Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/da17a72a-9032-3c28-9fe6-ff62e33999d6.roa
File:                     da17a72a-9032-3c28-9fe6-ff62e33999d6.roa (raw, json)
Hash identifier:          h3JP3BwJYRM62/g8AqZfa6X/V+z+EGvoHij2tBtNi3Q=
Subject key identifier:   69:49:38:9A:8E:00:81:52:6E:F9:A1:37:54:AE:A0:77:94:1C:54:65
Certificate issuer:       /CN=61076595-f39c-462e-b686-d3fcac2df32b
Certificate serial:       010D0C9F43285849A61F46B0085678D2CF9B0DC0
Authority key identifier: 34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/da17a72a-9032-3c28-9fe6-ff62e33999d6.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     36222
IP address blocks:        2607:a300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:46:b0:08:56:78:d2:cf:9b:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61076595-f39c-462e-b686-d3fcac2df32b
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=6ecc5f5e-96b2-4f8c-91a0-680a67c1d5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:45:54:98:27:8f:8e:e4:6d:41:08:d7:6a:40:
                    95:6a:5f:de:ac:6f:92:50:83:65:8e:a1:9d:ec:6a:
                    c2:6a:a7:11:76:85:9c:b0:3e:54:94:3e:07:be:23:
                    5d:8d:41:49:39:f9:a6:d4:d4:fc:45:cd:77:13:62:
                    ea:a9:15:d9:60:50:1b:68:83:71:d8:0f:91:13:30:
                    27:9c:38:05:83:d7:66:1d:86:4b:60:a9:56:0b:7d:
                    5e:43:ec:3a:c9:5e:a9:56:ce:1a:72:8f:a0:52:99:
                    ac:56:64:a7:21:f6:a5:f9:9c:40:42:1c:bc:18:70:
                    86:da:ff:66:ce:40:9f:6e:d6:0a:90:c5:6c:7c:b2:
                    13:d3:07:01:6c:51:71:c3:85:36:ad:d9:e9:1c:d9:
                    50:f5:15:63:05:a1:32:4e:15:1c:e9:1a:ed:9e:5b:
                    5a:98:d1:0a:46:e3:6c:c0:dd:f1:7f:81:de:35:57:
                    76:de:d4:53:ef:d7:51:df:0f:58:f6:6f:95:4c:53:
                    fa:74:08:7a:e1:4e:b3:60:5c:4e:66:9c:bd:9a:21:
                    91:05:53:b9:c5:2a:8c:4c:d9:9a:bb:15:36:ba:06:
                    ab:a0:4b:2e:4f:9f:88:34:ea:66:44:2a:a3:61:c1:
                    5a:85:f0:27:17:1c:e0:df:b6:6d:1c:44:ff:73:dc:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:38:9A:8E:00:81:52:6E:F9:A1:37:54:AE:A0:77:94:1C:54:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/da17a72a-9032-3c28-9fe6-ff62e33999d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl

            X509v3 Authority Key Identifier:
                keyid:34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f7:e5:dc:e7:dc:67:12:1f:f0:37:53:70:36:a0:d0:ef:b8:
         5f:30:b2:2b:29:a7:67:a1:2b:bc:1c:01:cf:ce:62:5d:13:e1:
         90:5b:66:f7:3d:06:23:25:dc:fe:dc:d6:c5:11:35:8a:91:db:
         17:42:9a:3f:b8:bf:dd:a3:ae:aa:10:c5:32:b6:de:9b:21:03:
         34:bb:b0:79:bd:cd:a4:93:ef:be:e9:1e:a4:3f:01:d6:36:17:
         f3:4b:2f:2f:33:b9:3b:53:27:bd:8e:68:df:9c:c3:98:56:ae:
         82:7d:8e:6f:33:a0:19:3f:28:74:0b:43:a2:7a:68:d1:b2:36:
         d0:e1:10:08:51:17:00:25:0b:c8:97:64:5f:42:d1:70:39:9d:
         11:e7:54:dd:ac:6f:a4:f6:e1:67:a6:97:58:79:3a:cb:23:cd:
         cb:4a:2e:22:eb:7d:d9:6c:c4:a1:7f:e7:22:99:00:8a:0d:e6:
         03:a7:54:3a:e4:46:a2:e5:aa:26:1a:0e:d8:94:62:47:41:bb:
         f5:f7:a4:7e:c1:21:5c:a3:90:bf:dc:f8:23:c9:39:d9:6f:88:
         da:89:aa:93:bd:05:c5:b4:1f:f6:cc:55:10:80:27:d1:a2:f2:
         10:99:1c:06:d5:37:a0:9f:de:a4:8c:96:75:b1:40:f4:b5:09:
         4e:05:6e:81
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmmH0awCFZ40s+bDcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEwNzY1OTUtZjM5Yy00NjJlLWI2ODYtZDNmY2FjMmRm
MzJiMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk
NmVjYzVmNWUtOTZiMi00ZjhjLTkxYTAtNjgwYTY3YzFkNWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikVUmCePjuRtQQjXakCVal/erG+SUINljqGd
7GrCaqcRdoWcsD5UlD4HviNdjUFJOfmm1NT8Rc13E2LqqRXZYFAbaINx2A+REzAn
nDgFg9dmHYZLYKlWC31eQ+w6yV6pVs4aco+gUpmsVmSnIfal+ZxAQhy8GHCG2v9m
zkCfbtYKkMVsfLIT0wcBbFFxw4U2rdnpHNlQ9RVjBaEyThUc6RrtnltamNEKRuNs
wN3xf4HeNVd23tRT79dR3w9Y9m+VTFP6dAh64U6zYFxOZpy9miGRBVO5xSqMTNma
uxU2ugaroEsuT5+INOpmRCqjYcFahfAnFxzg37ZtHET/c9wQWwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGlJOJqOAIFSbvmhN1SuoHeUHFRlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MTA3
NjU5NS1mMzljLTQ2MmUtYjY4Ni1kM2ZjYWMyZGYzMmIvZGExN2E3MmEtOTAzMi0z
YzI4LTlmZTYtZmY2MmUzMzk5OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjEwNzY1OTUtZjM5Yy00NjJlLWI2
ODYtZDNmY2FjMmRmMzJiLzYxMDc2NTk1LWYzOWMtNDYyZS1iNjg2LWQzZmNhYzJk
ZjMyYi5jcmwwHwYDVR0jBBgwFoAUNO0VcpY4bc2+EEbnjot1XImyFN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82MTA3NjU5NS1mMzljLTQ2MmUtYjY4Ni1kM2Zj
YWMyZGYzMmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgejADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAw9+Xc59xnEh/wN1NwNqDQ77hfMLIrKadnoSu8HAHPzmJdE+GQW2b3
PQYjJdz+3NbFETWKkdsXQpo/uL/do66qEMUytt6bIQM0u7B5vc2kk+++6R6kPwHW
NhfzSy8vM7k7Uye9jmjfnMOYVq6CfY5vM6AZPyh0C0OiemjRsjbQ4RAIURcAJQvI
l2RfQtFwOZ0R51TdrG+k9uFnppdYeTrLI83LSi4i633ZbMShf+cimQCKDeYDp1Q6
5Eai5aomGg7YlGJHQbv196R+wSFco5C/3PgjyTnZb4jaiaqTvQXFtB/2zFUQgCfR
ovIQmRwG1Tegn96kjJZ1sUD0tQlOBW6B
-----END CERTIFICATE-----
Generated at Mon May 5 18:15:45 2025 by rpki-client