Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c7d8d703-0066-3e22-871d-284f685cfab2.roa
File:                     c7d8d703-0066-3e22-871d-284f685cfab2.roa (raw, json)
Hash identifier:          jBmW2Jr0qdwRdRnp2pLQ8/LLTbKEAy8YG8h7rf2Zhqo=
Subject key identifier:   DB:DE:78:37:6D:DF:EF:4F:C4:FD:E0:94:F5:B6:4C:88:39:98:42:E4
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584ACE0B99BCA8285B50A6AF3B00
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c7d8d703-0066-3e22-871d-284f685cfab2.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     11572
IP address blocks:        2607:6003:2305::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:99:bc:a8:28:5b:50:a6:af:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=a52ac5e4-3264-4a31-a1c1-b61d45bbc5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:de:b9:03:05:60:12:f5:a4:d7:e1:da:06:06:
                    ef:7d:c0:f4:2d:f7:6f:c3:05:53:a4:0d:e4:a7:fa:
                    09:23:89:59:69:c0:3a:0f:ce:4f:38:63:67:f1:fd:
                    1e:ea:13:6c:e4:0c:3d:4b:62:cb:3f:87:5e:1a:67:
                    93:a6:e8:76:11:d2:da:46:ef:d8:20:d5:ec:c1:f2:
                    19:87:7d:16:49:b7:14:11:05:6e:8d:d7:53:59:96:
                    c2:d9:b9:96:37:71:0f:81:14:27:9f:00:c5:f6:51:
                    e6:f9:a3:0e:5a:5a:bb:d4:1d:20:0e:9f:e4:00:bc:
                    c8:6d:51:a2:38:8f:f8:e4:fc:90:9a:9c:48:f6:07:
                    f6:48:7e:03:5b:49:60:8e:d3:03:84:c3:74:be:d5:
                    32:7f:d0:99:af:1a:c9:01:e8:d0:8d:18:d0:91:25:
                    76:a7:63:25:df:b9:43:c6:62:a8:e0:16:61:1e:ea:
                    05:05:6d:83:b5:42:04:c9:f5:b3:b5:ae:d8:76:a5:
                    69:83:45:6a:86:b8:28:6f:6b:dc:2b:ed:aa:87:e8:
                    f1:10:d3:1e:4f:05:7a:0e:b2:d7:a7:d0:8a:b1:dd:
                    9f:06:ed:e5:8f:b4:c2:f1:7b:33:54:06:65:e2:22:
                    ea:07:9c:35:1a:1d:6f:61:86:f7:fa:7c:73:ea:23:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DE:78:37:6D:DF:EF:4F:C4:FD:E0:94:F5:B6:4C:88:39:98:42:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c7d8d703-0066-3e22-871d-284f685cfab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6003:2305::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f3:5f:ab:5a:70:6b:bc:7b:23:9a:e2:de:cc:d6:a9:9b:07:
         5d:c3:f7:5f:32:a2:2c:ea:9f:0e:dc:d2:10:9e:19:cf:34:23:
         29:5a:d8:b2:7d:60:cd:2a:ba:74:30:7a:39:8e:cb:76:02:a5:
         00:ac:d8:67:6e:26:6d:a5:9f:23:4b:84:2f:06:c9:23:b5:be:
         f9:1f:52:90:72:f3:c1:3c:3e:5a:5f:87:9e:b3:79:6d:57:fb:
         7b:08:ab:1e:3c:59:68:88:58:a0:d0:2f:82:81:73:3a:94:1b:
         1c:35:39:3a:fd:c7:66:1c:b5:24:5f:43:dd:4d:73:8f:f2:9f:
         72:89:c8:92:62:a5:4d:66:96:0b:84:0f:a5:98:b3:a1:62:01:
         36:92:ac:29:5e:b3:28:d7:84:d0:c4:92:51:d8:c6:13:d0:b0:
         27:9d:64:c6:72:6d:4a:ea:c3:79:78:d6:51:b6:dc:bf:b6:e4:
         98:9f:11:65:8f:d1:bf:d0:a3:4d:00:a7:da:c1:04:7c:07:28:
         00:e2:09:0f:c5:ec:7c:11:50:d5:11:f6:fd:e5:c9:a6:f7:34:
         c4:98:28:75:1e:03:37:a9:1a:19:87:01:fb:95:3f:69:b6:bc:
         43:a7:9a:91:30:cd:35:1c:44:81:49:82:ee:53:a9:91:b4:68:
         59:77:f1:fd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErOC5m8qChbUKavOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk
YTUyYWM1ZTQtMzI2NC00YTMxLWExYzEtYjYxZDQ1YmJjNWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN65AwVgEvWk1+HaBgbvfcD0LfdvwwVTpA3k
p/oJI4lZacA6D85POGNn8f0e6hNs5Aw9S2LLP4deGmeTpuh2EdLaRu/YINXswfIZ
h30WSbcUEQVujddTWZbC2bmWN3EPgRQnnwDF9lHm+aMOWlq71B0gDp/kALzIbVGi
OI/45PyQmpxI9gf2SH4DW0lgjtMDhMN0vtUyf9CZrxrJAejQjRjQkSV2p2Ml37lD
xmKo4BZhHuoFBW2DtUIEyfWzta7YdqVpg0Vqhrgob2vcK+2qh+jxENMeTwV6DrLX
p9CKsd2fBu3lj7TC8XszVAZl4iLqB5w1Gh1vYYb3+nxz6iOtrQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNveeDdt3+9PxP3glPW2TIg5mELkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYzdkOGQ3MDMtMDA2Ni0z
ZTIyLTg3MWQtMjg0ZjY4NWNmYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdgAyMF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHHzX6tacGu8eyOa4t7M1qmbB13D918yoizqnw7c0hCeGc80Iyla
2LJ9YM0qunQwejmOy3YCpQCs2GduJm2lnyNLhC8GySO1vvkfUpBy88E8Plpfh56z
eW1X+3sIqx48WWiIWKDQL4KBczqUGxw1OTr9x2YctSRfQ91Nc4/yn3KJyJJipU1m
lguED6WYs6FiATaSrClesyjXhNDEklHYxhPQsCedZMZybUrqw3l41lG23L+25Jif
EWWP0b/Qo00Ap9rBBHwHKADiCQ/F7HwRUNUR9v3lyab3NMSYKHUeAzepGhmHAfuV
P2m2vEOnmpEwzTUcRIFJgu5TqZG0aFl38f0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:10:58 2025 by rpki-client