Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
File:                     fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa (raw, json)
Hash identifier:          4pfKAYy6gdDdKNoaZxv+XTogLe6Kr4eSXYNXS7QDoqE=
Subject key identifier:   9F:2A:9A:EF:2A:FC:69:BD:CE:15:65:93:47:49:EB:7F:23:5D:16:68
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584A4C3B14E45EE571AAFC7F6000
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     25697
IP address blocks:        2605:7380:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:14:e4:5e:e5:71:aa:fc:7f:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=ed19f68f-76f4-4b21-8194-ced7206a0c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:be:85:91:6a:ab:64:6e:dc:37:0b:24:1d:
                    e2:9b:6b:c1:6f:cd:d2:75:ec:48:84:f6:67:63:19:
                    ec:f8:72:48:8c:33:03:9c:6f:a0:99:48:a0:97:71:
                    45:81:97:18:ef:86:4a:39:b6:02:7a:33:15:27:34:
                    73:6d:17:d6:ad:f7:4e:68:08:ed:e9:70:bf:b3:05:
                    17:31:a1:02:4a:cd:ac:3a:9a:40:2c:8c:35:c3:ed:
                    71:eb:a7:b1:5c:66:f8:85:86:64:9c:03:53:94:af:
                    fc:14:d9:db:b3:7f:8a:b5:cf:4d:06:a3:a2:18:63:
                    76:f9:94:a8:40:da:a1:93:d1:43:08:bc:71:af:a1:
                    6d:ec:0e:19:f3:4f:21:0d:04:e6:78:ad:de:2c:4c:
                    7b:5e:d7:d2:3c:32:6d:d0:0c:ef:1f:f1:fe:29:87:
                    93:99:fd:b4:b3:13:e8:33:20:9f:b9:14:85:16:0e:
                    c9:63:f9:6d:01:46:03:c1:84:1f:9b:72:05:12:d0:
                    bd:b1:06:3b:76:aa:92:e6:4a:93:79:6a:92:3d:2b:
                    7f:03:6f:8e:00:0a:be:e6:78:d1:5f:31:d9:db:e1:
                    a8:94:35:33:70:b4:bd:1a:6f:37:48:bf:a1:f9:89:
                    a5:54:f8:61:19:3e:6d:6e:8c:a6:69:a0:5e:6c:70:
                    b9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2A:9A:EF:2A:FC:69:BD:CE:15:65:93:47:49:EB:7F:23:5D:16:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7380:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:8e:d9:d6:81:fb:b5:fe:4a:14:2d:d8:25:94:08:3a:29:58:
         f1:2a:25:54:7e:14:d1:fe:60:92:94:fa:d3:91:a1:11:25:4b:
         76:85:27:db:29:e0:e4:1e:cf:48:ff:78:53:a2:40:b7:77:78:
         f2:06:b7:af:1c:a1:b0:d5:a5:ec:0c:ce:3c:43:3e:f2:7f:1a:
         18:1e:d4:d2:a9:61:42:d0:86:69:39:07:f4:24:0a:23:e9:7f:
         b2:ae:75:21:66:fd:ce:a4:dd:57:f5:0f:bc:41:42:2a:f0:b1:
         be:cf:00:e3:35:80:e1:fa:dd:71:60:ae:fd:9d:67:30:7f:3c:
         11:27:fd:ad:7e:03:06:2c:dd:fa:bd:5d:74:2a:3d:9b:ee:20:
         85:6c:7c:40:95:cc:6d:45:a3:15:e0:94:21:c3:be:3b:af:03:
         86:af:a3:ef:7e:ce:97:83:e9:db:d3:85:1a:3d:0c:28:17:89:
         a6:ad:12:19:a3:0b:98:e2:12:31:8b:3d:ab:47:3e:3a:99:a8:
         07:8c:60:6c:dd:5b:1f:0a:af:f8:f9:0d:9c:26:a9:31:30:3c:
         6c:29:b9:f5:ed:58:29:3a:13:13:70:21:8f:9c:0d:63:93:60:
         16:38:46:0c:56:7c:39:47:a6:09:da:bb:8a:85:cf:1d:2f:1a:
         40:03:cc:e0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpMOxTkXuVxqvx/YAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx
MzExMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
ZWQxOWY2OGYtNzZmNC00YjIxLTgxOTQtY2VkNzIwNmEwYzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXm+hZFqq2Ru3DcLJB3im2vBb83SdexIhPZn
Yxns+HJIjDMDnG+gmUigl3FFgZcY74ZKObYCejMVJzRzbRfWrfdOaAjt6XC/swUX
MaECSs2sOppALIw1w+1x66exXGb4hYZknANTlK/8FNnbs3+Ktc9NBqOiGGN2+ZSo
QNqhk9FDCLxxr6Ft7A4Z808hDQTmeK3eLEx7XtfSPDJt0AzvH/H+KYeTmf20sxPo
MyCfuRSFFg7JY/ltAUYDwYQfm3IFEtC9sQY7dqqS5kqTeWqSPSt/A2+OAAq+5njR
XzHZ2+GolDUzcLS9Gm83SL+h+YmlVPhhGT5tboymaaBebHC5hwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJ8qmu8q/Gm9zhVlk0dJ638jXRZoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi
YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvZmM3ZTFhYjgtZjVhNi0z
NGFhLTk4MzItNjQ2MmNmNTQ0ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl
NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2
MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy
Y2M4NjEzMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgVzgIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAq47Z1oH7tf5KFC3YJZQIOilY8SolVH4U0f5gkpT605GhESVLdoUn
2yng5B7PSP94U6JAt3d48ga3rxyhsNWl7AzOPEM+8n8aGB7U0qlhQtCGaTkH9CQK
I+l/sq51IWb9zqTdV/UPvEFCKvCxvs8A4zWA4frdcWCu/Z1nMH88ESf9rX4DBizd
+r1ddCo9m+4ghWx8QJXMbUWjFeCUIcO+O68Dhq+j737Ol4Pp29OFGj0MKBeJpq0S
GaMLmOISMYs9q0c+OpmoB4xgbN1bHwqv+PkNnCapMTA8bCm59e1YKToTE3Ahj5wN
Y5NgFjhGDFZ8OUemCdq7ioXPHS8aQAPM4A==
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:44:30 2025 by rpki-client