Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1b7a70ec-0147-37c9-bc21-b4d7d24cb5d4.roa
File:                     1b7a70ec-0147-37c9-bc21-b4d7d24cb5d4.roa (raw, json)
Hash identifier:          gFUFkwLeklv3MUaGZ/dhcP236Zzyh7yydAt3lYo6xJI=
Subject key identifier:   CE:20:07:CB:ED:50:66:9E:BC:DC:BD:2C:91:D0:5A:91:55:72:DE:1C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849CBCFA4EF7AF06E4C77919800
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1b7a70ec-0147-37c9-bc21-b4d7d24cb5d4.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     0
IP address blocks:        2602:107:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a4:ef:7a:f0:6e:4c:77:91:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=446efc77-83ed-421a-9380-ab398b1a3e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:07:91:2c:06:32:0d:ab:dc:5d:fb:47:80:
                    b2:dd:87:6e:c0:2e:03:4e:b9:3b:47:08:80:47:36:
                    33:ae:8c:45:e1:4c:77:16:1c:e2:32:fc:77:9d:a4:
                    3e:24:30:9b:66:80:e8:52:a1:76:12:f0:a8:73:ae:
                    27:68:63:20:f0:19:7f:c4:93:bb:bd:e8:74:6d:74:
                    99:1e:39:22:a6:94:91:b1:6b:55:44:3a:87:5d:b6:
                    5c:10:57:cd:57:e7:7e:05:85:8a:e1:d4:06:b7:5d:
                    5d:23:dc:8a:38:0d:e1:e5:61:36:5c:6e:b5:58:1b:
                    b4:f2:0c:9a:04:a2:7e:6d:8d:66:d2:c4:89:73:a6:
                    07:a1:17:0a:42:1c:9b:94:a9:bc:bb:a4:f9:f6:2b:
                    c4:4a:02:cf:7c:b6:c1:54:41:fa:f6:a7:70:d7:b7:
                    e7:ef:40:e0:aa:42:21:86:b0:8f:8d:71:43:54:57:
                    ec:c2:7c:6c:15:a9:f9:d0:0a:9c:3a:e9:11:d6:0b:
                    46:49:ae:32:fa:bf:2f:f2:fa:33:c9:b3:62:2e:5d:
                    46:c0:be:c8:f3:e1:73:d4:6c:6d:dd:b6:02:0f:11:
                    d8:1e:25:dc:21:fb:0e:8b:84:f0:68:db:f9:39:1a:
                    af:46:b0:40:88:4e:4f:0c:59:6c:ea:59:8d:ed:68:
                    a4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:20:07:CB:ED:50:66:9E:BC:DC:BD:2C:91:D0:5A:91:55:72:DE:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1b7a70ec-0147-37c9-bc21-b4d7d24cb5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d4:4a:a8:7f:14:06:8c:96:da:8c:33:a8:1d:44:d2:2c:50:
         b9:f7:4c:b0:57:39:3c:4b:fb:c5:9d:c3:b0:e6:1e:18:80:3d:
         8c:a9:c8:83:c6:d9:f4:c4:b5:c5:72:83:11:aa:62:00:94:43:
         24:d8:93:3b:b7:f4:e6:2d:2e:4e:73:bf:be:a9:1d:20:73:44:
         74:ad:39:6a:67:88:4c:a2:7e:ea:eb:3c:f7:21:a2:4d:86:1a:
         fc:8b:42:a9:8a:76:a4:bf:80:af:9a:28:ab:14:1d:5a:fc:bf:
         1f:7a:51:f8:cc:a2:d9:65:dd:9c:53:61:56:2e:a4:7f:9a:78:
         97:9e:5b:4b:77:13:a5:53:43:88:a1:ce:eb:09:08:3c:d4:84:
         19:54:9e:a2:3d:bf:05:67:32:27:8c:e6:24:e1:e9:90:9f:a7:
         8c:12:25:70:d6:a9:4a:83:de:4b:0e:bb:dc:98:ec:bb:b4:0d:
         3d:68:55:cd:ed:09:14:fd:89:d5:03:36:25:d1:04:63:26:3c:
         cc:dc:c3:12:c1:cc:84:8c:f2:b9:18:58:05:6e:a7:80:5e:ac:
         71:fb:0e:50:af:56:18:6d:b9:14:19:3d:08:6c:36:e9:2d:ce:
         82:12:91:f8:a8:c4:6d:8f:bd:65:f8:61:98:04:30:03:ff:51:
         3b:53:71:d5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnLz6TvevBuTHeRmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk
NDQ2ZWZjNzctODNlZC00MjFhLTkzODAtYWIzOThiMWEzZTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BUHkSwGMg2r3F37R4Cy3YduwC4DTrk7RwiA
RzYzroxF4Ux3FhziMvx3naQ+JDCbZoDoUqF2EvCoc64naGMg8Bl/xJO7veh0bXSZ
HjkippSRsWtVRDqHXbZcEFfNV+d+BYWK4dQGt11dI9yKOA3h5WE2XG61WBu08gya
BKJ+bY1m0sSJc6YHoRcKQhyblKm8u6T59ivESgLPfLbBVEH69qdw17fn70DgqkIh
hrCPjXFDVFfswnxsFan50AqcOukR1gtGSa4y+r8v8vozybNiLl1GwL7I8+Fz1Gxt
3bYCDxHYHiXcIfsOi4TwaNv5ORqvRrBAiE5PDFls6lmN7WikyQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM4gB8vtUGaevNy9LJHQWpFVct4cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWI3YTcwZWMtMDE0Ny0z
N2M5LWJjMjEtYjRkN2QyNGNiNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIBBwEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAidRKqH8UBoyW2owzqB1E0ixQufdMsFc5PEv7xZ3DsOYeGIA9jKnI
g8bZ9MS1xXKDEapiAJRDJNiTO7f05i0uTnO/vqkdIHNEdK05ameITKJ+6us89yGi
TYYa/ItCqYp2pL+Ar5ooqxQdWvy/H3pR+Myi2WXdnFNhVi6kf5p4l55bS3cTpVND
iKHO6wkIPNSEGVSeoj2/BWcyJ4zmJOHpkJ+njBIlcNapSoPeSw673Jjsu7QNPWhV
ze0JFP2J1QM2JdEEYyY8zNzDEsHMhIzyuRhYBW6ngF6scfsOUK9WGG25FBk9CGw2
6S3OghKR+KjEbY+9ZfhhmAQwA/9RO1Nx1Q==
-----END CERTIFICATE-----
Generated at Fri May 9 14:21:57 2025 by rpki-client