Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa
File:                     deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa (raw, json)
Hash identifier:          pDCPS16F0Au0oKk12Qc51IsqqI/pQ1PRA5Fe8+3vwZ4=
Subject key identifier:   D9:AD:0A:A6:FD:30:44:E6:27:4E:2E:15:8A:7E:22:EB:31:DB:AC:80
Certificate issuer:       /CN=1fb001d4-3a2b-436f-a572-51822a315945
Certificate serial:       010D0C9F4328584AB220C4E2AF944558911A0280
Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     395363
IP address blocks:        2620:129:6020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:c4:e2:af:94:45:58:91:1a:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=67753a45-2734-4ada-8cbb-70026c73ed54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:06:c5:85:6e:67:04:1d:2a:20:f4:78:fa:
                    eb:fb:62:a5:e0:81:07:a1:6e:31:97:8e:ca:3f:1a:
                    46:68:c5:48:ea:32:f2:8f:ed:0a:89:75:8a:14:ec:
                    6e:e3:4a:8a:9e:ca:bd:66:49:00:47:49:92:18:ab:
                    81:b9:f3:e6:9c:6c:7f:ce:82:d4:8e:b1:ba:06:d2:
                    75:c0:58:d1:47:a7:29:16:80:bd:bc:68:b7:0b:4f:
                    57:20:d8:4b:5c:17:4f:58:99:71:c9:e5:5f:ac:ac:
                    b5:89:52:02:4d:df:dc:4d:2e:6a:59:05:86:04:6a:
                    2a:5d:0a:53:f4:3e:cb:e2:62:0a:e2:75:62:3f:bb:
                    36:fc:c9:ff:fc:90:50:22:9e:8a:27:29:ea:02:88:
                    1d:09:18:01:4c:e7:9d:87:dd:db:11:de:e0:18:4b:
                    e4:95:4f:dc:b2:9a:c7:af:3e:a2:5d:a7:81:9d:3a:
                    23:af:e9:3f:64:95:b3:ec:d1:27:e1:c5:e5:7f:98:
                    a6:4c:db:8f:cc:81:52:c1:98:b7:5f:d5:c2:a7:62:
                    e3:bb:57:fc:64:38:94:22:4d:81:9a:42:60:f2:d2:
                    eb:b9:e1:bd:58:60:09:fe:7a:9d:0b:2b:ea:6a:0e:
                    62:f8:ed:ec:6d:b5:7d:92:aa:07:8a:0c:80:c4:03:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AD:0A:A6:FD:30:44:E6:27:4E:2E:15:8A:7E:22:EB:31:DB:AC:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/deb47122-10ca-3a44-aa16-cbc9b61afe4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl

            X509v3 Authority Key Identifier:
                keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129:6020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b3:c8:b8:3e:c9:78:2f:7f:04:41:ee:4f:15:32:cd:c8:91:
         f1:65:90:69:26:7d:e4:73:2c:48:fa:a1:fa:53:25:da:aa:9f:
         e5:12:47:da:92:26:ec:65:9f:86:a6:53:d6:65:80:01:76:10:
         5d:9d:2f:88:bf:04:56:16:ca:e6:38:98:2a:4f:70:cc:06:c0:
         09:8e:b7:37:4a:75:30:ff:2a:25:73:42:78:77:1c:9c:9e:fd:
         50:50:bb:f4:37:70:94:08:21:db:b7:fd:a7:f6:c4:8c:58:1a:
         2b:db:ac:75:a9:d0:0d:93:d5:bb:78:70:d8:9c:16:e0:dc:98:
         c7:d3:ef:74:66:bc:60:7c:31:2b:d7:54:00:ea:06:ea:b7:3c:
         58:2d:12:a5:5d:a7:40:d0:e6:a8:5b:58:a4:67:05:c3:f2:24:
         1d:8c:72:56:b3:f8:cd:0d:a0:11:a8:30:81:97:f3:88:32:b7:
         4b:61:42:e7:19:89:e8:52:47:b2:b1:d9:31:06:bd:2a:af:90:
         78:48:d2:cb:2b:d3:bb:74:13:ed:10:09:78:ac:96:f1:90:75:
         bd:3f:b2:45:86:fd:35:df:4f:ee:12:ac:64:74:36:b9:e5:c9:
         98:81:2e:fa:2e:f5:c0:9c:2d:a2:33:30:de:5f:4d:e0:32:5c:
         45:3f:26:ad
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqyIMTir5RFWJEaAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1
OTQ1MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
Njc3NTNhNDUtMjczNC00YWRhLThjYmItNzAwMjZjNzNlZDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCgGxYVuZwQdKiD0ePrr+2Kl4IEHoW4xl47K
PxpGaMVI6jLyj+0KiXWKFOxu40qKnsq9ZkkAR0mSGKuBufPmnGx/zoLUjrG6BtJ1
wFjRR6cpFoC9vGi3C09XINhLXBdPWJlxyeVfrKy1iVICTd/cTS5qWQWGBGoqXQpT
9D7L4mIK4nViP7s2/Mn//JBQIp6KJynqAogdCRgBTOedh93bEd7gGEvklU/csprH
rz6iXaeBnTojr+k/ZJWz7NEn4cXlf5imTNuPzIFSwZi3X9XCp2Lju1f8ZDiUIk2B
mkJg8tLrueG9WGAJ/nqdCyvqag5i+O3sbbV9kqoHigyAxANlgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNmtCqb9METmJ04uFYp+Iusx26yAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw
MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvZGViNDcxMjItMTBjYS0z
YTQ0LWFhMTYtY2JjOWI2MWFmZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1
NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx
NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy
MmEzMTU5NDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKWAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJqzyLg+yXgvfwRB7k8VMs3IkfFlkGkmfeRzLEj6ofpTJdqqn+US
R9qSJuxln4amU9ZlgAF2EF2dL4i/BFYWyuY4mCpPcMwGwAmOtzdKdTD/KiVzQnh3
HJye/VBQu/Q3cJQIIdu3/af2xIxYGivbrHWp0A2T1bt4cNicFuDcmMfT73RmvGB8
MSvXVADqBuq3PFgtEqVdp0DQ5qhbWKRnBcPyJB2Mclaz+M0NoBGoMIGX84gyt0th
QucZiehSR7Kx2TEGvSqvkHhI0ssr07t0E+0QCXislvGQdb0/skWG/TXfT+4SrGR0
NrnlyZiBLvou9cCcLaIzMN5fTeAyXEU/Jq0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:42 2025 by rpki-client