Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa
File:                     5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa (raw, json)
Hash identifier:          gw4C/7hGB7hDjQOuvPgJ2xYx7eXupGWzGxTbXH8r+O0=
Subject key identifier:   A6:43:BC:BD:BC:2A:04:7E:84:CF:29:55:11:BB:5C:45:3E:D6:00:D1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849DB2A300CB9DAFA2ABB692FC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     17025
IP address blocks:        2001:438:2f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:30:0c:b9:da:fa:2a:bb:69:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=46ed862b-5fa4-41f1-9c00-f0bca8047fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:77:6a:6c:ea:70:18:73:e0:43:55:ed:84:
                    1c:0a:7c:d8:64:13:da:9c:0e:8e:1f:42:ab:3b:3a:
                    06:13:22:c2:ad:ff:23:4a:cf:c7:bc:aa:74:08:84:
                    7a:8d:1c:7e:43:4f:45:1a:37:c0:8f:40:3c:98:79:
                    b6:14:d2:f0:4a:a6:93:f8:ab:5c:78:33:e6:e8:b6:
                    e0:bb:a6:e7:5c:f4:9f:77:45:62:ec:31:2b:d9:66:
                    21:39:ed:66:f1:14:33:54:95:59:f3:c8:4b:5f:10:
                    0a:27:a4:2a:cb:38:bf:0f:8d:ee:c6:1c:3b:3f:b7:
                    b6:d0:d8:8c:82:25:35:99:79:f5:42:5e:70:1f:9e:
                    d8:f2:c2:8d:51:a4:d7:cd:7b:b9:09:c4:55:2e:d4:
                    35:e4:c6:d2:02:1a:23:55:4a:b7:b0:25:ff:dd:f0:
                    a8:d0:ba:4a:63:23:03:e1:33:fb:aa:ed:38:f3:ca:
                    60:3a:7b:e7:fe:b6:9f:11:23:bf:73:4c:5c:d5:0e:
                    4c:91:4e:5c:e6:f8:b6:03:75:c5:bf:0c:4c:54:50:
                    17:e5:16:88:ac:ea:b5:65:90:d1:09:d6:40:52:c4:
                    91:76:6d:0d:c0:e6:1b:81:af:15:bf:9b:8e:6a:63:
                    07:53:17:19:50:19:1b:2f:0f:65:b3:23:ff:e7:d4:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:43:BC:BD:BC:2A:04:7E:84:CF:29:55:11:BB:5C:45:3E:D6:00:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:2f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:d9:5f:9d:9d:98:bb:f4:22:78:d4:aa:ba:fc:91:12:37:
         17:99:d6:fb:5d:12:f3:da:65:96:04:f2:58:3c:49:12:b7:98:
         d3:82:15:db:c4:b8:21:92:3d:25:8c:5c:a4:e9:b4:5a:9f:57:
         e6:af:ec:53:a7:ed:0d:43:6b:44:71:13:4f:f0:4e:d4:1b:af:
         c2:92:14:0d:ea:fb:58:14:e1:07:a4:de:fa:d8:d6:d0:b0:4a:
         55:7e:03:b1:6c:bc:19:fe:00:f0:c4:f1:0c:b9:5a:a9:18:65:
         9d:ba:53:ea:ff:f0:78:8b:66:36:60:8a:b9:78:30:31:71:a7:
         11:7d:c3:3c:e2:89:ff:b7:16:4a:7c:31:3e:37:c4:ce:79:d1:
         73:0c:b2:b4:b8:c2:c6:26:63:22:09:a3:79:dd:08:74:20:84:
         42:05:73:bf:3f:af:6e:e4:9d:01:66:b0:74:8a:97:4c:1c:e2:
         a6:eb:06:4c:51:33:99:6f:0e:4e:54:dc:d4:a0:94:ee:cd:49:
         fb:c2:d0:06:87:c4:7c:d8:d8:61:d7:15:1a:20:e8:62:92:b0:
         a0:5f:74:17:46:26:d9:03:b3:e9:88:ba:30:2c:00:05:05:98:
         9f:3f:19:c6:79:d7:23:a9:0b:83:80:5f:6e:6b:27:aa:9a:24:
         ba:67:79:4b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnbKjAMudr6KrtpL8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDUxNTAxMDA0N1oXDTI1MDgxMzAxMDA0N1owLzEtMCsGA1UEAxMk
NDZlZDg2MmItNWZhNC00MWYxLTljMDAtZjBiY2E4MDQ3ZmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTx3amzqcBhz4ENV7YQcCnzYZBPanA6OH0Kr
OzoGEyLCrf8jSs/HvKp0CIR6jRx+Q09FGjfAj0A8mHm2FNLwSqaT+KtceDPm6Lbg
u6bnXPSfd0Vi7DEr2WYhOe1m8RQzVJVZ88hLXxAKJ6Qqyzi/D43uxhw7P7e20NiM
giU1mXn1Ql5wH57Y8sKNUaTXzXu5CcRVLtQ15MbSAhojVUq3sCX/3fCo0LpKYyMD
4TP7qu0488pgOnvn/rafESO/c0xc1Q5MkU5c5vi2A3XFvwxMVFAX5RaIrOq1ZZDR
CdZAUsSRdm0NwOYbga8Vv5uOamMHUxcZUBkbLw9lsyP/59TQQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKZDvL28KgR+hM8pVRG7XEU+1gDRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNWZmYmRhYmMtZGEzZC0z
OGQ0LTg1OWQtMDVkYmExZWVmMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEOAAv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADrO2V+dnZi79CJ41Kq6/JESNxeZ1vtdEvPaZZYE8lg8SRK3mNOC
FdvEuCGSPSWMXKTptFqfV+av7FOn7Q1Da0RxE0/wTtQbr8KSFA3q+1gU4Qek3vrY
1tCwSlV+A7FsvBn+APDE8Qy5WqkYZZ26U+r/8HiLZjZgirl4MDFxpxF9wzziif+3
Fkp8MT43xM550XMMsrS4wsYmYyIJo3ndCHQghEIFc78/r27knQFmsHSKl0wc4qbr
BkxRM5lvDk5U3NSglO7NSfvC0AaHxHzY2GHXFRog6GKSsKBfdBdGJtkDs+mIujAs
AAUFmJ8/GcZ51yOpC4OAX25rJ6qaJLpneUs=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:23:28 2025 by rpki-client