Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/60c10db3-e9e5-3b2d-aeff-6c362e6e3a54.roa
File:                     60c10db3-e9e5-3b2d-aeff-6c362e6e3a54.roa (raw, json)
Hash identifier:          5OKV5mk26Nconj2Df7dGr2q7PlbzACBV+g5ymKE+ink=
Subject key identifier:   B6:BF:0E:E7:6C:E6:18:AC:5C:AB:27:A4:5B:D3:CB:42:62:52:7D:8A
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584AAED24875839FD9E9F3FD7C70
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/60c10db3-e9e5-3b2d-aeff-6c362e6e3a54.roa
Signing time:             Tue 29 Jul 2025 20:35:07 +0000
ROA not before:           Tue 29 Jul 2025 20:35:07 +0000
ROA not after:            Mon 27 Oct 2025 20:35:07 +0000
asID:                     14773
IP address blocks:        2620:1d5:ffa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:d2:48:75:83:9f:d9:e9:f3:fd:7c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Jul 29 20:35:07 2025 GMT
            Not After : Oct 27 20:35:07 2025 GMT
        Subject: CN=14edd70a-25e6-494c-ba7f-6dc91961e13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:8c:04:bd:c7:40:74:5f:9d:fd:e1:0f:54:
                    67:39:f7:b4:f3:c9:e9:c4:f0:7e:f7:ec:be:0c:92:
                    cd:52:40:d8:6f:49:7a:93:3c:e8:5f:d7:a3:1e:ff:
                    62:46:3b:cf:20:84:ae:27:20:44:0e:e9:65:f2:13:
                    d5:d7:63:81:8e:99:3e:79:2c:0a:2d:cb:43:ee:b2:
                    a8:2e:e6:30:d3:24:78:84:c6:0a:df:7e:60:8f:c0:
                    87:79:20:8f:4f:60:a5:aa:3a:f9:6a:ea:f0:09:c8:
                    c9:5c:90:a6:d8:5c:96:69:5c:1c:6b:d0:75:71:05:
                    af:1a:15:b8:0b:26:e4:f3:5f:af:f1:27:41:71:a1:
                    68:5f:6a:2d:4a:20:83:b8:5a:f1:54:34:6b:b7:9a:
                    cb:19:3b:c3:f4:83:b2:71:c3:57:55:75:84:98:ad:
                    01:c9:fd:e1:de:01:d7:32:06:5e:c0:e4:39:12:92:
                    69:e7:4c:10:84:f5:10:01:f1:4e:ff:ac:dc:0a:0a:
                    6c:65:38:f8:77:23:96:5e:88:e2:e3:a1:e2:21:3b:
                    8a:7f:4e:24:52:c0:53:42:ef:40:67:e2:33:be:ae:
                    44:d5:ef:f2:94:b1:73:e7:7c:f2:4f:67:31:15:37:
                    74:92:a3:a7:f7:2b:0b:49:a1:53:89:80:a2:1a:40:
                    e1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:0E:E7:6C:E6:18:AC:5C:AB:27:A4:5B:D3:CB:42:62:52:7D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/60c10db3-e9e5-3b2d-aeff-6c362e6e3a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:ffa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:80:d6:5a:4d:23:dc:58:e5:96:ec:71:69:96:61:e9:32:25:
         c5:1b:50:2d:d7:d1:76:0c:08:1e:59:8f:d1:98:f2:f5:89:a5:
         d5:80:4e:4a:c7:60:7f:15:46:88:7a:5a:9a:de:fc:e5:5f:d8:
         2f:a8:4e:7f:35:32:bf:4c:4f:99:6f:48:87:c4:47:5e:e6:21:
         46:09:00:19:20:e2:33:0a:1a:62:3f:0b:4c:70:08:b8:81:ad:
         f9:19:49:9a:74:17:49:a1:ba:a2:f9:e5:e9:81:38:56:ff:f5:
         a5:b1:8d:4a:81:46:91:f6:10:9c:21:15:87:02:19:36:8f:95:
         06:d9:82:fa:5e:77:b0:39:fe:a9:c7:43:8b:d1:51:c1:2e:c4:
         a4:55:50:16:ba:b2:78:f8:fe:2f:86:ed:1f:c5:20:1a:a3:bc:
         74:a1:70:16:b0:85:a0:3d:db:c0:cc:34:8e:24:ad:df:cc:f6:
         98:51:35:b0:8d:01:47:63:e9:f4:88:9d:bf:a3:fd:1a:61:be:
         34:c9:5c:33:7c:e5:43:44:63:a3:91:29:b4:05:fe:28:55:96:
         b1:bd:da:5a:15:13:aa:21:b7:d9:ab:bb:7a:5e:37:2f:1a:46:
         f6:0f:bc:d2:9b:27:b8:68:fe:1c:d1:99:49:12:b9:35:3b:26:
         8c:b0:46:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqu0kh1g5/Z6fP9fHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc2N2VhMTYtNzJiNC00MDJhLTliMmYtNzU4M2ZlMzkw
YmI3MB4XDTI1MDcyOTIwMzUwN1oXDTI1MTAyNzIwMzUwN1owLzEtMCsGA1UEAxMk
MTRlZGQ3MGEtMjVlNi00OTRjLWJhN2YtNmRjOTE5NjFlMTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0iMBL3HQHRfnf3hD1RnOfe088npxPB+9+y+
DJLNUkDYb0l6kzzoX9ejHv9iRjvPIISuJyBEDull8hPV12OBjpk+eSwKLctD7rKo
LuYw0yR4hMYK335gj8CHeSCPT2Clqjr5aurwCcjJXJCm2FyWaVwca9B1cQWvGhW4
Cybk81+v8SdBcaFoX2otSiCDuFrxVDRrt5rLGTvD9IOyccNXVXWEmK0Byf3h3gHX
MgZewOQ5EpJp50wQhPUQAfFO/6zcCgpsZTj4dyOWXoji46HiITuKf04kUsBTQu9A
Z+Izvq5E1e/ylLFz53zyT2cxFTd0kqOn9ysLSaFTiYCiGkDhbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLa/Duds5hisXKsnpFvTy0JiUn2KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3
ZWExNi03MmI0LTQwMmEtOWIyZi03NTgzZmUzOTBiYjcvNjBjMTBkYjMtZTllNS0z
YjJkLWFlZmYtNmMzNjJlNmUzYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc2N2VhMTYtNzJiNC00MDJhLTli
MmYtNzU4M2ZlMzkwYmI3L2Y3NjdlYTE2LTcyYjQtNDAyYS05YjJmLTc1ODNmZTM5
MGJiNy5jcmwwHwYDVR0jBBgwFoAUesYuc/uCJzFiX8COdvsgVaYFuSkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3ZWExNi03MmI0LTQwMmEtOWIyZi03NTgz
ZmUzOTBiYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB1Q/6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGiA1lpNI9xY5ZbscWmWYekyJcUbUC3X0XYMCB5Zj9GY8vWJpdWA
TkrHYH8VRoh6Wpre/OVf2C+oTn81Mr9MT5lvSIfER17mIUYJABkg4jMKGmI/C0xw
CLiBrfkZSZp0F0mhuqL55emBOFb/9aWxjUqBRpH2EJwhFYcCGTaPlQbZgvped7A5
/qnHQ4vRUcEuxKRVUBa6snj4/i+G7R/FIBqjvHShcBawhaA928DMNI4krd/M9phR
NbCNAUdj6fSInb+j/RphvjTJXDN85UNEY6ORKbQF/ihVlrG92loVE6oht9mru3pe
Ny8aRvYPvNKbJ7ho/hzRmUkSuTU7JoywRjQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:36:05 2025 by rpki-client