Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/4d332b9e-e281-3913-8d85-fc3d027b57ce.roa
File:                     4d332b9e-e281-3913-8d85-fc3d027b57ce.roa (raw, json)
Hash identifier:          UcFTqYU1iBbQZAYRCDv5dUkrX/q7SJ84G1o/IIaFexk=
Subject key identifier:   A7:F1:21:AF:88:85:B1:96:10:88:0F:03:BD:B5:D0:9A:25:72:D2:FB
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584ACE0B998C707F08FC06A5D800
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/4d332b9e-e281-3913-8d85-fc3d027b57ce.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     12189
IP address blocks:        2607:6000:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:99:8c:70:7f:08:fc:06:a5:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=cc280167-56ae-437d-9131-731aaa8753da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:3e:f4:af:de:9f:af:7a:7e:3a:09:fb:7e:
                    70:9e:1a:e6:d6:a2:80:44:e0:d0:b6:96:36:1a:65:
                    38:5e:da:9f:40:4f:1e:45:4f:1f:62:8d:69:61:d0:
                    14:91:de:85:b7:b8:79:30:e8:3d:d4:59:28:0a:f8:
                    a2:26:8c:ea:3a:84:ea:33:da:89:7b:c9:c0:50:76:
                    82:69:ee:11:c1:2d:21:57:65:91:cc:51:80:e3:c7:
                    9c:a6:0c:4a:87:87:c3:47:7e:88:91:9b:f6:e1:1f:
                    80:08:59:e9:35:74:df:5d:7f:d1:c1:19:cc:44:e2:
                    df:b2:71:66:30:df:b2:d7:ab:8c:08:d4:a1:8e:02:
                    02:a7:a4:a9:91:15:eb:0f:0c:1d:42:90:0c:40:a0:
                    69:b5:37:c6:d3:6f:bd:1c:1d:9a:7f:7e:71:fd:ff:
                    c4:17:58:60:bc:1c:d1:6b:7a:f6:78:c8:fd:54:dd:
                    69:eb:b8:e9:52:98:4b:5c:2e:5a:5a:09:b8:1b:39:
                    63:aa:5f:1d:b6:e2:b1:c9:26:da:55:cf:51:58:86:
                    b5:cc:c5:e9:6b:0b:85:59:42:5d:5f:a3:63:8a:a1:
                    17:f9:2a:58:a4:94:b8:27:d4:5d:f9:a0:b9:47:f8:
                    40:99:ba:b5:40:6d:f6:02:d3:01:f7:72:ba:7d:fb:
                    89:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F1:21:AF:88:85:B1:96:10:88:0F:03:BD:B5:D0:9A:25:72:D2:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/4d332b9e-e281-3913-8d85-fc3d027b57ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:76:13:77:6e:77:6b:fd:ff:a5:8b:7f:f7:4e:4b:8d:04:17:
         11:e7:22:0d:05:2f:f6:5b:d9:8f:3a:99:52:2f:8d:5a:53:6e:
         9c:df:fb:38:88:8c:d2:80:01:b7:b1:2b:66:f1:4e:a1:08:4f:
         f7:a0:55:1a:a5:31:d7:0d:a0:92:de:e9:34:af:84:a3:3c:ec:
         ce:74:03:77:e4:9d:9f:01:5b:18:58:0e:20:91:ae:41:63:1c:
         0a:d9:d3:e5:71:6f:56:aa:4c:49:0d:4d:e8:f4:9b:a3:7b:06:
         85:56:ee:23:0d:a7:9f:cf:c6:8c:44:85:5d:fb:38:2c:36:28:
         e9:c1:f4:a3:3c:f9:30:2f:49:7c:88:86:14:ce:8b:90:dc:ff:
         80:92:5d:22:ed:14:9a:a2:fc:28:a8:65:77:e8:87:c7:1d:e1:
         be:9a:aa:a6:54:94:63:9f:fd:ee:d6:db:17:9e:2c:03:5b:23:
         ec:76:49:24:73:70:47:cc:22:de:98:ee:2d:53:b7:f2:10:ec:
         c9:89:48:40:40:a5:10:d2:74:df:5d:e4:6a:74:8c:b9:df:06:
         95:4d:86:a6:1d:c0:90:62:a2:2d:ae:27:ea:da:21:8c:ea:2c:
         b0:ff:b5:94:e2:07:f5:5b:16:b9:d4:02:1a:1f:04:0e:77:dd:
         72:05:2b:57
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErOC5mMcH8I/Aal2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
Y2MyODAxNjctNTZhZS00MzdkLTkxMzEtNzMxYWFhODc1M2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEI+9K/en696fjoJ+35wnhrm1qKARODQtpY2
GmU4XtqfQE8eRU8fYo1pYdAUkd6Ft7h5MOg91FkoCviiJozqOoTqM9qJe8nAUHaC
ae4RwS0hV2WRzFGA48ecpgxKh4fDR36IkZv24R+ACFnpNXTfXX/RwRnMROLfsnFm
MN+y16uMCNShjgICp6SpkRXrDwwdQpAMQKBptTfG02+9HB2af35x/f/EF1hgvBzR
a3r2eMj9VN1p67jpUphLXC5aWgm4Gzljql8dtuKxySbaVc9RWIa1zMXpawuFWUJd
X6NjiqEX+SpYpJS4J9Rd+aC5R/hAmbq1QG32AtMB93K6ffuJgQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKfxIa+IhbGWEIgPA7210JolctL7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNGQzMzJiOWUtZTI4MS0z
OTEzLThkODUtZmMzZDAyN2I1N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABnYTd253a/3/pYt/905LjQQXEeciDQUv9lvZjzqZUi+NWlNunN/7
OIiM0oABt7ErZvFOoQhP96BVGqUx1w2gkt7pNK+EozzsznQDd+SdnwFbGFgOIJGu
QWMcCtnT5XFvVqpMSQ1N6PSbo3sGhVbuIw2nn8/GjESFXfs4LDYo6cH0ozz5MC9J
fIiGFM6LkNz/gJJdIu0UmqL8KKhld+iHxx3hvpqqplSUY5/97tbbF54sA1sj7HZJ
JHNwR8wi3pjuLVO38hDsyYlIQEClENJ0313kanSMud8GlU2Gph3AkGKiLa4n6toh
jOossP+1lOIH9VsWudQCGh8EDnfdcgUrVw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:10:54 2025 by rpki-client