Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/49bb57ad-c203-3730-8b14-98e563f4635e.roa
File:                     49bb57ad-c203-3730-8b14-98e563f4635e.roa (raw, json)
Hash identifier:          KSs9mYgJh3u72e5nfo8jCeF+pHxOaIxEJGpdC98KioA=
Subject key identifier:   35:7B:52:76:99:65:BC:5A:DA:E7:12:FC:7B:4C:4A:12:85:F5:1C:3B
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584AEF8BCC1D47F2082835B27900
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/49bb57ad-c203-3730-8b14-98e563f4635e.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     271
IP address blocks:        2607:f8f0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:cc:1d:47:f2:08:28:35:b2:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=5e586972-3fd0-4f36-bfc0-d35f7868a999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:20:ee:ff:7d:95:fe:88:d6:f4:a5:14:14:5d:
                    83:b2:37:1d:3e:9c:0d:4c:bd:0c:03:54:a9:17:84:
                    5d:11:29:41:70:8b:46:6f:0c:40:7d:2f:f5:db:e2:
                    0a:a0:eb:05:14:cf:49:d8:20:1c:d9:3b:a3:8d:dc:
                    90:1c:bc:47:d1:82:cc:36:e2:ec:65:2c:31:44:12:
                    4c:06:d1:6e:6c:90:01:24:ee:df:c4:19:c2:4d:5d:
                    7a:80:2e:5a:78:67:28:24:96:a7:a6:3a:d8:e8:19:
                    dd:55:ad:42:56:a4:90:9b:14:5a:61:ed:1e:59:d6:
                    e1:a3:8b:c9:c1:f5:4f:9e:5a:68:1b:5a:ee:60:34:
                    0e:8c:32:31:a6:18:0f:e4:56:f2:13:ec:53:e4:d8:
                    3c:94:9e:ab:ff:5f:6e:10:71:d4:2a:1f:48:9c:96:
                    3b:34:ce:41:b5:01:5c:a4:40:cb:85:a6:a3:4b:a0:
                    e0:00:3e:57:c6:fa:ab:dc:7e:c9:fb:a8:b5:1d:50:
                    3f:99:a4:4a:9b:2e:0e:68:27:9a:b4:c8:1f:17:d2:
                    da:6d:40:63:95:79:31:77:59:ac:e0:dd:0a:d3:8d:
                    09:e9:58:a5:b5:dd:67:6f:3f:82:af:d4:16:31:aa:
                    35:ec:50:79:2a:7a:d9:a7:79:3a:fb:9b:d9:77:46:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7B:52:76:99:65:BC:5A:DA:E7:12:FC:7B:4C:4A:12:85:F5:1C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/49bb57ad-c203-3730-8b14-98e563f4635e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:42:0a:5d:7e:37:6a:1c:75:61:43:f3:3d:0f:80:7e:91:e0:
         67:05:5e:34:4d:17:d4:64:b5:52:dd:97:fb:0d:5b:db:8e:8c:
         c3:92:1e:22:6d:c8:cd:8e:a6:31:19:2f:b7:89:4f:75:aa:e6:
         22:d1:f7:bc:d7:10:71:e7:8f:b7:3a:4e:1d:25:e0:b8:0a:67:
         00:c0:8f:67:38:e9:80:3b:b2:26:49:f3:a3:7f:dd:a3:da:8e:
         8b:fb:b4:2b:49:25:58:37:72:e2:af:50:ce:43:17:aa:0c:72:
         c6:99:11:72:0a:bc:38:d8:ea:f0:f7:46:92:98:2f:3b:17:93:
         cf:33:52:dc:55:0a:fb:53:b0:6a:ba:f5:85:f9:69:90:d7:26:
         4c:cf:94:e6:c9:e0:ea:cf:b1:57:2f:d9:2a:8b:03:8c:cf:6f:
         a2:38:72:60:bc:c1:32:a0:95:3d:1b:e0:d4:02:ab:cc:68:9b:
         ca:08:27:e2:66:eb:60:3a:26:fe:5e:02:62:ce:65:63:f9:3e:
         6e:cc:8c:bd:9b:6d:e7:2d:79:db:f3:96:4b:a0:ce:22:c9:ee:
         81:6c:cc:bd:f3:f9:bf:78:39:6e:09:99:73:98:1e:6f:89:48:
         cb:15:16:7f:e2:a8:ca:b8:f8:9d:4b:32:c0:94:30:bf:77:12:
         84:1e:16:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErvi8wdR/IIKDWyeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux
OGNmMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk
NWU1ODY5NzItM2ZkMC00ZjM2LWJmYzAtZDM1Zjc4NjhhOTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyDu/32V/ojW9KUUFF2DsjcdPpwNTL0MA1Sp
F4RdESlBcItGbwxAfS/12+IKoOsFFM9J2CAc2TujjdyQHLxH0YLMNuLsZSwxRBJM
BtFubJABJO7fxBnCTV16gC5aeGcoJJanpjrY6BndVa1CVqSQmxRaYe0eWdbho4vJ
wfVPnlpoG1ruYDQOjDIxphgP5FbyE+xT5Ng8lJ6r/19uEHHUKh9InJY7NM5BtQFc
pEDLhaajS6DgAD5Xxvqr3H7J+6i1HVA/maRKmy4OaCeatMgfF9LabUBjlXkxd1ms
4N0K040J6Viltd1nbz+Cr9QWMao17FB5KnrZp3k6+5vZd0Z6IwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDV7UnaZZbxa2ucS/HtMShKF9Rw7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi
NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvNDliYjU3YWQtYzIwMy0z
NzMwLThiMTQtOThlNTYzZjQ2MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5
MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl
MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli
NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAERCCl1+N2ocdWFD8z0PgH6R4GcFXjRNF9RktVLdl/sNW9uOjMOS
HiJtyM2OpjEZL7eJT3Wq5iLR97zXEHHnj7c6Th0l4LgKZwDAj2c46YA7siZJ86N/
3aPajov7tCtJJVg3cuKvUM5DF6oMcsaZEXIKvDjY6vD3RpKYLzsXk88zUtxVCvtT
sGq69YX5aZDXJkzPlObJ4OrPsVcv2SqLA4zPb6I4cmC8wTKglT0b4NQCq8xom8oI
J+Jm62A6Jv5eAmLOZWP5Pm7MjL2bbectedvzlkugziLJ7oFszL3z+b94OW4JmXOY
Hm+JSMsVFn/iqMq4+J1LMsCUML93EoQeFmI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:02:57 2025 by rpki-client