Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/89193b55-7176-3da3-8ef8-2df1884a9a7c.roa
File:                     89193b55-7176-3da3-8ef8-2df1884a9a7c.roa (raw, json)
Hash identifier:          fCvNFURpBaSxpyUsPyNFRhApV5zgu+nb4IbRTLVOuYI=
Subject key identifier:   02:3F:C0:4B:72:2E:7E:1D:6B:2D:64:D8:7F:C8:87:2A:15:80:71:98
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584AC87651D67F76CD252DA297C0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/89193b55-7176-3da3-8ef8-2df1884a9a7c.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     48737
IP address blocks:        2607:b300:fd07::/48 maxlen: 48
                          2607:b300:fd08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:51:d6:7f:76:cd:25:2d:a2:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=21fb7a75-9580-44f7-8f15-c8cfd9f81b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9b:70:c1:cd:54:aa:7d:12:86:17:90:f9:7c:
                    70:5e:21:f8:a1:57:66:b3:12:0b:87:5d:0b:a3:f2:
                    3c:db:c3:a1:7b:c5:6b:17:5a:8e:e5:b9:c1:2b:24:
                    d6:05:3c:b1:a1:23:91:6d:34:5c:0e:3b:f5:a9:0b:
                    e1:0b:08:fe:71:cc:0e:ba:cc:42:78:c8:2a:17:ef:
                    29:a6:7c:fa:03:30:82:7f:4f:b2:c4:e9:9f:5b:06:
                    68:dd:87:be:7e:13:1c:f4:28:ff:5a:ff:0f:59:51:
                    14:fb:ae:7d:8f:10:f4:fe:ca:bf:1a:f1:09:2e:e1:
                    10:91:41:38:e4:aa:b8:95:65:da:b0:ba:ce:6c:82:
                    b5:63:c1:8f:e5:e4:37:c8:7c:56:14:91:8c:ba:e8:
                    78:71:e5:7d:da:d2:cc:46:09:e3:5a:f5:92:ce:fa:
                    87:31:24:1a:db:d4:a4:66:19:f7:95:59:7f:60:70:
                    59:2d:e9:c5:b0:63:10:1e:a1:ca:cf:31:17:cf:c0:
                    b1:b7:9f:b9:97:82:a9:43:4e:f4:78:58:e3:c1:44:
                    e4:04:24:44:6b:7a:85:59:12:29:ea:cf:67:5d:01:
                    4b:73:b9:67:a3:5c:ae:b5:bb:8c:6f:65:55:a7:02:
                    b6:d1:e1:d7:1f:07:e7:ed:c1:49:50:aa:65:b6:ad:
                    ef:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3F:C0:4B:72:2E:7E:1D:6B:2D:64:D8:7F:C8:87:2A:15:80:71:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/89193b55-7176-3da3-8ef8-2df1884a9a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b300:fd07::-2607:b300:fd08:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:94:e2:3d:23:4b:ac:ed:49:9b:5f:ad:50:52:ff:67:5b:79:
         45:4d:e1:da:35:5f:68:54:1c:86:03:a5:3d:99:5c:df:93:97:
         fb:f4:3b:79:68:32:0d:3c:eb:f3:77:56:98:4c:f5:74:96:aa:
         5c:bd:c1:f9:51:cf:e0:7d:df:29:94:c2:31:73:8a:2e:19:ec:
         9a:2c:7f:97:c7:ee:6f:25:3a:26:ca:c5:7a:70:62:bb:de:6a:
         0e:00:fb:9b:ed:69:7e:7f:ac:ea:0a:45:32:93:9e:58:2c:37:
         dd:d8:4f:fc:df:6a:90:6b:45:32:e6:e0:a2:99:35:11:e0:6a:
         94:76:f0:e5:04:2e:21:9f:08:cc:41:04:3e:78:93:3b:17:9b:
         26:af:e8:c4:dd:af:b7:6b:86:3f:9e:53:96:f7:34:18:67:49:
         4f:66:21:c0:6f:05:df:cd:16:9c:a4:f8:4b:ae:6d:00:3f:09:
         a9:9f:ba:81:e0:26:d1:32:c6:11:0a:22:b3:6f:c9:f0:5f:46:
         60:88:68:33:76:97:6c:4c:f5:c7:93:ea:12:17:85:86:f9:23:
         4b:47:79:a8:4a:d0:50:42:de:a6:fb:98:b6:80:92:72:d2:e7:
         c6:e1:98:ec:25:0d:15:8e:e9:e6:bd:b3:a3:c5:b2:30:57:e8:
         bf:24:e4:61
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWErIdlHWf3bNJS2il8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
MjFmYjdhNzUtOTU4MC00NGY3LThmMTUtYzhjZmQ5ZjgxYjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJtwwc1Uqn0ShheQ+XxwXiH4oVdmsxILh10L
o/I828Ohe8VrF1qO5bnBKyTWBTyxoSORbTRcDjv1qQvhCwj+ccwOusxCeMgqF+8p
pnz6AzCCf0+yxOmfWwZo3Ye+fhMc9Cj/Wv8PWVEU+659jxD0/sq/GvEJLuEQkUE4
5Kq4lWXasLrObIK1Y8GP5eQ3yHxWFJGMuuh4ceV92tLMRgnjWvWSzvqHMSQa29Sk
Zhn3lVl/YHBZLenFsGMQHqHKzzEXz8Cxt5+5l4KpQ070eFjjwUTkBCREa3qFWRIp
6s9nXQFLc7lno1yutbuMb2VVpwK20eHXHwfn7cFJUKpltq3vNQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFAI/wEtyLn4day1k2H/IhyoVgHGYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvODkxOTNiNTUtNzE3Ni0z
ZGEzLThlZjgtMmRmMTg4NGE5YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmB7MA
/QcDBwAmB7MA/QgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAAJTiPSNLrO1Jm1+tUFL/Z1t5RU3h2jVfaFQc
hgOlPZlc35OX+/Q7eWgyDTzr83dWmEz1dJaqXL3B+VHP4H3fKZTCMXOKLhnsmix/
l8fubyU6JsrFenBiu95qDgD7m+1pfn+s6gpFMpOeWCw33dhP/N9qkGtFMubgopk1
EeBqlHbw5QQuIZ8IzEEEPniTOxebJq/oxN2vt2uGP55Tlvc0GGdJT2YhwG8F380W
nKT4S65tAD8JqZ+6geAm0TLGEQois2/J8F9GYIhoM3aXbEz1x5PqEheFhvkjS0d5
qErQUELepvuYtoCSctLnxuGY7CUNFY7p5r2zo8WyMFfovyTkYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:29 2025 by rpki-client