Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/74d9292f-0232-361d-a896-b4096e43e2d4.roa
File:                     74d9292f-0232-361d-a896-b4096e43e2d4.roa (raw, json)
Hash identifier:          vkpMYitmQV6LXn66+tq2mu+RlFj7wcHad/zQYTZZ7mk=
Subject key identifier:   CA:A4:F5:36:A2:B5:8D:48:12:6A:71:D9:09:7B:8E:76:BA:5C:E4:61
Certificate issuer:       /CN=6515379e-337a-4a35-ab2d-5403f98d4c33
Certificate serial:       010D0C9F4328584AD7D1203EA8AA03395445EBC0
Authority key identifier: 8E:B2:1D:FA:52:7E:5B:64:73:FE:C4:C5:F5:A7:BF:E2:FA:47:46:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/74d9292f-0232-361d-a896-b4096e43e2d4.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     396443
IP address blocks:        2607:480::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/6515379e-337a-4a35-ab2d-5403f98d4c33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/6515379e-337a-4a35-ab2d-5403f98d4c33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:20:3e:a8:aa:03:39:54:45:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6515379e-337a-4a35-ab2d-5403f98d4c33
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=3ba79963-0392-4126-bf57-25140abc366a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:dc:76:43:f4:18:de:0a:a2:d5:22:f4:b7:
                    71:82:4b:b1:c6:b0:16:61:12:11:4c:b4:d1:b9:29:
                    62:b8:80:ea:72:34:fc:ac:d7:11:89:9b:c4:df:2c:
                    73:73:05:77:29:1c:44:e5:68:65:84:14:5c:38:ea:
                    8e:4b:3c:d3:6b:fa:c5:0b:9a:1c:72:87:16:8b:5e:
                    e0:c9:cd:1f:21:d8:51:9e:28:95:91:36:ac:b9:31:
                    7d:33:7e:2f:e2:1f:62:ad:2b:78:a0:87:c9:20:37:
                    da:4b:ee:00:22:3a:e1:6f:96:cb:4a:a5:0a:a4:26:
                    6e:c4:8d:61:29:0d:bb:50:ef:99:33:63:17:39:06:
                    72:ea:e3:b7:3a:3d:ab:c5:97:a9:71:c4:8e:28:cf:
                    15:a2:0c:a9:e3:1d:00:66:a6:ea:d2:e6:c3:a3:29:
                    b9:43:eb:df:a5:21:65:b8:b6:e4:25:45:34:17:de:
                    d8:c3:81:4c:7f:1f:db:e5:22:f8:db:52:42:34:7e:
                    91:2c:f5:96:87:c9:45:fd:4a:9b:44:40:58:37:94:
                    df:95:4b:22:14:18:17:57:ea:e6:6d:90:62:13:a4:
                    80:37:ac:e5:65:85:72:86:7a:8b:12:fb:ed:8d:12:
                    ec:b3:78:59:c3:43:c6:15:7d:22:8e:d8:c4:17:b2:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A4:F5:36:A2:B5:8D:48:12:6A:71:D9:09:7B:8E:76:BA:5C:E4:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/74d9292f-0232-361d-a896-b4096e43e2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33/6515379e-337a-4a35-ab2d-5403f98d4c33.crl

            X509v3 Authority Key Identifier:
                keyid:8E:B2:1D:FA:52:7E:5B:64:73:FE:C4:C5:F5:A7:BF:E2:FA:47:46:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6515379e-337a-4a35-ab2d-5403f98d4c33.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:e4:b7:1e:5a:e9:d8:69:f3:76:15:c3:76:8b:ab:cd:4d:
         a5:58:0d:12:0c:23:ba:c5:d9:de:2a:86:7f:ce:d1:0a:01:6f:
         b6:a4:8a:94:2c:60:f4:43:a8:9e:8e:2c:c6:c6:f5:7d:7e:a1:
         c8:51:2e:17:3c:93:a1:2e:5b:a2:ac:03:76:8d:ee:71:71:70:
         7c:33:0b:f2:8a:92:08:4f:8a:a5:4b:d8:83:a0:2a:b2:87:10:
         fa:4f:7a:9d:65:e0:db:9b:d2:d3:41:2d:5d:9f:40:3c:32:8f:
         7c:74:95:12:98:87:59:f1:06:53:a8:0a:64:54:c0:38:ee:b8:
         1c:6a:a7:25:9b:43:0f:4a:9d:e1:88:d7:bd:5a:8e:db:0b:c4:
         a6:64:86:a5:99:5d:73:0f:3d:83:52:b4:49:7e:e0:04:8c:05:
         ef:a7:d3:c3:db:d8:df:63:10:07:cc:58:10:2b:b1:9c:e1:ea:
         30:f1:25:21:9d:f3:96:0c:3b:f5:62:58:1f:13:61:4f:70:3b:
         a0:c4:35:25:7d:77:4a:b4:de:de:bc:c8:19:16:ff:49:6a:2d:
         04:f7:68:3d:b8:3b:a4:c0:22:57:9e:d7:8e:e2:e9:d7:7a:a7:
         18:03:1a:48:35:68:28:9c:71:53:fa:b6:7e:68:61:45:1e:2b:
         b9:09:06:9b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErX0SA+qKoDOVRF68AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjUxNTM3OWUtMzM3YS00YTM1LWFiMmQtNTQwM2Y5OGQ0
YzMzMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
M2JhNzk5NjMtMDM5Mi00MTI2LWJmNTctMjUxNDBhYmMzNjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho7cdkP0GN4KotUi9LdxgkuxxrAWYRIRTLTR
uSliuIDqcjT8rNcRiZvE3yxzcwV3KRxE5WhlhBRcOOqOSzzTa/rFC5occocWi17g
yc0fIdhRniiVkTasuTF9M34v4h9irSt4oIfJIDfaS+4AIjrhb5bLSqUKpCZuxI1h
KQ27UO+ZM2MXOQZy6uO3Oj2rxZepccSOKM8Vogyp4x0AZqbq0ubDoym5Q+vfpSFl
uLbkJUU0F97Yw4FMfx/b5SL421JCNH6RLPWWh8lF/UqbREBYN5TflUsiFBgXV+rm
bZBiE6SAN6zlZYVyhnqLEvvtjRLss3hZw0PGFX0ijtjEF7KjjQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMqk9TaitY1IEmpx2Ql7jna6XORhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTE1
Mzc5ZS0zMzdhLTRhMzUtYWIyZC01NDAzZjk4ZDRjMzMvNzRkOTI5MmYtMDIzMi0z
NjFkLWE4OTYtYjQwOTZlNDNlMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjUxNTM3OWUtMzM3YS00YTM1LWFi
MmQtNTQwM2Y5OGQ0YzMzLzY1MTUzNzllLTMzN2EtNGEzNS1hYjJkLTU0MDNmOThk
NGMzMy5jcmwwHwYDVR0jBBgwFoAUjrId+lJ+W2Rz/sTF9ae/4vpHRiQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTE1Mzc5ZS0zMzdhLTRhMzUtYWIyZC01NDAz
Zjk4ZDRjMzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcEgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB6bOS3Hlrp2GnzdhXDdourzU2lWA0SDCO6xdneKoZ/ztEKAW+2pIqU
LGD0Q6iejizGxvV9fqHIUS4XPJOhLluirAN2je5xcXB8MwvyipIIT4qlS9iDoCqy
hxD6T3qdZeDbm9LTQS1dn0A8Mo98dJUSmIdZ8QZTqApkVMA47rgcaqclm0MPSp3h
iNe9Wo7bC8SmZIalmV1zDz2DUrRJfuAEjAXvp9PD29jfYxAHzFgQK7Gc4eow8SUh
nfOWDDv1YlgfE2FPcDugxDUlfXdKtN7evMgZFv9Jai0E92g9uDukwCJXnteO4unX
eqcYAxpINWgonHFT+rZ+aGFFHiu5CQab
-----END CERTIFICATE-----
Generated at Sun Aug 24 11:01:34 2025 by rpki-client