Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/5747fda4-9caf-35d9-87f7-5bb218756291.roa
File:                     5747fda4-9caf-35d9-87f7-5bb218756291.roa (raw, json)
Hash identifier:          przgzxQbS+Oz+7+hBVGNJj2DrjbCn4j79XKDaJeQLQA=
Subject key identifier:   8C:AB:C3:1F:A3:F5:F5:0B:E7:44:EB:29:32:B3:71:BA:76:D4:BD:98
Certificate issuer:       /CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
Certificate serial:       010D0C9F4328584A56004CF91F054BBF5BE85980
Authority key identifier: 81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/5747fda4-9caf-35d9-87f7-5bb218756291.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     398779
IP address blocks:        2607:1740:1000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4c:f9:1f:05:4b:bf:5b:e8:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=2535af0a-e4e6-4e05-94e5-3804cacb1cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b2:db:f2:bc:e8:dc:8e:58:0d:21:e5:51:9b:
                    23:32:4c:f6:4f:3f:3f:fa:2e:da:e9:f6:9f:a4:9b:
                    93:37:0e:ea:2a:f4:ee:46:3f:b2:c1:c9:51:b0:9f:
                    21:59:c7:a2:2a:7a:3c:b2:46:88:b2:10:3c:9a:83:
                    1f:d8:50:fb:f0:b8:a5:e1:a2:50:d3:66:51:03:5a:
                    97:80:c6:64:f0:61:2b:d6:34:60:3a:7f:25:27:08:
                    1b:c6:53:ce:f1:17:7a:8f:dc:99:ed:b3:40:3d:86:
                    83:a0:09:3b:a5:18:43:7f:9d:b2:89:ee:32:87:7c:
                    5e:43:6c:8f:7a:bb:ac:ae:3b:94:09:56:28:1b:12:
                    8f:a7:83:c5:ae:44:1f:c7:f1:75:cd:5e:59:e6:53:
                    d1:4b:fd:9b:a6:65:72:ca:e7:ee:69:f7:8f:d7:1c:
                    6a:30:11:5c:3c:75:1a:af:49:bc:ca:7e:6f:94:dc:
                    84:e1:f6:41:e4:32:06:34:98:13:ee:b6:56:53:a8:
                    32:46:cd:0e:82:7b:90:a6:5a:b1:ad:a8:b3:2e:8a:
                    03:19:e0:10:30:f5:79:29:2d:e0:64:81:0f:1f:d7:
                    34:aa:04:0a:2e:9d:10:6e:b3:1f:aa:d9:82:6c:f3:
                    44:0f:78:b7:75:cc:c4:f9:b3:a4:8d:e6:24:45:b7:
                    12:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AB:C3:1F:A3:F5:F5:0B:E7:44:EB:29:32:B3:71:BA:76:D4:BD:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/5747fda4-9caf-35d9-87f7-5bb218756291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.crl

            X509v3 Authority Key Identifier:
                keyid:81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1740:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:fe:60:09:6f:1b:81:99:ea:2e:35:92:7f:d7:45:21:1f:6a:
         49:2d:17:41:e1:e4:35:c8:53:11:bd:52:0f:7c:1e:94:99:0a:
         42:ae:24:bf:fa:1f:0a:59:b6:52:a9:b3:59:71:c3:86:3e:61:
         9a:b9:b2:4a:03:9f:4f:c0:58:f1:f6:50:2d:e4:a7:44:ed:58:
         f0:04:bd:73:d0:cb:27:a0:bc:74:8a:ff:b4:17:c5:9c:99:2b:
         23:b3:40:34:01:2c:14:9e:aa:46:02:a1:22:08:43:06:14:e8:
         ff:39:d8:37:8a:59:54:41:d5:10:25:22:aa:9c:55:dd:3a:96:
         fc:bc:0d:87:05:6c:14:db:96:8e:dd:7b:2c:39:6b:b3:95:c7:
         16:b3:48:c5:97:c1:42:2c:42:e3:33:4b:15:45:6d:70:ac:cc:
         ab:2d:78:d9:0b:54:c1:e4:37:fb:fb:c6:6f:3f:ae:99:bd:23:
         20:9d:77:ad:58:ec:db:5b:e2:87:bd:ad:ef:eb:62:88:41:35:
         4d:68:46:47:e2:b7:d6:e4:a4:bf:63:b7:3c:47:90:7f:ea:cd:
         e5:b1:d0:e2:35:a1:8c:76:29:56:0b:35:81:35:cb:f4:26:33:
         3f:6a:67:62:86:03:91:0c:3c:77:ae:dd:a5:c1:69:1b:e1:ae:
         e8:ed:39:48
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpWAEz5HwVLv1voWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I1Y2UzNWYtMDQyZS00ZmE0LThlOGItYzEwMWU2MGVl
NjdkMB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk
MjUzNWFmMGEtZTRlNi00ZTA1LTk0ZTUtMzgwNGNhY2IxY2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LLb8rzo3I5YDSHlUZsjMkz2Tz8/+i7a6faf
pJuTNw7qKvTuRj+ywclRsJ8hWceiKno8skaIshA8moMf2FD78Lil4aJQ02ZRA1qX
gMZk8GEr1jRgOn8lJwgbxlPO8Rd6j9yZ7bNAPYaDoAk7pRhDf52yie4yh3xeQ2yP
erusrjuUCVYoGxKPp4PFrkQfx/F1zV5Z5lPRS/2bpmVyyufuafeP1xxqMBFcPHUa
r0m8yn5vlNyE4fZB5DIGNJgT7rZWU6gyRs0OgnuQplqxraizLooDGeAQMPV5KS3g
ZIEPH9c0qgQKLp0QbrMfqtmCbPNED3i3dczE+bOkjeYkRbcSKQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIyrwx+j9fUL50TrKTKzcbp21L2YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjVj
ZTM1Zi0wNDJlLTRmYTQtOGU4Yi1jMTAxZTYwZWU2N2QvNTc0N2ZkYTQtOWNhZi0z
NWQ5LTg3ZjctNWJiMjE4NzU2MjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2I1Y2UzNWYtMDQyZS00ZmE0LThl
OGItYzEwMWU2MGVlNjdkLzNiNWNlMzVmLTA0MmUtNGZhNC04ZThiLWMxMDFlNjBl
ZTY3ZC5jcmwwHwYDVR0jBBgwFoAUgb41eCXuvojSTUv5/E4Lsm6zq8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zYjVjZTM1Zi0wNDJlLTRmYTQtOGU4Yi1jMTAx
ZTYwZWU2N2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgcXQBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJ/5gCW8bgZnqLjWSf9dFIR9qSS0XQeHkNchTEb1SD3welJkKQq4k
v/ofClm2UqmzWXHDhj5hmrmySgOfT8BY8fZQLeSnRO1Y8AS9c9DLJ6C8dIr/tBfF
nJkrI7NANAEsFJ6qRgKhIghDBhTo/znYN4pZVEHVECUiqpxV3TqW/LwNhwVsFNuW
jt17LDlrs5XHFrNIxZfBQixC4zNLFUVtcKzMqy142QtUweQ3+/vGbz+umb0jIJ13
rVjs21vih72t7+tiiEE1TWhGR+K31uSkv2O3PEeQf+rN5bHQ4jWhjHYpVgs1gTXL
9CYzP2pnYoYDkQw8d67dpcFpG+Gu6O05SA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:32:22 2025 by rpki-client