Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa
File:                     6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa (raw, json)
Hash identifier:          QqZLnPHx4IkHOFTvh/VmxbJSPTJmEaH0mvuVRr5zXAg=
Subject key identifier:   7D:9F:6B:0E:3B:4C:13:F4:FF:5D:B9:F7:80:BB:77:3F:A9:1D:54:C7
Certificate issuer:       /CN=7ea21a7b-596c-45f8-899e-6879815f26b1
Certificate serial:       010D0C9F4328584ADA9BD2AB48753886398DE400
Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        2620:85:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d2:ab:48:75:38:86:39:8d:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=df187405-2b83-49be-928d-7b6e724ef4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:0c:cb:ad:a1:a8:7e:ab:74:1b:1f:e9:52:
                    9c:ca:d5:51:42:a2:37:1c:50:b2:93:40:d2:18:c6:
                    95:03:8c:6f:e6:b0:5b:fa:1c:23:9b:8e:2c:16:a3:
                    24:3d:aa:cd:41:ab:6f:73:09:6a:5e:a3:e4:0b:96:
                    27:d4:b5:e8:ce:2c:01:87:0d:4f:7e:74:91:d2:86:
                    8b:2a:b8:d0:11:1e:e0:76:00:82:b1:5f:1c:d9:9f:
                    b7:47:d3:33:20:a2:ef:b0:77:90:40:1d:a5:67:d7:
                    db:b5:21:16:26:a3:7e:e3:13:ec:c1:95:48:00:d6:
                    85:97:5c:d6:10:bb:42:5b:36:fd:79:d3:9f:4d:75:
                    1f:c7:12:cf:4c:2b:5b:9a:a3:25:8f:9c:89:cf:5b:
                    95:30:39:8b:d5:7c:c0:14:4a:98:99:06:39:cb:4d:
                    2e:df:40:08:1e:8c:e5:e4:f3:a0:38:aa:4f:0b:52:
                    49:1c:76:86:c4:b3:63:c1:68:4a:e7:7e:75:f2:df:
                    b0:60:1e:c5:17:13:14:8b:6e:ac:ad:cd:f3:67:37:
                    a2:9b:34:89:57:29:06:00:42:df:f9:17:b9:d7:49:
                    5e:85:41:5f:71:e0:3d:8f:bd:63:67:8e:72:45:67:
                    e3:c7:e5:19:31:c9:aa:31:8a:a0:a2:5e:a5:6a:91:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9F:6B:0E:3B:4C:13:F4:FF:5D:B9:F7:80:BB:77:3F:A9:1D:54:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/6bb3dd8d-6885-3f66-9f81-d1df405388c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl

            X509v3 Authority Key Identifier:
                keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:85:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:51:77:7b:43:2c:be:aa:40:de:07:38:6f:22:22:a8:f8:78:
         fa:c5:b1:ef:91:ce:3b:59:0a:2c:4f:1a:75:b1:89:47:b2:5e:
         4b:6a:9a:68:e1:18:f6:03:3e:7d:6b:c0:85:9f:aa:99:88:86:
         ac:d7:ef:12:7e:05:00:ca:e5:94:66:1f:ad:41:14:12:7f:72:
         73:54:bb:4a:c4:4a:12:6d:59:49:90:e4:6b:e3:a1:a0:13:2c:
         09:5c:8b:2a:03:c3:3d:cb:c8:bf:2b:c0:4e:6d:7e:b4:34:0f:
         0b:3a:fa:9d:e9:09:a3:ad:d5:81:0e:0e:61:1f:b1:78:41:4e:
         89:f2:3f:1d:04:dd:fe:8b:ca:b2:46:83:8a:f4:89:e1:0d:72:
         11:31:a9:0d:1f:e9:be:30:ff:69:67:75:c4:17:52:8e:0b:e8:
         c7:f6:45:e3:30:e0:34:27:b3:e7:ff:95:66:8a:3a:56:e1:73:
         f0:4a:1c:e2:1e:b7:1f:1b:2e:b3:32:84:5b:5d:f0:13:a3:92:
         b9:e2:c6:69:27:d7:5e:61:57:3b:ff:b0:39:f7:d9:27:5e:9b:
         2a:f6:90:f5:7a:b5:1e:9b:ab:b9:3c:36:69:61:8f:86:f2:71:
         7a:b9:43:a8:4c:cd:62:a3:8a:bf:bf:61:ee:b7:85:5b:90:eb:
         b5:1a:c0:40
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEram9KrSHU4hjmN5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYy
NmIxMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk
ZGYxODc0MDUtMmI4My00OWJlLTkyOGQtN2I2ZTcyNGVmNGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1egMy62hqH6rdBsf6VKcytVRQqI3HFCyk0DS
GMaVA4xv5rBb+hwjm44sFqMkParNQatvcwlqXqPkC5Yn1LXoziwBhw1PfnSR0oaL
KrjQER7gdgCCsV8c2Z+3R9MzIKLvsHeQQB2lZ9fbtSEWJqN+4xPswZVIANaFl1zW
ELtCWzb9edOfTXUfxxLPTCtbmqMlj5yJz1uVMDmL1XzAFEqYmQY5y00u30AIHozl
5POgOKpPC1JJHHaGxLNjwWhK53518t+wYB7FFxMUi26src3zZzeimzSJVykGAELf
+Re510lehUFfceA9j71jZ45yRWfjx+UZMcmqMYqgol6lapH2SQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH2faw47TBP0/12594C7dz+pHVTHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEy
MWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvNmJiM2RkOGQtNjg4NS0z
ZjY2LTlmODEtZDFkZjQwNTM4OGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2VhMjFhN2ItNTk2Yy00NWY4LTg5
OWUtNjg3OTgxNWYyNmIxLzdlYTIxYTdiLTU5NmMtNDVmOC04OTllLTY4Nzk4MTVm
MjZiMS5jcmwwHwYDVR0jBBgwFoAUWNXVMusQAMS/ihkzzuqjhi139KkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5
ODE1ZjI2YjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhaAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABFRd3tDLL6qQN4HOG8iIqj4ePrFse+RzjtZCixPGnWxiUeyXktq
mmjhGPYDPn1rwIWfqpmIhqzX7xJ+BQDK5ZRmH61BFBJ/cnNUu0rEShJtWUmQ5Gvj
oaATLAlciyoDwz3LyL8rwE5tfrQ0Dws6+p3pCaOt1YEODmEfsXhBTonyPx0E3f6L
yrJGg4r0ieENchExqQ0f6b4w/2lndcQXUo4L6Mf2ReMw4DQns+f/lWaKOlbhc/BK
HOIetx8bLrMyhFtd8BOjkrnixmkn115hVzv/sDn32Sdemyr2kPV6tR6bq7k8Nmlh
j4bycXq5Q6hMzWKjir+/Ye63hVuQ67UawEA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 08:16:40 2025 by rpki-client