Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/134a8934-a6e6-3602-a0f7-86fb551d7c06.roa
File:                     134a8934-a6e6-3602-a0f7-86fb551d7c06.roa (raw, json)
Hash identifier:          R5JY4Iv/Eb7iWPDJRSdkP94vatv+QY5Y1FNjfnfft9M=
Subject key identifier:   FF:5B:37:F8:71:00:5A:1C:7F:0A:BB:5D:49:26:68:6C:70:70:E6:6E
Certificate issuer:       /CN=fc9f4430-0302-4502-ba1d-52836c0222ae
Certificate serial:       010D0C9F4328584A71EB3EF77F85BCBD3C279180
Authority key identifier: F3:FF:1F:AC:CF:B8:AE:DD:EF:8A:B4:07:D4:FB:F2:11:D2:E7:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/134a8934-a6e6-3602-a0f7-86fb551d7c06.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     36719
IP address blocks:        2620:b1:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/fc9f4430-0302-4502-ba1d-52836c0222ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/fc9f4430-0302-4502-ba1d-52836c0222ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3e:f7:7f:85:bc:bd:3c:27:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9f4430-0302-4502-ba1d-52836c0222ae
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=5bbfe3f2-1208-4195-8325-45c9d4e97f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:49:a2:cb:99:82:f4:c4:55:6d:07:4f:81:
                    d4:93:e6:db:b4:4c:48:74:d4:b6:0f:b0:ef:a2:b8:
                    1d:35:ed:41:51:fd:0e:ad:d7:f5:c8:1d:70:5b:ca:
                    25:f1:58:fa:e4:e8:06:79:9b:f1:3c:13:77:6b:3a:
                    7e:7b:5b:ea:23:d2:e2:bf:3e:b3:7a:f1:d8:54:55:
                    24:12:a2:b0:d9:ed:aa:85:db:ae:61:b1:47:e2:1b:
                    57:07:4f:17:3e:5f:41:03:f9:14:2c:10:87:89:7c:
                    5b:ac:16:59:36:bb:11:4b:d9:9b:4e:31:5c:ca:3f:
                    5d:3a:11:0f:cc:48:49:9b:d2:de:7a:e0:e6:27:35:
                    74:e0:09:73:33:0b:09:1d:23:d1:c5:0a:33:bc:09:
                    33:b8:a4:6c:83:ab:7c:01:8c:39:bb:48:6a:aa:9d:
                    bf:a7:6d:09:db:8e:7b:fa:dc:c5:f8:e5:74:2b:68:
                    26:61:ff:c5:3b:43:43:dd:d6:be:ca:ac:86:82:71:
                    f5:93:d2:bd:32:5a:ce:a5:09:ce:15:96:4c:c0:8f:
                    38:4a:6d:b0:0b:f8:f0:c3:0e:18:01:b9:b7:86:54:
                    5d:47:53:a0:51:e2:af:18:c1:50:62:30:64:38:b8:
                    ce:a4:71:04:4c:9a:e8:5a:9a:88:e7:2b:6c:84:8e:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5B:37:F8:71:00:5A:1C:7F:0A:BB:5D:49:26:68:6C:70:70:E6:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/134a8934-a6e6-3602-a0f7-86fb551d7c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/fc9f4430-0302-4502-ba1d-52836c0222ae.crl

            X509v3 Authority Key Identifier:
                keyid:F3:FF:1F:AC:CF:B8:AE:DD:EF:8A:B4:07:D4:FB:F2:11:D2:E7:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b1:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:cb:ac:af:8f:70:7e:3a:dc:d4:00:8e:d2:44:cd:85:e0:c0:
         a8:0a:38:00:bc:c9:4c:0d:b0:c1:f7:75:86:db:21:a7:46:ed:
         8a:3f:b0:8a:8e:53:8d:ac:9e:0e:b8:6b:55:2a:e5:95:d2:b5:
         ac:4f:0f:09:f5:68:c5:07:c9:f7:3b:f7:5b:80:8b:c6:c8:d4:
         4b:be:66:a0:5e:78:95:af:00:26:d7:f0:c4:39:60:be:30:c7:
         c9:37:d7:4d:83:11:f4:db:d3:c6:53:11:3c:bc:2e:3d:62:3a:
         24:2a:fb:42:f6:45:48:c0:e2:39:13:60:b0:94:a7:24:02:88:
         d9:ce:1e:52:f9:c7:96:9a:d1:08:b5:90:96:48:72:4a:da:21:
         51:c9:9a:95:50:3b:55:28:91:24:82:63:c4:65:42:6e:0c:3d:
         7a:99:e0:af:1e:74:56:7a:6f:51:75:7d:08:4a:eb:b3:9c:cf:
         14:a1:29:95:32:a6:f9:7a:47:21:e6:5b:60:25:73:66:e7:72:
         b8:db:df:25:95:a3:cd:0c:23:e2:29:9e:be:98:25:b2:a6:ec:
         29:ef:12:e1:d1:a5:46:73:cb:bf:37:97:f3:6b:57:29:02:79:
         97:3e:66:2e:34:d0:6c:5e:cc:a1:f3:3f:2b:e7:84:f9:61:d3:
         21:67:ad:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpx6z73f4W8vTwnkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM5ZjQ0MzAtMDMwMi00NTAyLWJhMWQtNTI4MzZjMDIy
MmFlMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk
NWJiZmUzZjItMTIwOC00MTk1LTgzMjUtNDVjOWQ0ZTk3ZjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeFJosuZgvTEVW0HT4HUk+bbtExIdNS2D7Dv
orgdNe1BUf0Ordf1yB1wW8ol8Vj65OgGeZvxPBN3azp+e1vqI9Livz6zevHYVFUk
EqKw2e2qhduuYbFH4htXB08XPl9BA/kULBCHiXxbrBZZNrsRS9mbTjFcyj9dOhEP
zEhJm9LeeuDmJzV04AlzMwsJHSPRxQozvAkzuKRsg6t8AYw5u0hqqp2/p20J2457
+tzF+OV0K2gmYf/FO0ND3da+yqyGgnH1k9K9MlrOpQnOFZZMwI84Sm2wC/jwww4Y
Abm3hlRdR1OgUeKvGMFQYjBkOLjOpHEETJroWpqI5ytshI4DaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP9bN/hxAFocfwq7XUkmaGxwcOZuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYzlm
NDQzMC0wMzAyLTQ1MDItYmExZC01MjgzNmMwMjIyYWUvMTM0YTg5MzQtYTZlNi0z
NjAyLWEwZjctODZmYjU1MWQ3YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmM5ZjQ0MzAtMDMwMi00NTAyLWJh
MWQtNTI4MzZjMDIyMmFlL2ZjOWY0NDMwLTAzMDItNDUwMi1iYTFkLTUyODM2YzAy
MjJhZS5jcmwwHwYDVR0jBBgwFoAU8/8frM+4rt3virQH1PvyEdLnFCEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYzlmNDQzMC0wMzAyLTQ1MDItYmExZC01Mjgz
NmMwMjIyYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAsUAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB3LrK+PcH463NQAjtJEzYXgwKgKOAC8yUwNsMH3dYbbIadG7Yo/
sIqOU42sng64a1Uq5ZXStaxPDwn1aMUHyfc791uAi8bI1Eu+ZqBeeJWvACbX8MQ5
YL4wx8k3102DEfTb08ZTETy8Lj1iOiQq+0L2RUjA4jkTYLCUpyQCiNnOHlL5x5aa
0Qi1kJZIckraIVHJmpVQO1UokSSCY8RlQm4MPXqZ4K8edFZ6b1F1fQhK67OczxSh
KZUypvl6RyHmW2Alc2bncrjb3yWVo80MI+Ipnr6YJbKm7CnvEuHRpUZzy783l/Nr
VykCeZc+Zi400GxezKHzPyvnhPlh0yFnre4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:58:07 2025 by rpki-client