Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa
File:                     2716648f-7661-3f70-b742-5119c61157cf.roa (raw, json)
Hash identifier:          IFcOXax2xS1VZ99qFHzU1ry1f0auAXqro1it5ndIX5c=
Subject key identifier:   01:8D:CC:97:B4:39:B2:A8:A4:96:77:28:A0:C7:BA:29:14:0D:9A:8F
Certificate issuer:       /CN=b16dab15-57d6-416c-8c05-543d7b01e03d
Certificate serial:       010D0C9F43285849D6FA4B62A6E0014E148B3500
Authority key identifier: 45:BD:2F:AF:92:E7:90:5D:60:6C:16:B8:F8:28:40:72:C9:43:78:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa
Signing time:             Tue 13 May 2025 13:01:02 +0000
ROA not before:           Tue 13 May 2025 13:01:02 +0000
ROA not after:            Mon 11 Aug 2025 13:01:02 +0000
asID:                     53835
IP address blocks:        2607:ca40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:fa:4b:62:a6:e0:01:4e:14:8b:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16dab15-57d6-416c-8c05-543d7b01e03d
        Validity
            Not Before: May 13 13:01:02 2025 GMT
            Not After : Aug 11 13:01:02 2025 GMT
        Subject: CN=88f38b79-cf7b-4b47-8fc6-2c72c18516ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:89:00:e2:14:64:0d:b8:3b:27:40:a6:fc:eb:
                    22:40:e8:bd:69:85:fc:f6:8b:fb:60:f7:8f:20:67:
                    bf:a1:d4:65:c9:6b:05:bb:f0:be:09:7a:8c:96:ac:
                    03:83:b2:4f:78:01:31:4d:9a:ce:98:a8:0a:aa:68:
                    43:c7:8a:10:76:f0:60:7e:11:ad:25:00:41:a0:80:
                    9c:7b:28:19:6c:e5:a9:ac:8e:0e:4c:d4:fb:72:b6:
                    f5:dd:4c:41:a3:3b:40:53:c2:bf:23:b8:37:f2:64:
                    26:75:30:72:d2:53:0e:80:05:e3:26:47:c6:de:ea:
                    38:9f:a1:10:4e:40:b4:a1:24:0b:93:0e:1d:ed:2b:
                    20:3d:10:3f:ca:9f:b0:e6:e3:85:7b:75:33:4b:e4:
                    78:46:01:e4:43:71:f5:9f:0c:16:35:a2:57:6d:ed:
                    65:40:a9:b2:a7:5a:46:5f:6e:ed:a4:96:9d:88:77:
                    54:a9:7a:8b:55:2d:d8:7e:6d:97:99:92:f3:6f:60:
                    66:f0:b5:b4:24:73:1a:12:30:ca:ef:0e:bf:bd:38:
                    e8:b3:15:42:6c:b4:d0:6b:6a:7e:6a:e6:df:f7:34:
                    54:de:ff:ec:9a:e5:9d:59:77:ba:cb:0a:0d:27:0a:
                    af:a6:1e:0e:c1:e7:fe:63:52:85:5c:10:14:86:50:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8D:CC:97:B4:39:B2:A8:A4:96:77:28:A0:C7:BA:29:14:0D:9A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.crl

            X509v3 Authority Key Identifier:
                keyid:45:BD:2F:AF:92:E7:90:5D:60:6C:16:B8:F8:28:40:72:C9:43:78:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ca40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:2a:6a:48:4c:19:4e:9c:ce:51:ec:8b:d3:1e:01:59:e3:
         64:74:43:85:48:39:dc:7e:eb:47:6c:05:98:94:1a:97:ff:50:
         8b:8e:c6:8b:94:00:76:df:5f:95:51:61:42:a7:35:90:40:b5:
         a8:ca:6d:83:ab:3f:f7:a9:d3:d9:fc:29:01:b4:0a:c8:70:69:
         5e:ad:52:b2:fc:55:2b:8e:b0:e3:71:72:77:05:41:6a:92:fa:
         d1:82:a0:20:4a:41:7f:2f:5b:3b:e8:52:d0:48:c0:14:07:6f:
         01:55:1f:a2:ca:d1:9a:24:2b:7d:66:85:79:b2:46:bd:59:cd:
         8e:7e:b6:43:81:9c:2c:d7:4f:8e:7f:be:a4:b3:4b:43:84:c1:
         64:7d:25:f3:d1:68:dc:74:56:31:39:40:fe:e7:eb:23:12:d3:
         1f:51:14:3f:7f:ac:a8:91:1e:cd:38:3e:52:a6:6a:f2:ba:49:
         b7:1c:fe:7b:b2:97:54:3a:c3:90:b3:0a:f4:b2:cd:63:47:97:
         9f:1a:3b:78:34:17:35:08:64:9a:d8:9e:0d:b5:33:31:a8:17:
         fc:2e:3a:21:e1:08:72:ac:be:cc:65:d7:05:8b:11:b4:80:73:
         a4:77:b1:98:2c:10:db:49:ee:0e:16:fa:ec:aa:64:dd:fe:27:
         0e:0f:43:2b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnW+ktipuABThSLNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE2ZGFiMTUtNTdkNi00MTZjLThjMDUtNTQzZDdiMDFl
MDNkMB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk
ODhmMzhiNzktY2Y3Yi00YjQ3LThmYzYtMmM3MmMxODUxNmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIkA4hRkDbg7J0Cm/OsiQOi9aYX89ov7YPeP
IGe/odRlyWsFu/C+CXqMlqwDg7JPeAExTZrOmKgKqmhDx4oQdvBgfhGtJQBBoICc
eygZbOWprI4OTNT7crb13UxBoztAU8K/I7g38mQmdTBy0lMOgAXjJkfG3uo4n6EQ
TkC0oSQLkw4d7SsgPRA/yp+w5uOFe3UzS+R4RgHkQ3H1nwwWNaJXbe1lQKmyp1pG
X27tpJadiHdUqXqLVS3Yfm2XmZLzb2Bm8LW0JHMaEjDK7w6/vTjosxVCbLTQa2p+
aubf9zRU3v/smuWdWXe6ywoNJwqvph4Owef+Y1KFXBAUhlCSJQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAGNzJe0ObKopJZ3KKDHuikUDZqPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMTZk
YWIxNS01N2Q2LTQxNmMtOGMwNS01NDNkN2IwMWUwM2QvMjcxNjY0OGYtNzY2MS0z
ZjcwLWI3NDItNTExOWM2MTE1N2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjE2ZGFiMTUtNTdkNi00MTZjLThj
MDUtNTQzZDdiMDFlMDNkL2IxNmRhYjE1LTU3ZDYtNDE2Yy04YzA1LTU0M2Q3YjAx
ZTAzZC5jcmwwHwYDVR0jBBgwFoAURb0vr5LnkF1gbBa4+ChAcslDeBAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iMTZkYWIxNS01N2Q2LTQxNmMtOGMwNS01NDNk
N2IwMWUwM2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfKQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA8fipqSEwZTpzOUeyL0x4BWeNkdEOFSDncfutHbAWYlBqX/1CLjsaL
lAB231+VUWFCpzWQQLWoym2Dqz/3qdPZ/CkBtArIcGlerVKy/FUrjrDjcXJ3BUFq
kvrRgqAgSkF/L1s76FLQSMAUB28BVR+iytGaJCt9ZoV5ska9Wc2OfrZDgZws10+O
f76ks0tDhMFkfSXz0WjcdFYxOUD+5+sjEtMfURQ/f6yokR7NOD5Spmryukm3HP57
spdUOsOQswr0ss1jR5efGjt4NBc1CGSa2J4NtTMxqBf8Ljoh4QhyrL7MZdcFixG0
gHOkd7GYLBDbSe4OFvrsqmTd/icOD0Mr
-----END CERTIFICATE-----
Generated at Mon Jun 30 05:17:55 2025 by rpki-client