Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cfe2af55-dabf-36eb-aaae-6ca9fd987d77.roa
File:                     cfe2af55-dabf-36eb-aaae-6ca9fd987d77.roa (raw, json)
Hash identifier:          y+9B5ZuAl2Jm0LRnN7FFxAnu0dhnaJNqj68YuvOziLc=
Subject key identifier:   04:F2:63:83:83:99:34:AB:BA:58:AB:28:D8:91:55:9A:D2:9A:54:AE
Certificate issuer:       /CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
Certificate serial:       010D0C9F4328584A4F05BDABB8D19E0DA3D2EB00
Authority key identifier: F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cfe2af55-dabf-36eb-aaae-6ca9fd987d77.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     54825
IP address blocks:        2604:1380::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:bd:ab:b8:d1:9e:0d:a3:d2:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=22da9d9c-fb88-4446-a874-1af7ce8be9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:c7:c4:f2:7c:bd:0e:42:0b:14:7a:ad:4c:
                    1f:5c:8d:ad:af:05:3f:a0:05:b4:36:c2:a4:d1:de:
                    6f:f1:e5:b4:55:5f:9a:82:0a:c9:91:09:da:bf:07:
                    7e:e2:5b:1a:69:c2:e4:e0:06:45:44:a2:cb:88:dd:
                    ac:84:12:41:b0:d6:52:78:81:f3:3c:d8:51:64:d2:
                    95:a5:f5:89:9a:b9:15:e7:63:82:c1:5f:36:74:f6:
                    0e:19:e3:d8:04:7c:1e:1d:45:4f:91:2e:63:bd:93:
                    5c:28:be:63:bf:fb:6a:7f:d2:08:38:0c:b4:85:af:
                    b2:ad:a6:d1:09:87:54:ec:f4:cb:8a:c9:13:c8:8a:
                    7d:90:7d:12:93:e2:c8:86:ad:ef:3d:bd:54:63:58:
                    2c:b4:1f:8e:ed:5e:6f:95:4e:79:f4:4f:2c:ee:11:
                    be:d4:c4:7a:eb:4a:ee:58:9a:34:3e:7a:f6:08:8f:
                    52:7e:77:46:25:d4:bc:17:75:02:69:cc:b0:26:f0:
                    2a:69:f8:4c:23:03:0b:14:e8:b7:22:03:8d:72:1a:
                    5e:52:62:a4:22:cb:72:5b:67:eb:1d:fc:cd:1e:fc:
                    91:f8:13:38:45:e5:96:bf:7c:47:04:46:1f:9c:c6:
                    ee:de:a2:2b:c8:b9:20:96:8c:2a:ca:89:c8:c9:60:
                    0a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F2:63:83:83:99:34:AB:BA:58:AB:28:D8:91:55:9A:D2:9A:54:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cfe2af55-dabf-36eb-aaae-6ca9fd987d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl

            X509v3 Authority Key Identifier:
                keyid:F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e5:03:5c:32:c7:73:11:7d:04:9d:b8:3e:b6:3c:13:08:d5:
         f4:21:cb:de:a7:c2:4d:71:1a:b9:a5:9b:4b:0c:b6:16:e1:d2:
         08:0a:32:66:8a:5b:8b:23:b0:2b:2a:30:a0:89:b7:c9:eb:82:
         20:55:4a:e2:e1:50:e2:66:c2:e3:63:05:c5:56:6f:f3:e7:ba:
         6e:5c:5b:08:e1:93:5c:06:63:dd:3c:08:aa:02:7e:b5:f1:fa:
         c9:9b:99:9b:1c:04:e3:9f:12:a4:c4:88:e3:0e:85:2b:d1:ab:
         db:81:0c:19:11:ef:7a:2c:6d:dd:d4:00:d3:6f:83:15:db:3d:
         80:93:bc:53:cf:d4:1f:fe:32:4b:e8:7c:62:65:32:d4:af:63:
         ae:fa:82:47:69:3b:0a:67:a8:0c:9e:ca:65:f7:c9:df:86:52:
         2a:c1:0d:85:73:c6:95:10:76:39:db:dc:25:b7:ce:3e:8d:8c:
         18:38:8c:c3:4f:31:63:10:0b:a8:c6:56:82:d0:df:89:32:6e:
         c4:bd:e0:8b:cd:12:5d:8f:63:1c:6b:1c:2e:ac:07:57:ae:b0:
         e5:98:8d:36:fa:ac:6d:ec:8e:a4:3e:2a:7c:20:54:bc:fc:01:
         44:fe:2d:3b:c3:5f:55:67:74:8a:2a:c3:c8:06:00:61:3e:f5:
         5d:c1:17:44
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpPBb2ruNGeDaPS6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdlMmQ3ZWUtZDIzOS00OTI4LTkxMDctY2ViOTVjYWNk
MGI4MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk
MjJkYTlkOWMtZmI4OC00NDQ2LWE4NzQtMWFmN2NlOGJlOWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2bHxPJ8vQ5CCxR6rUwfXI2trwU/oAW0NsKk
0d5v8eW0VV+aggrJkQnavwd+4lsaacLk4AZFRKLLiN2shBJBsNZSeIHzPNhRZNKV
pfWJmrkV52OCwV82dPYOGePYBHweHUVPkS5jvZNcKL5jv/tqf9IIOAy0ha+yrabR
CYdU7PTLiskTyIp9kH0Sk+LIhq3vPb1UY1gstB+O7V5vlU559E8s7hG+1MR660ru
WJo0Pnr2CI9SfndGJdS8F3UCacywJvAqafhMIwMLFOi3IgONchpeUmKkIstyW2fr
HfzNHvyR+BM4ReWWv3xHBEYfnMbu3qIryLkglowqyonIyWAKPQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFATyY4ODmTSrulirKNiRVZrSmlSuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yN2Uy
ZDdlZS1kMjM5LTQ5MjgtOTEwNy1jZWI5NWNhY2QwYjgvY2ZlMmFmNTUtZGFiZi0z
NmViLWFhYWUtNmNhOWZkOTg3ZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjdlMmQ3ZWUtZDIzOS00OTI4LTkx
MDctY2ViOTVjYWNkMGI4LzI3ZTJkN2VlLWQyMzktNDkyOC05MTA3LWNlYjk1Y2Fj
ZDBiOC5jcmwwHwYDVR0jBBgwFoAU9s0l3xU5dEMQe7nLP0NxHNA6r8cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yN2UyZDdlZS1kMjM5LTQ5MjgtOTEwNy1jZWI5
NWNhY2QwYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQTgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAb5QNcMsdzEX0Enbg+tjwTCNX0Icvep8JNcRq5pZtLDLYW4dIICjJm
iluLI7ArKjCgibfJ64IgVUri4VDiZsLjYwXFVm/z57puXFsI4ZNcBmPdPAiqAn61
8frJm5mbHATjnxKkxIjjDoUr0avbgQwZEe96LG3d1ADTb4MV2z2Ak7xTz9Qf/jJL
6HxiZTLUr2Ou+oJHaTsKZ6gMnspl98nfhlIqwQ2Fc8aVEHY529wlt84+jYwYOIzD
TzFjEAuoxlaC0N+JMm7EveCLzRJdj2McaxwurAdXrrDlmI02+qxt7I6kPip8IFS8
/AFE/i07w19VZ3SKKsPIBgBhPvVdwRdE
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:04:03 2025 by rpki-client