Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa
File:                     de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa (raw, json)
Hash identifier:          AqPb+GdhkpexQoSW0gX0ufWcqk4tsM1EBPUxtsfQ4g4=
Subject key identifier:   4A:53:52:31:6C:62:C5:0D:C9:70:C9:25:E2:34:D1:6C:F8:DA:31:94
Certificate issuer:       /CN=d2de1f15-6014-4202-aea6-3c118c783bfd
Certificate serial:       010D0C9F4328584A3CE02926FD1F1F6EA24BB3D0
Authority key identifier: 7E:F0:3C:0F:9E:1A:35:89:24:A8:BC:FC:64:3C:AF:E7:64:2E:D9:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        2607:b4c0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:29:26:fd:1f:1f:6e:a2:4b:b3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2de1f15-6014-4202-aea6-3c118c783bfd
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=086cab05-2c69-425c-bc36-60bb23c67b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:d3:6a:0c:1d:41:c2:b7:c2:76:46:b6:9e:
                    2c:e7:8b:5d:4c:4a:27:cd:ed:7c:ef:b4:fc:08:be:
                    d6:02:29:d2:a5:80:46:5a:1a:59:b4:f2:cf:65:45:
                    ee:e2:6d:87:b3:43:e9:62:ca:96:6b:57:6f:3b:7b:
                    61:18:c7:ce:dc:6a:f3:18:3f:94:af:27:2e:c0:e4:
                    4a:94:4b:67:48:f3:7d:d2:f5:89:e6:16:39:6a:db:
                    02:4b:72:b3:2c:b2:7b:87:f5:88:65:5f:fb:e9:d5:
                    72:91:bf:e0:49:31:65:d2:b4:86:b0:16:b1:d5:73:
                    6f:84:08:b1:0e:5e:37:74:bc:ea:a7:53:dc:43:f4:
                    61:c9:3d:7a:59:30:6d:47:20:27:58:65:0f:20:a0:
                    72:72:71:e0:4b:f4:3c:a9:42:b9:a2:4e:1c:d5:5f:
                    ac:76:30:d4:61:c5:6d:6a:62:7b:80:82:6e:11:79:
                    fb:1c:07:e8:a4:a2:63:f1:69:b3:8c:03:a4:04:20:
                    ef:e9:7c:89:bb:0b:14:06:be:7a:76:d9:f3:a6:88:
                    43:3d:62:8d:68:dc:c2:86:99:48:ea:93:6c:57:ba:
                    54:50:2f:b5:f7:39:a8:cc:8f:c7:96:b5:a0:6e:61:
                    35:6e:06:70:7a:87:9c:2b:83:6a:69:97:49:bc:2f:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:53:52:31:6C:62:C5:0D:C9:70:C9:25:E2:34:D1:6C:F8:DA:31:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/de1ceca1-31d8-31c0-b1a5-9c46abd0bc0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd/d2de1f15-6014-4202-aea6-3c118c783bfd.crl

            X509v3 Authority Key Identifier:
                keyid:7E:F0:3C:0F:9E:1A:35:89:24:A8:BC:FC:64:3C:AF:E7:64:2E:D9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de1f15-6014-4202-aea6-3c118c783bfd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b4c0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d0:63:15:8c:39:f5:ab:af:e7:3d:12:af:a6:61:14:f7:30:
         20:3d:34:69:8d:c0:72:8d:d3:75:3f:f5:91:18:aa:5a:ab:6b:
         55:6c:f0:c9:ce:66:39:58:23:1d:b9:1d:a5:5e:be:7f:bb:79:
         fa:ed:6f:20:12:44:1e:99:64:09:17:12:44:5d:48:83:42:99:
         bd:cb:60:3c:6d:c8:be:45:43:37:a2:00:4c:da:e1:da:00:fb:
         42:bc:b1:48:36:21:26:85:92:50:4e:56:db:6d:9e:9f:37:7f:
         66:bf:5c:77:72:2d:65:9f:10:e6:21:f5:80:1b:6a:1f:99:11:
         e6:db:1b:fe:e5:6b:54:bf:f6:d4:eb:ce:00:3c:f8:15:fe:b1:
         a4:85:76:6d:73:c1:c2:a3:4a:e0:99:60:77:35:83:3f:5d:0c:
         d9:09:96:d5:ca:9a:86:76:fd:32:2f:73:2e:7b:8c:3c:70:93:
         47:b7:d3:ea:83:2b:8f:e3:21:4d:24:49:30:8b:99:56:5f:a2:
         a0:94:2f:16:4e:24:a0:ee:ac:cb:5b:8b:b0:1f:06:37:32:74:
         50:5a:cb:32:58:a1:2d:be:4a:de:e8:f2:d1:e5:22:d4:5f:90:
         d3:63:fe:b2:43:07:d8:db:80:09:e4:c4:06:8e:c6:15:c3:74:
         9f:9a:17:57
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEo84Ckm/R8fbqJLs9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJkZTFmMTUtNjAxNC00MjAyLWFlYTYtM2MxMThjNzgz
YmZkMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk
MDg2Y2FiMDUtMmM2OS00MjVjLWJjMzYtNjBiYjIzYzY3YjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrbTagwdQcK3wnZGtp4s54tdTEonze1877T8
CL7WAinSpYBGWhpZtPLPZUXu4m2Hs0PpYsqWa1dvO3thGMfO3GrzGD+UrycuwORK
lEtnSPN90vWJ5hY5atsCS3KzLLJ7h/WIZV/76dVykb/gSTFl0rSGsBax1XNvhAix
Dl43dLzqp1PcQ/RhyT16WTBtRyAnWGUPIKBycnHgS/Q8qUK5ok4c1V+sdjDUYcVt
amJ7gIJuEXn7HAfopKJj8WmzjAOkBCDv6XyJuwsUBr56dtnzpohDPWKNaNzChplI
6pNsV7pUUC+19zmozI/HlrWgbmE1bgZweoecK4NqaZdJvC+SpQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEpTUjFsYsUNyXDJJeI00Wz42jGUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMmRl
MWYxNS02MDE0LTQyMDItYWVhNi0zYzExOGM3ODNiZmQvZGUxY2VjYTEtMzFkOC0z
MWMwLWIxYTUtOWM0NmFiZDBiYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDJkZTFmMTUtNjAxNC00MjAyLWFl
YTYtM2MxMThjNzgzYmZkL2QyZGUxZjE1LTYwMTQtNDIwMi1hZWE2LTNjMTE4Yzc4
M2JmZC5jcmwwHwYDVR0jBBgwFoAUfvA8D54aNYkkqLz8ZDyv52Qu2fUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kMmRlMWYxNS02MDE0LTQyMDItYWVhNi0zYzEx
OGM3ODNiZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJge0wAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAS9BjFYw59auv5z0Sr6ZhFPcwID00aY3Aco3TdT/1kRiqWqtrVWzw
yc5mOVgjHbkdpV6+f7t5+u1vIBJEHplkCRcSRF1Ig0KZvctgPG3IvkVDN6IATNrh
2gD7QryxSDYhJoWSUE5W222enzd/Zr9cd3ItZZ8Q5iH1gBtqH5kR5tsb/uVrVL/2
1OvOADz4Ff6xpIV2bXPBwqNK4JlgdzWDP10M2QmW1cqahnb9Mi9zLnuMPHCTR7fT
6oMrj+MhTSRJMIuZVl+ioJQvFk4koO6sy1uLsB8GNzJ0UFrLMlihLb5K3ujy0eUi
1F+Q02P+skMH2NuACeTEBo7GFcN0n5oXVw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:21:57 2025 by rpki-client