Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa
File:                     7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa (raw, json)
Hash identifier:          w6IcyxF+jYnnYMLf9v42PMjQt2x40YNXluNz7dlo2MU=
Subject key identifier:   DB:B9:B7:84:72:10:A0:9E:B6:05:99:64:9A:76:E1:37:D3:37:65:C3
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584A49705EB4705FEE7B8230BD80
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     140096
IP address blocks:        2604:d6c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:5e:b4:70:5f:ee:7b:82:30:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=ac39bee9-88ba-4dec-afc3-0847f56db01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:3d:a6:16:e7:e5:3f:3d:c6:ce:57:32:6d:
                    9e:fc:94:64:eb:e5:0c:a3:4c:25:9b:fd:0d:fe:12:
                    88:f5:b0:4a:f8:c4:c4:48:e4:af:fd:a4:4a:2a:5b:
                    93:a3:ce:91:99:69:14:7b:66:ab:a0:46:e0:8e:b7:
                    05:88:1d:0e:a8:08:91:24:6b:96:42:18:8b:f8:b4:
                    e0:13:02:d0:51:1f:d5:8f:9f:33:5d:79:e3:fd:53:
                    ea:95:45:7d:d7:c1:9a:08:e4:9a:0c:2c:5f:2a:6d:
                    dd:e2:c9:71:ae:9f:54:2b:25:6a:13:b9:2c:de:b6:
                    78:72:df:69:22:b3:e5:a2:a2:47:4f:cc:25:7a:99:
                    7e:5c:bf:14:19:f1:81:e1:dd:59:dc:78:a4:50:16:
                    64:af:48:ad:1b:6c:01:45:8b:ec:a3:01:bb:74:24:
                    de:a1:8f:e2:87:60:84:2c:f7:de:a1:91:b0:bf:20:
                    4a:3b:85:06:99:b2:0c:b7:8b:4d:a7:91:b5:e4:a3:
                    6b:5c:cb:11:11:5b:69:c4:d8:cc:06:42:b4:40:21:
                    8b:6d:22:78:a7:77:59:17:2f:35:62:12:1b:b0:8c:
                    03:a8:8f:2f:35:28:5c:23:66:b2:8a:eb:a9:4f:ff:
                    90:30:9e:d6:2a:0c:10:ca:d0:4f:9b:9b:71:b7:41:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B9:B7:84:72:10:A0:9E:B6:05:99:64:9A:76:E1:37:D3:37:65:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6a:7d:02:83:9d:52:ea:74:92:c3:e9:5c:96:51:eb:27:5f:
         41:20:94:b0:28:87:0b:b1:e8:00:2e:09:62:0e:bd:b7:4f:2c:
         49:03:f3:11:f8:84:4d:51:cf:c0:0c:2a:86:7b:1c:ff:3a:05:
         36:0b:91:02:e3:41:e2:37:76:42:dc:f5:7c:b2:ca:ee:7f:c0:
         17:59:c3:6d:71:db:ac:4e:1e:2c:9a:fc:2f:21:d0:23:ec:14:
         2e:0b:ff:64:2f:69:f2:cf:ae:d6:e3:91:d0:e7:39:0d:c4:b4:
         72:e2:b3:91:68:d5:eb:c1:39:9a:f3:54:83:58:d3:8f:f6:6b:
         7b:1a:5a:e3:cb:6e:28:40:e2:15:93:e6:fa:23:89:9c:b0:63:
         6d:a7:42:4b:a4:a2:f5:cb:d0:02:1b:0e:95:0d:50:6b:59:c7:
         3a:c5:43:a0:b0:57:de:c1:40:04:9b:4e:ef:5f:a9:c0:71:4c:
         ca:0a:d9:c1:6e:01:6f:a8:6b:79:99:64:18:19:a1:f8:25:c3:
         1d:f8:c2:ff:af:4a:4c:37:45:69:69:e4:29:4a:b4:d1:eb:0a:
         5c:f2:c6:28:a4:75:5c:7f:b1:b0:9e:2b:07:e2:f1:7e:f2:dd:
         a5:b2:9c:6c:c4:11:e8:92:56:40:43:33:b5:79:59:bf:5b:49:
         3d:d4:85:27
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpJcF60cF/ue4IwvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk
YWMzOWJlZTktODhiYS00ZGVjLWFmYzMtMDg0N2Y1NmRiMDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtws9phbn5T89xs5XMm2e/JRk6+UMo0wlm/0N
/hKI9bBK+MTESOSv/aRKKluTo86RmWkUe2aroEbgjrcFiB0OqAiRJGuWQhiL+LTg
EwLQUR/Vj58zXXnj/VPqlUV918GaCOSaDCxfKm3d4slxrp9UKyVqE7ks3rZ4ct9p
IrPloqJHT8wlepl+XL8UGfGB4d1Z3HikUBZkr0itG2wBRYvsowG7dCTeoY/ih2CE
LPfeoZGwvyBKO4UGmbIMt4tNp5G15KNrXMsREVtpxNjMBkK0QCGLbSJ4p3dZFy81
YhIbsIwDqI8vNShcI2ayiuupT/+QMJ7WKgwQytBPm5txt0G4EwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNu5t4RyEKCetgWZZJp24TfTN2XDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvN2UzNDE0ZTItZjFiNi0z
Yzk0LWJlOWQtMTk2YzU2YjBkOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTWwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBsan0Cg51S6nSSw+lcllHrJ19BIJSwKIcLsegALgliDr23TyxJA/MR
+IRNUc/ADCqGexz/OgU2C5EC40HiN3ZC3PV8ssruf8AXWcNtcdusTh4smvwvIdAj
7BQuC/9kL2nyz67W45HQ5zkNxLRy4rORaNXrwTma81SDWNOP9mt7Glrjy24oQOIV
k+b6I4mcsGNtp0JLpKL1y9ACGw6VDVBrWcc6xUOgsFfewUAEm07vX6nAcUzKCtnB
bgFvqGt5mWQYGaH4JcMd+ML/r0pMN0VpaeQpSrTR6wpc8sYopHVcf7GwnisH4vF+
8t2lspxsxBHoklZAQzO1eVm/W0k91IUn
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:02:26 2025 by rpki-client