Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/ed97d62b-dcef-3990-931f-0c5246d3dee1.roa
File:                     ed97d62b-dcef-3990-931f-0c5246d3dee1.roa (raw, json)
Hash identifier:          z2Pxh2IXIdwiwy+QcykcgXnwNb9B0Up9LNRMM6uvPFw=
Subject key identifier:   C0:A6:24:A5:AC:6C:9C:5A:35:1C:6D:CB:C5:9A:23:78:15:2D:91:98
Certificate issuer:       /CN=dc14ffca-b55f-4482-beb2-b5748b542177
Certificate serial:       010D0C9F4328584A46A5A372256D79934B1009F8
Authority key identifier: C0:9D:37:C3:68:54:43:73:86:52:DB:6B:80:9B:05:DB:C0:96:72:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/ed97d62b-dcef-3990-931f-0c5246d3dee1.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     63414
IP address blocks:        2606:1680::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/dc14ffca-b55f-4482-beb2-b5748b542177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/dc14ffca-b55f-4482-beb2-b5748b542177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:a3:72:25:6d:79:93:4b:10:09:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc14ffca-b55f-4482-beb2-b5748b542177
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=9072cff8-6b8c-45a7-904a-4551f1e78bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:83:c9:19:fc:0c:71:e0:e2:13:74:48:06:
                    ad:8d:0c:b0:1e:e1:05:fe:ee:af:36:52:a2:d4:8f:
                    06:8b:8c:db:14:e6:c6:ac:16:22:0c:3a:05:30:f6:
                    c8:cc:34:53:e0:45:65:83:58:94:92:cb:28:70:1b:
                    c1:1e:89:24:94:57:34:39:0e:c0:fb:6e:0f:a2:83:
                    5d:98:11:48:25:2a:a9:ca:e6:d1:48:38:a9:54:76:
                    e7:bc:e3:46:53:01:94:6a:8f:e7:f2:73:ab:8d:9c:
                    19:ae:cd:43:05:d5:a2:b8:d6:ab:c9:b5:64:1a:75:
                    06:6b:0c:44:a6:7b:9b:27:15:de:a8:47:8a:ae:bf:
                    77:50:1b:57:94:12:26:78:7f:80:c9:05:e0:e1:52:
                    3e:b7:9c:c5:db:0a:b3:f4:3a:fb:08:7f:c3:dc:94:
                    80:9c:bd:d7:8a:6c:89:15:63:17:e9:ea:d2:10:fd:
                    0f:21:ba:9f:53:40:c5:eb:54:c7:ba:b4:ea:12:6e:
                    66:07:36:96:20:bf:ab:98:e9:a9:50:c4:08:33:61:
                    5d:bd:7b:83:45:04:cb:f7:00:6e:ba:2d:74:d9:96:
                    a4:37:bc:fc:05:ce:77:ff:51:57:a2:95:5c:1f:9c:
                    68:3f:5e:3e:43:45:fa:fb:08:13:99:6c:c3:d1:af:
                    aa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A6:24:A5:AC:6C:9C:5A:35:1C:6D:CB:C5:9A:23:78:15:2D:91:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/ed97d62b-dcef-3990-931f-0c5246d3dee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/dc14ffca-b55f-4482-beb2-b5748b542177.crl

            X509v3 Authority Key Identifier:
                keyid:C0:9D:37:C3:68:54:43:73:86:52:DB:6B:80:9B:05:DB:C0:96:72:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:7c:68:f8:5e:13:ef:6d:14:35:ca:99:9a:26:47:94:d2:
         92:02:39:ae:94:82:55:84:22:ee:92:18:6a:04:11:29:2c:4b:
         e3:be:28:35:d7:e1:23:d0:db:be:90:c3:fd:69:83:6d:85:2c:
         2e:f7:2b:71:5d:b8:8f:8d:83:b5:1b:f2:4e:f7:32:2f:55:e1:
         45:0d:0b:cc:31:13:df:d7:d7:ad:dd:ce:c8:ac:3b:f2:8d:31:
         cd:7f:c4:22:dc:d5:15:45:91:7b:a4:d3:63:fe:da:db:c4:e3:
         d6:09:1a:70:d1:24:eb:8d:2d:aa:25:e8:a1:5e:5a:6c:da:70:
         ae:46:68:b1:2a:e2:9d:8f:c7:c6:37:85:80:40:e4:78:f6:a8:
         2a:16:04:99:93:44:e7:33:5d:b2:db:56:a1:44:b8:f5:cb:34:
         61:e7:21:e4:b2:75:6b:70:85:30:2d:71:6a:5c:e5:89:bd:33:
         2d:c4:3d:85:ce:0e:6d:98:7d:f3:86:dd:d9:71:75:79:39:0f:
         fb:75:d3:11:15:a2:62:dd:82:f6:0d:81:f0:dd:8d:c8:60:77:
         d3:d4:c7:22:d6:a8:9b:de:8e:a1:e0:69:1c:89:20:2d:0d:aa:
         92:76:74:ed:d1:19:8d:24:a8:6f:2e:23:69:a6:38:db:7d:45:
         31:44:ec:1e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpGpaNyJW15k0sQCfgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGMxNGZmY2EtYjU1Zi00NDgyLWJlYjItYjU3NDhiNTQy
MTc3MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk
OTA3MmNmZjgtNmI4Yy00NWE3LTkwNGEtNDU1MWYxZTc4YmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfCDyRn8DHHg4hN0SAatjQywHuEF/u6vNlKi
1I8Gi4zbFObGrBYiDDoFMPbIzDRT4EVlg1iUkssocBvBHokklFc0OQ7A+24PooNd
mBFIJSqpyubRSDipVHbnvONGUwGUao/n8nOrjZwZrs1DBdWiuNarybVkGnUGawxE
pnubJxXeqEeKrr93UBtXlBImeH+AyQXg4VI+t5zF2wqz9Dr7CH/D3JSAnL3XimyJ
FWMX6erSEP0PIbqfU0DF61THurTqEm5mBzaWIL+rmOmpUMQIM2FdvXuDRQTL9wBu
ui102ZakN7z8Bc53/1FXopVcH5xoP14+Q0X6+wgTmWzD0a+qVwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMCmJKWsbJxaNRxty8WaI3gVLZGYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYzE0
ZmZjYS1iNTVmLTQ0ODItYmViMi1iNTc0OGI1NDIxNzcvZWQ5N2Q2MmItZGNlZi0z
OTkwLTkzMWYtMGM1MjQ2ZDNkZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGMxNGZmY2EtYjU1Zi00NDgyLWJl
YjItYjU3NDhiNTQyMTc3L2RjMTRmZmNhLWI1NWYtNDQ4Mi1iZWIyLWI1NzQ4YjU0
MjE3Ny5jcmwwHwYDVR0jBBgwFoAUwJ03w2hUQ3OGUttrgJsF28CWcq0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYzE0ZmZjYS1iNTVmLTQ0ODItYmViMi1iNTc0
OGI1NDIxNzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYWgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBY+Hxo+F4T720UNcqZmiZHlNKSAjmulIJVhCLukhhqBBEpLEvjvig1
1+Ej0Nu+kMP9aYNthSwu9ytxXbiPjYO1G/JO9zIvVeFFDQvMMRPf19et3c7IrDvy
jTHNf8Qi3NUVRZF7pNNj/trbxOPWCRpw0STrjS2qJeihXlps2nCuRmixKuKdj8fG
N4WAQOR49qgqFgSZk0TnM12y21ahRLj1yzRh5yHksnVrcIUwLXFqXOWJvTMtxD2F
zg5tmH3zht3ZcXV5OQ/7ddMRFaJi3YL2DYHw3Y3IYHfT1Mci1qib3o6h4GkciSAt
DaqSdnTt0RmNJKhvLiNppjjbfUUxROwe
-----END CERTIFICATE-----
Generated at Tue Jul 1 14:05:28 2025 by rpki-client