:83:03:3d:3a:b4:0d:0f:ee:fb:
                    73:4c:3e:6b:8b:ff:27:9b:e5:98:2b:bd:21:c9:fe:
                    8a:a4:ce:5d:51:6a:fd:33:84:9a:3d:f4:86:7e:6a:
                    e6:46:f0:fd:bb:85:d6:79:9b:c7:b7:7b:df:bd:f7:
                    7b:f2:21:b7:dc:37:d1:76:cd:de:21:4d:6a:a9:fa:
                    75:6b:c6:0e:85:8b:a9:12:52:70:57:a9:17:3e:58:
                    a9:7e:6f:3d:38:5c:45:60:63:26:ff:2d:ac:f2:44:
                    dd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:33:AF:00:69:BE:70:C9:A4:BE:5E:8D:B8:50:FA:C0:C6:36:70:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/167df5e4-9539-35bd-83ee-39c1f78d4e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1970::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:34:f4:93:51:2d:bc:0f:3f:2f:70:6f:d6:f7:c3:f0:89:
         e2:ed:fb:73:37:b8:f9:3a:c2:cc:d8:f5:d0:93:fd:67:6b:b7:
         94:5c:61:fe:1d:20:5c:a7:cf:a5:1e:3a:e4:64:ba:ba:02:7c:
         e1:a4:4b:37:88:83:89:c6:6b:e7:43:51:c3:31:29:e5:39:c9:
         df:50:73:08:c4:14:4a:bf:56:9f:11:70:7a:d7:1b:08:39:30:
         0b:48:e4:e2:66:38:3a:fa:51:0b:8c:06:ca:17:b7:99:22:9c:
         93:65:51:69:a0:d6:6e:b0:e8:9e:d3:8f:d0:b2:7c:93:29:bf:
         7f:50:24:b6:49:62:61:d6:f5:5d:ab:0e:59:c1:90:35:46:f1:
         d8:b3:60:7b:42:a2:10:04:a3:52:fa:6a:5a:1a:23:6c:10:17:
         f6:7b:30:cb:68:ba:7b:cb:c9:69:42:53:66:71:ef:d3:a3:1e:
         8b:cd:aa:1f:ab:9d:0e:0d:dd:cb:89:f2:79:b4:de:f4:69:01:
         66:59:5a:19:51:a2:34:70:10:ce:99:b0:ed:a2:43:1c:1b:88:
         1f:55:78:da:1f:1f:1c:8c:56:a9:5e:9b:11:c3:b7:1e:a5:3b:
         f3:6d:58:8e:78:a5:47:16:92:b9:48:17:23:7f:43:60:cd:1b:
         03:2d:22:f5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEowUDv7tfnnqjjLRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm
Zjk4MB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MjI1ZTliNzEtY2RhMi00MzdlLTg4YzctOTNiN2ViYmExMzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfdjs+iqhbbfTON0j92MJnomY7cuyAMaENWW
VjoitndHWelmq2Q/5cu2v0zjN3NvbBXpFFUqp9WgVNMoq6i7wgagmkv2J3YNvQbM
AOjFJqD+5vqNjjb7HV6dM85m84A0jzkAdOqlvyTU3e4VKrZPbrwUGDAROYjtmZxV
w/whXPn8u7n1fJQau/UkzwarPnQxCcD5bHcTCmMMgVaDAz06tA0P7vtzTD5ri/8n
m+WYK70hyf6KpM5dUWr9M4SaPfSGfmrmRvD9u4XWeZvHt3vfvfd78iG33DfRds3e
IU1qqfp1a8YOhYupElJwV6kXPlipfm89OFxFYGMm/y2s8kTdTwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKEzrwBpvnDJpL5ejbhQ+sDGNnCjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy
ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvMTY3ZGY1ZTQtOTUzOS0z
NWJkLTgzZWUtMzljMWY3OGQ0ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1
ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3
ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5
OThjN2ZmOTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZcDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBH6jT0k1EtvA8/L3Bv1vfD8Ini7ftzN7j5OsLM2PXQk/1na7eUXGH+
HSBcp8+lHjrkZLq6AnzhpEs3iIOJxmvnQ1HDMSnlOcnfUHMIxBRKv1afEXB61xsI
OTALSOTiZjg6+lELjAbKF7eZIpyTZVFpoNZusOie04/QsnyTKb9/UCS2SWJh1vVd
qw5ZwZA1RvHYs2B7QqIQBKNS+mpaGiNsEBf2ezDLaLp7y8lpQlNmce/Tox6Lzaof
q50ODd3LifJ5tN70aQFmWVoZUaI0cBDOmbDtokMcG4gfVXjaHx8cjFapXpsRw7ce
pTvzbViOeKVHFpK5SBcjf0NgzRsDLSL1
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:27:03 2025 by rpki-client