Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa
File:                     c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa (raw, json)
Hash identifier:          hMKQ//aYZfZtTNhnHIQ5bNaJQj9WQU4y9m+UGbTQkJU=
Subject key identifier:   74:A6:4D:96:38:87:DE:54:4F:83:0C:94:C1:F2:66:5F:F4:12:7D:14
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F4328584A51D07654D19785C5D1DD6300
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     40401
IP address blocks:        2620:12e:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:76:54:d1:97:85:c5:d1:dd:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=2bfddac4-b5c8-48dd-8a31-501e80a55455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:10:fc:bd:71:08:ae:4d:99:96:41:ed:a3:58:
                    b2:fe:38:8a:fd:43:32:34:39:11:91:cc:ed:13:e1:
                    3d:52:2f:2e:ef:c5:35:65:27:5e:70:a0:d3:36:bb:
                    e9:63:ea:3c:01:ba:a1:2c:b7:10:05:32:7d:84:d1:
                    44:66:43:c4:a1:30:27:e3:b1:5c:79:14:be:25:5a:
                    24:65:c7:f0:38:a9:d6:3f:34:cd:f0:bc:1a:cf:5a:
                    5c:69:a0:63:dd:d7:92:15:62:9c:91:18:41:ad:66:
                    80:84:b4:65:d5:aa:66:13:41:fb:23:33:05:7a:95:
                    ee:23:b2:59:dc:f8:7d:c8:47:d5:24:40:07:17:f8:
                    57:79:ac:aa:69:c6:79:5e:1f:7e:92:88:18:2f:fc:
                    ae:92:93:e0:97:b6:55:6d:a6:5a:32:ee:2d:ac:39:
                    e4:16:4a:1d:1a:56:d9:43:80:8d:1d:7c:e0:3a:61:
                    d0:c1:83:03:ad:85:fb:27:ac:be:bc:4a:d6:b9:3a:
                    52:91:36:56:27:01:6a:4a:ad:57:1d:76:c1:4b:b6:
                    08:c0:3e:1d:f1:53:f8:27:a1:28:48:a3:53:9e:67:
                    42:a9:ff:70:ba:ac:67:38:46:ac:77:32:ca:a8:d3:
                    0f:ba:10:98:13:55:5e:98:9d:0a:d0:c7:4d:c3:2d:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A6:4D:96:38:87:DE:54:4F:83:0C:94:C1:F2:66:5F:F4:12:7D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12e:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ab:42:13:15:b2:9c:1b:65:4f:00:54:49:21:2d:dd:71:73:
         46:ef:9a:e9:7a:b3:b1:da:c0:4f:56:78:d3:71:f8:15:ee:ab:
         ed:62:93:43:78:6d:8b:f1:12:f5:aa:9f:61:fa:8b:88:20:61:
         0a:cc:3a:74:0e:fd:06:13:13:56:ac:8f:2c:98:93:5e:ec:dd:
         82:48:90:9f:d2:e3:54:8c:0e:7c:28:32:b9:6f:31:95:d2:24:
         50:3b:af:99:10:89:b3:cd:54:95:59:5f:b6:7b:bc:e0:3c:11:
         4e:4d:97:93:57:26:94:5e:57:78:7e:4a:ef:cb:12:85:fd:5d:
         15:90:15:67:81:c4:11:9d:f9:7a:b2:5a:87:66:25:6a:3b:7c:
         28:23:47:f5:f5:24:0a:5d:09:57:04:b2:46:11:af:5a:4d:41:
         7a:9b:28:da:6a:9b:05:a5:93:11:8a:f3:20:a3:ce:c8:6f:4a:
         32:36:aa:5b:de:e4:5f:06:80:fb:b6:46:e7:19:ff:30:cd:f3:
         94:49:e5:87:04:c9:a5:d5:58:3c:e3:32:0a:5b:de:c7:84:ca:
         84:62:e1:e6:95:52:93:7c:33:5f:9a:cd:ac:5d:2f:6e:2d:63:
         42:00:55:4f:a3:08:0e:32:c3:91:dd:7d:ac:4c:49:79:b6:13:
         57:97:d3:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpR0HZU0ZeFxdHdYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll
Mjg3MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk
MmJmZGRhYzQtYjVjOC00OGRkLThhMzEtNTAxZTgwYTU1NDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhD8vXEIrk2ZlkHto1iy/jiK/UMyNDkRkczt
E+E9Ui8u78U1ZSdecKDTNrvpY+o8AbqhLLcQBTJ9hNFEZkPEoTAn47FceRS+JVok
ZcfwOKnWPzTN8Lwaz1pcaaBj3deSFWKckRhBrWaAhLRl1apmE0H7IzMFepXuI7JZ
3Ph9yEfVJEAHF/hXeayqacZ5Xh9+kogYL/yukpPgl7ZVbaZaMu4trDnkFkodGlbZ
Q4CNHXzgOmHQwYMDrYX7J6y+vErWuTpSkTZWJwFqSq1XHXbBS7YIwD4d8VP4J6Eo
SKNTnmdCqf9wuqxnOEasdzLKqNMPuhCYE1VemJ0K0MdNwy1F7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHSmTZY4h95UT4MMlMHyZl/0En0UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx
M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvYzFkYmM0OGYtY2IwYi0z
YTBkLWI3MDAtODZjMTA0MTJhNDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj
NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5
ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz
YTQyOWUyODcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABLsAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEqrQhMVspwbZU8AVEkhLd1xc0bvmul6s7HawE9WeNNx+BXuq+1i
k0N4bYvxEvWqn2H6i4ggYQrMOnQO/QYTE1asjyyYk17s3YJIkJ/S41SMDnwoMrlv
MZXSJFA7r5kQibPNVJVZX7Z7vOA8EU5Nl5NXJpReV3h+Su/LEoX9XRWQFWeBxBGd
+XqyWodmJWo7fCgjR/X1JApdCVcEskYRr1pNQXqbKNpqmwWlkxGK8yCjzshvSjI2
qlve5F8GgPu2RucZ/zDN85RJ5YcEyaXVWDzjMgpb3seEyoRi4eaVUpN8M1+azaxd
L24tY0IAVU+jCA4yw5HdfaxMSXm2E1eX018=
-----END CERTIFICATE-----
Generated at Sun Jun 29 22:25:55 2025 by rpki-client