Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9b97f581-0d6b-322c-9373-1d93f75ed2d6.roa
File:                     9b97f581-0d6b-322c-9373-1d93f75ed2d6.roa (raw, json)
Hash identifier:          dvaWSs2gNQECHoG6ImhVptmNxBV6Q35jfaJXVnxbZ4U=
Subject key identifier:   00:34:3D:5D:E7:43:37:AD:F0:BE:5A:23:74:66:1B:29:1B:FA:49:95
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A49C08C7CE0C02BE324817CE0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9b97f581-0d6b-322c-9373-1d93f75ed2d6.roa
Signing time:             Mon 23 Jun 2025 15:42:44 +0000
ROA not before:           Mon 23 Jun 2025 15:42:44 +0000
ROA not after:            Sun 21 Sep 2025 15:42:44 +0000
asID:                     15290
IP address blocks:        2001:4c8:1097::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:c0:8c:7c:e0:c0:2b:e3:24:81:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 23 15:42:44 2025 GMT
            Not After : Sep 21 15:42:44 2025 GMT
        Subject: CN=066b13af-85e0-4e4f-97b8-c85e901c1213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:d5:ce:09:7f:e6:a5:1a:3d:41:d1:aa:f3:
                    2d:92:4c:d8:26:4d:6c:ff:4f:63:19:0a:3a:db:cb:
                    51:dc:a9:87:0f:af:17:0e:0a:d8:b7:20:ab:c0:8c:
                    02:b2:a5:69:fd:60:a7:91:1f:96:80:d6:2c:1b:ee:
                    e3:b2:cb:86:f0:31:94:51:8d:d8:e9:97:a8:2b:73:
                    41:a2:2b:57:a8:ac:7f:61:df:ac:b0:49:b3:be:5c:
                    35:9f:b0:f9:dd:04:70:2e:55:95:ce:72:11:5a:52:
                    b1:e4:3e:3a:1c:06:e3:e5:6a:30:79:9a:25:91:02:
                    6b:39:fd:c0:d4:a0:0f:a2:e5:e3:2e:ba:39:8f:d1:
                    59:b3:d4:8a:84:0f:40:8f:af:06:63:67:a0:07:39:
                    cd:1d:69:41:73:46:56:d2:e2:35:51:c6:c7:56:c6:
                    ba:02:9e:59:f2:04:21:16:69:30:08:2f:c9:1e:2b:
                    cc:07:3d:42:e1:d9:80:3c:68:40:a9:bd:52:03:4c:
                    61:8a:c2:10:b4:cb:96:22:b2:ea:a7:7c:a9:f7:77:
                    ec:82:03:0e:32:24:3e:a8:c3:73:0b:4c:eb:3a:52:
                    28:9d:c8:05:75:2d:4d:5e:fd:e0:3a:b8:37:f8:20:
                    a1:02:8d:70:a9:2b:b1:e1:b9:a3:08:a3:39:06:fb:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:34:3D:5D:E7:43:37:AD:F0:BE:5A:23:74:66:1B:29:1B:FA:49:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9b97f581-0d6b-322c-9373-1d93f75ed2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1097::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:95:5c:36:35:36:34:2a:0f:ed:81:73:f6:7d:d2:ce:76:40:
         c9:ae:3b:eb:c3:c4:f0:d2:a2:dc:f8:25:d2:ab:f5:a0:32:f7:
         fd:91:1b:f5:29:95:97:1d:bf:93:9f:d3:1a:9e:c4:35:76:74:
         0e:8c:3e:f3:aa:9d:3b:4f:af:0b:60:b4:6b:7b:40:8d:c5:2a:
         f3:74:fe:59:85:a0:46:1b:45:58:0d:14:f3:21:43:45:40:b1:
         3b:6b:bf:f6:e2:4b:9f:4a:7e:4b:75:ea:57:76:8a:66:93:89:
         e0:f2:b0:73:fb:83:95:95:73:70:99:db:3b:a8:d7:79:58:0a:
         d2:63:04:1c:1e:9e:bd:f1:f8:1c:97:26:25:55:0a:25:4b:4e:
         1f:21:0a:e2:bf:c9:00:0b:fe:e8:1d:3b:70:08:aa:85:47:94:
         4e:0d:3f:f7:66:0f:74:7f:61:15:82:2d:27:30:85:51:ed:6a:
         56:06:5c:6a:af:bb:72:0f:9b:e9:e4:2a:32:5a:0c:0e:51:07:
         b9:1d:6c:0e:3d:35:12:96:39:2d:67:8c:f9:37:d0:f9:60:81:
         8f:ec:4f:70:be:9a:68:7a:0e:9a:1e:29:9a:41:52:07:ec:14:
         3a:ee:0c:51:d6:39:d4:3f:ea:98:6a:6a:f4:f9:8d:89:52:e0:
         18:29:e0:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpJwIx84MAr4ySBfOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDYyMzE1NDI0NFoXDTI1MDkyMTE1NDI0NFowLzEtMCsGA1UEAxMk
MDY2YjEzYWYtODVlMC00ZTRmLTk3YjgtYzg1ZTkwMWMxMjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8HVzgl/5qUaPUHRqvMtkkzYJk1s/09jGQo6
28tR3KmHD68XDgrYtyCrwIwCsqVp/WCnkR+WgNYsG+7jssuG8DGUUY3Y6ZeoK3NB
oitXqKx/Yd+ssEmzvlw1n7D53QRwLlWVznIRWlKx5D46HAbj5WoweZolkQJrOf3A
1KAPouXjLro5j9FZs9SKhA9Aj68GY2egBznNHWlBc0ZW0uI1UcbHVsa6Ap5Z8gQh
FmkwCC/JHivMBz1C4dmAPGhAqb1SA0xhisIQtMuWIrLqp3yp93fsggMOMiQ+qMNz
C0zrOlIoncgFdS1NXv3gOrg3+CChAo1wqSux4bmjCKM5BvsU1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAA0PV3nQzet8L5aI3RmGykb+kmVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOWI5N2Y1ODEtMGQ2Yi0z
MjJjLTkzNzMtMWQ5M2Y3NWVkMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBCX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI+VXDY1NjQqD+2Bc/Z90s52QMmuO+vDxPDSotz4JdKr9aAy9/2R
G/UplZcdv5Of0xqexDV2dA6MPvOqnTtPrwtgtGt7QI3FKvN0/lmFoEYbRVgNFPMh
Q0VAsTtrv/biS59Kfkt16ld2imaTieDysHP7g5WVc3CZ2zuo13lYCtJjBBwenr3x
+ByXJiVVCiVLTh8hCuK/yQAL/ugdO3AIqoVHlE4NP/dmD3R/YRWCLScwhVHtalYG
XGqvu3IPm+nkKjJaDA5RB7kdbA49NRKWOS1njPk30PlggY/sT3C+mmh6DpoeKZpB
UgfsFDruDFHWOdQ/6phqavT5jYlS4Bgp4MQ=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:45:03 2025 by rpki-client