Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa
File:                     65b660a1-3975-385b-add8-d9b4f1e98a18.roa (raw, json)
Hash identifier:          ZrFpla/J3nYb7byD/ptGxAZywweZ7Cm0L/jP1w5Zc4k=
Subject key identifier:   72:94:74:4E:B7:08:E3:7D:A5:4C:20:CE:E4:1C:EE:E8:E9:DE:89:F4
Certificate issuer:       /CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Certificate serial:       010D0C9F4328584A51D0749A6CC306379E477B20
Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     64199
IP address blocks:        2602:fa78::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:74:9a:6c:c3:06:37:9e:47:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=633cd5d1-f3ce-4ed8-9e85-ca16aabaac91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:20:10:0d:90:b4:bc:42:28:8b:41:b3:b6:
                    a0:10:47:70:8c:b7:fc:74:e8:1a:2f:9e:3e:72:b4:
                    62:dd:56:8b:8f:86:5d:74:f4:03:0a:40:e4:84:54:
                    a9:b5:90:79:7f:a6:25:cf:0d:07:f9:0c:16:cd:97:
                    f5:73:23:f3:a2:0d:bd:2a:98:26:2b:0b:ca:23:30:
                    0a:fa:37:ab:b0:61:71:48:be:20:20:cb:c0:d4:83:
                    81:11:9d:1b:ea:62:e4:eb:c9:ae:23:d9:0a:94:82:
                    d8:c3:45:33:35:6e:b4:3e:a7:7a:9f:4f:be:64:3f:
                    65:0d:7d:e0:05:b9:85:25:b1:89:1a:7c:a3:b7:fc:
                    58:36:84:fb:e5:67:a8:7e:eb:4d:4c:39:0a:9e:f5:
                    88:6c:83:4a:22:9d:47:d8:6c:68:74:df:55:09:75:
                    cd:61:50:da:63:c1:f3:fb:eb:88:93:03:2e:61:c3:
                    14:18:55:47:3c:07:ef:49:d8:b1:01:48:36:93:d5:
                    b5:43:75:ee:51:cf:4b:90:cf:c8:dd:05:47:47:ef:
                    c3:45:77:3a:be:b1:66:3e:8d:20:83:c0:6d:62:fb:
                    04:f2:ad:ef:0f:74:48:f3:d7:3c:c3:b5:6b:33:30:
                    1e:66:32:9f:84:43:e1:6a:6d:7f:8d:c2:c0:e1:c4:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:94:74:4E:B7:08:E3:7D:A5:4C:20:CE:E4:1C:EE:E8:E9:DE:89:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/65b660a1-3975-385b-add8-d9b4f1e98a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl

            X509v3 Authority Key Identifier:
                keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa78::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:cf:1f:66:7d:0b:f2:e3:ea:17:62:f8:a6:2e:fc:0e:62:ee:
         93:89:27:ca:ff:f4:45:5d:92:d5:50:be:47:9b:78:f8:c4:45:
         cc:74:02:30:80:8b:d6:4b:c8:f1:44:fd:00:50:98:d8:e9:82:
         3b:7e:b3:ed:7b:0f:55:36:00:d8:8b:04:07:6a:85:c8:bd:52:
         5d:67:0c:d2:a7:c5:1a:79:ed:0a:29:ae:0e:f5:f1:8b:8d:cf:
         d0:ee:e8:4d:5b:71:be:9b:1e:29:6e:9d:29:66:5a:0d:d8:a6:
         48:a5:3e:af:5b:18:4b:fd:02:a3:13:45:8d:b3:df:a2:a0:97:
         ff:41:17:92:6e:05:5e:3d:45:5c:c3:26:7a:27:2d:e3:99:48:
         ea:a7:f2:5f:50:02:19:f2:e8:b6:19:d9:4c:1c:d2:99:80:82:
         26:17:c0:c0:3c:23:73:ee:08:60:9a:fd:5d:f0:f4:03:fe:e0:
         ca:3b:6a:3e:47:2f:74:41:19:67:6b:fb:93:3f:a4:5d:bc:2b:
         66:e9:22:7f:4d:29:b7:a4:78:af:98:8e:bd:7f:09:01:af:27:
         d2:ef:5d:cf:00:b8:c0:d1:3f:d3:06:ef:cc:ff:8b:16:4e:a0:
         8c:66:7f:89:ef:b5:26:5e:7d:1b:c7:de:59:bc:77:c1:ac:6e:
         e1:75:1f:f4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpR0HSabMMGN55HeyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFhN2MwMjAtZWJiYy00NzYyLTg4NDEtNTRlZmI1MDhh
N2M3MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk
NjMzY2Q1ZDEtZjNjZS00ZWQ4LTllODUtY2ExNmFhYmFhYzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZogEA2QtLxCKItBs7agEEdwjLf8dOgaL54+
crRi3VaLj4ZddPQDCkDkhFSptZB5f6Ylzw0H+QwWzZf1cyPzog29KpgmKwvKIzAK
+jersGFxSL4gIMvA1IOBEZ0b6mLk68muI9kKlILYw0UzNW60Pqd6n0++ZD9lDX3g
BbmFJbGJGnyjt/xYNoT75WeofutNTDkKnvWIbINKIp1H2GxodN9VCXXNYVDaY8Hz
++uIkwMuYcMUGFVHPAfvSdixAUg2k9W1Q3XuUc9LkM/I3QVHR+/DRXc6vrFmPo0g
g8BtYvsE8q3vD3RI89c8w7VrMzAeZjKfhEPham1/jcLA4cRrnQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHKUdE63CON9pUwgzuQc7ujp3on0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3
YzAyMC1lYmJjLTQ3NjItODg0MS01NGVmYjUwOGE3YzcvNjViNjYwYTEtMzk3NS0z
ODViLWFkZDgtZDliNGYxZTk4YTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFhN2MwMjAtZWJiYy00NzYyLTg4
NDEtNTRlZmI1MDhhN2M3LzIxYTdjMDIwLWViYmMtNDc2Mi04ODQxLTU0ZWZiNTA4
YTdjNy5jcmwwHwYDVR0jBBgwFoAUIm7/Fpf6khUxCul23NPYRtOPYZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3YzAyMC1lYmJjLTQ3NjItODg0MS01NGVm
YjUwOGE3YzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6eAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIs8fZn0L8uPqF2L4pi78DmLuk4knyv/0RV2S1VC+R5t4+MRFzHQC
MICL1kvI8UT9AFCY2OmCO36z7XsPVTYA2IsEB2qFyL1SXWcM0qfFGnntCimuDvXx
i43P0O7oTVtxvpseKW6dKWZaDdimSKU+r1sYS/0CoxNFjbPfoqCX/0EXkm4FXj1F
XMMmeict45lI6qfyX1ACGfLothnZTBzSmYCCJhfAwDwjc+4IYJr9XfD0A/7gyjtq
PkcvdEEZZ2v7kz+kXbwrZukif00pt6R4r5iOvX8JAa8n0u9dzwC4wNE/0wbvzP+L
Fk6gjGZ/ie+1Jl59G8feWbx3waxu4XUf9A==
-----END CERTIFICATE-----
Generated at Thu Jul 3 21:28:27 2025 by rpki-client