Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/65396976-9144-3801-a7b5-4b24a3fb56a0.roa
File:                     65396976-9144-3801-a7b5-4b24a3fb56a0.roa (raw, json)
Hash identifier:          UpluluZclkZrl1XcYtq+hCpeRScCt0bszUR4HARcoo0=
Subject key identifier:   EE:B2:30:90:EE:04:96:97:11:73:F3:20:8D:CA:29:68:46:CF:92:9E
Certificate issuer:       /CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
Certificate serial:       010D0C9F43285849A089D21256D095C1FE132080
Authority key identifier: BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/65396976-9144-3801-a7b5-4b24a3fb56a0.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     3580
IP address blocks:        2607:f8d8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d2:12:56:d0:95:c1:fe:13:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=c6fd07c5-464e-4f13-afff-b21da93c2535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:0e:fb:33:f9:50:a8:04:7a:6f:cf:9e:b0:
                    e8:5d:f8:2d:ea:42:4f:f5:05:7d:d5:9e:22:ef:df:
                    e7:b1:88:93:4c:d3:ad:b2:38:af:fa:31:b8:02:73:
                    64:9a:e3:ac:bf:eb:d1:52:00:e2:f6:3b:71:3b:97:
                    6f:77:cb:36:99:46:fe:c0:72:c4:59:c6:d3:09:29:
                    db:bb:d9:b7:12:cd:c2:26:e4:5f:e7:7a:95:00:15:
                    80:ad:11:66:22:8c:83:1b:e0:b2:93:1f:8d:fc:c6:
                    bd:96:c2:57:47:2c:e2:6a:ab:67:ad:36:9b:f8:24:
                    97:10:36:3f:8e:ab:21:10:5f:84:c8:71:c8:02:c2:
                    67:bd:ef:23:2f:d1:55:28:22:f7:56:68:fb:34:1f:
                    1d:63:96:43:af:ed:8c:bf:68:d3:07:ae:b5:0d:75:
                    41:df:7b:a2:cb:15:42:0f:c9:aa:88:2d:61:b4:70:
                    96:28:b2:36:8c:b7:cf:fb:60:79:38:1d:22:61:e7:
                    88:8d:25:8b:37:89:ca:53:72:37:eb:79:ff:f3:69:
                    41:d8:c8:e6:39:b0:79:31:ed:84:15:68:43:3c:ba:
                    e8:18:08:ca:9a:aa:a1:d7:e9:b1:73:e4:8e:b7:98:
                    00:1a:c5:83:0a:37:86:42:3a:2e:ef:a8:04:cf:60:
                    a7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B2:30:90:EE:04:96:97:11:73:F3:20:8D:CA:29:68:46:CF:92:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/65396976-9144-3801-a7b5-4b24a3fb56a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl

            X509v3 Authority Key Identifier:
                keyid:BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8d8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:76:21:19:89:5f:92:1c:2c:cb:0c:27:11:a0:04:36:d6:3e:
         0a:1a:e0:68:ae:47:f4:87:79:cc:c2:de:7f:f8:a8:d1:a1:b0:
         24:65:ab:05:70:4b:09:3c:84:77:e5:50:f8:cd:aa:38:09:40:
         46:07:9f:6b:d6:1e:6f:a6:62:57:10:98:aa:9e:a2:be:a4:bb:
         13:96:89:1a:10:1f:2e:af:a6:fe:f2:91:85:76:ca:b6:2a:4f:
         a7:6e:16:f9:ff:67:9d:f5:43:84:cf:61:17:7b:e0:f3:2f:e5:
         68:b8:d0:70:45:56:cf:6c:d9:b2:d4:94:aa:60:cc:37:35:c1:
         43:15:a7:bf:a5:51:23:94:f2:96:2a:86:5b:53:4f:e5:d2:a8:
         03:80:0b:22:e5:b5:dc:c1:4f:49:5c:a7:7e:51:4e:67:d0:19:
         22:11:30:79:31:19:e0:2a:06:c4:f9:f5:f7:3d:f1:40:e7:73:
         cd:b3:db:00:f1:86:bb:e2:8f:33:0c:bc:0d:fc:30:2e:32:72:
         d5:4f:33:71:6d:dd:b8:2c:81:1f:bb:13:90:91:c2:ac:07:ab:
         c3:3f:95:60:84:17:e0:f5:91:ac:32:aa:f7:be:de:03:d1:e8:
         50:b9:eb:20:d8:a0:ac:93:f7:f9:18:99:3d:67:1f:99:03:22:
         f9:1c:7a:40
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmgidISVtCVwf4TIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZhNjI3NTgtYjNkNi00ZDNkLWEzZTUtM2NlNjFiYWY5
YzgxMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
YzZmZDA3YzUtNDY0ZS00ZjEzLWFmZmYtYjIxZGE5M2MyNTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AMO+zP5UKgEem/PnrDoXfgt6kJP9QV91Z4i
79/nsYiTTNOtsjiv+jG4AnNkmuOsv+vRUgDi9jtxO5dvd8s2mUb+wHLEWcbTCSnb
u9m3Es3CJuRf53qVABWArRFmIoyDG+Cykx+N/Ma9lsJXRyziaqtnrTab+CSXEDY/
jqshEF+EyHHIAsJnve8jL9FVKCL3Vmj7NB8dY5ZDr+2Mv2jTB661DXVB33uiyxVC
D8mqiC1htHCWKLI2jLfP+2B5OB0iYeeIjSWLN4nKU3I363n/82lB2MjmObB5Me2E
FWhDPLroGAjKmqqh1+mxc+SOt5gAGsWDCjeGQjou76gEz2CnjQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFO6yMJDuBJaXEXPzII3KKWhGz5KeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmE2
Mjc1OC1iM2Q2LTRkM2QtYTNlNS0zY2U2MWJhZjljODEvNjUzOTY5NzYtOTE0NC0z
ODAxLWE3YjUtNGIyNGEzZmI1NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZhNjI3NTgtYjNkNi00ZDNkLWEz
ZTUtM2NlNjFiYWY5YzgxL2FmYTYyNzU4LWIzZDYtNGQzZC1hM2U1LTNjZTYxYmFm
OWM4MS5jcmwwHwYDVR0jBBgwFoAUu0kEYIzjyKOONgsMxSsza5gXIs8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmE2Mjc1OC1iM2Q2LTRkM2QtYTNlNS0zY2U2
MWJhZjljODEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf42DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAHdiEZiV+SHCzLDCcRoAQ21j4KGuBorkf0h3nMwt5/+KjRobAkZasF
cEsJPIR35VD4zao4CUBGB59r1h5vpmJXEJiqnqK+pLsTlokaEB8ur6b+8pGFdsq2
Kk+nbhb5/2ed9UOEz2EXe+DzL+VouNBwRVbPbNmy1JSqYMw3NcFDFae/pVEjlPKW
KoZbU0/l0qgDgAsi5bXcwU9JXKd+UU5n0BkiETB5MRngKgbE+fX3PfFA53PNs9sA
8Ya74o8zDLwN/DAuMnLVTzNxbd24LIEfuxOQkcKsB6vDP5VghBfg9ZGsMqr3vt4D
0ehQuesg2KCsk/f5GJk9Zx+ZAyL5HHpA
-----END CERTIFICATE-----
Generated at Wed May 14 00:08:45 2025 by rpki-client