Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa
File:                     a1e057fb-16f7-3396-8982-11bad5ac424f.roa (raw, json)
Hash identifier:          xoho8VP9buha5nAQdKJX5ZsgdKja6qtz/kxMYuC9w1Q=
Subject key identifier:   D1:4D:18:3D:B7:93:F5:FB:32:BD:A6:3A:F2:86:F2:04:5F:CA:95:EF
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F43285849A61F44058AE47FAEF01C0180
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     53407
IP address blocks:        2604:9440::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:44:05:8a:e4:7f:ae:f0:1c:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=a6b54709-39db-4c8e-b7ca-a91d0067f1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:85:08:06:ec:3b:1d:76:b0:60:fe:15:d3:5b:
                    1b:9a:e3:a5:b7:d0:3b:41:0f:8b:b5:95:34:8c:d9:
                    f2:3b:6e:05:db:5b:6d:ff:a1:4a:96:4b:df:13:c0:
                    ad:dc:4f:bf:73:e3:47:27:78:0c:31:bd:95:31:ff:
                    22:d4:9c:40:85:69:d6:a5:4e:d7:be:0b:5c:08:a5:
                    34:88:40:c7:70:c9:e9:f3:89:e4:c9:59:9f:58:c6:
                    28:54:1b:60:41:e8:86:dd:ea:aa:8b:d2:c0:28:f5:
                    7d:29:a3:10:00:df:54:50:f9:7f:48:6f:95:6b:61:
                    57:94:22:c5:a9:8c:03:26:b5:3c:47:f9:d8:f0:43:
                    49:c5:e7:61:88:36:13:60:7e:dc:e1:c3:14:23:34:
                    2e:33:ae:0d:d1:2a:29:19:3c:33:80:46:14:eb:92:
                    65:d4:1a:24:ea:b6:25:28:2f:6a:40:f4:1d:36:ed:
                    88:9a:a5:21:35:f8:04:34:62:38:c7:86:dc:4d:43:
                    8d:06:57:a2:f2:a8:d1:77:1d:17:06:f8:bf:f0:08:
                    d9:24:bd:72:6e:cd:11:13:c8:27:61:0d:8b:4d:af:
                    e2:ee:49:11:a0:2e:a7:fd:78:34:75:60:f7:41:61:
                    73:46:17:ac:51:29:7d:a3:6c:2a:48:69:a5:23:8b:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4D:18:3D:B7:93:F5:FB:32:BD:A6:3A:F2:86:F2:04:5F:CA:95:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/a1e057fb-16f7-3396-8982-11bad5ac424f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:3d:81:e9:4a:9b:ae:8e:28:78:ac:75:59:f2:38:c0:d9:
         fc:1d:e2:8b:4f:c8:84:90:15:76:ad:2d:4f:8f:57:e2:ce:14:
         fb:57:26:b8:c2:90:8e:68:7a:e6:94:a8:c9:c5:da:36:bd:dc:
         1c:49:ae:e1:4a:5d:9e:04:1f:4d:a6:3a:ba:fc:49:d4:0a:09:
         38:93:80:0e:89:5a:e5:61:85:f1:a6:08:22:3f:9a:79:7b:35:
         ad:33:5a:fb:0c:85:d8:7f:08:89:89:37:6d:5a:98:46:7b:d5:
         f1:16:a4:44:82:a5:33:66:85:c2:fd:e2:b9:ea:6c:d3:33:45:
         f2:ba:b1:bf:57:cd:97:74:4c:da:8a:48:75:6f:66:f4:1a:36:
         e9:47:3f:54:91:14:2c:79:f6:3b:a2:2c:a4:1a:ec:09:3a:7e:
         07:2e:22:6e:d6:d0:c4:35:9d:b9:ec:8a:7c:24:00:66:72:32:
         6f:aa:13:df:db:b4:82:c7:67:c0:8b:e9:cb:85:b8:7b:79:26:
         40:e2:f3:e2:c3:ab:e3:62:62:d7:33:29:99:55:f7:60:26:5d:
         90:15:83:96:9f:f1:0e:5e:65:9e:28:95:fa:cc:6b:68:7a:c5:
         b5:fc:54:48:87:57:ef:fc:aa:84:67:f6:33:4d:2f:10:b1:af:
         d5:94:da:7c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmmH0QFiuR/rvAcAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE2MDE0YjEtZGYwZi00Y2ZkLTk5ODAtM2VlNGJjOWU5
ZmVlMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk
YTZiNTQ3MDktMzlkYi00YzhlLWI3Y2EtYTkxZDAwNjdmMWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoUIBuw7HXawYP4V01sbmuOlt9A7QQ+LtZU0
jNnyO24F21tt/6FKlkvfE8Ct3E+/c+NHJ3gMMb2VMf8i1JxAhWnWpU7XvgtcCKU0
iEDHcMnp84nkyVmfWMYoVBtgQeiG3eqqi9LAKPV9KaMQAN9UUPl/SG+Va2FXlCLF
qYwDJrU8R/nY8ENJxedhiDYTYH7c4cMUIzQuM64N0SopGTwzgEYU65Jl1Bok6rYl
KC9qQPQdNu2ImqUhNfgENGI4x4bcTUONBlei8qjRdx0XBvi/8AjZJL1ybs0RE8gn
YQ2LTa/i7kkRoC6n/Xg0dWD3QWFzRhesUSl9o2wqSGmlI4s8YQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNFNGD23k/X7Mr2mOvKG8gRfypXvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYw
MTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0YmM5ZTlmZWUvYTFlMDU3ZmItMTZmNy0z
Mzk2LTg5ODItMTFiYWQ1YWM0MjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGE2MDE0YjEtZGYwZi00Y2ZkLTk5
ODAtM2VlNGJjOWU5ZmVlLzhhNjAxNGIxLWRmMGYtNGNmZC05OTgwLTNlZTRiYzll
OWZlZS5jcmwwHwYDVR0jBBgwFoAUkhU2LxsekHKvkCTiHxNn13oJ6bEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84YTYwMTRiMS1kZjBmLTRjZmQtOTk4MC0zZWU0
YmM5ZTlmZWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSUQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBTbz2B6Uqbro4oeKx1WfI4wNn8HeKLT8iEkBV2rS1Pj1fizhT7Vya4
wpCOaHrmlKjJxdo2vdwcSa7hSl2eBB9Npjq6/EnUCgk4k4AOiVrlYYXxpggiP5p5
ezWtM1r7DIXYfwiJiTdtWphGe9XxFqREgqUzZoXC/eK56mzTM0XyurG/V82XdEza
ikh1b2b0GjbpRz9UkRQsefY7oiykGuwJOn4HLiJu1tDENZ257Ip8JABmcjJvqhPf
27SCx2fAi+nLhbh7eSZA4vPiw6vjYmLXMymZVfdgJl2QFYOWn/EOXmWeKJX6zGto
esW1/FRIh1fv/KqEZ/YzTS8Qsa/VlNp8
-----END CERTIFICATE-----
Generated at Mon Jun 30 07:30:17 2025 by rpki-client