Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa
File:                     4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa (raw, json)
Hash identifier:          m1YYy4tPT0EoPANCPIXEHRvWq2aGQSf/CQVOJIIp6PM=
Subject key identifier:   42:32:E5:20:96:8D:68:44:68:09:AD:DA:DB:E4:AE:8C:E3:29:B8:64
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584AD7D12058A9BA67FB86E81F30
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        2604:b040:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:20:58:a9:ba:67:fb:86:e8:1f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=e27ccc93-f653-4948-afe0-0848a472995e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:26:5a:d4:92:25:6a:a0:c9:03:d7:55:8f:
                    a0:9c:f8:3a:b4:24:16:1d:70:08:56:10:18:93:e8:
                    9f:52:95:37:7c:be:f4:ee:eb:86:1b:51:ed:ff:44:
                    bb:c7:78:2e:d3:0f:c7:82:5d:f2:7b:93:40:05:27:
                    95:4a:70:af:98:9b:43:57:bd:32:b7:65:a5:83:ab:
                    c1:9f:12:28:f5:a7:b4:f8:fb:02:40:b7:8d:b7:9e:
                    88:54:57:7a:1c:99:d9:70:3e:cd:c1:2e:16:4f:37:
                    c7:fd:dc:af:cc:8b:f6:3c:22:dc:ce:31:0f:f4:5f:
                    f1:82:ed:e3:c5:5d:f6:a2:be:83:21:45:67:cd:1e:
                    10:c0:d3:67:eb:87:af:56:b6:82:c8:6e:f3:c8:53:
                    6a:46:1a:e0:82:f9:62:9c:02:de:2a:e2:5a:61:2b:
                    59:30:88:5b:2a:b9:a0:19:11:f5:4c:a8:ce:8c:66:
                    2e:32:d4:06:8a:6e:3b:40:69:46:90:5d:39:0d:ea:
                    3e:19:42:0d:d8:7d:9d:ec:12:22:68:da:5d:9b:e4:
                    3b:15:77:b2:1e:e6:b8:1b:d0:63:90:98:ec:2f:ce:
                    60:ee:36:e6:3b:98:f1:b7:87:70:80:45:c9:72:bd:
                    6c:9e:74:ee:ec:df:97:56:88:04:0b:e6:fc:f3:d6:
                    90:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:32:E5:20:96:8D:68:44:68:09:AD:DA:DB:E4:AE:8C:E3:29:B8:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b040:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:6d:be:06:f2:84:8e:71:af:77:bf:b3:c1:75:04:07:9f:e4:
         6e:52:22:5c:ea:e7:24:91:f9:79:b8:85:b6:30:49:3c:83:d8:
         5a:ff:3f:a7:27:33:8d:91:a0:1c:c4:61:3c:93:23:23:12:7b:
         4e:f9:6a:7f:c3:f0:cc:26:18:f7:3d:fb:f2:d2:39:5e:f7:d0:
         58:69:44:ef:f7:74:cc:52:4b:18:86:09:1b:17:9b:41:2e:f0:
         48:a8:41:e6:8e:93:72:0c:30:37:83:97:12:12:57:92:8e:3b:
         9e:bd:f7:31:6b:f9:33:14:4d:9a:a7:01:f9:8d:c9:a2:76:e7:
         bd:07:23:8a:0b:84:05:36:af:43:77:33:a4:7e:7d:dd:56:5e:
         7f:a3:90:b3:26:da:25:69:c4:8c:2c:67:cf:d0:35:cd:91:00:
         35:ab:20:b4:24:97:17:af:ef:0d:7c:75:1c:b1:fa:cf:c3:18:
         d4:f1:e9:95:66:f4:5a:01:c6:8e:10:19:02:09:87:6f:97:b6:
         d0:bc:da:63:4f:a5:05:57:7e:20:95:f9:26:ed:6d:b1:cb:f7:
         44:37:78:4b:dd:3b:6e:9a:86:af:f2:61:c7:92:56:98:05:5c:
         54:bd:97:39:4e:0e:51:0c:de:81:69:02:6a:46:fd:05:04:2a:
         f5:ac:e1:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0SBYqbpn+4boHzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTI3Y2NjOTMtZjY1My00OTQ4LWFmZTAtMDg0OGE0NzI5OTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFQmWtSSJWqgyQPXVY+gnPg6tCQWHXAIVhAY
k+ifUpU3fL707uuGG1Ht/0S7x3gu0w/Hgl3ye5NABSeVSnCvmJtDV70yt2Wlg6vB
nxIo9ae0+PsCQLeNt56IVFd6HJnZcD7NwS4WTzfH/dyvzIv2PCLczjEP9F/xgu3j
xV32or6DIUVnzR4QwNNn64evVraCyG7zyFNqRhrggvlinALeKuJaYStZMIhbKrmg
GRH1TKjOjGYuMtQGim47QGlGkF05Deo+GUIN2H2d7BIiaNpdm+Q7FXeyHua4G9Bj
kJjsL85g7jbmO5jxt4dwgEXJcr1snnTu7N+XVogEC+b889aQXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEIy5SCWjWhEaAmt2tvkrozjKbhkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNGM1MGNjOTAtYWRkMS0z
ODRjLWE0ZDMtZmU3YzAxYTVkMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSwQAAT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFBtvgbyhI5xr3e/s8F1BAef5G5SIlzq5ySR+Xm4hbYwSTyD2Fr/
P6cnM42RoBzEYTyTIyMSe075an/D8MwmGPc9+/LSOV730FhpRO/3dMxSSxiGCRsX
m0Eu8EioQeaOk3IMMDeDlxISV5KOO5699zFr+TMUTZqnAfmNyaJ2570HI4oLhAU2
r0N3M6R+fd1WXn+jkLMm2iVpxIwsZ8/QNc2RADWrILQklxev7w18dRyx+s/DGNTx
6ZVm9FoBxo4QGQIJh2+XttC82mNPpQVXfiCV+SbtbbHL90Q3eEvdO26ahq/yYceS
VpgFXFS9lzlODlEM3oFpAmpG/QUEKvWs4e8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:53:18 2025 by rpki-client