Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/31ca2f3b-bbca-3482-91af-458a6570d0a8.roa
File:                     31ca2f3b-bbca-3482-91af-458a6570d0a8.roa (raw, json)
Hash identifier:          BU3galzkm6ODUdSs7Ak0q3vI9zKEQdb8qK0HUIYuFgM=
Subject key identifier:   92:DE:73:6B:6F:A6:D5:5F:59:C0:9C:5C:46:D5:9A:9E:28:3E:86:C3
Certificate issuer:       /CN=741b6a9d-4a31-4062-8784-4f1a436ab121
Certificate serial:       010D0C9F4328584A51D069F29C9ECA19BE627800
Authority key identifier: B3:FC:7F:0C:CA:DC:F9:E4:0E:B5:62:6C:EB:65:03:14:8C:02:CF:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/31ca2f3b-bbca-3482-91af-458a6570d0a8.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     400478
IP address blocks:        2620:b1:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:69:f2:9c:9e:ca:19:be:62:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741b6a9d-4a31-4062-8784-4f1a436ab121
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=1bce7672-7e4b-4330-a1c2-9b65a6644e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8c:52:93:b8:10:0e:2f:28:2a:e3:71:73:db:
                    1c:ad:41:8b:4f:d8:de:1e:7d:26:11:b2:a2:c3:9d:
                    5d:59:a2:54:f9:32:34:82:b0:7e:6a:23:77:ed:bd:
                    fe:f1:92:f2:5b:14:bf:75:b1:8f:f8:37:38:7e:7e:
                    73:8a:94:5f:14:9b:8f:c6:69:e6:36:3f:1e:bb:63:
                    2a:66:90:3a:a1:27:2d:c6:44:87:7c:c2:ac:b3:58:
                    09:bf:79:9e:c8:03:9f:b2:25:68:1e:fa:c5:04:4a:
                    0e:48:52:36:37:fd:6d:98:b8:50:95:79:37:a7:f1:
                    15:c4:87:f8:f0:09:59:77:c3:97:b3:f2:98:08:d4:
                    c3:c5:9b:86:47:9d:d7:70:13:55:2f:be:b3:95:c0:
                    d4:21:c6:66:8f:83:44:c2:25:7b:14:4b:02:a5:1b:
                    fb:76:41:5b:d5:4e:54:70:b5:fd:92:e3:7e:aa:ff:
                    6f:59:cd:58:88:04:e2:0f:04:1b:60:99:6d:aa:39:
                    7a:52:9e:96:48:27:8c:12:40:33:a0:cc:37:89:e9:
                    71:2e:54:c6:33:b4:61:bc:6a:50:64:6f:34:bf:4a:
                    e5:d3:3f:ef:56:63:cc:f1:3a:4c:06:11:80:8c:8e:
                    ad:b1:98:e4:02:e9:bf:8a:5c:f4:2b:b5:bb:f8:be:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DE:73:6B:6F:A6:D5:5F:59:C0:9C:5C:46:D5:9A:9E:28:3E:86:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/31ca2f3b-bbca-3482-91af-458a6570d0a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121/741b6a9d-4a31-4062-8784-4f1a436ab121.crl

            X509v3 Authority Key Identifier:
                keyid:B3:FC:7F:0C:CA:DC:F9:E4:0E:B5:62:6C:EB:65:03:14:8C:02:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/741b6a9d-4a31-4062-8784-4f1a436ab121.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b1:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:39:81:bb:bf:86:a4:34:56:68:8f:91:4e:0e:85:5f:7f:94:
         9e:37:73:5a:b5:34:99:42:63:60:01:90:8d:b0:82:b2:c1:0c:
         9d:bd:73:ad:5a:92:48:90:67:8d:8a:b5:a4:66:e7:58:3d:46:
         ab:4a:c1:9c:8d:18:6d:6c:bb:9b:44:4e:22:bd:e0:29:8b:a1:
         ec:8d:c7:66:18:5b:5c:00:e9:95:70:00:9b:1a:bf:e2:f3:ff:
         99:76:5d:da:a8:f0:98:a2:ab:84:c9:99:cd:f7:80:9b:cc:7d:
         03:62:a0:43:bd:91:51:64:71:44:71:ea:49:a1:34:24:5f:cd:
         70:74:c6:c1:28:c4:25:d8:81:3f:dd:1b:f9:f0:61:dd:8a:28:
         cb:23:f1:15:55:2f:bf:4c:b3:6f:b2:0e:0f:5d:74:57:15:bf:
         57:ff:90:78:e7:69:8b:4e:7a:a8:5a:be:05:14:66:48:ae:09:
         1f:8d:f8:c9:c2:9a:bc:a7:c4:ec:f1:ef:c4:bc:b1:7b:c0:70:
         d2:ac:8b:be:3d:ce:f4:11:43:bc:75:84:47:36:da:b6:c1:11:
         37:51:2a:e1:ca:d4:94:7c:aa:2a:11:72:02:7a:89:d1:88:6f:
         fd:80:c7:78:4f:6e:aa:b3:72:2a:8d:23:99:41:b6:43:5e:4a:
         84:38:0e:e9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpR0GnynJ7KGb5ieAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQxYjZhOWQtNGEzMS00MDYyLTg3ODQtNGYxYTQzNmFi
MTIxMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk
MWJjZTc2NzItN2U0Yi00MzMwLWExYzItOWI2NWE2NjQ0ZThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoxSk7gQDi8oKuNxc9scrUGLT9jeHn0mEbKi
w51dWaJU+TI0grB+aiN37b3+8ZLyWxS/dbGP+Dc4fn5zipRfFJuPxmnmNj8eu2Mq
ZpA6oSctxkSHfMKss1gJv3meyAOfsiVoHvrFBEoOSFI2N/1tmLhQlXk3p/EVxIf4
8AlZd8OXs/KYCNTDxZuGR53XcBNVL76zlcDUIcZmj4NEwiV7FEsCpRv7dkFb1U5U
cLX9kuN+qv9vWc1YiATiDwQbYJltqjl6Up6WSCeMEkAzoMw3ielxLlTGM7RhvGpQ
ZG80v0rl0z/vVmPM8TpMBhGAjI6tsZjkAum/ilz0K7W7+L6BFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJLec2tvptVfWcCcXEbVmp4oPobDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NDFi
NmE5ZC00YTMxLTQwNjItODc4NC00ZjFhNDM2YWIxMjEvMzFjYTJmM2ItYmJjYS0z
NDgyLTkxYWYtNDU4YTY1NzBkMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzQxYjZhOWQtNGEzMS00MDYyLTg3
ODQtNGYxYTQzNmFiMTIxLzc0MWI2YTlkLTRhMzEtNDA2Mi04Nzg0LTRmMWE0MzZh
YjEyMS5jcmwwHwYDVR0jBBgwFoAUs/x/DMrc+eQOtWJs62UDFIwCz08wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83NDFiNmE5ZC00YTMxLTQwNjItODc4NC00ZjFh
NDM2YWIxMjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAsWAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHQ5gbu/hqQ0VmiPkU4OhV9/lJ43c1q1NJlCY2ABkI2wgrLBDJ29
c61akkiQZ42KtaRm51g9RqtKwZyNGG1su5tETiK94CmLoeyNx2YYW1wA6ZVwAJsa
v+Lz/5l2Xdqo8Jiiq4TJmc33gJvMfQNioEO9kVFkcURx6kmhNCRfzXB0xsEoxCXY
gT/dG/nwYd2KKMsj8RVVL79Ms2+yDg9ddFcVv1f/kHjnaYtOeqhavgUUZkiuCR+N
+MnCmrynxOzx78S8sXvAcNKsi749zvQRQ7x1hEc22rbBETdRKuHK1JR8qioRcgJ6
idGIb/2Ax3hPbqqzciqNI5lBtkNeSoQ4Duk=
-----END CERTIFICATE-----
Generated at Sat Jul 5 21:30:23 2025 by rpki-client