Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cee35c70-6697-3a13-b65e-c14e4a0fe342.roa
File:                     cee35c70-6697-3a13-b65e-c14e4a0fe342.roa (raw, json)
Hash identifier:          mfeDLWShkxVGZVA7Yfz7C9qq/ZQjXUeFLCCATrTJFG0=
Subject key identifier:   DB:6F:AE:98:55:7A:9E:36:36:EC:80:C4:BF:32:BF:2D:E8:6F:DA:9D
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F43285849F71509FE7FCA1D1A8CDDA680
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cee35c70-6697-3a13-b65e-c14e4a0fe342.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     46925
IP address blocks:        2607:f750:7100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:09:fe:7f:ca:1d:1a:8c:dd:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=03ff8f1a-06ff-457c-b05e-8abb4ff2da90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7e:d6:f0:5f:1d:5f:8b:22:70:ba:a2:7e:ed:
                    e0:a4:34:03:39:f3:77:8e:db:34:5d:16:03:fe:c8:
                    82:35:a3:e8:e4:75:47:b3:0f:64:ae:bf:57:ef:3b:
                    4c:d2:cf:19:7f:55:83:35:d9:17:f8:ad:36:e6:cd:
                    32:b1:f5:a7:41:7d:28:50:6d:9a:b8:10:56:d7:6a:
                    18:91:91:8f:d5:ac:cd:7a:fb:2c:e3:07:85:9f:45:
                    5f:08:c8:d8:01:ce:59:8e:4b:9b:ca:13:c8:28:e6:
                    78:f9:f9:dc:36:fa:43:62:7f:3f:c5:73:8c:6d:fd:
                    68:15:dd:a3:e7:75:38:5b:07:6a:a8:8d:af:ab:12:
                    4d:9e:fd:7d:a9:bc:4d:07:73:87:fa:0a:16:29:95:
                    45:44:8c:82:f3:b6:06:9d:f3:cb:59:4c:9e:e9:83:
                    ee:33:62:4e:ef:c7:9c:20:a4:75:bf:30:4d:1c:80:
                    02:84:71:f4:34:52:06:cb:f0:8b:9d:7d:6c:70:e5:
                    e6:cb:9b:a6:a3:86:cd:f8:49:60:55:bd:dd:ba:2e:
                    90:9b:e2:a3:44:ac:0c:b0:ca:06:41:84:5c:13:16:
                    cb:23:ef:03:d4:77:8d:54:8b:3e:8c:a5:28:89:52:
                    3e:1b:31:25:d5:e0:bd:71:9f:11:0a:ec:91:79:48:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6F:AE:98:55:7A:9E:36:36:EC:80:C4:BF:32:BF:2D:E8:6F:DA:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cee35c70-6697-3a13-b65e-c14e4a0fe342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:7100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a5:fc:fa:1a:0a:11:82:9f:a0:77:b0:2b:30:49:47:49:06:
         cb:1f:d5:69:36:6c:1a:d0:3d:ae:c5:00:8c:e8:17:ac:bf:1e:
         cf:a0:58:92:38:2c:e2:a9:2e:04:f0:36:45:e1:74:a2:dc:23:
         57:ee:a8:29:f8:58:1e:03:d2:0c:d7:91:75:22:59:b2:b2:81:
         8f:dc:85:f1:4a:bf:f0:11:43:8d:87:93:ae:c8:ce:1b:a0:f9:
         1e:aa:e8:32:85:f4:8e:07:dd:ec:55:48:f7:4f:f5:0e:8d:72:
         d7:30:17:f8:12:65:72:c2:1a:94:40:4b:a8:16:08:71:98:cb:
         cb:eb:37:08:27:16:01:3e:25:76:a5:8f:1d:d0:77:f0:3e:fb:
         e4:4c:8e:56:2f:13:71:e4:a7:95:07:68:62:fa:c3:ff:09:7e:
         04:e2:5b:2c:87:c2:26:44:55:49:19:ef:55:74:27:88:0c:af:
         eb:ca:a3:6d:26:ff:15:15:fc:5b:01:36:30:65:25:75:c9:f8:
         de:e8:e1:ac:bc:08:eb:5f:87:56:d5:22:06:90:1d:8b:b1:98:
         8f:61:f4:27:ad:25:d6:4e:0d:6d:ee:1e:80:97:e8:60:cb:71:
         49:20:d4:89:5a:45:b2:05:d7:6b:6b:6b:8a:01:c6:66:39:ef:
         27:c6:97:ad
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn3FQn+f8odGozdpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
MDNmZjhmMWEtMDZmZi00NTdjLWIwNWUtOGFiYjRmZjJkYTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH7W8F8dX4sicLqifu3gpDQDOfN3jts0XRYD
/siCNaPo5HVHsw9krr9X7ztM0s8Zf1WDNdkX+K025s0ysfWnQX0oUG2auBBW12oY
kZGP1azNevss4weFn0VfCMjYAc5ZjkubyhPIKOZ4+fncNvpDYn8/xXOMbf1oFd2j
53U4WwdqqI2vqxJNnv19qbxNB3OH+goWKZVFRIyC87YGnfPLWUye6YPuM2JO78ec
IKR1vzBNHIAChHH0NFIGy/CLnX1scOXmy5umo4bN+ElgVb3dui6Qm+KjRKwMsMoG
QYRcExbLI+8D1HeNVIs+jKUoiVI+GzEl1eC9cZ8RCuyReUgqsQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNtvrphVep42NuyAxL8yvy3ob9qdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2VlMzVjNzAtNjY5Ny0z
YTEzLWI2NWUtYzE0ZTRhMGZlMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UHEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEANqX8+hoKEYKfoHewKzBJR0kGyx/VaTZsGtA9rsUAjOgXrL8ez6BY
kjgs4qkuBPA2ReF0otwjV+6oKfhYHgPSDNeRdSJZsrKBj9yF8Uq/8BFDjYeTrsjO
G6D5HqroMoX0jgfd7FVI90/1Do1y1zAX+BJlcsIalEBLqBYIcZjLy+s3CCcWAT4l
dqWPHdB38D775EyOVi8TceSnlQdoYvrD/wl+BOJbLIfCJkRVSRnvVXQniAyv68qj
bSb/FRX8WwE2MGUldcn43ujhrLwI61+HVtUiBpAdi7GYj2H0J60l1k4Nbe4egJfo
YMtxSSDUiVpFsgXXa2trigHGZjnvJ8aXrQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:38:25 2025 by rpki-client