Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/c760c209-a487-32ce-864f-511540df8b7f.roa
File:                     c760c209-a487-32ce-864f-511540df8b7f.roa (raw, json)
Hash identifier:          Qj14rXuPF39DwH5lIBzTli+d5YNuFKwjSOVqMTqt1LE=
Subject key identifier:   E0:A9:FD:03:B4:30:E0:A3:76:CB:5A:DD:02:F5:04:0A:15:86:1A:A5
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584A68260BDEDB7D0E4293887780
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/c760c209-a487-32ce-864f-511540df8b7f.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     14773
IP address blocks:        2620:1d5:ffc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:0b:de:db:7d:0e:42:93:88:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=9d369a49-7022-48a3-9879-e2b43c98b79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:89:e4:c7:58:d3:e2:1c:72:5b:5b:76:dd:
                    37:82:5b:47:74:1b:c9:cc:62:da:ea:8d:58:68:33:
                    a3:ea:93:94:1b:f8:6c:41:79:50:10:dc:2b:d8:08:
                    63:9e:3d:83:b6:77:a9:af:b5:91:6c:77:ea:ad:d9:
                    bb:3a:26:8a:39:49:7c:6b:4e:04:a4:cb:29:b3:31:
                    7b:80:3c:9b:31:71:e8:18:04:e1:5b:bc:3e:04:3b:
                    f5:59:ef:4c:c1:b1:ac:fd:28:fc:ea:37:70:1d:2a:
                    f9:19:b5:7d:31:66:17:0a:34:21:51:63:f7:44:1a:
                    7b:d5:55:88:62:bc:9c:43:a1:3b:65:9f:b4:c7:3f:
                    fb:7e:64:4f:7a:6f:76:89:b3:6c:5a:2d:b0:16:0a:
                    85:67:7e:22:aa:ff:3e:99:ba:94:5d:64:8a:2b:1a:
                    43:8c:b2:ce:25:17:3e:40:91:31:6a:f0:f9:47:3d:
                    9e:2b:90:47:0e:05:4b:0b:e5:a5:3d:5c:6c:6b:31:
                    8e:68:13:b7:1f:9f:f3:83:9e:b8:fd:ed:92:47:e9:
                    69:8b:8e:67:58:e1:1f:21:9a:bb:30:73:67:6e:ca:
                    b8:1a:6c:0b:3f:2e:5f:08:b4:df:41:e8:23:ee:c7:
                    a2:5c:36:56:f2:ff:25:97:c6:38:ed:bb:c6:6d:f1:
                    82:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A9:FD:03:B4:30:E0:A3:76:CB:5A:DD:02:F5:04:0A:15:86:1A:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/c760c209-a487-32ce-864f-511540df8b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:ffc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:1d:47:c9:5b:58:1f:d3:83:03:14:5e:d0:39:e6:cf:41:dd:
         31:5a:21:14:f9:95:77:62:30:2b:3e:a9:68:93:83:32:9c:06:
         2b:23:47:2f:80:f1:df:c5:e9:28:db:0f:02:45:53:38:20:af:
         0e:2f:93:50:2c:9c:6f:74:07:67:92:a2:c4:4d:47:8a:54:e9:
         34:cc:8e:74:55:e8:a5:94:a4:ea:64:b7:29:17:4e:ce:ce:ca:
         78:fc:9a:be:6b:6f:73:08:06:12:2b:2d:b3:db:7d:7e:5b:51:
         9c:40:bf:37:98:27:e6:4c:e1:34:bd:7a:5c:13:8f:b2:e9:ea:
         e7:72:f0:d3:1b:ce:ca:52:9b:04:6c:c0:46:40:6e:5c:c4:95:
         98:5e:2a:0e:a6:ef:6b:7c:ae:15:a1:34:b5:98:79:b9:5f:f7:
         77:ee:ae:9e:51:94:fa:d4:e5:91:76:84:d5:35:88:76:f6:8c:
         cb:d9:04:6e:f3:0f:56:03:ae:ee:99:52:e6:20:da:f2:44:b0:
         d6:6f:b8:c8:ef:ed:30:7c:c8:06:7b:78:df:58:0e:ea:20:6a:
         fe:d9:cd:09:e5:03:9d:26:10:5e:52:ce:4e:d8:9e:6e:fe:1f:
         6e:ee:6f:f3:72:e9:b2:82:1e:c5:a9:0d:39:f7:48:b7:94:08:
         e8:46:8e:a4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpoJgve230OQpOId4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc2N2VhMTYtNzJiNC00MDJhLTliMmYtNzU4M2ZlMzkw
YmI3MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
OWQzNjlhNDktNzAyMi00OGEzLTk4NzktZTJiNDNjOThiNzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb+J5MdY0+Iccltbdt03gltHdBvJzGLa6o1Y
aDOj6pOUG/hsQXlQENwr2Ahjnj2Dtnepr7WRbHfqrdm7OiaKOUl8a04EpMspszF7
gDybMXHoGAThW7w+BDv1We9MwbGs/Sj86jdwHSr5GbV9MWYXCjQhUWP3RBp71VWI
YrycQ6E7ZZ+0xz/7fmRPem92ibNsWi2wFgqFZ34iqv8+mbqUXWSKKxpDjLLOJRc+
QJExavD5Rz2eK5BHDgVLC+WlPVxsazGOaBO3H5/zg564/e2SR+lpi45nWOEfIZq7
MHNnbsq4GmwLPy5fCLTfQegj7seiXDZW8v8ll8Y47bvGbfGCJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOCp/QO0MOCjdsta3QL1BAoVhhqlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3
ZWExNi03MmI0LTQwMmEtOWIyZi03NTgzZmUzOTBiYjcvYzc2MGMyMDktYTQ4Ny0z
MmNlLTg2NGYtNTExNTQwZGY4YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc2N2VhMTYtNzJiNC00MDJhLTli
MmYtNzU4M2ZlMzkwYmI3L2Y3NjdlYTE2LTcyYjQtNDAyYS05YjJmLTc1ODNmZTM5
MGJiNy5jcmwwHwYDVR0jBBgwFoAUesYuc/uCJzFiX8COdvsgVaYFuSkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3ZWExNi03MmI0LTQwMmEtOWIyZi03NTgz
ZmUzOTBiYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB1Q/8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAodR8lbWB/TgwMUXtA55s9B3TFaIRT5lXdiMCs+qWiTgzKcBisj
Ry+A8d/F6SjbDwJFUzggrw4vk1AsnG90B2eSosRNR4pU6TTMjnRV6KWUpOpktykX
Ts7Oynj8mr5rb3MIBhIrLbPbfX5bUZxAvzeYJ+ZM4TS9elwTj7Lp6udy8NMbzspS
mwRswEZAblzElZheKg6m72t8rhWhNLWYeblf93furp5RlPrU5ZF2hNU1iHb2jMvZ
BG7zD1YDru6ZUuYg2vJEsNZvuMjv7TB8yAZ7eN9YDuogav7ZzQnlA50mEF5Szk7Y
nm7+H27ub/Ny6bKCHsWpDTn3SLeUCOhGjqQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:37:54 2025 by rpki-client