Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/cfcf8d07-5d63-3a11-ad21-ec80a951460e.roa
File:                     cfcf8d07-5d63-3a11-ad21-ec80a951460e.roa (raw, json)
Hash identifier:          r3FNRZwoZAco4m2wUcYGX2KeZHju+U9K8+mNn7gEdPQ=
Subject key identifier:   96:AC:FC:43:D0:DF:72:54:C8:C6:63:E2:F9:3B:0C:69:31:99:C1:14
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F43285849C20A1E02AD7DF422D7033780
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/cfcf8d07-5d63-3a11-ad21-ec80a951460e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     22418
IP address blocks:        2604:eb80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1e:02:ad:7d:f4:22:d7:03:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e78c01e1-ea61-4113-975d-53c90658299a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7a:28:70:c3:65:3d:93:b7:f3:26:3d:f8:28:
                    02:75:49:98:e3:69:b2:61:20:fb:a7:1b:79:05:57:
                    32:81:df:14:42:0c:5c:25:6b:88:83:4e:a3:57:5e:
                    f6:0d:6a:d8:26:1b:f6:08:e1:f8:90:d8:ae:02:b2:
                    f5:bc:3c:79:e6:69:74:75:3d:31:ec:8f:70:b4:bc:
                    fa:18:5b:8b:53:e0:cc:73:ce:0e:e1:2f:4c:cc:6e:
                    e4:41:4e:50:4a:51:38:be:44:fb:6f:b7:a8:15:76:
                    47:dc:f5:86:70:31:f5:73:e4:6b:9e:25:9b:d2:c5:
                    1b:1f:c7:94:2a:b7:8f:ef:80:9e:0c:a5:a4:63:cf:
                    a5:18:81:75:c0:89:30:a7:ef:1d:7e:77:1e:0c:52:
                    6b:4f:21:5d:79:ef:04:1f:f7:d8:9d:02:9d:80:11:
                    92:55:4f:3d:10:0a:71:c2:ab:0b:c0:51:f1:88:20:
                    6c:86:56:96:2f:92:1d:db:28:0d:3e:03:70:c9:64:
                    29:0a:5a:fb:00:10:f8:3e:01:db:55:08:f4:73:62:
                    9d:da:83:4e:31:6d:9d:fd:0d:3d:9b:cb:9d:90:9f:
                    79:e4:8e:0b:63:36:07:2e:67:f0:e9:3a:2a:20:13:
                    9e:f9:30:51:69:6c:6b:07:d7:b2:70:8a:7d:03:96:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AC:FC:43:D0:DF:72:54:C8:C6:63:E2:F9:3B:0C:69:31:99:C1:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/cfcf8d07-5d63-3a11-ad21-ec80a951460e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:eb80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:9b:64:ad:39:e6:f8:f9:2b:a6:bb:0d:be:bb:7a:47:6b:2a:
         4f:0c:ee:2f:55:b3:0c:be:11:1a:a0:ee:37:42:d4:c5:48:dc:
         bc:32:10:f0:61:0d:79:ad:37:06:92:b3:65:af:42:e1:26:d4:
         f1:ba:5e:ad:90:7e:67:a3:33:d4:f0:1c:d9:ab:1b:a3:ff:11:
         a1:7f:3f:c1:7d:05:ef:a8:64:ab:f9:ae:f8:3c:1b:17:fb:7a:
         6e:e4:65:e3:2f:32:90:f8:b2:3b:de:df:26:d2:93:dd:9c:cb:
         a7:3e:f5:30:3d:c3:e9:af:68:b5:5a:52:e7:c7:b0:60:92:12:
         73:d1:11:ba:fc:79:89:c1:3d:d8:e7:d4:8d:61:9b:62:33:30:
         2d:18:6f:70:8a:de:77:83:87:dc:79:ad:04:96:c5:f4:f7:d2:
         e7:97:f2:f8:c3:42:db:4d:e8:96:32:95:a1:83:5b:c8:ed:ca:
         e5:bc:8b:dd:a4:d9:69:78:c9:10:11:44:75:bc:6e:f6:46:83:
         e3:1e:64:d6:99:ce:af:f9:7c:54:80:4d:d3:59:56:37:ef:d2:
         cc:27:43:4b:36:8d:ac:8a:0f:88:0b:a7:eb:d8:4c:6d:a4:70:
         5b:b8:4a:7d:00:fb:be:97:69:df:fb:d7:91:47:4e:9e:93:c1:
         90:46:c6:81
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnCCh4CrX30ItcDN4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MzZjU3MjYtNGRiZS00OGVjLThlZDctZmI0ZjNlYzRh
MDBiMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZTc4YzAxZTEtZWE2MS00MTEzLTk3NWQtNTNjOTA2NTgyOTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3oocMNlPZO38yY9+CgCdUmY42myYSD7pxt5
BVcygd8UQgxcJWuIg06jV172DWrYJhv2COH4kNiuArL1vDx55ml0dT0x7I9wtLz6
GFuLU+DMc84O4S9MzG7kQU5QSlE4vkT7b7eoFXZH3PWGcDH1c+RrniWb0sUbH8eU
KreP74CeDKWkY8+lGIF1wIkwp+8dfnceDFJrTyFdee8EH/fYnQKdgBGSVU89EApx
wqsLwFHxiCBshlaWL5Id2ygNPgNwyWQpClr7ABD4PgHbVQj0c2Kd2oNOMW2d/Q09
m8udkJ955I4LYzYHLmfw6ToqIBOe+TBRaWxrB9eycIp9A5b+ewIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJas/EPQ33JUyMZj4vk7DGkxmcEUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YzNm
NTcyNi00ZGJlLTQ4ZWMtOGVkNy1mYjRmM2VjNGEwMGIvY2ZjZjhkMDctNWQ2My0z
YTExLWFkMjEtZWM4MGE5NTE0NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2MzZjU3MjYtNGRiZS00OGVjLThl
ZDctZmI0ZjNlYzRhMDBiLzdjM2Y1NzI2LTRkYmUtNDhlYy04ZWQ3LWZiNGYzZWM0
YTAwYi5jcmwwHwYDVR0jBBgwFoAUJ2xsfeEccbLzAwf0tgYSsWJZepYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YzNmNTcyNi00ZGJlLTQ4ZWMtOGVkNy1mYjRm
M2VjNGEwMGIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBEm2StOeb4+Sumuw2+u3pHaypPDO4vVbMMvhEaoO43QtTFSNy8MhDw
YQ15rTcGkrNlr0LhJtTxul6tkH5nozPU8BzZqxuj/xGhfz/BfQXvqGSr+a74PBsX
+3pu5GXjLzKQ+LI73t8m0pPdnMunPvUwPcPpr2i1WlLnx7BgkhJz0RG6/HmJwT3Y
59SNYZtiMzAtGG9wit53g4fcea0ElsX099Lnl/L4w0LbTeiWMpWhg1vI7crlvIvd
pNlpeMkQEUR1vG72RoPjHmTWmc6v+XxUgE3TWVY379LMJ0NLNo2sig+IC6fr2Ext
pHBbuEp9APu+l2nf+9eRR06ek8GQRsaB
-----END CERTIFICATE-----
Generated at Thu May 8 17:12:44 2025 by rpki-client