Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa
File:                     b14f6dc6-aac6-354c-b773-19074de6cb64.roa (raw, json)
Hash identifier:          RroGlBmMhEbx0faNF/a9oxctnVWHbE+WZhJRtubsAAg=
Subject key identifier:   A0:55:25:99:04:D0:82:6E:07:E4:64:34:9A:4C:ED:A8:D8:8B:72:94
Certificate issuer:       /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
Certificate serial:       010D0C9F4328584A4C3B1C506A1DF03BEC1ADD80
Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        2620:197:de0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:1c:50:6a:1d:f0:3b:ec:1a:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=056e0348-e60c-407c-bc7f-5acf352730fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:e4:aa:f7:d6:b1:55:57:2d:10:31:82:24:
                    5e:d6:df:a4:d3:6e:48:bb:48:b4:17:be:67:a7:29:
                    54:66:89:8f:59:71:4d:86:73:c5:56:3b:45:09:45:
                    4e:5a:db:78:6e:18:27:f0:b7:1d:73:26:5c:aa:25:
                    02:b8:6e:d8:c5:c6:8b:3a:84:be:c3:92:59:50:cf:
                    fd:3d:8b:10:8d:41:9b:54:0d:6b:ec:7a:3d:83:37:
                    52:41:d8:c1:eb:98:63:bb:57:3f:94:bd:ad:dd:03:
                    4d:9f:86:62:a3:40:39:03:d6:e3:13:58:9f:02:fe:
                    e3:2d:31:78:9b:32:01:57:b2:c9:72:10:15:7d:c5:
                    37:6b:bb:41:b1:46:1e:1a:4e:de:55:50:33:1d:5b:
                    2e:f7:5c:c8:d5:d1:cd:7b:3f:f7:dc:2c:79:f1:76:
                    a2:08:d1:c4:7b:78:10:e6:a2:11:0f:07:33:1d:65:
                    e9:06:b8:62:5a:ff:1e:eb:cf:29:2d:8e:40:67:67:
                    54:d8:d0:e0:2a:37:21:61:3b:06:fb:e0:d5:c7:07:
                    b1:a8:8c:40:98:6b:6d:93:5e:6b:7b:eb:b9:26:61:
                    de:7b:bf:b6:07:db:ec:71:5e:99:54:d6:39:8f:85:
                    9b:7e:66:ca:b9:a5:d2:94:10:f2:57:9f:97:95:b8:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:55:25:99:04:D0:82:6E:07:E4:64:34:9A:4C:ED:A8:D8:8B:72:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/b14f6dc6-aac6-354c-b773-19074de6cb64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl

            X509v3 Authority Key Identifier:
                keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:197:de0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b8:72:84:57:02:32:2f:05:67:a2:22:44:17:bd:8f:0b:3f:
         a8:c7:ba:41:30:14:38:e0:df:77:3a:9e:dc:11:75:b3:71:bf:
         20:be:de:a3:74:5f:3e:f7:aa:24:8e:2f:96:23:4b:86:62:94:
         94:6a:a6:94:c4:40:a1:06:cc:ec:bb:46:ec:03:bc:3f:44:94:
         22:bd:f2:c0:be:b7:cc:88:6d:4c:f3:b2:30:9d:69:b1:18:68:
         68:c8:f3:c9:3f:ba:b1:3f:f1:8e:60:9b:64:c3:2c:9e:3a:71:
         3f:58:4a:18:fa:61:3d:40:09:be:3f:55:5e:63:15:27:e9:c7:
         8a:74:ad:d6:12:e2:db:6f:c7:77:4c:c5:52:f5:08:3c:bd:3a:
         81:4c:95:aa:b9:0f:a2:97:30:66:e9:39:31:a2:55:89:22:df:
         bd:de:4a:66:85:d9:e0:4a:4d:0a:57:38:f9:a3:4f:97:ef:13:
         5d:58:54:b2:3b:56:17:b4:98:a3:35:62:af:31:bc:f6:d1:e0:
         09:22:79:dd:35:50:1a:08:23:9d:33:e0:d5:9a:4a:0c:82:b3:
         18:bd:7a:e1:21:6e:dd:c5:bb:95:5a:07:58:60:d9:23:2f:f7:
         88:5b:b9:12:c5:8d:ab:f6:d1:c8:96:66:ce:dd:f0:64:c9:6c:
         0a:a1:67:40
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMOxxQah3wO+wa3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4
ZGMzMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
MDU2ZTAzNDgtZTYwYy00MDdjLWJjN2YtNWFjZjM1MjczMGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDbkqvfWsVVXLRAxgiRe1t+k025Iu0i0F75n
pylUZomPWXFNhnPFVjtFCUVOWtt4bhgn8LcdcyZcqiUCuG7YxcaLOoS+w5JZUM/9
PYsQjUGbVA1r7Ho9gzdSQdjB65hju1c/lL2t3QNNn4Zio0A5A9bjE1ifAv7jLTF4
mzIBV7LJchAVfcU3a7tBsUYeGk7eVVAzHVsu91zI1dHNez/33Cx58XaiCNHEe3gQ
5qIRDwczHWXpBrhiWv8e688pLY5AZ2dU2NDgKjchYTsG++DVxwexqIxAmGttk15r
e+u5JmHee7+2B9vscV6ZVNY5j4WbfmbKuaXSlBDyV5+Xlbj7wwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKBVJZkE0IJuB+RkNJpM7ajYi3KUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4
ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvYjE0ZjZkYzYtYWFjNi0z
NTRjLWI3NzMtMTkwNzRkZTZjYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm
ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0
OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw
MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw3g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAW4coRXAjIvBWeiIkQXvY8LP6jHukEwFDjg33c6ntwRdbNxvyC+
3qN0Xz73qiSOL5YjS4ZilJRqppTEQKEGzOy7RuwDvD9ElCK98sC+t8yIbUzzsjCd
abEYaGjI88k/urE/8Y5gm2TDLJ46cT9YShj6YT1ACb4/VV5jFSfpx4p0rdYS4ttv
x3dMxVL1CDy9OoFMlaq5D6KXMGbpOTGiVYki373eSmaF2eBKTQpXOPmjT5fvE11Y
VLI7Vhe0mKM1Yq8xvPbR4Akied01UBoII50z4NWaSgyCsxi9euEhbt3Fu5VaB1hg
2SMv94hbuRLFjav20ciWZs7d8GTJbAqhZ0A=
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:33:57 2025 by rpki-client